Decepticon 1.6.0

Decepticon 1.6.0 adds compatible session controls and diagnostics, and repairs OSS engagement startup and recovery.

• Accept valid launcher-generated machine scope consistently across CLI, web and server; continue rejecting unusable scopes.
• Persist per-thread model, fallback, reasoning effort and compaction controls. Improve scoped checkpoint diagnostics, SSE recovery, transcript navigation and localized commands.
• Restore desktop/native adapters and isolate planning tools. Align web/server workspace roots, prevent stale terminal socket handoffs, and preserve private Plan/Red drafts and history across container recreation.
• Tolerate slow Compose discovery, repair real PTY startup, use the official Kali download CDN and restore subscription reasoning-effort routing.
• Back off optional Blue monitor failures. Update vulnerable Python, npm and telemetry dependencies, and audit optional/development lock entries.

Upgrading from 1.5.4 preserves existing conversation volumes and supported scope/session contracts. No credential reset, workspace migration or volume deletion is required. Source versions remain build-time sentinels. Install the matching launcher, configuration and versioned images with decepticon update --channel latest after publication. Stable promotion retains the seven-day minimum.

Measured source checks: strict integration quality/coverage, Python 6,032 passed / 48 expected external/platform skips after the security update, CLI 272 passed, web 75 passed, Compose/state 13 passed, launcher suites/vet, production builds and clean registry dependency audits. Actual isolated WSL and desktop browser checks covered model fallback, OPPLAN reads, missing-scope rejection, and a same-volume upgrade preserving 28 messages. Provider-policy refusal was surfaced honestly; no full assessment or bypass is claimed.

Distribution acceptance verified six launcher binaries and integrity manifests, all three PyPI packages and all eight versioned image platforms/digests/SBOMs. The actual 1.6.0 WSL launcher started healthy services; its CLI restored the scoped checkpoint and obtained/persisted/rendered a real subscription fallback AI reply with requested low effort and a 4096-token compaction threshold. Existing 4 threads / 28 messages, controls, workflow pins, workspace binding and both workspace fixtures were preserved. Windows desktop web displayed 1.6.0 and restored both Plan and Red drafts after the versioned-image upgrade. Fresh image containers also preserved role-separated private draft/history state. All eight image signatures are independently verified. The sandbox SBOM exceeds the transparency service entry-size cap; its attestation is stored in OCI and its full CycloneDX SBOM is attached to the release. Native Windows/macOS Desktop end-to-end acceptance and unconfigured optional Blue/MCP deployments are not claimed.

Included work and detailed verification: #1079
Version history: https://github.com/BitterSecurity/Decepticon/blob/main/CHAGELOG.md

Known lifecycle limitation inherited from prior releases: decepticon stop removes core/workload services but can leave the optional web-profile container running. Stop that service explicitly with Docker Compose using the same installation/project when shutting down the dashboard. Named data volumes are retained.