Council reviews now check quoted source before granting grounding or counting a contribution toward quorum. This release also protects shared runs from worker cleanup and preserves safe provider failure details.
Changes
- Verify specific source quotes against available cited files and reviewed diffs. Mixed diff quotes must verify their removed and current portions separately, including prefix operators that resemble file headers. Attached patches supply evidence only within unified hunk line counts, including Git output with suppressed blank context markers. Git no-newline metadata is ignored inside quoted diffs. Markdown formatting, proposed code and unverifiable prose retain their documented treatment.
- Match elided quote fragments in source order without reusing characters. Support multiline code spans with matching backtick widths, preserve literal backticks, and check command-shaped source and modifiers such as
reads exactly. Keep explicit negative source claims unverifiable, using the nearest negative clause. - Recheck current evidence when recording contributions and validating retained chair responses. Use the resulting report for admission so recorded status, votes and failure guidance agree. Rejected responses cannot keep a vote from an earlier check. Explicit access failures retain file-read recovery guidance, and rejected chair fallbacks keep their response and grounding report for inspection. Grounding summaries retain counters and decisions without copying provider quote excerpts.
- Limit quote verification work and reject failed or incomplete verification. Repository diff helpers disable filters, text conversion, external diff drivers and file-system monitors during evidence collection.
- Allow only the owning orchestrator to cancel the shared task group or remove its temporary directory. A worker receiving SIGTERM can no longer tear down the whole run.
- Retain bounded provider failure details from stdout, stderr and failure reasons. Remove prohibited control bytes, redact credentials and certify the complete record before truncation or publication. Failed sanitization omits diagnostics instead of publishing partial output.
- Upgrade the MCP SDK from 1.31.0 to 1.32.0 for GHSA-22jm-h49p-29qw and GHSA-6prh-2h8m-c8cw. Octopus uses stdio without the HTTP task store required by the high-severity advisory.
Quote matching does not prove exact file attribution or that a provider read a file. Missing or truncated evidence remains unverifiable. See Council documentation for verification limits and configuration.
Thanks to klass-723 for #1207 and João Carreiro, Jhacarreiro, for #1210 and #1211. Integrated in #1212, with release follow-up #1222.