v5.0.3

What's Changed

• perf(pipeline): stream Git tag bump selection (R5 R10) by @ncode in #828
• Cover missing optional and required selections in a TUI QA journey by @ncode in #859
• Show every row when the list fits after a reload by @ncode in #864
• Cover the toggle modal's local exclude in a TUI QA journey by @ncode in #867
• ci: publish the website to GitHub Pages from main by @ncode in #866
• Show retargeted resources as pending sync, not orphaned by @ncode in #872
• Establish shared browser visual foundations by @nataliabeliaeva in #860
• Redesign the Marketplace browse experience by @nataliabeliaeva in #861
• Refine public Marketplace record surfaces by @nataliabeliaeva in #862
• Resolve hook plugin-root tokens against the bundle root on every source path by @AlexanderGrooff in #832
• perf(config): avoid exact-exclusion rescans in v4 request rebuilding by @ncode in #868
• Reload after the config editor exits and free later writes by @ncode in #873
• Cover installing and disabling a collection in a TUI QA journey by @ncode in #874
• Cover drag-to-copy on the errors screen in a TUI QA journey by @ncode in #875
• Cover fold keys during an applied search in a TUI QA journey by @ncode in #876
• Cover running actions from the command palette in a TUI QA journey by @ncode in #877
• Cover a failed sync in a TUI QA journey by @ncode in #881
• Tighten the errors-selection and search-folding journey assertions by @ncode in #883
• Warm up the binary before timing the non-TTY entry points by @ncode in #884
• update header for docs by @AlexanderGrooff in #879
• Add site social preview image by @nataliabeliaeva in #887
• perf(config): use exact lookups in effective v4 requests by @ncode in #888
• Label malformed skills with their registry by @ncode in #890
• Assert the footer view hint and search match colours in layout-quality by @ncode in #892
• fix(security): harden Marketplace delivery defaults by @ncode in #882
• Fix two regressions in registry labels and missing-selection rows by @ncode in #894

Full Changelog: v5.0.2...v5.0.3

v5.0.2

What's Changed

• Enforce archive limits while decoding verified archives (R61) by @ncode in #794
• Deduplicate collection inclusion paths with a set (R30) by @ncode in #795
• Refuse duplicate Codex MCP keys in doctor repair and name what replacement writes by @ncode in #792
• Aggregate reported installation counts in Prometheus by @AlexanderGrooff in #800
• Require a TUI QA journey for every TUI change by @ncode in #803
• Refresh the quick start for the current TUI by @AlexanderGrooff in #809
• Check layout markers with Stat instead of reading them (R39) by @ncode in #804
• Read archive blobs within the artifact limit (R21 remainder) by @ncode in #805
• Cover first-run harness setup in a TUI QA journey by @ncode in #821
• Avoid hash-only nightly model catalog pull requests by @ncode in #820
• Reuse prepared read statements in the SQLite store (R27) by @ncode in #818
• Bind model evidence and harden hook review, refusal, and tool-list witnesses (#652 part 1) by @ncode in #812
• Cover native hook crash windows, CLI/Desktop separation, loaded handlers, and equal providers (#652 part 2) by @ncode in #816
• Witness relocated support, boundary refusals, timeout bounds, and structured agents across releases (#652 part 3) by @ncode in #819
• Keep locked sources exact when installing from the TUI Marketplace by @ncode in #827
• Cover recovering from a broken config in a TUI QA journey by @ncode in #829
• Cover the TUI update refusal for a selection renamed upstream by @ncode in #834
• Build with Go 1.27.3 to pick up the crypto/x509 fix by @AlexanderGrooff in #846
• Report unknown drift when Marketplace cache evidence is missing (#790) by @AlexanderGrooff in #831
• Cover the quit confirmation's esc and y paths in a TUI QA journey by @ncode in #842
• Cover refusing to toggle a required resource in a TUI QA journey by @ncode in #852
• Establish public site visual foundations by @nataliabeliaeva in #835
• Apply the public site system to Landing by @nataliabeliaeva in #836
• Add accessible Landing motion and feedback by @nataliabeliaeva in #837
• Refine Landing information architecture by @nataliabeliaeva in #838
• Add actionable hints to CLI and TUI errors by @AlexanderGrooff in #839
• Keep the selection on its resource when a reload locks its source by @ncode in #855
• Add GitHub issue and PR templates by @ayodejidev in #856

New Contributors

• @ayodejidev made their first contribution in #856

Full Changelog: v5.0.1...v5.0.2

v5.0.1

What's Changed

• fix(remove): allow optional organization Marketplace resource opt-outs by @ncode in #752
• Verify exact Git snapshots once per command by @AlexanderGrooff in #739
• Publish release charts on stable tag pushes by @AlexanderGrooff in #753
• feat: support opt-in local Marketplace docs for air-gapped deployments by @ncode in #767
• Bump site Vue for the server-renderer Dependabot alert by @ncode in #757
• Bump tui-qa brace-expansion for Dependabot alerts by @ncode in #769
• perf(web): avoid repeated raw-preview byte lookups (R38) by @ncode in #756
• Bump web dependencies for Dependabot alerts with 21-day-old fixes by @ncode in #754
• Open a review PR for nightly model catalog drift by @AlexanderGrooff in #755
• Give TUI search match highlights an explicit accent color by @AlexanderGrooff in #777
• Refuse mutable ref cache directories nested in another checkout by @ncode in #772
• fix(update): keep full commit pins out of ref bumping by @ncode in #773
• Fix confirm-quit modal colors and duplicate hints by @AlexanderGrooff in #780
• Fix: make slashes equal across landing and marketplace by @nataliabeliaeva in #783
• docs(security): freeze the #215 r1/parent ledger and split R5 by @ncode in #766
• fix(resolver): let resources that share a native path compete for it by @ncode in #774
• Keep handwritten tables between owned Codex MCP tables by @ncode in #779
• Record failing TUI QA journeys with tui-test 0.1.0 and link them from the PR by @ncode in #225
• Refuse case-aliased Codex partitions before mutation by @ncode in #775
• Review upstream model catalog drift by @github-actions[bot] in #782
• fix(resolver): keep the required resource in a case-only collision by @ncode in #791
• Show Marketplace selections and installed collections in list and TUI by @AlexanderGrooff in #784
• Start the docs with the quick start and a one-step install by @AlexanderGrooff in #789
• Point consumer version refusals at a concrete next step by @AlexanderGrooff in #799

New Contributors

• @github-actions[bot] made their first contribution in #782

Full Changelog: v5.0.0...v5.0.1

What's Changed

• fix(remove): allow optional organization Marketplace resource opt-outs by @ncode in #752
• Verify exact Git snapshots once per command by @AlexanderGrooff in #739
• Publish release charts on stable tag pushes by @AlexanderGrooff in #753
• feat: support opt-in local Marketplace docs for air-gapped deployments by @ncode in #767
• Bump site Vue for the server-renderer Dependabot alert by @ncode in #757
• Bump tui-qa brace-expansion for Dependabot alerts by @ncode in #769
• perf(web): avoid repeated raw-preview byte lookups (R38) by @ncode in #756
• Bump web dependencies for Dependabot alerts with 21-day-old fixes by @ncode in #754
• Open a review PR for nightly model catalog drift by @AlexanderGrooff in #755
• Give TUI search match highlights an explicit accent color by @AlexanderGrooff in #777
• Refuse mutable ref cache directories nested in another checkout by @ncode in #772
• fix(update): keep full commit pins out of ref bumping by @ncode in #773
• Fix confirm-quit modal colors and duplicate hints by @AlexanderGrooff in #780
• Fix: make slashes equal across landing and marketplace by @nataliabeliaeva in #783
• docs(security): freeze the #215 r1/parent ledger and split R5 by @ncode in #766
• fix(resolver): let resources that share a native path compete for it by @ncode in #774
• Keep handwritten tables between owned Codex MCP tables by @ncode in #779
• Record failing TUI QA journeys with tui-test 0.1.0 and link them from the PR by @ncode in #225
• Refuse case-aliased Codex partitions before mutation by @ncode in #775
• Review upstream model catalog drift by @github-actions[bot] in #782
• fix(resolver): keep the required resource in a case-only collision by @ncode in #791
• Show Marketplace selections and installed collections in list and TUI by @AlexanderGrooff in #784
• Start the docs with the quick start and a one-step install by @AlexanderGrooff in #789
• Point consumer version refusals at a concrete next step by @AlexanderGrooff in #799

New Contributors

• @github-actions[bot] made their first contribution in #782

Full Changelog: v5.0.0...v5.0.1

v5.0.0

What's Changed

• Ignore Git metadata inside directory-source skill trees by @AlexanderGrooff in #444
• Publish release charts for downstream OCI mirrors by @AlexanderGrooff in #622
• Added new logo and favicon by @nataliabeliaeva in #654
• Publish Homebrew packaging from stable releases by @AlexanderGrooff in #653
• Ship model catalogs, native hooks and subagent tool translation by @AlexanderGrooff in #451
• Guide TUI users to sync missing locked Git snapshots by @ncode in #669
• Fix Windsurf project-directory hook rewrite and keep user regressions visible in E2E gates by @ncode in #655
• Require v4 consumer configuration for the public launch by @ncode in #668
• Show the v view-settings hint in the TUI footer by @AlexanderGrooff in #689
• Make TUI errors explain how to recover by @AlexanderGrooff in #641
• Name the offending path in unsafe-path refusals by @AlexanderGrooff in #691
• Cover public compiler overrides and remove an unused E2E helper by @ncode in #686
• Clean up after the v4-only consumer configuration launch by @ncode in #688
• Let a required collection member displace an optional same-scope selection by @ncode in #684
• Keep Devin converted command skills from dropping restrictions by @ncode in #634
• Audit the public documentation site for source and spec accuracy by @AlexanderGrooff in #621
• Shorten README and point to the documentation site by @AlexanderGrooff in #666
• Show where a resource comes from on its detail page by @AlexanderGrooff in #693
• Rewrite the docs site in plain English by @AlexanderGrooff in #692
• Remove the convert subcommand by @AlexanderGrooff in #665
• Nudge go install and release users toward newer releases by @AlexanderGrooff in #659
• Verify archive digests by hashing received bytes by @AlexanderGrooff in #703
• Keep target sidecars from widening canonical authority by @ncode in #645
• Keep project and plugin roots distinct in MCP and prompt values by @ncode in #673
• Run required checks on merge queue groups by @ncode in #709
• ci: bump trufflesecurity/trufflehog from 3.97.5 to 3.97.9 by @dependabot[bot] in #695
• deps: bump charm.land/bubbletea/v2 from 2.0.9 to 2.0.10 by @dependabot[bot] in #700
• Preserve or refuse restriction-bearing native fields by @ncode in #674
• Group docs sidebar sections into subcategories by @AlexanderGrooff in #712
• Refuse ambiguous Windsurf identities and repeated rule keys by @ncode in #676
• Remove the hcc command by @ncode in #713
• docs(spec): align consumer contracts with v4-only configuration by @ncode in #694
• deps: bump github.com/aws/aws-sdk-go-v2 from 1.47.0 to 1.47.1 by @dependabot[bot] in #698
• deps: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.113.2 to 1.113.4 by @dependabot[bot] in #701
• Add native OpenCode harness support by @ncode in #524
• ci: bump actions/download-artifact from 4.3.0 to 8.0.1 by @dependabot[bot] in #696
• Publish release images and add the Kubernetes tutorial by @AlexanderGrooff in #620
• Fix collection member ownership across configuration layers by @ncode in #706
• Escape malformed-resource details in sync --verbose by @ncode in #717
• deps: bump github.com/aws/aws-sdk-go-v2/config from 1.33.5 to 1.33.6 by @dependabot[bot] in #699
• fix: refuse removal of unowned active hooks by @ncode in #716
• Retain native subagent tool-policy regression coverage by @ncode in #718
• Keep foreign skill tool lists from becoming pre-approvals by @ncode in #719
• Keep foreign command tool lists from becoming pre-approvals by @ncode in #720
• Keep bare dollar names in MCP values literal by @ncode in #721
• fix(materialize): detect content drift behind stable cache links by @ncode in #722
• UI: decreased logo; added "green slash" across sites; by @nataliabeliaeva in #711
• Deliver mirrored hook support files with verified revisions by @alikanso-adyen in #470
• Keep Claude controls native and read-only restrictions intact by @ncode in #723
• Complete v4 launch cleanup and multi-scope lock checks by @ncode in #726
• Security R5: bound payload reads and remove repeated processing (batch 1) by @ncode in #725
• Stop encoding the zeroed Extra member in resource payloads by @ncode in #728
• fix(install): allow bulk selection in user and local scopes by @ncode in #729
• Security R5: index Git root freshness matching (R48) by @ncode in #730
• Add a guide for publishing hooks with support files by @AlexanderGrooff in #735
• Refuse resource names that differ only in letter case by @ncode in #732
• Let organization lock relock changed sources by @AlexanderGrooff in #710
• Refuse update when a selection stops resolving upstream by @AlexanderGrooff in #705
• Report edited file-mode copies as local edits by @AlexanderGrooff in #714
• Document day-2 operations for upstream changes by @AlexanderGrooff in #731
• Refuse TUI update when a selection stops resolving by @AlexanderGrooff in #738
• Keep updating other Marketplace pins when one returns 404 by @AlexanderGrooff in #708
• Security R5: reduce v4 lock and exclusion processing (R52/R53) by @ncode in #736
• fix(remove): allow removal of undiscoverable explicit selections by @ncode in #727
• Security R5: reduce Gemini hook-name collision work (R42) by @ncode in #742
• Address review-body findings from #676, #723 and #732 by @ncode in #737
• Security R5: reuse JSON fragment deduplication indexes (R28) by @ncode in #743
• Security R5: compact SDK materialization bookkeeping (R35) by @ncode in #745
• Security R5: deduplicate requested Git source builds (R47) by @ncode in #749
• docs: freeze the R2 report disposition ledger by @ncode in #744
• fix(resolver): stop repository harness lists from narrowing machine output by @ncode in #750
• Security R5: avoid repeated JSONC object member searches (R43) by @ncode in #751
• Document Marketplace delivery in the hook support guide by @AlexanderGrooff in #741

Full Changelog: v4.1.4...v5.0.0

v4.1.4

What's Changed

• deps: bump github.com/prometheus/client_model from 0.6.2 to 0.6.3 by @dependabot[bot] in #609
• Unify layer lock-file decoding in one shared reader by @AlexanderGrooff in #445
• Navigate the TUI resource list and bundle tree with left clicks by @ahmetsa-adyen in #574
• Prevent duplicate repository hooks for independent clients by @AlexanderGrooff in #616
• Fix TUI previews for local disk resources by @AlexanderGrooff in #617
• Add SonarQube Cloud analysis for public CI by @AlexanderGrooff in #618
• Avoid overstating benchmark comparison evidence by @AlexanderGrooff in #625
• List ad-hoc Git registries at their default branch by @AlexanderGrooff in #619
• ci: bump trufflesecurity/trufflehog from 3.97.4 to 3.97.5 by @dependabot[bot] in #606
• deps: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.113.0 to 1.113.2 by @dependabot[bot] in #607
• deps: bump github.com/spf13/pflag from 1.0.9 to 1.0.10 by @dependabot[bot] in #608
• Keep command errors from controlling the terminal by @ncode in #615
• Pin user-visible hook invariants ahead of native hook output by @ncode in #633
• deps: bump modernc.org/sqlite from 1.58.0 to 1.59.0 by @dependabot[bot] in #610
• Follow Git's redirect policy for registry acquisition by @ncode in #628
• Trust Git configuration owned by the git executable's owner by @ncode in #639
• fix(security): confine portable manifest nominations to native component resources by @ncode in #598
• fix(security): retain aggregate merge input generations by @ncode in #601
• Separate public and self-hosted site profiles by @nataliabeliaeva in #542
• Harden all open CodeQL input-boundary findings by @ncode in #646
• Exercise root routing in the spawned shared-origin proxy test by @ncode in #658
• Treat optional missing selections as TUI warnings by @AlexanderGrooff in #656
• Omit rejected entry names from artifact decode errors (CodeQL #291) by @ncode in #660
• deps: bump google.golang.org/grpc from 1.83.1 to 1.83.2 by @dependabot[bot] in #662
• Stop site image builds at the VitePress failure by @ncode in #657

Full Changelog: v4.1.3...v4.1.4

v4.1.3

What's Changed

• Keep older clients from recreating native hooks by @AlexanderGrooff in #435
• Bump Go to 1.26.9 and x/net to v0.60.0 for govulncheck by @ncode in #614
• Add selectable TUI groupings and section bulk toggle by @AlexanderGrooff in #591
• Require validated workspace roots for configuration reads by @AlexanderGrooff in #446

Full Changelog: v4.1.2...v4.1.3

v4.1.2

What's Changed

• Fix reported installations for hosted Marketplace resources by @AlexanderGrooff in #576
• Complete regression gates and current-release interoperability by @ncode in #583
• Remove functions that neither binaries nor tests reach by @ncode in #581
• Support validated Git authentication include chains by @ncode in #590
• fix(security): preserve SDK quarantine reservation generations by @ncode in #558
• fix(security): retain SDK empty-parent directory authority by @ncode in #559
• fix(security): revalidate SDK quarantine payload before final removal by @ncode in #561
• fix(security): bind SDK quarantine restoration to observed generations by @ncode in #562
• fix(security): report actual SDK stale deletion receipts by @ncode in #564
• fix(security): retain completed backup restore staged generations by @ncode in #565
• fix(security): retain original restore output action generations by @ncode in #568
• fix(security): retain symbolic restore leaf generations before removal by @ncode in #569
• fix(security): retain symbolic restore named-parent generations by @ncode in #570
• fix(security): retain selected backup directory generations by @ncode in #571
• fix(security): retain admitted child directories during backup descent by @ncode in #572
• fix(security): retain backup listing target-directory generations by @ncode in #573
• fix(security): retain ordinary restore selected archive authority by @ncode in #577
• fix(security): retain backup retention target-directory generations by @ncode in #578
• fix(security): capture ordinary backup namespace preparation by @ncode in #582
• fix(security): capture Codex backup namespace creation by @ncode in #584
• fix(security): retain Codex restore namespace authority by @ncode in #585
• fix(security): retain produced ownership metadata stages by @ncode in #586
• fix(security): recheck state before prepared recovery cleanup by @ncode in #587
• fix(security): retain named journal cleanup parent authority by @ncode in #588
• fix(security): preserve replacement empty safety directories by @ncode in #589
• Restore category folding during fuzzy search by @AlexanderGrooff in #592
• Stop fixture bare remotes from starting detached auto maintenance by @ncode in #594
• Install multiple named resources in one command by @AlexanderGrooff in #595
• Assert the complete SDK stale-candidate plan in the receipt test by @ncode in #596
• Remove test-only code that no binary reaches by @ncode in #597
• Document accepted SDK quarantine deletion boundary by @ncode in #600
• Make TUI errors-screen text selectable and copyable by @AlexanderGrooff in #603
• deps: bump github.com/aws/aws-sdk-go-v2/config from 1.33.2 to 1.33.5 by @dependabot[bot] in #611
• Refresh installation counts without blocking search by @AlexanderGrooff in #612

Full Changelog: v4.1.1...v4.1.2

v4.1.1

What's Changed

• Prove exact git cancellation without a wall-clock bound by @ncode in #555
• Fix installation counts suppressed by historical inventory by @AlexanderGrooff in #567

Full Changelog: v4.1.0...v4.1.1

v4.1.0

What's Changed

• Modernize the TUI with staged status views by @AlexanderGrooff in #456
• Show browser-friendly OIDC sign-in errors by @AlexanderGrooff in #496
• Bump Node dependencies for Dependabot alerts older than 21 days by @ncode in #538
• Make blocked-acquisition stage tests independent of scheduling by @ncode in #547
• Bind portable manifest publication and removal to admitted authority by @ncode in #475
• Fence portable source hashes through captured support readers by @ncode in #477
• Fence catalog primary payloads and preserve native output on source refusal by @ncode in #479
• Bind source revision hashes to captured payload read authority by @ncode in #480
• Fence native collection definitions to captured source read authority by @ncode in #481
• Fence direct conversion source reads before native publication by @ncode in #482
• Fence legacy source metadata scans without reading whole bodies by @ncode in #483
• Fence filesystem source previews before reading payload bytes by @ncode in #484
• Fence regular portable ownership digest reads to opened authority by @ncode in #485
• Keep portable tree ownership hashes on captured directory authority by @ncode in #486
• Keep regular portable native publication on captured parent authority by @ncode in #487
• Stage portable native trees before revalidated directory publication by @ncode in #488
• Revalidate portable prune generations before captured removal by @ncode in #489
• Keep native managed-link pruning on captured removal authority by @ncode in #490
• Deny native marker ownership from unsafe opened files by @ncode in #491
• Bind native command publication to its admitted generation by @ncode in #492
• Retain native marker-file generations through prune by @ncode in #493
• Capture prune directories before importing output members by @ncode in #494
• Keep marker-based native aggregates on captured publication authority by @ncode in #495
• Keep durable aggregate reads beneath their recorded canonical root by @ncode in #497
• Retain durable aggregate authority from staging through publication by @ncode in #498
• Require captured regular Codex manifests before importing backup claims by @ncode in #500
• Admit restore archives through captured streaming payload authority by @ncode in #501
• Keep regular and mapped restore files on captured publication authority by @ncode in #502
• Keep restore directory and symbolic namespace under captured root authority by @ncode in #503
• Keep backup source payload copies on classified captured authority by @ncode in #504
• Keep backup selection and symbolic metadata below captured source authority by @ncode in #505
• Retain archive output and refusal cleanup beneath captured parent authority by @ncode in #506
• Keep Codex backup-set members under captured publication authority by @ncode in #508
• Keep ordinary retention below admitted archive generations by @ncode in #509
• Bind Codex retention to observed manifest and member generations by @ncode in #511
• Fence ownership state and journal reads before granting authority by @ncode in #512
• Keep ownership metadata publication under captured record authority by @ncode in #513
• Keep journal cleanup bound to its observed generation by @ncode in #514
• Keep ownership contention witnesses compatible with safe metadata reads by @ncode in #515
• Constrain recovery staged cleanup to recorded aggregate payload authority by @ncode in #516
• Fence retained safety manifest evidence before orphan nomination by @ncode in #517
• Retain admitted safety payload generations across raw reads by @ncode in #518
• Bind private safety publication to its captured namespace and producer by @ncode in #519
• Keep safety retention bound to selected member generations by @ncode in #520
• Preserve replacement safety generations during CAS cleanup by @ncode in #521
• Bind Apply to its originally opened ownership record generation by @ncode in #522
• Refuse unsafe ownership lock leaves before diagnostic truncation by @ncode in #523
• Keep ownership lock mutation inside its selected captured namespace by @ncode in #525
• Propagate ownership state read refusal before recovery cleanup by @ncode in #526
• Refuse unsafe regular leaves before symbolic archive restoration by @ncode in #527
• Bind orphan deletion to its original admitted evidence generation by @ncode in #528
• Keep restarted recovery bound to its original metadata authority by @ncode in #529
• Retain selected Codex backup generations through native restore by @ncode in #530
• Keep journal phase publication bound to the original prepared generation by @ncode in #531
• Keep skill support pruning inside the admitted cache namespace by @ncode in #533
• Keep support snapshots bound to captured publication generations by @ncode in #534
• Preserve replacement producer directories during support cleanup by @ncode in #536
• Bind support directories and writes to one admitted output root by @ncode in #537
• Keep cache namespace creation under its admitted parent by @ncode in #540
• Keep SDK artifact comparisons on admitted regular file generations by @ncode in #541
• Preserve admitted SDK root and staging directories before publication by @ncode in #543
• Keep SDK stage creation and writes below captured directories by @ncode in #544
• Retain original SDK destination generations until file publication by @ncode in #546
• Keep SDK staged payload publication and cleanup on writer generations by @ncode in #548
• Reject unsafe SDK stale payloads before hashing or deletion by @ncode in #549
• Tell lock owners to refresh locks after an archive-digest repair by @ncode in #532
• Remove the speed requirement from registry lease exclusion tests by @ncode in #553
• Harden local gates: command-test timeout hint and typed-nil lint by @AlexanderGrooff in #556
• Clarify organization-managed Marketplace update output by @ncode in #287
• Keep SDK stale discovery on admitted directory generations by @ncode in #551
• Make ignored sub-bundle warnings actionable by @AlexanderGrooff in #141
• Rank Marketplace resources by reported installations by @AlexanderGrooff in #563
• Reduce catalog request work while preserving authoritative reads by @AlexanderGrooff in #476

Full Changelog: v4.0.12...v4.1.0

v4.0.12

What's Changed

• Unify workspace, config intent, inspection, and cache GC by @AlexanderGrooff in #275
• Keep collection members stable across scopes and required-source collisions by @ncode in #426
• Cover nested status drift parity with regression and spec by @AlexanderGrooff in #437
• Agent marketplace web: sticky header + a bit cleaner details page by @nataliabeliaeva in #427
• Enable mouse wheel scrolling in TUI by @ahmetsa-adyen in #342
• Fix scrolling filters + sticky search bar by @nataliabeliaeva in #447
• Include Marketplace selections in status and doctor by @alikanso-adyen in #450
• Keep required organization selection independent of collection lookup by @ncode in #438
• Preserve both scopes in shared Gemini native settings by @ncode in #439
• Refuse stale legacy assessment changes before publication by @ncode in #440
• Bind filesystem staging and publication to captured descriptors by @ncode in #452
• Bind scoped config and lock publication to layer descriptors by @ncode in #453
• deps: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.111.0 to 1.113.0 by @dependabot[bot] in #460
• deps: bump modernc.org/sqlite from 1.57.0 to 1.58.0 by @dependabot[bot] in #457
• deps: bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.45.0 to 1.46.0 by @dependabot[bot] in #462
• deps: bump github.com/jackc/pgx/v5 from 5.10.0 to 5.11.0 by @dependabot[bot] in #458
• deps: bump golang.org/x/sys from 0.47.0 to 0.48.0 by @dependabot[bot] in #461
• Keep doctor --repair bound to exact locks and verified policy inputs by @ncode in #293
• Fence harness-root admission before materialization by @ncode in #463
• Bind cache-backed link publication to admitted directory handles by @ncode in #464
• Fence marker-merge alias payload reads to admitted scope by @ncode in #466
• Fence skill support payload reads before installed cache mutation by @ncode in #471
• Fence hook support reads and retain native output on source refusal by @ncode in #473
• Keep prerequisite remediation arguments literal in POSIX shells by @ncode in #467
• Keep Unicode YAML separators from creating native workflow authority by @ncode in #468
• Reuse scan-local source positions for dense ordered findings by @ncode in #469
• Fence portable manifest reads before importing ownership claims by @ncode in #474
• Flag user-facing contract breaks in CodeRabbit reviews by @AlexanderGrooff in #472
• Repair same-content archive drift and retain publication history by @AlexanderGrooff in #507

Full Changelog: v4.0.11...v4.0.12