OmO Native init-deep committed mode no longer dead-ends. Committed mode now finishes through its own pull-request handoff instead of pointing at a skill that does not ship with OmO Native, and it reports how to finish by hand when no PR can be opened. Thanks to @HolisticDeveloper for the report and @surlymochan for the fix. (#11228, fixes #9686)
The stale-reflection-lock test leaves no background writer behind when removing its temporary root. Its teardown closes the memory wiring and awaits facts reconciliation and maintenance before removal, so a late lock publication cannot recreate the directory and make the temp-leak guard blame another test. (#11225)
ulw-research ships a Markdown block model for checking Markdown and post deliverables. It splits a Markdown report into headings, paragraphs, list items, table rows, code blocks and quotes with exact text offsets, and sorts sections with the same classifier as the HTML checks; an unclosed code fence is reported instead of passing silently, and no check uses it yet. The HTML checks now also treat a section headed exactly "Closing" as the closing section. (#11153, part of #11009)
ulw-research ships checked polish edits and a polish diff for research reports. Polish changes text nodes only: tags, every attribute, comments, and script/style/template content stay byte-identical, including attribute order and quoting. polish-apply rejects markup changes and edits that change a fact, number, unit, ticker, or required hedge, and checks cumulative edits against the original report; polish-diff applies the same rules to the whole report. An edit may not contain <, > or &, and may not touch a character reference even without them; both gates also compare the whole-document skeleton (every markup token and every character reference, byte for byte), so entities and markup are left untouched. Both gates refuse documents with markup the checker cannot model exactly. Markup changes require the full fidelity gates. Severities come from the defect registry. Nothing in the CLI calls them yet. (#11152, part of #11009)
Re-extracting a conversation no longer counts the same agreement correction again. Corrections are bound to validated user turns and recorded atomically with their replay receipts. Distinct turns on the same date still count separately; acknowledgement, drop and eviction retain replay history. Pending records from older versions use a documented agreement/date migration. (#11214, fixes #11191)
The LSP MCP server negotiates supported protocol versions. It preserves supported client versions and answers unsupported or missing versions with 2025-06-18, rather than claiming an arbitrary protocol revision. (#11208)
Skill MCP tool errors are reported as errors. Structured output and result metadata reach the caller, tool failures are not retried as connection failures, and plain content keeps its existing output format. (#11207)
The repository now has a security policy. SECURITY.md explains how to report a vulnerability privately through GitHub's Security tab, what to include, and when to expect triage and an acknowledgement; CONTRIBUTING.md links to it. Adapted from the policy proposed by @marklapointe in #10752. (#11221)
ulw-research can check that a report's sentences keep the meaning of their sources. It pairs each report sentence with the quote, claim or original text it rests on, and records drift only when two independent readers name the same kind of change; a single reader's flag is kept as a minor warning. A pair no reader judged, or a pair that needs the strong reader and only got the cheap one, is reported as unverified instead of passing as clean. Nothing in the CLI runs it yet. (#11151, part of #11009)
Skill MCP catalogs include every page. Tools, resources, and prompts follow opaque pagination cursors in order, with a clear error if a server exceeds 100 pages. (#11204)
omo update on Windows survives a package file that another process holds. When bun add -g fails with EPERM (NtSetInformationFile) because a file of the install is in use, omo update retries twice with a short backoff. If the file stays held, it names the file and the omo processes holding it, tells you to quit them and run omo update again, and keeps whatever version is installed, reinstalling the previous one only if the failed run left an unreadable install. (#10090, #11125)
A held abandoned test directory no longer fails a new run during preload. Cleanup retries through the shared tree remover, skips roots still held with EBUSY, EPERM, ENOTEMPTY or EACCES, and continues with the other abandoned roots. Unrelated filesystem errors still fail the run, and Bun's panic-only retry keeps its existing test-failure checks. (#11190, refs #11135 and #8990)
Usage summaries from older versions no longer stay on disk after an upgrade. Versions 5.1.34 to 5.1.44 kept session summaries in a rollups folder that nothing reads or sends any more. The first start after upgrading now deletes it, whether telemetry is on or off, and never follows a link out of that folder. With telemetry turned off in omo.json, a summary file that was cut short by a crash is deleted too. (#10234) (#11147) (batch #11168)
Computer-use cancellation retains engine crash diagnostics. Cancelled and timed-out calls keep their error code and carry the engine exit diagnostic as their cause. Capability-query permission failures remain structured tool results, hard engine diagnostics survive unrelated successful replies, and legacy launch refusals now share the structured record's exit-code and UTF-8 size rules. (#11150) Follow-up to #11086, part of #11073. (batch #11168)
Reflection and dream children share a machine-wide FIFO concurrency cap. The default is one running child across memory identities, configurable with memory.reflection.max_concurrent_runs. Queued runs retain their execution budget and remain protected from crash reconciliation until admitted. (#11161, fixes #11154) (batch #11168)
Memory reflection no longer stops for good when its host dies during a run. If the host died after a run had finished but before it was published, runtime/reflection/active.lock stayed held and every later reflection request only queued behind it until someone removed the file by hand. Now /reflect and every later turn settle a run whose launcher and publish claimant are both gone and whose outcome was recorded, so the queued request runs. A lock whose owner can't be checked is never reclaimed; it is reported with the next step, in the session and in omo doctor. Thanks to @Bearmancer for the report. (#10377, #10388, #10528) (batch #11168)
One bad memory entry no longer discards a whole reflection run, and credential-shaped prose is not a secret. Completion validation used to fail the entire run when any entry was refused (secret-like content, invalid frontmatter, a description over 1024 characters), so automatic reflection parked after a few runs. It now rewrites the run's branch as one commit without the refused entries, keeps the valid ones, and reports each dropped path with its reason (never the matched value); a run whose entries are all refused lands as no changes. The secret scanner and the pre-commit hook no longer flag assignments whose value only refers to a secret (process.env.X, $VAR, {{ slot }}, [FILTERED], the Bearer word, null/example literals), while a real value still matches. The dream's path_orphan finding now says when a file has no frontmatter, and its persona tells it to add a description in the same commit as the move instead of a bare git mv, which validation refused on every run. Thanks to @PGY0403 (#10385) and @floweredao (#10511) for the reports. (#10385, #10511, #10528) (batch #11168)
Held packaging-test directories are recorded without failing cleanup. The packed memory-sync probe and abandoned-root sweep share one best-effort removal guard, with no retries. Every held root is printed in the test log; Windows diagnostics are bounded to 30 seconds and include the holder's pid, image and parent pid when identified, or the diagnostic failure. Unrelated filesystem errors and unrecorded leaks still fail. (#11218, part of #11135)
- 7d8dc2b Merge pull request #11156 from code-yeongyu/feat/11009-t15
- 86eb554 Merge pull request #11228 from surlymochan/fix/9686-init-deep-pr-fallback
- 6a467c7 Merge branch 'dev' into fix/9686-init-deep-pr-fallback
- 1306fb7 Merge remote-tracking branch 'origin/dev' into feat/11009-t15
- 120da8c Merge pull request #11233 from code-yeongyu/chore/remove-unused-extension-loader
- 517a170 fix: address review notes and CI checks; regenerate bundles (pinned linux/amd64 container, bun 1.4.3)
- f153b5b fix(ulw-research): bind the meaning record to the delivered artifact (Part of #11009)
- 087d69f docs: trim stale loader notes
- 8627ba5 Merge remote-tracking branch 'origin/dev' into chore/remove-unused-extension-loader
- a9b5515 fix(ulw-research): make the delivery barrier read meaning defects and key dispute reruns to one run (Part of #11009)
- 271f00e Merge remote-tracking branch 'origin/dev' into feat/11009-t15
- f65dbc3 Merge pull request #11225 from code-yeongyu/fix/11219-stale-lock-settlement
- cf3dc22 Merge remote-tracking branch 'origin/dev' into lm-11225
- b47e930 Merge pull request #11153 from code-yeongyu/feat/11009-t14
- 5095261 Merge remote-tracking branch 'origin/dev' into lm-11153
- 4c67b7c Merge pull request #11152 from code-yeongyu/feat/11009-t13
- 9e0178c Merge remote-tracking branch 'origin/dev' into lm-11152
- 2cc33f4 Merge pull request #11218 from code-yeongyu/fix/11135-probe-exit
- 90e70ad Merge remote-tracking branch 'origin/dev' into lm-11218
- 1a6ab71 Merge remote-tracking branch 'origin/dev' into lm-11225
- 3286d78 Merge remote-tracking branch 'origin/dev' into feat/11009-t13
- fdbbb53 fix(ulw-research): keep character references intact across polish edits (Part of #11009)
- cb92940 Merge pull request #11214 from code-yeongyu/fix/agreement-source-event-dedup
- de61c73 Merge remote-tracking branch 'origin/dev' into lm-11214
- b29fada docs(changelog): credit the #9686 report and the init-deep committed-mode fix
- 29582e4 Merge remote-tracking branch 'origin/dev' into feat/11009-t13
- a1644f1 fix(ulw-research): refuse polish edits that contain markup characters (Part of #11009)
- 15343cb fix(memory): harden agreement replay and defer facts planning
- 9277531 Merge pull request #11224 from code-yeongyu/fix/thread-qa-harness-lows
- c6a805e Merge pull request #11208 from code-yeongyu/fix/11201-lsp-mcp-version
- b5565d7 Merge remote-tracking branch 'origin/dev' into lm-11208
- 9877d60 Merge pull request #11207 from code-yeongyu/fix/11200-skill-mcp-tool-result
- 6912f41 Merge remote-tracking branch 'origin/dev' into lm-11207
- e9386a1 Merge remote-tracking branch 'origin/dev' into lm-11225
- 83b65ec Merge pull request #11221 from code-yeongyu/docs/security-policy
- 6fd2b11 fix(ulw-research): restrict polish edits to text nodes (Part of #11009)
- c7bb419 docs(changelog): note stale-lock fixture settlement
- 987652c Merge remote-tracking branch 'origin/dev' into feat/11009-t13
- 022a5c5 fix(ulw-research): compare hidden regions byte-for-byte and share the polish baseline (Part of #11009)
- dc75c8d test(memory): retain the stale-holder filesystem read import
- 0ade808 test(memory): gate reconciliation at the actual bind request
- f2ece20 Merge remote-tracking branch 'origin/dev' into lm-11208
- 30a911f Merge remote-tracking branch 'origin/dev' into lm-11207
- efe547e test(thread-qa): stop detached hosts first on an aborted run too; catch a late shard (#11209)
- b379692 test(memory): settle stale-lock fixtures before removing roots
- 3173525 Merge pull request #11212 from code-yeongyu/fix/thread-qa-harness-drift
- c048f0a docs(changelog): note the new security policy (#11221)
- 8c7f944 docs: add a security policy (SECURITY.md)
- 1da96d1 Merge pull request #11151 from code-yeongyu/feat/11009-t12
- 3194845 Merge remote-tracking branch 'origin/dev' into lm-11208
- 502622f Merge remote-tracking branch 'origin/dev' into lm-11207
- 8b2b347 refactor(ulw-research): import shared tables from their owners in the meaning and verify commands (Part of #11009)
- 7c7c81d docs(changelog): record held test root diagnostics
- 4d7a7c4 Merge remote-tracking branch 'origin/dev' into feat/11009-t15
- 7669cd0 Merge remote-tracking branch 'origin/dev' into feat/11009-t13
- 864cc4b fix(ulw-research): read polish severities from the defect registry and refuse hidden fact spans (Part of #11009)
- 3e4a2cc Merge remote-tracking branch 'origin/dev' into lm-11151
- 78ea2b3 Merge pull request #11204 from code-yeongyu/fix/11199-skill-mcp-pagination
- 1ce63be Merge remote-tracking branch 'origin/dev' into feat/11009-t14
- 913b75d fix(ulw-research): share the section classifier and harden the markdown block parser (Part of #11009)
- 014673d docs(changelog): record agreement replay deduplication (#11214)
- 7107e65 fix(memory): deduplicate agreement corrections by source event
- 0123fe1 Merge remote-tracking branch 'origin/dev' into feat/11009-t12
- c07b1e4 fix(ulw-research): report unverified meaning pairs instead of passing silently (Part of #11009)
- 4bf4751 test(thread-qa): realign the thread-tool QA harness with dev and desktop main (#11209)
- 37592cd Merge pull request #11195 from code-yeongyu/fix/test-jwt-fixture-runtime
- 4a1d271 docs(changelog): record LSP MCP version negotiation
- 0cd9308 fix(lsp): negotiate supported MCP protocol versions
- 03b186b docs(changelog): record skill MCP result preservation
- 6abf79c fix(mcp): preserve skill tool result semantics
- 408ea39 Merge remote-tracking branch 'origin/dev' into feat/11009-t15
- 20d17f3 docs(changelog): record complete skill MCP catalogs
- 8650cb3 fix(mcp): follow bounded skill catalog pagination
- 647181f docs(changelog): record ulw-research polish apply and polish diff (Part of #11009)
- b2c8e2b docs(changelog): note the ulw-research markdown block model (Part of #11009)
- d3887e3 docs(changelog): note ulw-research meaning check pairs (Part of #11009)
- 2b39fae Merge remote-tracking branch 'origin/dev' into feat/11009-t13
- d1f72b4 Merge remote-tracking branch 'origin/dev' into feat/11009-t14
- c036930 Merge remote-tracking branch 'origin/dev' into feat/11009-t12
- 61a71aa Merge pull request #11149 from code-yeongyu/feat/11009-t11
- c4ca55a Merge remote-tracking branch 'origin/dev' into feat/11009-t11
- 85483c9 test(memory): build the JWT-shaped redaction fixture at runtime
- 937be35 Merge pull request #11125 from code-yeongyu/fix/10090-windows-update-held-package
- 5798617 Merge remote-tracking branch 'origin/dev' into lm-11125
- 943bacb Merge pull request #11190 from code-yeongyu/fix/abandoned-root-lock-sweep
- 078eefa Merge remote-tracking branch 'origin/dev' into fix/10090-windows-update-held-package
- d0cb7e8 fix(ulw-research): limit the fidelity not_run exemption to never-gated deliveries (Part of #11009)
- daa9845 docs(changelog): record abandoned root cleanup for #11190
- 08ea59f fix(test): skip held abandoned roots during preload cleanup
- bc113ea Merge remote-tracking branch 'origin/dev' into feat/11009-t11
- 23b6ac2 fix(ulw-research): derive the delivery barrier from the fidelity gate registry (Part of #11009)
- cda1b71 fix(ulw-research): adopt the unit-registry derive spec and the Codex overlay re-anchor (Part of #11009)
- 5f6bfc1 fix(ulw-research): adapt to dev's registry ledger API and Codex sync-skills (Part of #11009)
- 0505c3a Merge remote-tracking branch 'origin/dev' into feat/11009-t14
- 0155fc7 Merge remote-tracking branch 'origin/dev' into feat/11009-t15
- df0a704 fix(ulw-research): adopt the unit registry derive shape and the codex overlay anchor (Part of #11009)
- f7f932a fix(ulw-research): adopt the unit-registry derive spec and the Codex overlay re-anchor (Part of #11009)
- 2260a88 Merge remote-tracking branch 'origin/dev' into feat/11009-t12
- d11f2e2 Merge remote-tracking branch 'origin/dev' into feat/11009-t13
- de27f2e Merge pull request #11168 from code-yeongyu/batch/memsync-coord-10
- f0dc32d Merge remote-tracking branch 'origin/dev' into fix/10090-windows-update-held-package
- c9847cd fix(ulw-research): build fact derive specs in the unit registry shape
- 64671a0 Merge remote-tracking branch 'origin/dev' into feat/11009-t11
- 38668c9 Merge pull request #11142 from code-yeongyu/feat/11009-t9
- f704948 Merge remote-tracking branch 'origin/dev' into feat/11009-t9
- b80414b Merge remote-tracking branch 'origin/dev' into feat/11009-t11
- 5baba98 Merge pull request #11144 from code-yeongyu/feat/11009-t10
- 548f655 fix(ulw-research): flag legacy exacts with unknown keys instead of stripping them (Part of #11009)
- ef94519 Merge remote-tracking branch 'origin/dev' into feat/11009-t11
- 6fe99b7 fix(omo-codex): re-anchor the ulw-research overlay after the fidelity gate was added (Part of #11009)
- cf9918c Merge remote-tracking branch 'origin/dev' into feat/11009-t9
- f15fcaf fix(ulw-research): normalize ledgers on read before any strict unit rule (Part of #11009)
- 292d7d2 Merge remote-tracking branch 'origin/dev' into fix/10090-windows-update-held-package
- 67feb9b Merge remote-tracking branch 'origin/dev' into feat/11009-t10
- 0ba11bc Merge pull request #11141 from code-yeongyu/feat/11009-t8
- e252e88 docs(batch-10): keep the batch's changelog lines under [Unreleased] after the 5.1.45 compile (released-section guard)
- e5ec79f Merge remote-tracking branch 'origin/dev' into b10
- 99220c4 Merge pull request #11172 from code-yeongyu/fix/11171-telemetry-test-names-windows
- 9cff3ed Merge remote-tracking branch 'origin/dev' into feat/11009-t9
- 3cf854e fix(ulw-research): load ledgers written before the unit registry (Part of #11009)
- 9ee13ce Merge remote-tracking branch 'origin/dev' into feat/11009-t8
- 82a93c6 Merge pull request #11140 from code-yeongyu/feat/11009-t7
- 8a42f8b Merge remote-tracking branch 'origin/dev' into feat/11009-t9
- 0387be5 fix(ulw-research): enforce every unit-rule invariant dimension in the registry (Part of #11009)
- 3e9ff33 chore(batch-10): regenerate generated artifacts after the dev merge (pair 2ebc0adeea83d6c3)
- 2edd478 Merge remote-tracking branch 'origin/dev' into b10
- 6963596 Merge remote-tracking branch 'origin/dev' into feat/11009-t7
- 165cb4a Merge remote-tracking branch 'origin/dev' into fix/11171-telemetry-test-names-windows
- 2eabc6b Merge pull request #11138 from code-yeongyu/release/v5.1.45-source-state
- 9a4e3ce Merge remote-tracking branch 'origin/dev' into fix/10090-windows-update-held-package
- 633e560 fix(ulw-research): refuse repeated and self-referencing operands in every derivation (Part of #11009)
- 8273580 Merge remote-tracking branch 'origin/dev' into feat/11009-t9
- c3c47c4 fix(ulw-research): render expr differences by decimal places, keep unknown unit text as given, refuse stray context (Part of #11009)
- 0a74765 test(telemetry): name summary files with "/" on every platform (#11171)
- 9508836 Merge remote-tracking branch 'origin/dev' into feat/11009-t10
- dfa89e7 fix(ulw-research): unmarked numerals refuse assumed rows and the Korean run-phrase needs a first-person subject (Part of #11009)
- 02f13e1 Merge pull request #11170 from code-yeongyu/docs/telemetry-pseudonymous-install-id
- 7f7ea7c Merge remote-tracking branch 'origin/dev' into feat/11009-t9
- a502adb fix(ulw-research): compare stored units exactly, cover every malformed shape per operation, refuse affine sums (Part of #11009)
- 932238c Merge remote-tracking branch 'origin/dev' into feat/11009-t10
- 600e4d4 fix(ulw-research): bind claim-kind marks per cited fact and tighten the verified satisfier (Part of #11009)
- c01b338 docs(telemetry): describe the install id as pseudonymous
- 947b75e docs(changelog): describe the held-file restore rule as the code does (#10090)
- bb623d1 Merge pull request #11157 from code-yeongyu/docs/inapp-bug-report
- 5717b01 fix(ulw-research): flag unsupported verification only on marked claims, warn on unmarked ones (Part of #11009)
- c430276 fix(ulw-research): derive and recompute units from one operation registry (Part of #11009)
- 0d486f1 Merge remote-tracking branch 'origin/dev' into fix/10090-windows-update-held-package
- ea021f4 fix(ulw-research): require a tool noun for verification claims and strip filled numbers only at their fill site (Part of #11009)
- 7ff6ba8 docs(batch-10): link the batch PR from every added Unreleased paragraph (changelog gate)
- 47881ff chore(batch-10): regenerate generated artifacts after all cars landed (pair aa9f54701cf9ef20)
- 540d5e3 chore(batch-10): regenerate assets/omo.schema.json for #11161's max_concurrent_runs (bun run build:omo-schema)
- 34f7d25 fix(ulw-research): recompute refuses unit relabels and malformed derived rows (Part of #11009)
- ec60d28 Merge omo#11147 @660a7f1793 into batch #10
- 8c91f6d fix(ulw-research): flag unsupported verification only on tool-check claims (Part of #11009)
- 9bd706d fix(ulw-research): render sums, differences and pp by fewest decimal places (Part of #11009)
- 71b25d5 Merge omo#11161 @c34f57ef0e into batch #10
- 188cf89 Merge remote-tracking branch 'origin/dev' into feat/11009-t11
- c34f57e fix(memory): a failed ledger read never throws out of the parent's run wait
- 8a9aee9 Merge remote-tracking branch 'origin/dev' into feat/11009-t10
- 660a7f1 fix(telemetry): re-check the rollups folder before every delete; skips are not failures; document both deletions (#10234)
- 1c4fcab Merge remote-tracking branch 'origin/dev' into feat/11009-t9
- c630346 test(ulw-research): cover retracted and superseded rows in fill and document the sentence-key rules (Part of #11009)
- a24fa8b Merge omo#10528 @d4ffcd8631 into batch #10
- ec4c32c docs(changelog): drop the wrong pull link from the #11161 entry
- f3352e0 docs(changelog): link #11161 from its Unreleased entry
- 007a3e2 docs: match the in-app report wording to the code
- 9f0d7f1 fix(memory): cap concurrent reflection runs (#11154)
- fee4f64 Merge remote-tracking branch 'origin/dev' into docs/inapp-bug-report
- ab70b25 docs: name what the in-app bug report sends
- d0d774e Merge remote-tracking branch 'origin/dev' into feat/11009-t8
- b7d09de Merge remote-tracking branch 'origin/dev' into feat/11009-t7
- 2b1b8a8 Merge remote-tracking branch 'origin/dev' into fix/10234-optout-purge-followup
- f0e4664 Merge omo#11150 @f3f69274e7 into batch #10
- a788de1 docs: point bug reports to the in-app report
- bf464c5 Merge remote-tracking branch 'origin/dev' into fix/10090-windows-update-held-package
- 03b81ab fix(omo-native): reword a comment the command-string audit read as a command (#10090)
- cb06bd8 feat(ulw-research): wire the separate-session meaning verifier (Part of #11009)
- 218c6bc Merge remote-tracking branch 'origin/feat/11009-t14' into feat/11009-t15
- eecbb74 Merge remote-tracking branch 'origin/feat/11009-t13' into feat/11009-t15
- 3d97df4 Merge remote-tracking branch 'origin/feat/11009-t12' into feat/11009-t15
- 33999d1 Merge remote-tracking branch 'origin/feat/11009-t11' into feat/11009-t15
- e45d4fc Merge remote-tracking branch 'origin/feat/11009-t10' into feat/11009-t15
- 413825a Merge remote-tracking branch 'origin/feat/11009-t9' into feat/11009-t15
- d6e907f Merge remote-tracking branch 'origin/feat/11009-t8' into feat/11009-t15
- fddd23a Merge remote-tracking branch 'origin/feat/11009-t7' into feat/11009-t15
- df60b72 Merge remote-tracking branch 'origin/feat/11009-t5' into feat/11009-t15
- e641d25 feat(ulw-research): add a markdown block model for fidelity checks (Part of #11009)
- 4fb130f Merge remote-tracking branch 'origin/feat/11009-t11' into feat/11009-t14
- 2a531c1 Merge remote-tracking branch 'origin/feat/11009-t10' into feat/11009-t14
- eeb3fd4 Merge remote-tracking branch 'origin/feat/11009-t9' into feat/11009-t14
- d0448f4 Merge remote-tracking branch 'origin/feat/11009-t8' into feat/11009-t14
- 9ea3c3f Merge remote-tracking branch 'origin/feat/11009-t7' into feat/11009-t14
- ac4983b Merge remote-tracking branch 'origin/feat/11009-t5' into feat/11009-t14
- 37ad597 feat(ulw-research): add checked polish apply and polish diff (Part of #11009)
- 26408bb feat(ulw-research): add quote and claim pair extraction with verdict ingestion (Part of #11009)
- f3f6927 docs(changelog): link the review follow-up PR
- 43130cf fix(computer): resolve launch refusal review nits
- e52e8a8 Merge remote-tracking branch 'origin/feat/11009-t11' into feat/11009-t12
- 21adcb0 Merge remote-tracking branch 'origin/feat/11009-t10' into feat/11009-t12
- 5eae7a3 Merge remote-tracking branch 'origin/feat/11009-t9' into feat/11009-t12
- fad90ff Merge remote-tracking branch 'origin/feat/11009-t8' into feat/11009-t12
- 2107f15 Merge remote-tracking branch 'origin/feat/11009-t7' into feat/11009-t12
- f2ec846 Merge remote-tracking branch 'origin/feat/11009-t11' into feat/11009-t13
- 67facab Merge remote-tracking branch 'origin/feat/11009-t5' into feat/11009-t12
- d95286d Merge remote-tracking branch 'origin/feat/11009-t10' into feat/11009-t13
- d37cd80 Merge remote-tracking branch 'origin/feat/11009-t9' into feat/11009-t13
- 71b2730 Merge remote-tracking branch 'origin/feat/11009-t8' into feat/11009-t13
- 0fb7ecd Merge remote-tracking branch 'origin/feat/11009-t7' into feat/11009-t13
- 3dd7460 Merge remote-tracking branch 'origin/feat/11009-t5' into feat/11009-t13
- 2d40617 Merge remote-tracking branch 'origin/dev' into feat/11009-t11
- 4018332 feat(ulw-research): wire the fact ledger, fill and fidelity gate into the skill (Part of #11009)
- 97308f0 fix(telemetry): remove the pre-#10225 rollups store for every upgrader; a persisted opt-out deletes unreadable summary files (#10234)
- 9944460 Merge remote-tracking branch 'origin/feat/11009-t10' into feat/11009-t11
- 1232a70 Merge remote-tracking branch 'origin/feat/11009-t9' into feat/11009-t11
- e96e0a7 Merge remote-tracking branch 'origin/feat/11009-t8' into feat/11009-t11
- 9f9ebc9 Merge remote-tracking branch 'origin/feat/11009-t7' into feat/11009-t11
- ef670de Merge remote-tracking branch 'origin/feat/11009-t5' into feat/11009-t11
- 32391c0 feat(ulw-research): add the deterministic fidelity gate (Part of #11009)
- c75ea7a Merge remote-tracking branch 'origin/dev' into fix/10090-windows-update-held-package
- 1558cc6 feat(ulw-research): add script-computed derivations and conversions (Part of #11009)
- dd14469 Merge remote-tracking branch 'origin/feat/11009-t5' into feat/11009-t10
- 61d2a54 Merge remote-tracking branch 'origin/feat/11009-t5' into feat/11009-t9
- 235f35f fix(omo-native): keep any readable install after a held-file failure; narrow EPERM to moves and deletes (#10090)
- 78d86d6 Merge remote-tracking branch 'origin/dev' into feat/11009-t8
- 878b999 feat(ulw-research): add placeholder grammar and script fill (Part of #11009)
- d11fdb0 Merge remote-tracking branch 'origin/dev' into feat/11009-t7
- 13f80b1 feat(ulw-research): add source snapshots and fact locators (Part of #11009)
- b81d866 Merge remote-tracking branch 'origin/feat/11009-t5' into feat/11009-t8
- 871d025 Merge remote-tracking branch 'origin/feat/11009-t5' into feat/11009-t7
- fe1e810 fix(omo-native): never roll back an update that landed before the held file (#10090)
- deaa7e1 Merge remote-tracking branch 'origin/dev' into fix/10090-windows-update-held-package
- 1d622da fix(omo-native): second review fold for the held-package update path (#10090)
- cb18490 test(omo-native): escape the unrelated-CLI fixture path so the holder scope is really tested (#10090)
- 5edbe9d Merge remote-tracking branch 'origin/dev' into fix/10090-windows-update-held-package
- f1b3679 fix(omo-native): review fold for the held-package update path (#10090)
- d4ffcd8 fix(memory): read note blobs by object name, POSIX-only test names Windows cannot create, neutralize user pathspec modes (#10528 delta review)
- 2ee414b fix(memory): drop repair matches note paths literally, never prints raw names; balanced references; JSON trailers (#10528 delta review)
- 42950f3 docs(omo-native): changelog and package notes for the held-package update path (#10090)
- 40279ec fix(omo-native): retry a held package on Windows, name its holder, keep the previous install (#10090)
- 7aeacf2 test(omo-native): omo update on a held Windows package file (#10090)
- d28f93c test(memory): dev's preflight and crash tests follow the drop-the-bad-entry gate (#10528)
- b1ed2de Merge remote-tracking branch 'origin/dev' into fix/reflection-stop-cluster
- 49bbed7 fix(memory): anchor the hook's reference exclusion to its own value, require whole-value references, and report dropped entries (#10528 review)
- ec79338 chore(omo-native): regenerate the doctor reflection-lock bundle for dev's resilient fs change
- c769978 Merge remote-tracking branch 'origin/dev' into fix/reflection-stop-cluster
- 3f2f90d fix(memory): read the squash identity with the stable log output; link this PR from the stale-lock changelog entry
- 78003c8 test(memory): the pre-commit hook agrees with the scanner on credential references; drop a duplicate merge import
- f6c6fb5 Merge remote-tracking branch 'origin/dev' into fix/reflection-stop-cluster
- 1740871 Merge remote-tracking branch 'origin/dev' into fix/reflection-stop-cluster
- fc4de62 Merge remote-tracking branch 'origin/fix/10377-reflection-stale-lock' into fix/reflection-stop-cluster
- d890b75 fix(memory): keep valid reflection entries, stop credential-reference false positives, guard frontmatter-less orphan moves
- 1e06b6d fix(memory): read the reflection lock through the resilient fs and categorize its omo doctor mentions (#10388)
- 2da711d fix(memory): a corrupt or malformed outcome.json is not a recorded outcome (#10377)
- 2ba19a3 fix(memory): one fail-closed reflection lock decision for the session and omo doctor (#10377)
- 5e549bf docs(changelog): note the stale reflection lock fix (#10388)
bun add -g omo-ai