Changelog

0.3.1 (2026-10-18)

Features

agent-image: authenticate git and jj-vine with the materialized gh token (RIG-4724) (#2009) (7b05922)
agent-image: ship jj and jj-vine in the agent image (RIG-4723) (#1800) (47e37c7)
agent: batch inbound items in an idle window behind COMPASS_AGENT_BATCHING (RIG-5070) (#2084) (a684695)
agent: range-encode ControlAck applied_above (RIG-1466) (#1813) (403f672)
agent: Reload continues the session transcript under the new config (RIG-4418) (#1704) (5af811b)
agent: report runner enrollment in agent status (RIG-3343) (#1594) (1d63b7e)
agent: route start_now to end the idle batching window (RIG-5073) (#2099) (ae7a74c)
agent: upload inline-image blobs from committed session lines (RIG-1582) (#1998) (9ecd75f)
appconfig: add the no-config signal, URL normalizer, and app.toml writer (#1740) (092d7c6)
auth: mint and verify per-agent gateway tokens (RIG-2864) (#1752) (aa3b206)
auth: verify Kubernetes projected tokens for Runners (RIG-4998) (#2057) (7bc5d53)
auto-link issue and PR refs via GetRefLinkRules (RIG-5178) (#2192) (39bf0ac)
board: agent board RPCs, roster summary and board events (RIG-5172) (#2285) (12489a0)
board: derive board refs, PR gates and stacks from stored rows (RIG-5171) (#2231) (56d6a61)
board: drive the Bridge advancing card from a state-change stamp (RIG-2347) (#2369) (5cebaee)
board: show asks and their forge mirror state on boards (RIG-5173) (#2292) (8e52da0)
board: show linked pull requests on board issues (RIG-4034) (#1917) (9343ecb)
ci-timing: measure CI wall, wait and long pole per run class (RIG-5488) (#2326) (dd99fc1)
ci: gate pgtest, microvm and e2e on the Go package graph (RIG-5492) (#2337) (df5703a)
ci: reject added or edited design records in compass (RIG-4528) (#2329) (3f088a0)
ci: reject added or edited design records in compass (RIG-4528) (#2332) (a82c38c)
ci: route a red full sweep to a ci-backstop issue (RIG-5491) (#2327) (986c58f)
ci: run pgtest and microvm on the selected Go roots only (RIG-5493) (#2347) (4d5d08a)
cli: add compass agent spawn to bring an agent online (RIG-3345) (#1794) (531e770)
cli: compass agent repo add, remove and list (RIG-5015) (#2108) (ea1a1c4)
comms: agent comms_list_topics tool and topic filter (RIG-1706) (#2082) (173137b)
comms: agent tools name channel groups by leaf or slash path (#1705) (b071662)
comms: carry an optional issue or PR ref on asks (RIG-5173) (#2228) (b8b15ef)
comms: carry the agent turn sequence to the stored message and the settle sink (RIG-4323) (#1602) (5f21a39)
comms: carry the agent turn sequence to the stored message and the settle sink (RIG-4323) (#1617) (6ec1ded)
comms: let peered owners address each other’s agents (RIG-4363) (#1761) (96d6f8f)
comms: require a taxonomy role on CreateAgent (RIG-3097) (#1733) (10f50c3)
comms: set role and persona at CreateAgent; require –role on agent spawn (RIG-4712) (#1803) (d347a3a)
comms: wire ReparentChannel and attached CreateChannel (RIG-4190) (#1779) (d1f381f)
compass-agent: add channel, group, and membership comms tools (RIG-2726) (#1809) (51d2290)
compass-agent: let forge_subscribe take a container scope (RIG-2732) (#2006) (76fd746)
compass-app: connect with a first-run server choice (#1928) (cb249b5)
compass-app: open the first-run chooser when app.toml is absent (#1930) (df680bc)
compass-go: move to connect-go v2 (RIG-5471) (#2354) (c3efe7a)
compass-stack: backend-aware preflight; microVM checks advisory off the microvm tier (RIG-3272) (#2165) (ca930f0)
config: add the config-import review skill (RIG-3512) (#2276) (b73be64)
dashboards: ship Grafana dashboard JSON for agent obs signals (RIG-2826) (#670) (7d17aba)
delivery: fire held messages only up to the settled turn (RIG-4325) (#1603) (87091b6)
delivery: gate delivery reads on owner reach (RIG-4362) (#1688) (1d651ae)
delivery: route owner-qualified mentions within the channel (RIG-4364) (#1751) (e691058)
design-ledger-gate: require counter-claimed DL ids on PR runs (#2249) (04e9b14)
design-ledger: split the compass ledger into per-area decision files (RIG-4849) (#2005) (db0b043)
e2e: refuse a stale local compass-agent image by source fingerprint (RIG-3667) (#1768) (69233e5)
fabric: keep the publisher traceparent on DLQ copies (RIG-5511) (#2334) (70569b6)
forge: carry PR head SHA, mergeable state and review commit id (RIG-5182) (#2194) (ce09ae6)
forge: comment edit, delete, list-since, and create client id (RIG-5181) (#2185) (e5f53d0)
forge: link a created pull request to its issue (RIG-4034) (#1926) (e4d8b81)
forge: merge-queue provider with Trunk and a queue sweep (RIG-5183) (#2210) (a7a709e)
forge: read PR timestamps, closing refs and PR list rows (RIG-4034) (#1914) (7016716)
forge: resolve App installation per repo owner (RIG-5653) (#2385) (18c7082)
forge: self-delegate and assignee on Linear issue create (RIG-3299) (#2315) (7d683e0)
gateway-image: build and smoke the gateway image from the fork pin (RIG-4341) (#2190) (bd9a75d)
gatewaycred: clear named OAuth metadata fields on update (RIG-5084) (#2130) (d389a1d)
gatewaycred: skip an unreadable row in the pool read (RIG-4783) (#1937) (03bf169)
go: give every background goroutine a span class (RIG-5315) (#2265) (172acb8)
guest-image: pin the agent image as a multi-arch index (#2132) (1737f89)
ingest: hydrate pull requests onto the board (RIG-4034) (#1927) (006cc8c)
ingest: retry PR hydrates held by a budget pause (RIG-4826) (#1971) (2442f58)
linear: link sessions through a click-time /l/session redirect (RIG-2794) (#1717) (dbb0751)
linear: record the issue identifier on the agent-session association (RIG-4043) (#1709) (526324a)
mirror: agent forge_mirror_messages tool with real-session attribution (RIG-5174) (#2319) (7b648a1)
mirror: mirror asks and topics to forge issues and PRs (RIG-5181) (#2275) (be42af4)
otel: stamp trace ids on log lines and gate ctx-less roots (RIG-5311) (#2246) (58a4bad)
presence: restore the publisher trace on bus tails and presence edges (RIG-5513) (#2353) (11abfc8)
proto: add session blob RPCs (RIG-1582) (#1995) (3d1adb7)
proto: add status board messages and PR/tracker fields (RIG-5169) (#2181) (5cbd5be)
proto: add the GatewayCredentials service for the LLM gateway (RIG-2863) (#1611) (9fee8fd)
refs: parse and scan tracker and forge refs (#2184) (097a1f8)
release: bump the homebrew-tap compass-cli formula on semver releases (#2118) (bd236d2)
release: publish a compass-server OCI image by digest (RIG-5579) (#2355) (511b1c9)
renovate: fail rollup on a half-relocked devenv lock (#1936) (89788ea)
renovate: manage the Go analysis battery pins (RIG-3306) (#1742) (0a000af)
runner-manifests: render egressAllow and serverCA values (RIG-5594) (#2360) (f878fa8)
runner: bind a resume lifetime on the Runner after accept (RIG-4297) (#1707) (c421fb1)
runner: forward agent session blobs to the Server (RIG-1582) (#1999) (e9b6983)
runnerhub: accept projected tokens on the Runner door (RIG-4999) (#2058) (599af8e)
runnerhub: relay and fetch session blobs for Runners (RIG-1582) (#1997) (5d31dc0)
runnerhub: signal one account’s secrets version (RIG-5015) (#2105) (257bbf0)
runner: pass –agent-batching to agents as COMPASS_AGENT_BATCHING (RIG-5072) (#2098) (0fb791b)
runner: read projected tokens from a file and adopt the Server-assigned id (RIG-5000) (#2060) (14b108f)
runner: render projected-token identity and its admission policy (RIG-5001) (#2061) (5f4b787)
runner: render the Runner DaemonSet and KVM device request (#1773) (4cec371)
runner: restore session blobs on resume (RIG-1582) (#2000) (ecfc1ae)
runner: span AgentGateway RPCs and strip stream spans (RIG-5313) (#2259) (dc6ddd4)
runner: span every Sessions command under the server trace (RIG-5316) (#2267) (edd6ac6)
runtime: WorkspaceSource variant; Mounts carries the writable session volume (RIG-3281) (#2119) (0bf231a)
server-manifests: render the Server, NATS and dev Postgres for Kubernetes (RIG-5596) (#2363) (049a1af)
server: accept an operator-supplied admin token file (RIG-2668) (#2263) (f9ed6db)
server: add admin-only RenameAccount RPC (RIG-5151) (#2226) (f626f86)
server: add forge scope storage (RIG-4434) (#1654) (e09539d)
server: add owner peering approvals, RPCs and CLI (RIG-4361) (#1678) (3db225b)
server: add SkipBatchWindow and the StartNowControl agent control (RIG-5071) (#2087) (eb409a2)
server: AgentRepositoryService for agent workstream repositories (RIG-5015) (#2107) (6738c0b)
server: broker a repo-scoped GitHub App token into agent containers (RIG-4724) (#2008) (fa4bb28)
server: broker owner-grants fallback and typed mint errors (RIG-5022) (#2103) (07f9020)
server: configure forge scope enforcement and boot grants (RIG-4434) (#1656) (9bbb94e)
server: enforce forge write scopes by default (RIG-4950) (#2056) (f71f2ba)
server: gate forge writes on account scope grants (RIG-4434) (#1655) (4637391)
server: gateway credential door takes the agent token (RIG-5204) (#2204) (84ced89)
server: owner-qualify agent author handles (RIG-4026) (#1720) (1e42084)
server: per-account first-run tour state (RIG-4505) (#1687) (2c16dd0)
server: rate-limit GitHub credential mints with backoff (RIG-4435) (#2302) (073abf9)
server: report build git rev via GetServerInfo (RIG-2039) (#1760) (470dde8)
server: report Runner attachment as compass.runner health (RIG-5352) (#2282) (cdfee2c)
server: revoke the old GitHub credential on grant removal (RIG-4435) (#2303) (da36275)
server: serve an agent’s last credential on a transient mint failure (RIG-5015) (#2106) (9553cc7)
server: serve gateway credentials from a sealed store (RIG-4746) (#1859) (5c56bb5)
server: serve GatewayAuth on the network door (RIG-5082) (#2117) (8b0d072)
server: serve health on every door and mark NOT_SERVING on drain (RIG-5351) (#2279) (b3b2060)
server: serve the model registry to the LLM gateway (RIG-3980) (#2088) (b12166c)
server: span every handler mount and strip stream spans from work (RIG-5312) (#2255) (8d6f1aa)
stack: configurable host ports for bundled NATS and collector (#1690) (b36c78f)
stack: default the host tier’s server to the keyring provider (RIG-3512) (#2280) (33db616)
stack: wait for the started Runner to enroll before ready (RIG-4514) (#1703) (e9aca7b)
store: agent config overlay store, merge, locks and layer lints (RIG-5516) (#2346) (cf438ff)
store: agent forge scope revoke, list and parent copy (RIG-5015) (#2104) (91b0b16)
store: attach channels to agents with tree or explicit membership (RIG-4186) (#1762) (5d7f1af)
store: authorize channel writes and reads by tree participation (RIG-4187) (#1764) (5fdec0d)
store: index session blobs and store them by content hash (RIG-1582) (#1996) (6c2e829)
store: let agent accounts own forge scope rows (RIG-5022) (#2101) (39f21f3)
store: move the transcript archive flush off the commit path (RIG-5158) (#2223) (b7ea071)
store: owner-set visibility and derived TREE members on channel reads (RIG-4188) (#1772) (2bb1497)
store: record a client span per Postgres query under a request (RIG-5510) (#2333) (17af755)
store: status board tables, patch merge and board reads (RIG-5170) (#2212) (2ea6f4a)
store: store pull requests and their issue links (RIG-4034) (#1900) (58b374a)
store: TREE subscriptions and delivery over derived participants (RIG-4189) (#1778) (4eabb2d)
store: unique sibling channel-group names with a repairing migration (RIG-3030) (#1595) (45b71ef)
ui: add Start now to the observation pane (RIG-5074) (#2125) (a51caa6)
ui: add the agent board panel and tasks search over ListAgentBoards (RIG-5409) (#2300) (aaa6bec)
ui: Appearance settings section with a reduce-motion override (RIG-4972) (#2066) (b7f3d15)
ui: Backlog and Done as Bridge segments (RIG-4968) (#2053) (afe8748)
ui: board summary badges in the sidebar and FleetPane (RIG-5177) (#2290) (cf33dca)
ui: chrome on night with selection pane edges (RIG-4966) (#2050) (8fef455)
ui: first-run setup screen and server connect form (#1757) (1f70448)
ui: first-run tour overlay with spotlight and anchors (#1744) (d05fa8c)
ui: General settings section (RIG-4971) (#2063) (1e73c2f)
ui: issue-mirroring settings and Mirror to issue control (RIG-5537) (#2336) (cdc27be)
ui: keys on a focused card title ref step, open and return (RIG-5238) (#2322) (2838a8e)
ui: message anatomy from the site (RIG-4963) (#2043) (523a1c2)
ui: New tab always opens a new tab (RIG-4676) (#1798) (3069ccb)
ui: project agent lifecycle from session status (RIG-4969) (#2044) (80d10f0)
ui: R and Shift+R focus the cursor card’s linked title refs (RIG-5238) (#2320) (dc57223)
ui: remove the client-side tracker editor from Settings (RIG-4973) (#2067) (131ec21)
ui: Settings shell with a route per section (RIG-4970) (#2059) (62a692c)
ui: share the linked-ref rule and seed ref-link rules in test mounts (RIG-5238) (#2318) (a151a6f)
ui: ship the brand faces with the app (RIG-4959) (#2036) (b90f2ca)
ui: site glyph cells and a 2x state dot (RIG-4962) (#2040) (5c08fb3)
ui: site greens and hierarchy by color (RIG-4961) (#2039) (d931ca4)
ui: square corners everywhere (RIG-4960) (#2037) (51eb7c3)
ui: stack the agent log panel in narrow panes (RIG-4682) (#1787) (f3ee331)
ui: text entry uses the input and button primitives (RIG-4964) (#2047) (433d4a7)
ui: the agent tree view at /agents (RIG-4967) (#2052) (9a52094)
ui: the needle mark alone in the top bar (RIG-4965) (#2048) (ee74e79)
ui: tour overlay, spotlight and anchors (RIG-4507) (#1782) (c5e4bbb)
ui: tour state, demo data seam and store.tour controller (RIG-4506) (#1734) (ed785b9)
ui: tour.start palette command and idle-deferred first-run start (RIG-4509) (#1784) (7e9a3f6)
ui: two-pane split with a resizable splitter (RIG-4446) (#1780) (9fa2751)
ui: view tab strip with keep-alive and open-in-tab links (RIG-4444) (#1755) (04278b6)
ui: W leader chords and palette commands for tabs and panes (RIG-4445) (#1770) (2afaa08)
ui: window layout model, hash sync and session persistence (RIG-4443) (#1743) (26f50c3)
usage: derive compute-usage rollups and prune the raw compute log (RIG-2872) (#1513) (c144385)
vfs: put Stamp and ReconcileOrphans on VolumeManager (RIG-3309) (#1939) (dd8b65a)
vfs: snapshot store with reflink probe, copy fallback and (account, repo) index (RIG-3279) (#2094) (79550f3)
vfs: VirtualFS seam with checkout/snapshot/customer-mount backend (RIG-3280) (#2115) (56a05b6)

Bug Fixes

agent-image: build the agent with the pinned bun (#2001) (a295957)
agent-image: read the lock’s per-platform manifest key in the prune (RIG-1750) (#2198) (a2e9391)
bridge: never follow redirects from the TLS target (#1963) (1dd01e0)
build: ship the pinned secretspec CLI with compass-server (RIG-4583) (#1758) (1024cd5)
ci: run design-ledger touch-coupling on PRs, fail if unwired (RIG-3924) (#1799) (e9aea23)
ci: take PR changed paths from the merge ref’s first parent (RIG-5229) (#2207) (bf3c04c)
cli: close the enrollment CLI review nits (RIG-1380) (#2229) (da93b73)
comms: trim a departing member’s final ChannelChanged to the channel id (RIG-1325) (#1745) (50b3224)
compass-agent: anchor abort mutants on code, not comment text (RIG-3778) (#2258) (042f9f0)
compass-app: ask before restarting a version-mismatched embedded stack (RIG-5102) (#2133) (c8633a2)
compass-go: pin RPC contracts and cap socket-door reads (#2340) (865c4f0)
deps: clear the lockfile’s known advisories (RIG-5013) (#2186) (4edeba7)
deps: update go dependencies (#2160) (8210993)
deps: update typescript dependencies (#2161) (95bbe7f)
design-ledger-gate: exempt automation branches only for their bot (RIG-4823) (#2076) (89a42f0)
design-ledger-gate: exempt Trunk merge-queue PRs from touch-coupling (RIG-4821) (#1922) (b698561)
design-ledger-gate: govern every record under a governed root (RIG-3417) (#1982) (32b0959)
devenv: default GOLANGCI_LINT_CACHE to the per-clone lint cache (RIG-1465) (#1792) (56feb99)
devenv: refuse a NUL or UTF-16 version.txt before stamping (RIG-3439) (#1789) (5b23d08)
e2e: carry the shared stand-up failure text into every leg (RIG-4613) (#1759) (e388948)
fabric: detect a consumer reaped while no pull was waiting (RIG-3448) (#1876) (4124a94)
fabric: give the max-deliveries advisory fetch its own deadline (RIG-4786) (#1875) (04a16d2)
fabric: park an event once when a late Term races the advisory (RIG-4494) (#1683) (6e9a113)
fabric: reap abandoned durable consumers after 2x MaxAge (RIG-3448) (#1807) (1ddda30)
forge: archive live-oracle Linear issues with Bearer auth (RIG-3299) (#2314) (00783cd)
forge: discard a live-oracle issue whose timed-out create committed (RIG-5468) (#2364) (c9dcdad)
forge: leave a PR’s checks unset when no roll-up was fetched (#1680) (ca5a14e)
forge: reuse the CreateIssue node id for follow-up writes (RIG-4859) (#2035) (5a59515)
gateway: refuse a steer or deliver control without its message (RIG-2464) (#2208) (7cc9bdc)
go: serialize concurrent golangci-lint runs (RIG-4813) (#1889) (419f3ad)
guest-image: read the agent image anonymously in the relock (#2074) (4374f4c)
hooks: bound the pre-push moon ci concurrency to 4 (#1682) (4fae441)
linearagent: skip Linear emits for a replayed delivery (RIG-4133) (#1781) (5c58c64)
macos-bundle: inject the pre-create flush so tests never run a real sync (RIG-4476) (#1671) (7d7f1a9)
make main green again (RIG-4878) (#1990) (ea5c036)
microvm: bound Shutdown reap grace by its ctx (RIG-3240) (#2073) (e9faac3)
microvm: stop passt mapping the guest gateway to the host (RIG-3428) (#1984) (ce232e8)
microvm: translate virtiofsd ids instead of mapping namespace-root (RIG-3330) (#1941) (768d71a)
release: gate the runner image on all of go/ (RIG-5590) (#2357) (9044357)
release: republish guest and runner images on devenv.lock changes (#1689) (9a39795)
renovate: accept = and ? in package-diff artifact versions (#2298) (93d7f84)
renovate: drop the Meissa rule’s schedule window (RIG-4852) (#2019) (fbf679d)
renovate: let the daily cron alone set the cadence (RIG-4852) (#1983) (2b42dcc)
renovate: lift the hourly PR cap that starves daily runs (RIG-4935) (#2075) (b08ac5d)
renovate: read devenv build JSON in the package-diff collector (#2295) (dc6b2e3)
renovate: refresh the entrypoint FOD through its agent-image vehicle (#2030) (9da4903)
repo: exempt release CHANGELOG from MD050 (RIG-1746) (#1650) (f89fa83)
runner-image: pass the runner lane to closureChanges in its gate test (RIG-5590) (#2374) (7e616fa)
runner: bound ControlAck size before decode (RIG-4777) (#1849) (31f37bd)
runnerhub: cap inbound RunnerService messages (RIG-3586) (#1676) (f1c3291)
runnerhub: ERRORED cleanup releases only the binding it saw (RIG-4742) (#1810) (933a535)
runnerhub: fail enrollment when the durable reap fails (RIG-3691) (#1700) (c7a9a5f)
runnerhub: ignore lifecycle frames that arrive after ERRORED (RIG-4452) (#1774) (1ee489e)
runnerhub: one distinct code for an unbound caller session on every relay leg (RIG-5124) (#2214) (48c24fd)
runnerhub: report a token-store fault as Unavailable, not Unauthenticated (RIG-4529) (#1711) (056c388)
runnerhub: resolve fetched secrets under the agent tenant (RIG-4912) (#2121) (af24e74)
runnerhub: run Runner relays under the session tenant (RIG-5110) (#2123) (dbb08fc)
runnerhub: scope the faulted-reap read-through refusal per Runner (RIG-3691) (#1681) (7e8faf5)
runnerhub: serialize enroll reaps with session promotion (#1756) (77a78f5)
runner: retry enrollment with bounded backoff (RIG-3691) (#1699) (3058dcb)
runner: run the startup preflight under the signal ctx (RIG-3218) (#1790) (ba07785)
runner: sweep detached exec sessions when an agent stops (RIG-4708) (#1805) (4be37e2)
runtime: don’t cancel podman start/run mid netns setup (RIG-5334) (#2305) (1371ecf)
runtime: kill the in-container process group when a CLI exec client dies (RIG-4181) (#1791) (9b77e93)
runtime: refuse to start when containers.conf opens a pasta forward (RIG-5249) (#2235) (19ab097)
runtime: report unstartable exec programs as exit 127/126 on every backend (RIG-5121) (#2225) (34863c1)
secrets: name the dotenv file when it cannot be opened (RIG-5589) (#2362) (27e1166)
server: apply review fixes to agent workstream repositories (RIG-5015) (#2266) (c683c98)
server: bound header-read and idle time on the UDS and dev doors (RIG-1258) (#2368) (b5a8f10)
server: cancel and join the runner-ready seed in Serve’s drain (RIG-1953) (#2176) (48b3407)
server: carry subscription scope and prove forge_subscribe over the wire (RIG-2732) (#2007) (72b3af3)
server: close doors when the shutdown drain overruns (RIG-1252) (#1785) (231a8be)
server: match the whole socket identity before cleanup removes it (RIG-4696) (#1786) (72ad0c1)
server: never deliver or accept a user GitHub secret (RIG-4949) (#2055) (9d54866)
server: reject forge coordinates registered with an empty host (RIG-3870) (#1667) (e9e698f)
server: reuse a still-valid bootstrap admin token on restart (#1808) (d88cc15)
server: warn when the admin-token state dir is shared (#1801) (cd1c445)
sql-migration-gate: fail closed on a shallow clone instead of deepening it (RIG-4889) (#2149) (645355f)
stack: bound container teardown by ctx and never block Phase A (RIG-4571) (#1748) (3a26d4b)
stack: confirm cross-process teardown by group exit, not socket alone (RIG-3937) (#1657) (94067d9)
stack: default the microVM runner run root to the runtime dir (RIG-4514) (#1693) (f3beee1)
stack: hand compass-server a stack-bound network-door listener (#1806) (2145218)
store: a nested channel group takes its parent visibility (RIG-4750) (#1940) (dc9dc82)
store: cap the pgx pool at 10 unless the DSN sets pool_max_conns (RIG-2300) (#2137) (c6c0f48)
store: check model-level headers at the models.yml door (RIG-5287) (#2227) (b86a40e)
store: refuse a session binding for another tenant’s agent (#1702) (f966054)
store: refuse non-string models.yml header values at the door (RIG-3134) (#2224) (be9a90e)
store: refuse URL-embedded credentials at the models.yml door (RIG-5292) (#2245) (5278ccd)
store: reslot the state_changed_at migration to 0003 (RIG-2347) (#2373) (b64837f)
store: scope MessageAskIDs to the author’s edit authz (RIG-1552) (#1753) (6f32ae5)
toolchain: print nix attrs before resolving the closed sets (RIG-5489) (#2325) (4b57e16)
ui: chrome cleanup: drop ADE and usage bar, Session Log naming, pane edges, row re-measure (RIG-4771) (#1811) (a6742db)
ui: give each Playwright run its own Vite optimizer cache (#2068) (357d418)
ui: keep the Bridge Issues/PRs toggle in place (RIG-4773) (#1812) (088b5a2)
ui: live Session Log tails SubscribeAgentSession for the open agent (RIG-4772) (#1814) (173c723)
ui: route message search hits on the wire channel id (RIG-4295) (#1646) (496cb68)
ui: stop Playwright’s git capture shallowing the CI checkout (RIG-4889) (#2148) (d12dda6)
vfs: move volume metadata out of the agent-owned root (RIG-3311) (#1938) (d18da2c)

Performance Improvements

board: batch ref derivation across boards on roster and list (RIG-5336) (#2365) (e42a563)
runtime: run agent containers under an init so stop is prompt (#2260) (330abab)
store: walk a PutAgentConfig bundle once for both profile lints (RIG-3220) (#1797) (fdf6220)

0.3.0 (2026-09-16)

⚠ BREAKING CHANGES

server: delete the server-secret write path (#1220)

Features

agent-image: add a per-arch publish mode to publish.sh (RIG-3750) (#1243) (435e847)
agent-image: make the entrypoint FOD hash and native-addon copy per-system (RIG-3749) (#1195) (beaee31)
cli: show the runtime tier and egress posture per session (#1153) (bb80c05)
ingest: advance a suppressed subscriber’s delivery cursor when caught up (RIG-3326) (#1185) (bff25ca)
ingest: self-origin notification suppression seam and predicate (RIG-3326) (#1177) (9a53159)
runner-image: carry the Runner, KVM userland and guest assets in a container image (RIG-3720) (#1164) (0dce952)
runner-image: publish the runner image by digest (RIG-3721) (#1181) (a2805af)
runner: carry no egress policy on a backend that cannot enforce one (#1145) (332c075)
runner: declare the runtime tier and egress posture at enrollment (#1156) (612b9cd)
runner: deliver the agent socket and config by path on the host backend (RIG-3512) (#1135) (a9ce14a)
runner: derive the agent uid from the Runner’s euid on the host backend (RIG-3512) (#1125) (684558b)
runner: report the runtime tier and egress posture per session (#1148) (4d0347b)
runtime: add the host-process WorkloadRuntime backend (RIG-3512) (#1120) (f9db16d)
runtime: distinguish a configured egress policy from an unset one (#1142) (2108d46)
runtime: refuse an egress policy the host tier cannot enforce (#1143) (ef908d5)
server: delete the server-secret write path (#1220) (647ba81)
server: scope user-secret writes per caller (RIG-3655) (#1187) (e1619c9)
server: wire the self-origin identity resolver into both notify lanes (RIG-3326) (#1197) (b873481)
ui: add the dot-matrix Glyph primitive and its four chrome bitmaps (RIG-3736) (#1194) (cd55098)
ui: an ask sends only on an explicit submit (RIG-1330) (#1229) (9ed0c35)
ui: carry the full ask wire shape into the domain (RIG-1330) (#1230) (6e30118)
ui: convert the chrome pictographs to dot-matrix glyphs (RIG-3739) (#1211) (81aff4d)
ui: derive the activity-bar avatar initial through one owner (RIG-3737) (#1199) (9a783ef)
ui: finish the chrome glyph conversion (RIG-3739) (#1219) (0a059d0)
ui: mark each agent’s runtime tier and egress posture (#1154) (2317604)
ui: record and ship a free-text ask answer (RIG-1330) (#1231) (92ae829)
ui: render the free-text ask input and its presentation axes (RIG-1330) (#1233) (6930737)
ui: split ActivityBarItem into its glyph and avatar arms (RIG-3738) (#1202) (001b861)

Bug Fixes

ci: register release-notes with moon and fix its manifest path spread (RIG-3731) (#1174) (f5443bc)
design-ledger-gate: fail on unresolved merge conflict markers (#1203) (ce6735c)
release: carry release-image’s resolved digest to the notes generator (RIG-3731) (#1190) (d940147)
release: publish the Release only after its assets attach (RIG-3731) (#1236) (628655c)
runner: stop requiring an agent image on the microVM backend (RIG-3722) (#1205) (cee7829)
ui: treat a question’s arity as part of its shape (RIG-1330) (#1232) (abd1219)

0.2.1 (2026-09-12)

Features

compass-agent: emit decoded traceparent on the SessionInjection observation (RIG-2894) (#1132) (2392c9a)
compass-agent: re-attach the turn’s trigger traceparent on outbound posts (RIG-2894) (#1139) (1dfcbfc)
envelope: AES-256-GCM seam for user-secret values (RIG-3655 T1) (#1111) (d58e256)
secrets: add the DB-backed StoreResolver (RIG-3655 T3) (#1138) (902feca)
server: resolve the at-rest master key at boot (RIG-3655 T4) (#1146) (5c00a05)
store: scope and encrypt user secrets at rest (RIG-3655 T2) (#1118) (c34e417)

Bug Fixes

release: put the pinned pkg-config on PATH for the app bundle (RIG-3731) (#1171) (3692236)

0.2.0 (2026-09-12)

⚠ BREAKING CHANGES

ui: migrate apps/ui to Solid 2 (RIG-2202) (#548)

Features

agent: forge state-transition tools (RIG-3331) (#1019) (2b512df)
app-bundle: add compass-app-bundle project that builds the release tarball (#431) (cb3be7e)
app-bundle: re-scope the bundle to carry embedded’s sidecars (RIG-3200) (#863) (d524f02)
app: make the darwin podman-machine check real and provisioning-aware (RIG-3202) (#1034) (e65ada1)
ci: lint SQL migrations with squawk + sqruff (RIG-3031) (#764) (5f3c256)
cli: add operator message-post and agent-status nouns (RIG-2662, RIG-2663) (#585) (a11e167)
comms: deliver ask answers as messages on the durable rail (RIG-2257) (#600) (4228ee7)
comms: OpenDM handler + AsAccount adapter + relay dispatch + spawn auto-open (RIG-2964) (#757) (afcce53)
comms: org-management agent tools — comms adapters, hub dispatch, spawn role/persona (RIG-2673) (#630) (bca111c)
comms: peer-DM T0 name-addressing cutover — agents address channels+topics by name (RIG-2956) (#730) (c8ee830)
compass-agent: activate loop OpenTelemetry in cli.ts main() (RIG-2508 T1) (#648) (837687c)
compass-agent: add board_set_issue_state native tool (RIG-3191) (#842) (5b80961)
compass-agent: add comms_open_dm + comms_dm peer-DM tools (RIG-2966) (#749) (7d896c4)
compass-agent: add effect dep + Bun runtime smoke (RIG-2424 T1) (#465) (0ee510a)
compass-agent: add the forge tool surface (T1+T2) (RIG-2672) (#603) (ea0a9d8)
compass-agent: agents_tree native tool — indented agent tree with live presence (RIG-2678) (#1062) (332a733)
compass-agent: consolidate transport ManagedRuntime ownership (RIG-2424 T5) (#475) (b1e2ce1)
compass-agent: decode traceparent off the wire control (RIG-2871) (#957) (3823c2d)
compass-agent: meter the inbound control source + span its connections (O3) (#540) (c3fc01d)
compass-agent: migrate control-source reconnect pump to Effect (RIG-2424 T4) (#474) (4961ce7)
compass-agent: migrate frame-sink durable lane to Effect (RIG-2424 T2) (#467) (1084c42)
compass-agent: migrate off the vendored oh-my-pi subtree onto @oh-my-pi/* 18.0.11 (RIG-2407) (#924) (a64f003)
compass-agent: migrate publish spine to Effect (RIG-2424 T3) (#471) (69581b1)
compass-agent: require role/persona on agents_spawn_peer and render handles only (RIG-2726) (#762) (0393d52)
compass-agent: scaffold transport OTel layer + containment test (O1a) (#515) (e121084)
compass-agent: SessionInjection op-kind observation on the steer/deliver seam (RIG-2486) (#496) (d567033)
compass-agent: span the outbound transport send + drain (O4) (#542) (9eb8d67)
compass-agent: surface error/abort content as SessionError trace frames (RIG-2616 T2) (#850) (3839fb9)
compass-agent: surface swallowed models.yml errors at boot; fail closed on unresolvable pinned model (RIG-2654) (#697) (b4447d5)
compass-agent: thread TurnTracer through the three injection shapes (RIG-2508 T2) (#693) (8b60afd)
compass-agent: trace-continuity bridge module (RIG-2508 T1) (#688) (e20c1eb)
compass-agent: validate spawn role against the closed Manager taxonomy (RIG-3074) (#810) (655b056)
compass-agent: wire OTLP exporters behind the transport OTel gate (O1b) (#520) (03f26d0)
compass-app: darwin build path via build-tag restructure (RIG-2753, T2) (#640) (eb2240f)
compass-app: flip GTK3->GTK4 + webkitgtk-6.0 core (T2-T5) (RIG-2819) (#682) (4c958ca)
compass-app: revive embedded dual-mode + supervisor pipeline (RIG-3197, RIG-3198) (#844) (6a22bf9)
compass-stack: add preflight checks + self-host docs (RIG-2761) (#669) (ae0a9ce)
compass-ui: add the embedded boot arm to the shell-mode fork (RIG-3199) (#861) (3bdeac8)
compass: compass-guestd real PID-1 init (RIG-2589) (#552) (93b4a63)
compass: handle-address request inputs — schema, proto flip, resolver, comms edge (RIG-2880) (#698) (0a22bab)
compass: microVM V2a boot harness + KVM-gated boot spike (RIG-2591) (#574) (d73ae7e)
compass: pack bootable erofs guest image + module initramfs (RIG-2590) (#559) (06866a6)
compass: seed GuestControl proto + host vsock dialer (RIG-2588) (#547) (6fffd5c)
config: admit prompts/<role>/SYSTEM.md + expose Prompts info bucket (RIG-3075) (#808) (a9b889f)
config: profile registry — admit profiles/<name>/profile.yml at all three doors (RIG-2968) (#813) (ec3fe59)
config: role prompts, concepts doc, and skill labels for the Manager taxonomy (RIG-3076, RIG-3077, RIG-3078) (#802) (ac68cd4)
delivery: factor routeMentionsFor + add scanMissedMentions (RIG-2600) (#549) (5872e73)
delivery: offline-mention record+wake arms + owed-mention start sweep (RIG-1641 T2) (#499) (c9ad908)
delivery: propagate trace context through delivery dispatch (RIG-2892) (#739) (aa025b0)
delivery: reap held-deliver entries on Runner re-enroll (RIG-1612) (#463) (2a5843f)
delivery: wire recovery scan at both recovery points + live-path mark (RIG-2601) (#551) (32f4aa6)
design-ledger: add Retired row status for scrapped-without-successor decisions (#522) (6f38814)
devenv: add microVM VMM userspace toolset to dev shell (#502) (cf5d3e6)
devenv: de-pin 3 agent-image devenv-fork sites onto the tool (RIG-2812) (#815) (44e5034)
devenv: move root devenv source onto the RigelBuild fork (RIG-2814) (#816) (66ce611)
devenv: relax Linux guards for macOS-native postgres/server/UI/cert/mint (SEA-2003) (#346) (00a8d06)
e2e: AwaitControlDispatch fixture primitive over SubscribeAgentSession (RIG-2487) (#504) (29f1f59)
fabric: add NATS EventFabric + RunnerFabric seams (RIG-3107) (#877) (909a02b)
fabric: add tenant-wildcard comms subscribe (RIG-3107) (#903) (6371320)
fabric: add the RoutingFabric seam for binding-cache invalidation (RIG-3108) (#955) (c953baa)
flake: repo-root flake.nix packaging + nixpkgs-pin parity gate (RIG-2757, T6) (#642) (1b3f52f)
forge: agent turn-end notification arm + forge ack (RIG-2732) (#678) (0ee2f6b)
forge: carry the owner-qualified actor handle on the wire (RIG-3326) (#1020) (1f187d9)
forge: container-scope subscriptions, notification kinds, forge ack frame (RIG-2732) (#674) (7a8ddae)
forge: forge state-transition wire arms and provider methods (RIG-3331) (#1017) (d689ca4)
forge: GitHub App installation-token source (RIG-2732) (#679) (31de779)
forge: ListUpdatedIssues updated-order conditional walk (RIG-2883 T2) (#709) (2e3245c)
forge: notify router + snapshot apply (RIG-2732) (#676) (c5c6862)
forge: reconcile sweep + conditional reads (RIG-2732) (#677) (0518386)
forge: surface rate-limit retry hint on the forge error channel (RIG-2255) (#750) (2426dd2)
forge: webhook ingress + event normalize (RIG-2732) (#675) (082a28c)
forge: wire agent forge subscribe/unsubscribe — store writer + DL-053 GC (RIG-2732) (#631) (f7c414a)
guest_control: grow GuestControl with the V2b exec surface (RIG-2493) (#696) (d97d8bc)
guest-image: microVM guest kernel + rootfs derivations and moon build gate (#507) (1b968b8)
guestd: arm nft_script as guest root before the exec gate (V3 W1) (#754) (43b98d0)
guestd: forward /run/compass/agent.sock to the host gateway over vsock (#817) (193f78d)
guestd: replace the Health-only stub with the V2b in-guest supervisor (RIG-2493) (#701) (d86412d)
ingest: board reconciler startup sweep + slow ticker + watermark (RIG-2883) (#708) (b769389)
ingest: board webhook arm — fan-out sink + hydrating ingest queue (RIG-2883) (#706) (d9227fc)
keyboard: four G-leader sequence rows + display/aria hardening (RIG-2708) (#613) (c7105ce)
keyboard: leader-sequence runtime in the keymap dispatcher (RIG-2709) (#616) (29c4a7f)
keyboard: sequence-grammar chord helpers for leader chords (RIG-2707) (#612) (90f01bf)
linearagent: Linear Agent Session webhook types + API client (RIG-2717 T1/T2) (#637) (3217854)
linearagent: Linear Agent Session webhook types + API client (RIG-2717 T1/T2) (#638) (574025c)
linearagent: responder routing + async dispatcher (RIG-2717 T4/T6) (#646) (077d08f)
lint: enable depguard + gomodguard_v2 with an active import fence (RIG-3033) (#763) (4593022)
lint: stricter Biome rules + GritQL fixed-sleep ban (RIG-3032) (#769) (0af33ac)
microvm: host-written per-session pidfiles with PID-reuse defense (RIG-2498) (#974) (19c3c95)
microvmtest: add untagged microVM test gate package (#503) (6840479)
microvm: virtio-fs mount-ns isolation + volume-quota verification (RIG-2497) (#912) (0e05a9a)
notify: resolve a check_suite head SHA to its PR number (RIG-2869) (#950) (088d13a)
otel: add go/internal/otel bootstrap package (RIG-2888) (#699) (108f174)
otel: emit runner client spans (RIG-2890) (#714) (20fa1c0)
otel: emit server-side spans + traceresponse header (RIG-2889) (#713) (bd97337)
otel: link a reply’s trace back to its trigger (RIG-3499) (#1041) (e2b919e)
otel: stamp the PostHog session id onto backend spans (J1 inbound half) (#996) (6966925)
prompts: activate the issue/PR-tool references in the role block-0 prompts (RIG-1734) (#849) (b937e25)
proto: add SessionError to the compass.v1 session-trace contract (RIG-2616 T1) (#846) (ad7bff4)
proto: add SessionInjection + trigger_traceparent trace fields (RIG-2891) (#700) (9e3f2db)
proto: add traceparent to SteerControl/DeliverControl for trace continuity (RIG-2508) (#694) (c484235)
proto: OpenDM RPC + gateway arm; GROUP_DM retirement; DM/convert fields (RIG-2962) (#738) (7eddb90)
proto: org-management comms + spawn arms for agent gateway (RIG-2673) (#628) (dd4f291)
release: attach the Linux client bundle to the semver Release (RIG-2752) (#761) (6c61631)
release: build the macOS .app/.dmg client bundle on a macos-14 lane (RIG-2754) (#784) (3acedd7)
release: release-gated asset + image jobs, port release-notes tool (RIG-2915) (#742) (7188de6)
release: release-please config + unified release.yml (RIG-2914) (#741) (5219558)
release: version.txt base for bundle, required-image release posture, unified-lane docs (RIG-2916) (#743) (867159a)
renovate: auto-bump DefaultPostgresImage digest within postgres:18 (RIG-2774) (#673) (86c1bd7)
renovate: auto-refresh pinned Nix FOD hashes on dep bump (RIG-2727) (#626) (99ecc40)
renovate: couple go bump to go-overlay refresh (RIG-3100) (#841) (e327cbd)
renovate: migrate compass off Dependabot to self-hosted Renovate (RIG-2432) (#477) (e3d8161)
renovate: re-land postgres-stack customManager (RIG-2774) (#772) (5371d81)
renovate: track the agent-image nixpkgs channel pin (RIG-3365) (#1046) (a209d94)
renovate: track the RigelBuild/devenv fork in both devenv locks (RIG-2815) (#865) (40398f7)
renovate: verify the agent-image FOD through its own builder (RIG-3365) (#1047) (c82f6ae)
runner: backend-gated startup preflight (RIG-3147) (#843) (0773a48)
runnerhub: bounded per-router send queue for non-blocking dispatch (RIG-2688) (#604) (05d88e7)
runnerhub: demote the binding maps to a cache over session_bindings (RIG-3108) (#1095) (28e8d53)
runner: microVM boot canary startup preflight (RIG-3148) (#847) (1646e0c)
runner: serve the AgentGateway over a per-session vsock path on microVM (#818) (5fbf3e2)
runtime: add the AppleContainerCLI backend and its SelectBackend case (RIG-3354) (#1070) (15bee87)
runtime: deliver egress policy to the guest; skip host arm on self-arming backends (V3 W2) (#755) (73a28b7)
runtime: fill MicroVMRuntime lifecycle methods (RIG-2493) (#719) (6a2c05c)
runtime: freeze ContainerRuntime.Resize + ResourceLimits at S1 (#454) (64e1583)
runtime: host GuestExec layer + portable exit-signal error type (RIG-2493) (#702) (27c9411)
runtime: microVM backend seam + config-driven selection (RIG-2491) (#491) (8fb58e0)
runtime: microVM static preflight + shared hostcheck core (RIG-3146) (#835) (7e23d19)
secrets: add ListServerSecrets + the compass server-secret CLI noun (#1059) (39cf54b)
secrets: admin-gated SetServerSecret/DeleteServerSecret over the server registry (#962) (2de6479)
server: assemble the GitHub agent-notification lane (RIG-2732 T7) (#735) (e3f764b)
server: forge state-transition arms and actor memo (RIG-3331) (#1018) (c028d02)
server: mount the Linear webhook ingress /webhooks/linear (RIG-2732 T7) (#744) (4f539b0)
server: offline-agent wake seam + system-authorized resume (RIG-1641 T3) (#497) (b924399)
server: per-deployment public URL + deep-link builder (RIG-2717 T5) (#639) (5d01d87)
server: re-point the forge boot consumers at the server resolver (#988) (f227491)
server: retire the forge poll driver, mount the App-only board webhook lane (RIG-2883 T5) (#724) (55bcefa)
server: seed the tree root as role “supervisor” (RIG-3079) (#834) (bf216c2)
server: wire the Linear agent-notification lane data sink (RIG-2732 T7) (#751) (8e68875)
stack: bundle Plane-B fan-in OTel Collector as a supervised child (RIG-2825) (#672) (faf2bc1)
stack: container-backed postgres + –database-external opt-out (RIG-2759, T8) (#652) (fcae4f0)
stack: pgid-record v2 kind-tagged union for container teardown (RIG-2760, T8a) (#644) (78da0f1)
stack: pin stock postgres:18 container image by digest (RIG-2758, T7) (#641) (4d1ebe4)
stack: read the process identity token via sysctl on darwin (RIG-3548) (#1033) (735ec26)
stack: supervise a bundled NATS broker as a stack container (RIG-3107) (#878) (d3488ff)
store,server: model registry store + operator write RPC + fail-closed config lint (RIG-3122) (#853) (010188b)
store: add mentions_routed_at marker column + scan surface (RIG-2599) (#546) (6338f82)
store: add the durable session_bindings table and its store methods (RIG-3108) (#990) (983e620)
store: admit SubjectService token principal (enum half) (RIG-2863) (#911) (71522ff)
store: migrate accounts + agent_tree to sqlc (T2) (#790) (2d9db7c)
store: migrate channels + channel_pins + coordination to sqlc (T3) (#792) (be9c371)
store: migrate messages + topics + delivery to sqlc (T4) (#795) (ff5bfab)
store: owed_mentions durable backstop + AckDelivery clear (RIG-1641 T1) (#494) (6835515)
store: recency-guard write-path threading for forge_updated_at (RIG-2883) (#710) (96199ce)
store: reserved DM group + upsert + create-guard + convert-on-add (RIG-2963) (#746) (0df3c57)
store: RLS enforcement + per-transaction tenant scoping (RIG-3106) (#830) (6d4acdb)
store: scaffold sqlc + arm the inline-SQL ban gate (T1) (#780) (a84f2d2)
store: server_secrets registry, physically separate from user secrets (#960) (bad69ff)
store: tenant schema + identity plumbing (RIG-2861 T1) (#715) (a17625b)
store: watermark persistence + enabled-repo enumeration (RIG-2883 T4) (#705) (95421e2)
toolchain: add devenv-cli source resolver tool (RIG-2546) (#666) (46fe144)
toolchain: re-land devenv-cli source resolver tool (RIG-2546 T1) (#771) (990644e)
tools: compass-app-dev local build+launch loop for the native client (RIG-3103) (#819) (0426dc4)
tools: mint the live-oracle Linear token with app:assignable (RIG-3299) (#1021) (19d10ee)
ui: adopt CoachTip across command-backed chrome + register sidebar toggles (RIG-2704) (#618) (f9cd5bd)
ui: adopt frozen 1-bit pixel-art state-dot glyphs (RIG-2118) (#862) (eb5ef7a)
ui: Bridge 2-D roving-tabindex keyboard grid + empty-board (RIG-2130) (#472) (16e0d09)
ui: Cmd/Ctrl+K command palette + point-of-use shortcut chips (RIG-2483) (#529) (dc07f46)
ui: CoachTip coaching tooltip component (RIG-2703) (#615) (ba93b66)
ui: embed posthog-js behind an off-by-default analytics flag (#689) (797cd71)
ui: emit the PostHog session id on outbound requests (RIG-2874) (#1055) (76c85da)
ui: export a composeBoot seam so the analytics/clients boot order is testable (RIG-2874) (#1096) (7c3129b)
ui: install the keyboard spine at the App root (RIG-2456) (#489) (94a8331)
ui: migrate apps/ui to Solid 2 (RIG-2202) (#548) (fb234f3)
ui: re-theme demo fixtures to a Manager-named example tree (RIG-2346) (#444) (5c42d52)
ui: scope-aware tier-3 command dispatch (RIG-2529) (#519) (f406cfe)
ui: searchable ? keyboard-shortcuts overlay (RIG-2482) (#526) (2cc992a)
ui: stamp the server trace id onto captured product events (RIG-2874) (#938) (98b6ce9)
vfs: session persistent-volume lifecycle API + local-dir backend (RIG-3278) (#898) (747b403)

Bug Fixes

agent: idle @-mention steer starts a turn via prompt(), not continue() (#514) (e0e8973)
agent: terse the reply-in-channel cue — why lives in SYSTEM.md, not per batch (RIG-2664) (#583) (693bfe5)
app-bundle: stage postgres share + lib so the bundled cluster can initdb (#448) (a2667a2)
biome: scope type-aware nursery rules off compass-agent transport (RIG-3051) (#789) (944d095)
build: stamp version.txt semver on the nix + devenv build paths (RIG-3346) (#939) (87f3f79)
ci: always run design-ledger-gate on PRs (RIG-3441) (#942) (446bb16)
ci: generate sqlc drift check out-of-tree (RIG-3591) (#1063) (d1f08e8)
ci: make the darwin DMG edge leak-proof (RIG-3335) (#1074) (8d26d72)
ci: skip the CI rollup on a cancelled run so superseded commits are not false-red (#506) (48d4a7c)
ci: stop body edits cancelling the base-re-point guard (RIG-3372) (#1060) (970c8df)
ci: switch moon to native file hashing to end the main full-sweep git race (RIG-2585) (#555) (c7fe3f9)
ci: union the PR affected closure with the task-level one (RIG-3381) (#935) (ff04f85)
comms: guard nil derefs to clear nilaway T3 lane (#775) (f2a7e12)
comms: resolve agent-caller owner in CreateAgent (RIG-1644) (#443) (a87cb70)
compass-agent: derive LITELLM_MCP_URL from the delivered base URL (RIG-2674) (#587) (47d46e0)
compass-agent: emit the export-surface dts probe under node_modules to end the main-CI git race (#541) (121c021)
compass-agent: event-gate the (g) probe tests instead of a wall-clock budget (RIG-3455) (#970) (375377a)
compass-agent: give the config-passthrough afterEach cleanup a real timeout (RIG-3609) (#1064) (0246794)
compass-agent: isolate transport gauge tests from the shared metric registry (RIG-2656) (#712) (101c3f3)
compass-agent: recover a deliver stranded against an untracked startup stream (RIG-2644) (#572) (4fbbfee)
compass-app: reap the gtk4 e2e WebKit children before exit (RIG-2526) (#1113) (5b88ea9)
compass-app: repoint default agent image to the live rigelbuild GHCR owner (#455) (c25ce94)
deps: update typescript dependencies (#591) (01d7d20)
design-ledger: resolve DL-298/DL-299 cross-lane id collisions on main (#737) (3572ea6)
design: de-collide duplicate ledger id DL-239, renumber the RIG-2490 row to DL-240 (RIG-2619) (#554) (1e8c0ab)
design: renumber colliding ledger ids DL-319/DL-320 to DL-322/DL-323 (#851) (fab4a67)
design: renumber colliding ledger ids DL-327..330 to DL-334..337 (RIG-3107) (#927) (c374bb9)
devenv: build the operator CLI so the box never serves a stale binary (RIG-3342) (#925) (a971c6c)
devenv: single-source the dogfood runner-id so mint and runner never drift (RIG-2660) (#582) (4e78a49)
docs: clear the dangling docs/designs/platform citations (RIG-2655) (#1075) (67e7eff)
eng-docs: bump astro to v7 with lockstep starlight/check (RIG-2585 sec, closes #564) (#570) (b5f92c3)
flake: ship the UI dist with #compass-app (RIG-3474) (#1011) (9d0a00f)
forge: make the live-Linear oracle deterministic + gate it on the forge surface (RIG-2909) (#721) (5cb9397)
forge: treat Linear’s duplicate state as closed (RIG-3590) (#1069) (9361001)
go: repoint a stale sealedsecurity store import to RigelBuild (RIG-1893) (#479) (d0b05a9)
guest-image: stage /sbin/modprobe so in-guest egress arm autoloads netfilter (RIG-3028) (#759) (e01a20a)
ingest: key notify snapshot comments by stable id, not URL (RIG-2732) (#768) (5e6bc9b)
inline-sql-gate: exempt tool CLI from noConsole in its nested biome config (#787) (b758bbd)
microvm: force ExecStream receive-side down on ctx cancel (#770) (381b241)
nilaway: clear guestd + events nil-panic findings (#779) (38cb17f)
preflight: provision the darwin machine before probing podman (RIG-3563) (#1057) (edf9daf)
release: read the release-please App Client ID from an Actions variable (RIG-2995) (#985) (11076ea)
renovate: build devenv CLI from root lock, not deleted forks/devenv (RIG-2406) (#518) (26e524a)
renovate: lockstep flake.nix nixpkgs rev on devenv-nixpkgs bump (RIG-3099) (#814) (a69b610)
renovate: mirror flake.nix Go vendorHash + cap wails/v3 below 3.1 (RIG-2852) (#681) (589675a)
renovate: read the App Client ID from the client-id input (RIG-2995) (#1039) (1661a07)
renovate: refresh the FOD hash on devenv-nixpkgs channel bumps (RIG-3296) (#897) (1b21603)
runner/gateway: un-park SteerControl so @mention steers reach the agent (#476) (25794b6)
runner: guard microVM launcher Pdeathsig behind a linux build tag (RIG-3213) (#848) (17111cc)
runner: guard nil derefs to clear nilaway T1 lane (#773) (8f23b54)
runnerhub: bound the send1 deliverRefusals registry (RIG-1610) (#483) (a4ab0c7)
runnerhub: guard proto-getter nil oneofs for nilaway (T2) (#774) (ed9c493)
runtime: guard nilaway findings in runtime + microvm lanes (T5) (#777) (db628cc)
runtime: nil-guard launchFunc result so nilaway proves vm non-nil (RIG-1534) (#799) (c4a7070)
secrets: guarantee the secretspec CLI as an install-time dependency (RIG-3437) (#1043) (2db7e4e)
server: guard nilaway proto-getter and spawn-memo derefs (#778) (d8acd3e)
server: send leading registration-ack on SubscribeAgentSession (RIG-3044) (#785) (9d675bb)
server: skip redundant ConfigVersion signal on idempotent re-Put (RIG-1657) (#432) (31073d7)
server: wire the config-bundle store into the runner door so agents receive config (#537) (992f3b5)
store: back the keyspace partition with a DB CHECK and prove the grants (#961) (349d5d2)
store: descend through non-string-keyed nodes in models.yml credential denylist (RIG-3116) (#826) (f584880)
store: guard nilaway reachable-nil findings in store lane (#776) (8095c1e)
test: stop the fake runner sending before closing its request half (RIG-3606) (#1065) (a253a82)
toolchain: build the Go analysis battery with the go1.27 toolchain (RIG-3303) (#904) (ab56c27)
tools: point orion-ref-gate’s failure hint at an in-repo doc (RIG-3344) (#930) (a125326)
ui: correct a stale boot-order comment in the analytics test (RIG-2874) (#1081) (46a1208)
ui: render the visual gate in the typefaces the tokens name (RIG-2154) (#1061) (12df1dc)
ui: trim the boot comments after the composeBoot extraction (RIG-2874) (#1104) (ca6cbbf)

Performance Improvements

ui: highlight settled code on the leading edge, debounce only streaming ticks (RIG-1422) (#575) (beaaca4)