v0.34.1
Security patch: the fleet's merge brake, generalized. Ships the #598 fix alone so it reaches
installs immediately: no session launched by the fleet can merge its own PR unless the human
explicitly opts in.
Fixed
- Fleet sessions launched with
-Parallel -Launchnow stop at a reviewed PR by default (#598).
Previously, a session launched without an expert contract could merge its own PR with no review:
it was running with--permission-mode bypassPermissions, was briefed to callBoard-Merge.ps1,
and nothing in the tool layer refused it. On 2026-08-03, two such sessions merged their own PRs
withreviews: []and no[abios-review]record; post-merge review found that one PR had not
built the central item of its issue's DoD. Fix: all-Launchand-Fleetsessions now arm the
brake by default —Resolve-LaunchBrakereturns$true(stop at PR) unless-AllowMergeis
explicitly passed or the caller explicitly passes-StopAtPR:$false(an expert contract that
allows merging). This aligns the plain fleet path with the expert path, where the brake was
already mechanical. The-Relaunchpath receives the same default. Three new Pester tests
cover: default brakes,-AllowMergeopt-out, explicit-StopAtPR:$falsehonored.