11.11.0 adds API Route through api-route-agent, using an OpenAI-compatible endpoint and an explicit model pin or configured default.
Scoped freeze activation now refuses absent or empty shared Claude session IDs and retains an existing freeze boundary. Its Claude probes explicitly ignore inherited Codex host settings.
Fixes cover scoped freeze identity and safe activation, native Claude model overrides, API Route model-family admission, supervised Tangle retries and deadline exit races, persistent Codex configuration isolation under worker shell options, consultative copy confinement and concurrent research/event ownership and installation-receipt lost updates. Codex configuration remains read-only with private runtime storage; unsafe paths and backing aliases abort dispatch. Python3 is required for state inspection and durable event, run-contract and installation-receipt locking; configured TMPDIR needs tomllib. Optional event logging retains its best-effort fallback. Maintainer tooling also supports validated PR-description edits.
The automation design uses hourly queue checks and one daily release batch, requiring tests, review and synchronized release artifacts. The controller and release schedule are not deployed by this change.
Thanks to @vkchan for the scoped freeze repair in #1161 and @DennyHo0917 for API Route in #1162.
Validation passed across 425 local suites and 441 executions, with five optional or platform-dependent cases skipped. Semgrep found no issues, and Gitleaks found none in contributed commits; six historical repository matches were verified unchanged at their exact source lines.
Fresh synthetic measurements of the changed consultative copier through its real entry point completed in 0.194108245 seconds for 100 files and 1.115135462 seconds for 5,400 files. Exact file SHA, permissions, nanosecond timestamps, sizes and paths matched; sources were unchanged and owned temporary copies removed. These are one invocation per fixture size, excluding validation and cleanup, with no fresh shell baseline or speedup claim.
The final review repairs also preserve live workers when process state is unknown, check canonical API Route quota keys, handle tracked files replaced by plain directories, and verify smoke fixture host and cleanup ownership plus effective boundary diagnostics. Actual Bash 3.2 execution and full native provider-task execution remain unverified under the host limitations.