v1.0.0

1.0.0 (2026-08-28)

Features

• a2a: PLAN-29 Phase 1.2 forage verbs: claim, deliver, verdict (f851345)
• a2a: production-ready Google A2A � on by default, signed x402, ERC-8004 (03a60ee)
• agent: a2a_status tool + system prompt nudge for A2A introspection (c2501f3)
• agent: live network self-awareness in the system prompt (c18c345)
• agent: network_status tool for on-demand P2P probe (layer 2) (8e712c9)
• agent: nudge agents toward network_status for fresh P2P data (5cd02cc)
• agents: skill_manage agent tool (PLAN-15 fu) (4667820)
• agents: streaming context scrubber for memory-fence sanitisation (PLAN-15 3) (4b43ddc)
• arc-agi-3: PLAN-19 Phase 1+2 � REST client, types, state, actions, helpers (8629e1f)
• arc-agi-3: PLAN-19 Phase 3 � Bitterbot Memory MCP server (5f5a639)
• arc-agi-3: PLAN-19 Phase 4+5 - CLAUDE.md, agent driver, ablation runner (02a5b64)
• arc-agi-3: PLAN-19b Phase 1c � BGEEmbedder + hybrid retrieval (4b48ac0)
• arc-agi-3: PLAN-19b Phase 1d � hormonal + curiosity + epistemic + rules (04d871f)
• arc-agi-3: PLAN-19b Phase 3a+3b � BitterbotAgent + frame/parser/prompts (852ecd8)
• arc-agi-3: PLAN-19b Phase 4 � Kaggle adapter, vLLM client, entry script (7029432)
• bench: --stratify for the contrastive runner (type-balanced sampling) (39db373)
• bench: HORMA contrastive H-vs-H' proof harness (PLAN-24 Phase 2) (4a26fcb)
• chat: no-key first message points at onboarding; chat bubble deep-links Models & Keys (no-key-error) (3477a61)
• circles: �5.2 persist the A2A rate buckets � survive-restart limits (90994c0)
• circles: �5.3 completed � the human approval card is the ONLY agent-write path (5d16440)
• circles: �5.5 member eviction � wire the dead moderation primitive (bf1fb09)
• circles: �5.6 petname layer � private per-person names + impersonation cues (1ba552b)
• circles: agent can read circle conversation + petname-aware names (3aaee0c)
• circles: agent posture in the members roster (mockup pin 3) (92fff9e)
• circles: agent presence & consent visibility � app-wide attention, honest posture, louder approvals (d638276)
• circles: agent provenance in the chat stream (mockup pin 2) (8feb4fe)
• circles: agent-facing circles tool + system-prompt fragment (a2b666a)
• circles: archive + delete circles from a hover menu on the rail (b1f5d76)
• circles: B2 � agent-drafted card slices (ask my agent to fill my slot) (37df34f)
• circles: circle identity & lifecycle � named creation, invite reuse, join trust parity, real archive (9f704bc)
• circles: Decision Card synthesis band (6e15e3d)
• circles: default fleet mailbox + deployable standalone host (PLAN-36 Phase 1) (5198d7b)
• circles: enable circles by default fleet-wide (red-team phase) (1e8203f)
• circles: enforce the 15-member roster cap in code (141b9f4)
• circles: fast-cadence scheduler for mailbox drain + presence (PLAN-36 P0) (33683c9)
• circles: finish the adoption plan � shared-tab surface, arrival animation, badge/banner dedup (8254135)
• circles: frictionless invite � shareable link + QR + guest-JOIN page (8449026)
• circles: hide the security wrap from humans (display-side unwrap + shield) (d98cb2f)
• circles: integrate the gossip-topic transport into the service (PLAN-36 P4) (558d223)
• circles: intuitive agent summoning - teach the verb, loud when asked, private Ask my agent (f0b9dd2)
• circles: invite a friend into an existing circle (grow a group) (1d3f1b1)
• circles: mailbox-mediated join � connect without a reachable inviter (7098269)
• circles: make the members/canvas pane wider and resizable (aa2b36c)
• circles: meshTopic kill switch, default OFF until gossip frames are encrypted (ea73901)
• circles: message deletion + always-visible canvas with mermaid diagram cards (b077399)
• circles: name your own agent � in-app self-name that propagates to friends (52a7696)
• circles: per-line redact on the agent-draft consent cards (1462a58)
• circles: per-message delivery status so failed sends stop looking sent (B5) (db4384f)
• circles: Phase 4b study lens - per-member agent on shared artifacts (9617194)
• circles: Phase A1 � Discord-style chat shell replaces the stats dashboard (9b9bf5a)
• circles: Phase A2 � unread badges (read-state + markRead) (cc0f6c0)
• circles: Phase A3 � reply-to (quoted replies across nodes) (9923548)
• circles: Phase B � the agent in the room (summon-only, quarantined, consent-gated) (c8665a9)
• circles: Phase C1 � group canvas foundation (typed cards on the event log) (5bd1cc4)
• circles: Phase C2 � the Decision Card (per-member vote slices) (cebd6de)
• circles: Phase C3 � the study-guide Co-Canvas (per-member section slices) (cfe2d93)
• circles: Phase D unfreeze � fork evidence + in-app recovery (ff111b4)
• circles: PLAN-31 C1 core � the friend branch is live (dark behind circles.enabled) (4001d01)
• circles: PLAN-31 C1 foundation � circles membership store (migration v29) (6d17ae1)
• circles: PLAN-31 C1 relay mailbox � store-and-forward with sealed boxes (a623e41)
• circles: PLAN-31 C2 disclosure allowlist + graph answers (background, not hook) (59a9eec)
• circles: PLAN-31 C2 People pane � the connection graph made visible (f2b9aae)
• circles: PLAN-31 C2 shared tab � the ledger is social, settlement is money (c6f3c98)
• circles: PLAN-31 C3 weekly briefing + practice partner (d15247c)
• circles: PLAN-36 draft + Phase 0 fan-out hardening & crud cleanup (e84ec18)
• circles: polish pass � honest errors, in-app confirms, dark-mode fixes, clickable pins, motion (b6974e8)
• circles: prototype circle messaging over a per-circle gossip topic (PLAN-36 P4) (3eff930)
• circles: push inbound to the UI + refresh presence on receipt (PLAN-36 P0) (34d868f)
• circles: quiet tray - consent cards collapse behind one calm line (376239d)
• circles: reactions + pins on the event log (the Phase-A deferral) (903db9e)
• circles: readable timeline � grouping, day/new dividers, anchored scroll, markdown, history paging (a324d9d)
• circles: rename circles + invite existing connections, with target-bound codes (a2fac31)
• circles: server-enforce the agent write two-phase with a single-use token (B1) (163cf21)
• circles: Stage 2 - sender-key encryption for gossip-topic frames (2636314)
• circles: verify invite signatures in-browser on the guest-JOIN page (a87c5e5)
• cli: p0-28 polish � -v scoping, fixed tagline, hidden dev commands, quiet doctor posture, bare config prints help (f307f35)
• commerce: Aubaine agent group-buy coordination layer (PLAN-26) (9f47dd8)
• commerce: Aubaine Phase 3 settlement orchestration (non-custodial) (8730869)
• commerce: Aubaine Stage-1 pilot harness (runnable group-buy demo) (47fc2a5)
• commerce: PLAN-29 Phase 4 bounty pools, built complete, shipped dark behind the legal gate (757758b)
• configure: real wallet + memory sections; invalid --section errors instead of silently opening the wizard (p0-12) (ac75894)
• config: V1 default flips per PLAN-41 D-D � experimental surfaces opt-in (e06e993)
• control-ui: copy pass � user language in Agents, honest chat empty state, describeError at the top error sites (aeab9dc)
• control-ui: FirstRun tells the served-UI story; Overview gains a get-started checklist (p0-19 residual) (2dde1a9)
• control-ui: kill the native dialogs � in-app confirms + toasts, lint-enforced (p0-16) (21c5dbf)
• control-ui: nav manifest as single source of TabId; ship/advanced split; delete 4 dead views (p0-13, D-H) (3772bd3)
• control-ui: polish six-pack remnants (p0-17) (2ff7c3b)
• control-ui: real Settings form � schema-driven, searchable, restart-aware (p0-15 + adjudicated D-D) (6ace9d9)
• control-ui: stage the built Control UI for gateway serving (PLAN-39 Phase 1) (518b2c0)
• control-ui: Start gateway button that works when only the UI is running (c5e1f97)
• control-ui: stop baking the gateway token into the bundle (PLAN-39 Phase 3) (4dc8b05)
• desktop: register the bitterbot:// deep link and route joins to the verified invite flow (3473291)
• doctor,update: post-update boot-health beacon � a failed boot goes loud, not silent (5685923)
• doctor: agent-turn probe - one real turn through the gateway pipeline (066927f)
• doctor: artifact-liveness section (wired-but-dead invariants) (a6cc298)
• doctor: deep checks for post-Q1 subsystems (embeddings, graph, ledger, circles) (c32da8a)
• doctor: one real model round-trip � 'configured' now means 'works' (5e24c49)
• doctor: real exit code on error-level findings (makes the update gate real) (a1d6691)
• doctor: Repairs card � doctor findings over RPC, on Overview, badged in the sidebar (sota-bar rec 1) (614f42c)
• doctor: retrieval, economy, and task-spine coverage + contract migration (086cacf)
• doctor: warn when the checkout sits on a Windows drive mount (WSL) (d37424a)
• dream: PLAN-40 Phase 0 - utility funnel, honest measurement, stop-the-bleeding (6d80b77)
• dream: PLAN-40 Phases 1-3 - hygiene, verified-success distillation, anticipatory briefs (e965cd5)
• dreams: de-lab the dashboard, gate money tabs on their backends, explain iframe refusals (p0-14) (4740ad7)
• economy: close the skills-economy loop (audit recs 1-8 + dead code cleanup) (a5db7bf)
• economy: PLAN-29 �4.1 operator posting path + anonymous forage verbs (d9c4367)
• economy: PLAN-29 forage agent tool + system-prompt DNA (907498b)
• economy: PLAN-29 Forage Phase 0 rails: earning on by default, capability gate live, bounty schema (2a4f4be)
• economy: PLAN-29 Phase 1.1 bounty funding validator: unverified -> open on proven funding (9f8e11e)
• economy: PLAN-29 Phase 1.3 oracle harness: sealed specs, mechanical oracles, capped Judge, payout on pass (a216479)
• economy: PLAN-29 Phase 1.4 trust tiers + DPSV: the full bounty loop is live (2132792)
• economy: PLAN-29 Phase 2.1 heartbeat streams: recurring checks, batched payouts (43a1435)
• economy: PLAN-29 Phase 5 Night Shift v1: nodes autonomously hunt and earn (7e38206)
• economy: PLAN-30 G0.1/G0.2 stream audits, CV-gated release, forfeiture (b916567)
• economy: PLAN-30 G0.3 claim nonces, sealed check-ins, v2 observations (623c1f7)
• economy: PLAN-30 G0.4 genesis split ledger, aggregate solvency, treasury caps (8a6e2da)
• economy: PLAN-30 G0.5 gap closures on the Forage rail (b943c9d)
• gateway: one-process boot � cut over to the gateway-served UI (PLAN-39 Phase 4) (17c6031)
• gateway: PLAN-28 B4 � surface retrieval health via RPC + dashboard tab (7c23602)
• gateway: PLAN-29 Phase 3a spectator layer: The Tape, forage stats RPCs, morning report line (e429e47)
• gateway: same-origin token handoff for the Control UI (PLAN-39 Phase 3) (939c2d3)
• gateway: serve the built Control UI over HTTP (PLAN-39 Phase 2) (5c60673)
• gateway: skills.manage/promote/rollback + tombstone & consolidate promotion (PLAN-15 2c) (d82f982)
• harness: PLAN-25 self-evolving harness loop, on by default (6b530a3)
• harness: PLAN-25 self-optimizing harness keystone (HarnessPolicy + compaction) (f6f71f2)
• memory: activate provenance end-to-end (PLAN-24 Phase 0 wiring) (fd53f81)
• memory: add skill_lifecycle table + SkillLifecycleStore (PLAN-15 1a) (c317ee1)
• memory: coverage discriminator / blame router (PLAN-24 Phase 1) (e528c74)
• memory: daily health sweep - make the checks we already wrote actually fire (b18f030)
• memory: fence-wrap proactive-recall + wire streaming scrubber (PLAN-15 fu) (aeb2033)
• memory: graph abstraction nodes + coarse-to-fine traversal (PLAN-24 Phase 5) (97ddd04)
• memory: graph-anchored proactive recall for entity/identity queries (PLAN-27) (93b30b5)
• memory: heuristic skill-curator pass + dry-run reporter (PLAN-15 1b) (c289b90)
• memory: HORMA provenance pointers (PLAN-24 Phase 0) (ddb011b)
• memory: hormonally indexed construction-rule activation (PLAN-24 Phase 4) (f8bb3ba)
• memory: keyless memory � the auto chain reaches a bundled local model LAST (p0-6, D-F) (ee48bf7)
• memory: LLM-judge borderline pass + full curator entry point (PLAN-15 1c) (01f7d08)
• memory: PLAN-18 activate Phase 1 LLM, Phase 3 gating, Phase 5 hormonal by default (47a8bdf)
• memory: PLAN-18 close the loop � graph_bridge consumer + retrieval benchmark (c6093d3)
• memory: PLAN-18 SAGE-style self-evolving graph memory (7a8f33f)
• memory: PLAN-21 bio-conditioned validation gate + longitudinal slow update (c50a8ba)
• memory: PLAN-23 SABM - self-adjudicating bitemporal belief memory (#52) (894458d)
• memory: PLAN-28 � graph relationship population + retrieval observability (73e3684)
• memory: PLAN-33 Phase 1 � canonical facts ledger with unconditional injection (10b53be)
• memory: PLAN-33 Phase 4 - ledger-first exact-key hits in memory_search (4b138c6)
• memory: PLAN-33 Phases 2+3 � automatic canonical pinning + dream promotion (cf2efe7)
• memory: PLAN-34 �6.2 - two-step historical dream-insight backfill (0f4dcf0)
• memory: PLAN-34 Phase 0 containment: default flips, sweeps, v34 schema slots (3218ffa)
• memory: PLAN-34 Phase 1 - close the epistemic-directive loop (72df23a)
• memory: PLAN-34 Phase 2a - curiosity research: type acceptance + honest outcomes (e2b37b1)
• memory: PLAN-34 Phase 2b - research findings become memory (96b400e)
• memory: PLAN-34 Phase 2c - egress safety + provider generalization (c574270)
• memory: PLAN-34 Phase 4 - dreams become rememberable (373380f)
• memory: PLAN-34 Phase 4 �6.3 - [dream prediction] prospective routing (4c7cba2)
• memory: PLAN-34 Phase 6 - closed-loop cognition observability (bdfbe93)
• memory: PLAN-34 Phase 6 �8 - 30-day time-window dead-lane checks (1427543)
• memory: PLAN-34 Phase 6 dashboard detail panes (research findings, egress log, canonical ledger) (9e7f2b6)
• memory: self-evolving memory-architect loop (PLAN-24 Phase 3) (c09212c)
• models: curated featured tier overlay in the picker + onboard wizard (314680c)
• models: default to Claude Opus 4.8; add it to the onboarding wizard (eae5435)
• models: live model discovery so the picker reflects what providers actually serve (a6cea78)
• onboarding: wizard auto-starts the stack; add pnpm start:all (d8f82a0)
• orchestrator: dynamic per-circle gossip pub/sub primitive (PLAN-36 P4) (e0c9825)
• p2p: make the DigitalOcean fleet the DNS-independent bootstrap backstop (10520a3)
• p2p: PLAN-29 Phase 0.4 BountyEnvelope v2: any-node funded bounties, gated on funding not identity (c7993ec)
• p2p: stable identity home at ~/.bitterbot/keys with legacy migration (p0-7) (58060d0)
• p2p: Stage 1 of the circles transport plan - fail-fast IPC + capability latch + v0.2.0 (1399cf9)
• p2p: Stage 3 - relay circle-topic carriage + fleet release updater (v0.2.1) (c905567)
• p2p: Stage 4 - point-to-point circle RPC + PeerId binding (v0.2.2) (0b90de1)
• plan-14: long-horizon work-rest-dream runtime + memory OTel (25852e0)
• plan-14: orchestrator-extension path for computer_use (Pillar 4) (770f44e)
• PLAN-22 Affective Goal Drive - complexity-gated auto-initiated goal workflows (Phases 0-4) (#47) (b4b5b66)
• plan-38: 3.2.10 � aesthetics: the quiet interface (3c0302a)
• plan-38: 3.2.8 � chat is the venue, cards are the record (bfdde99)
• plan-38: 3.2.9 � cards can die: delete, clear, undo, honest ties (b18b705)
• plan-38: M3 meter fed + R17 isolation guard � the debts inside done (4cb5503)
• plan-38: P1(a) sandbox event types, deterministic fold, enrollment ledger (d90a936)
• plan-38: P1(b) the first on-screen negotiation session (addecb3)
• plan-38: P1(c) containment � every stall is named, none are silent (ab26976)
• plan-38: sandbox generation on by default (R19 amended) (8af2abc)
• plan-38: the five fixes between machinery and value (c5ea2a8)
• providers: add NEAR AI Cloud provider (#33) (e81f427)
• release: GHCR multi-arch publish, provenance attestations, minisign verify in the orchestrator fetcher (6e23d34)
• release: npm pack containment � docs allowlist, clean builds, release-check gate in CI (npm-pack-leak) (c1c99a4)
• release: version cut to SemVer � release-please, CalVer guards, single version source (D-A) (b340b9a)
• rlm: adopt prime-agent RLM patterns across recall, working memory, tasks, and harness evolution (0afba48)
• skills: add notte skill � deployable browser Functions + vault auth (5e1a333)
• skills: add notte skill (Notte Functions + vault auth) (531b850)
• skills: close Phase 5 follow-ups (trust controls, agent allowlist, telemetry, Editor v2) (a5120be)
• skills: PLAN-20 executable pre-action interceptors (6463e9f)
• skills: PLAN-20 follow-up � LLM harvest synthesis, persistent strikes, A2A discovery, promote CTA, structured block UX (8322e07)
• skills: semantic dedup gate � dream engine stops minting near-duplicates (58d1bc5)
• skills: skill_manage orchestrator + behavioural gate (PLAN-15 2b) (7d90c66)
• skills: staging directory + version archive infrastructure (PLAN-15 2a) (ff8b694)
• tasks: nudge escalation + resume-inline race-guard (1b3be29)
• tasks: PLAN-16 long-horizon task execution (4dd0a8c)
• tasks: PLAN-17 follow-ups � live hormonal gate + engine integration tests (1d2183b)
• tasks: PLAN-17 long-horizon task activation (68228a6)
• tasks: PLAN-22 enable auto-initiation by default (#49) (7fb96c1)
• theme: light-theme token pass � palette literals onto semantic status tokens (D-G) (a1822ed)
• ui-usability: channel capability layer + live enable/disable toggle (f444937)
• ui-usability: chat-header ModelPicker - live per-session model switching (ec5695e)
• ui-usability: config.patch restarts only when the changed paths require it (32b144c)
• ui-usability: guided channel setup + QR pairing for WhatsApp and Signal (5d7a22f)
• ui-usability: Models & Keys panel + models.setDefault RPC (03dc726)
• ui-usability: models.auth.* RPC family + shared auth-probe module (dd57ae8)
• ui-usability: register bundled channel extensions at boot (bb13391)
• ui: gateway restart + shut-down controls in Overview; auto-reload after update (bff342b)
• ui: PLAN-29 Phase 3b Forage dashboard tab: DPSV tiles + The Tape (524fe53)
• ui: rename the People pane to Circles (274ac56)
• update: automatic post-boot rollback via detached watchdog (446644c)
• update: one-click node updates from the Control UI + fleet drift prompts (1d0d48a)
• update: restart the Control UI when the code under it changes (82d3d95)
• update: show what an update brings before install; rollback events reach the Repairs card (sota-bar rec 2) (92444e1)
• wizard: network consent in every flow + Local-only preset; delete the desktop/.env token writer (cfd80ac)
• wizard: QuickStart down to 5 prompts � defer channels/skills/wallet/web-search to the Control UI (D-M) (1e1be3f)

Bug Fixes

• a2a: close the tokenless LAN agent-execution hole (p0-9) (63122c0)
• a2a: rate-limit inbound task spawns (message/send, message/stream) (633b964)
• a2a: scan and wrap inbound agent messages as untrusted (PLAN-31 Phase 0) (101d2b5)
• access-control: normalize inbound candidates before allowlist comparison (#37) (b047e97)
• agents: close the Lane 3 owner gate and the interceptor session-key chain (27988d1)
• agents: stop after_tool_call double-fire (audit F2) (8c5e4ff)
• arc-agi-3: smoke-test fixes from PLAN-19 Phase 6a (5e0d211)
• build: self-heal dist/entry.js in the run/watch launch paths (e0ea0a1)
• ci: compile-gate cargo PRs; stop Dependabot filing unbuildable /desktop bumps (b2c4340)
• circles: �5.2 review � refused requests do zero DB writes, amortize the GC (b154b33)
• circles: �5.3 review pass � named splits, queue cap, retryable approvals (7f31e86)
• circles: �5.5 review pass � un-gate node-local removal, drop the useless epoch bump (4bb20ac)
• circles: �5.6 review � collision cue keys on the spoofable name, not the resolved one (9ae3b03)
• circles: agent-tool DB decoupling, queue-only prompt contract, removal notices (a7fee08)
• circles: annotations review pass � attribution spoofing, clamps, durable pins (b274e7c)
• circles: archived circles refuse inbound; harden delete cascade + re-join (885b930)
• circles: B2 review pass � circle-scoped dedupe, slot charset, tombstone check (c101281)
• circles: B3 mesh rate limiting + B4 relay hardening (security pass, orchestrator 0.2.3) (017761f)
• circles: C3 adversarial pass � real slots in tests, NFC slots, per-slot drafts (8a9705b)
• circles: calm the invite button to match New Conversation (4378b97)
• circles: close the mailbox quota-wedging DoS and persist the post-rate window (66ef171)
• circles: confirmed correctness + crypto bugs from the Stage 2-4 security pass (c150141)
• circles: decouple circle delivery + serve from the marketplace feature (517a058)
• circles: finish-pass review fixes � ledger events broadcast, honest tab errors, arrival-animation correctness (a4af8a9)
• circles: fold the mockup-batch adversarial review findings (8ff4b3a)
• circles: let guest-page deploy.sh use an explicit SSH key (91ab558)
• circles: order the chat thread chronologically (newest at the bottom) (f028b46)
• circles: Phase A review fixes � keyset paging, merge reconciliation, anchor races, frontier freeze (fcccd3f)
• circles: Phase B review fixes � menu anchoring, invite-reuse guard, archive dead-ends, emoji edge cases (8ace1ef)
• circles: Phase B security pass � atomic consent, decoupled generation, bounded state (c1a6868)
• circles: Phase C review fixes � no stealth restarts, honest persistence, read-state races, revocable consent (968c9eb)
• circles: presence rename ignores blank names (no COALESCE-away of a real name) (886270c)
• circles: render briefing names petname-first and strip forged markers (ae657c1)
• circles: scan nested strings in inbound event bodies (6989cf8)
• circles: serve a2a circle/mailbox verbs from the resolved default agent (c05323e)
• circles: SSRF-guard every peer-supplied dial target at the circleRpc boundary (0812da7)
• circles: unfreeze review pass � forgiven-fork audit trail stops re-freeze loops (7ace2a8)
• config,build: accept p2p.relayMode in Zod + ship jiti babel.cjs (59e49ec)
• config,docs: PLAN-29 pre-Phase-2 housekeeping: schema kill switch + forage protocol docs (f3d2485)
• config: declare the circles transport kill switches in the schema (024c7fa)
• control-ui: self-host the Geist fonts; the CDN URLs had 404'd from day one (46c9539)
• control-ui: Start-gateway button is dev-only; production shows terminal guidance (ui-start-dead) (bc8fd72)
• control-ui: type-scale tokens in SettingsForm (px-literal check) (6932b9f)
• desktop: poll-watch under WSL /mnt/* so Vite HMR actually fires (0ace7e9)
• docker: make the image build, ship the served UI, and prove it in CI (c20f21c)
• doctor: correct stale schema-version check + clear residual crud (3965cb7)
• doctor: severity is the gate, plus real classifier, real paths, real index coverage (5365a26)
• dream: clamp stranded relationship-mining cursor + utility evaluation report (d77d120)
• dream: widen recallForUserTurn return type for the funnel field (defdbb9)
• gateway: base the restart hint on the measured boot duration (455eb69)
• gateway: kill skills.network stampede + add event-loop delay monitor (16f9446)
• gateway: put the PLAN-36 circles RPCs in the read/write scope sets (b84e4ef)
• gateway: stop baking the gateway token into /management, /dreams and /m HTML (0b4937a)
• gateway: stop event-loop starvation that bounced the Control UI (1006) (99adbe7)
• gateway: stop leaking full tool output to WS clients below verbose=full (866c689)
• gateway: stop skills.networkHistory from bouncing the UI (TTL < poll) (933d9ec)
• hooks: pre-commit bash 3.2 compatibility for macOS (2c7c7cb)
• infra: don't crash the gateway on a third-party telemetry HTTP error (81ef7d9)
• lint: regex-free control-character sanitizer for inviter_name (6115b28)
• lint: type the forage.post response in the seed-tranche script (8b970f5)
• llm: sweep the remaining temperature-on-Opus-4.8 breakage (a00f84f)
• memory: batch dream replay seed writes into one transaction (recall flake) (783d450)
• memory: bump migration-count assertion + wire lifecycle store across gateway (9e70422)
• memory: deterministic same-tier canonical eviction (CI ubuntu flake) (1f8ac0c)
• memory: drain the in-flight sync in close() (Windows CI EBUSY) (1a72577)
• memory: drop control-char regex literal (CI no-control-regex) (fcbdc92)
• memory: embed placeholder crystals + surface sqlite-vec failures (a4c5041)
• memory: gate canonical/directive writes to first-party sessions (5648867)
• memory: keep sqlite-vec external in gateway bundle so vec0 loads (3675c25)
• memory: key-aware cheap-model default for dream lanes (p0-22) (02462a0)
• memory: log session-extraction LLM failures instead of silent null (f1b41d3)
• memory: LongMemEval bridge � add missing kickOffExtraction implementation (9df5399)
• memory: LongMemEval bridge � also disable daily digest scheduler (b23c9b0)
• memory: LongMemEval bridge � disable async batch embedding (wrong knob) (b68941a)
• memory: LongMemEval bridge � disable default-on GitHub trending sweep (d6e13fc)
• memory: LongMemEval bridge � revert to per-file sync, keep parallel extraction (f94fe6f)
• memory: LongMemEval runner � skip per-question dream cycle (d863d8d)
• memory: make proactive recall actually surface stored facts into chats (f5ed536)
• memory: make the knowledge graph trustworthy at both ends (b445d06)
• memory: PLAN-18 don't block search on slow LLM auth resolution (24232d2)
• memory: PLAN-33 Phase 0 � harden the proactive-recall cold-start gates (b0c7c7a)
• memory: PLAN-34 Phase 0 adversarial-pass fixes (17 confirmed findings) (2163b65)
• memory: PLAN-34 Phase 1 adversarial-pass fixes (35 confirmed findings) (fd4bde4)
• memory: PLAN-34 Phase 2 adversarial-pass fixes (32 confirmed findings) (4732398)
• memory: PLAN-34 Phase 4/6 adversarial-pass fixes (45 confirmed findings) (e0e51ed)
• memory: re-check session staleness when the user goes quiet (c25eca1)
• memory: reconcile the dead memory_audit_log schema (footgun) (b3e1155)
• memory: recover batch embedding after cooldown + log swallowed index errors (56fac1b)
• memory: recreate chunks_vec when persisted dims outlive the table (3c6fb2e)
• memory: run schema migrations atomically (rollback on failure) (a04e5db)
• memory: staleness asks are a per-episode budget, and deep_recall says what its query reaches (1771941)
• memory: stop deep_recall faking success, and heartbeat echo filling the profile (ccd0651)
• memory: stop sessions holding what the user said out of the index (e9d9f95)
• memory: stop the hygiene merge from degrading the index (7ae5db7)
• memory: transient-shape guards on background canonical pins (6bb506c)
• memory: tune proactive-recall similarity gate to surface relational/short queries (7c81e7d)
• models: setting a default no longer forbids every other model (b7950e3)
• onboarding: migrate pnpm settings out of package.json's ignored field (63eb7cf)
• p2p: a refused orchestrator dial must never kill the gateway (a133504)
• p2p: aggregate census history across bootnodes (Network Growth flap) (5d81247)
• p2p: aggregate network census across bootnodes (no more flapping count) (d22eb65)
• p2p: clean edge-node dashboard - no census 404 banner, operator panels gated (224907d)
• p2p: dedup ConnectionEstablished so connected_peers counts unique peers (1c060fa)
• p2p: judge a socket alive only when the probe actually connects (e7d935c)
• p2p: management nodes keep the census panels (gate on management.health too) (91d57f0)
• p2p: Network Growth chart showed the oldest census data, not recent (6ea2574)
• plan-38: adversarial pass � 18 confirmed findings closed (92b4a2b)
• plan-39: unbreak the format check (oxfmt never converged on this doc) (d653972)
• relay: sign the release chain + harden the fleet updater (security pass C1/C2/C6/C12/C13) (6633401)
• renderer: degrade gracefully on gateway version skew; quiet capability probes (48e6f7f)
• renderer: give the Overview view a sidebar entry (59fba7e)
• renderer: theme-follow native controls - dark selects, readable dropdown (35272bf)
• rlm: cap REPL output feedback; await store persistence (66e4daa)
• rlm: five defects found by live agent testing of the RLM pipeline (407ce10)
• rlm: make the query cache span agent turns; share REPL store across scopes at read time (6506b4e)
• run-node: stage the Control UI on a fresh checkout; docs stop teaching desktop/.env (2ff6a43)
• security: close the CSP tracking-pixel hole and the fail-open tool policy (d527611)
• setup: drop the pre-install npx playwright probe; document corepack pnpm + post-install Chromium (p0-5) (7f65523)
• skills,curiosity: peer trust credit + stable curiosity regions (audit F6/F8) (fd59b1a)
• skills: categorize peer/dream skill crystals + v57 backfill (audit F12) (23aabca)
• skills: disable PLAN-13 B.5 runtime capability enforcer (1a32e21)
• skills: local vs peer separation + maturity-gated propagation (32b303f)
• skills: re-attempt network publish when a skill crosses maturity (audit F5) (2f507fa)
• skills: revive skill bootstrap, interceptor activation, quarantine hint (audit F3/F4/F16) (34f78cd)
• tasks,rlm: three more wired-but-dead defects from live testing (1f45c2f)
• tasks: judge-provider was silently broken on Opus 4.8 - stop sending temperature (1bb2935)
• tasks: untrusted external content never auto-initiates a task (b99dded)
• test: dynamic-import start:all planStack, skip on Windows (f67836b)
• test: give the gateway-lock stale-takeover acquire CI headroom (d439981)
• tests: Windows compatibility for a2a-status-tool + sandbox validator (ce40fbb)
• test: update mode-default contract tests to PLAN-40 (77da395)
• types: export PLAN-15 schema types + widen node:sqlite row casts (0eef97a)
• ui-usability: adversarial pass - 13 confirmed findings closed (c7fc31d)
• ui: load artifacts from the gateway, not the Vite origin (bcb927c)
• update: watchdog spawn hardening + update-cli test mock (e73c717)
• wallet: migrate to single CDP Server Wallet (MPC EOA) for x402 + sends (a2c389a)
• wallet: repair send_usdc on Base mainnet, real x402 flow, peer wallet discovery (ddacb6b)
• wallet: URL-encode Coinbase Pay addresses/assets JSON params (#41) (503c1c4)
• x402: bind declared amount to on-chain Transfer log value and USDC contract (#40) (8d6ff55)
• x402: harden payment verification against replay, races, and testnet default (#58) (1082373)
• x402: oxfmt + schema-manage the single-use ledger (PR #58 follow-up) (9a53cc2)

Performance Improvements

• census: pre-aggregate network history to kill the 16s read stall (bf8d158)
• gateway: cap skills.network orchestrator IPC so it can't hang 20s+ (a103997)
• gateway: index heavy read paths + cache retrievalHealth (stall audit) (3861781)
• memory: cap consolidation pairwise-merge discovery (fixes ~117s freezes) (11642f2)
• memory: de-dupe concurrent manager builds + instrument cold-boot (e536718)
• memory: graceful embed fallback, wire tombstone GC, yield on recall (f06bbce)
• memory: use vec0 native KNN in GCCRF, fixing dream event-loop stall (6c995e3)
• memory: vec0 native KNN for vector search (~15x faster recall) (6c3fbcb)
• memory: yield + throttle GCCRF scoring so it stops freezing the gateway (de59d5a)
• memory: yield to the event loop across heavy maintenance loops (fixes gateway UI disconnects) (f3f13e1)
• plugins: resolve the plugin-sdk alias to the prebuilt bundle (91d87f0)