v0.19.0-beta.1

What's Changed

• HANDOFF: 0.18.0 released; the harness incident on the recipient seat and its fix by @Calgooon in #67
• HANDOFF: the return to the recipient seat went; the funder daemon on 0.18.0 by @Calgooon in #68
• Lanes: the shared rules and the five wave-1 briefs of the oracle by @Calgooon in #109
• Lanes: four more briefs (hermetic e2e, the architecture document, the witness unwraps, the dependents record) by @Calgooon in #113
• The shipped unwraps, judged (#85): four become errors, the rest say why they cannot fail by @Calgooon in #115
• docs/ARCHITECTURE.md: the dataflow of a spend, a receipt and a repair pass, the seven invariants with their tests, the module map (#83) by @Calgooon in #114
• Lanes: foreground only, never a background handoff; the 26.5 SDK note by @Calgooon in #129
• docs/ratchets.json: the baseline at origin/beta 08f1f05 (#72) by @Calgooon in #112
• ratchet: the file-length ratchet is the shipped code's; test harness files over the bound reported, not gated (#72) by @Calgooon in #134
• docs/ratchets.json: re-recorded at 791feff under 1.98.1 (files_over_800_lines 15 to 10) (#72) by @Calgooon in #135
• ratchet: fuzz/ is test code, as tests/ and benches/ are (#72) by @Calgooon in #137
• Oracle: fuzz targets and mutation testing nightly (#75, #76) by @Calgooon in #123
• Oracle: the wire fixtures, 79 recorded calls and refusal bodies replayed in CI; docs/WIRE.md (#69) by @Calgooon in #121
• Oracle: the hermetic e2e, the 23 scenarios on a local stub of the header service, the explorers and the broadcaster, with a wall against the network (#74) by @Calgooon in #131
• The wire's consumers: 47 recorded calls over seven dependents replayed in CI; docs/DEPENDENTS.md (#110) by @Calgooon in #116
• Oracle: BRC-100 at the pin ed1b015; every field beyond it a listed extension (#100) by @Calgooon in #143
• deny: the stack template with the RUSTSEC-2026-0387 ignore entry (beta) by @Calgooon in #154
• Oracle: criterion benches of the hot path with p50 and p99, tools/bench-compare, the CI job bench (#71) by @Calgooon in #125
• main into beta: 0.18.1 (toolbox =0.13.0, bsv-rs =0.8.2) and the nightly registration by @Calgooon in #150
• Oracle: six architecture rules as source-scan tests (#73) by @Calgooon in #111
• Oracle: the differential harness, the base build against the head on the hermetic suite (#70) by @Calgooon in #152
• Oracle: docs/NORTH-STAR.md, the scoreboard CI checks, the research queue (#77) by @Calgooon in #141
• ratchet: the record follows the tree after the oracle wave; the scoreboard re-rendered by @Calgooon in #159
• Structure: typed errors end to end, status by variant; A8 no error classified by prefix (#81) by @Calgooon in #167
• Structure: one typed Config loaded at start, printed redacted, bsv-wallet config; A7 no env read outside config (#80) by @Calgooon in #169
• Nightly: the measured floors after the first night, the scoreboard's record, six shards at a time (#76, #144) by @Calgooon in #176
• Cargo.toml: the crate's version 0.18.1 on beta as on main (missed by the main-into-beta PR 150) by @Calgooon in #183
• config: RELAY_POLL_SECS=0 refused at load, naming the floor (#170) by @Calgooon in #180
• daemon: a server task that stops ends the daemon non-zero (#120) by @Calgooon in #181
• Oracle: the stack's 490 wallet-gate vectors replayed against the gate on every PR (#130) by @Calgooon in #161
• Structure: the harness files over 800 lines split into modules; tests_files_over_800_lines a ratchet (#133) by @Calgooon in #160
• serve-fleet --daemon: stop the tenants' monitors under the daemon's grace (#182) by @Calgooon in #185
• Config loose ends from PR 169's review: --json nulls and booleans, services_env parses nothing, the untested groups (#172) by @Calgooon in #188
• Gate: a coin the store marks not spendable is held by the gate with its word, before allocation (#165) by @Calgooon in #189
• BRC-100: privileged: true is refused (501 PRIVILEGED_NOT_SUPPORTED), never answered with the everyday key (#145) by @Calgooon in #190
• Gate: a named outpoint the wallet does not hold is refused at the gate on every path (#166) by @Calgooon in #200
• abortAction's pre-check answers the store busy as 503 STORE_BUSY (#168) by @Calgooon in #202
• Spend guard: a suspect creator is refused as it stands; the guard never clears the mark (#164) by @Calgooon in #205
• ratchets: the record follows the day's landings on beta (duplicated_tokens 32786->32717, missing_docs 154->150) by @Calgooon in #207
• Spend gate: a stale creator ranks as seen at the door (ruling 7a, #162) by @Calgooon in #209
• Spend gate: a coin whose creator's lineage is dead is never offered (#163) by @Calgooon in #213
• Spend gate: use the ruled order for scoped coins (#197) by @Calgooon in #218
• Scope spend-gate outputs to the authenticated user (#201) by @Calgooon in #220
• ratchets: the record follows the night's landings on beta (cognitive_complexity_over_25 20->19, duplicated_tokens 32759->32643) by @Calgooon in #222
• Keep invalidated tracker rows suspect until headers move by @Calgooon in #224
• fix(server): return STORE_BUSY for busy host routes by @Calgooon in #225
• Normalize feed hashes before delivery and replay (#229) by @Calgooon in #231
• fix(gate): hold unspendable named inputs on their transaction status by @Calgooon in #230
• docs(gate): align hold reasons, named inputs, and retry guarantees by @Calgooon in #236
• test: give CLI test trackers mining tips for toolbox verification by @Calgooon in #240
• Check architecture citations and line counts at their pinned commit by @Calgooon in #239
• Scope lineage proof reads to eligible heirs (#217) by @Calgooon in #241
• fix: return 503 STORE_BUSY for busy ARC callbacks by @Calgooon in #242
• Chain feed: keep every deactivated hash at a height, so a kept invalidation survives a later event's header (#233) by @Calgooon in #250
• tests: the three toolbox-version-bound tests made version-agnostic on beta (PR 251 backport, toolbox #163) by @Calgooon in #253
• Spend gate: the lineage walk, the rule labels and the frozen set are the user's (#221) by @Calgooon in #252
• fix: honor proof evidence before aborting or retiring requests by @Calgooon in #245
• Refuse respend when proof is present (#247) by @Calgooon in #254
• tests: the retire test's seed made version-agnostic on beta (PR 255 backport, toolbox #177) by @Calgooon in #257
• fix(chain-feed): settle kept reorgs on same-root tips (#228) by @Calgooon in #256
• Test served WAL busy writes and read availability (#204) by @Calgooon in #259
• Fix split-key case matching so resolved splits release held coins by @Calgooon in #260
• Record the named-change refusal after the gate offer (#234) by @Calgooon in #261
• Refuse carried inputs without a consistent caller signer (#237) by @Calgooon in #262
• fix: retain relay deliveries when the store is busy (#248) by @Calgooon in #263
• ci: the bench and the differential off pull requests, on every push; Dependabot two grouped PRs (the CI balance) by @Calgooon in #266
• fix: bound ARC callback waits before the sender timeout (#249) by @Calgooon in #268
• fix: store the settling header for later invalidations by @Calgooon in #270
• docs: the settled-header rule in both delivery loops, the four tests named (PR 270's review fold) by @Calgooon in #271
• Carry the 0.18.2 main patch into beta and record fixture 123 by @Calgooon in #272
• test(server): catch ten missed handler mutants (#174) by @Calgooon in #273
• Pin beta.1 SDK, toolbox and tracker with the full wallet gate by @Calgooon in #274
• test: defer caller signing in the signAction guard witness by @Calgooon in #276
• Reject empty carried input signers (#265) by @Calgooon in #275
• check-cites: reject unrooted coordinates and unpinned paths (#243) by @Calgooon in #279
• Validate paging limits and preserve BRC newest-first offsets (#198) by @Calgooon in #281
• changelog: use per-change fragments and assemble at release by @Calgooon in #280
• fix(differential): isolate concurrent scratch space and ports (#192) by @Calgooon in #283
• fix: preserve stored creator words on header faults (#212) by @Calgooon in #284
• spend gate: hold on the suspect mark for every word (#211) by @Calgooon in #288
• arc-callback tests: version-agnostic under one or two busy waits (#285) by @Calgooon in #287
• Revive stored dead tracker words when toolbox proofs check by @Calgooon in #289
• tools/changelog: refuse a fence line in a fragment (#282) by @Calgooon in #293
• ratchet --record refuses a toolchain other than the record's; --toolchain-move (#132) by @Calgooon in #294
• tracker_host: word_label's nine labels in one WORD_LABELS constant (#286) by @Calgooon in #295
• ratchet: the record names its instrument (schema 2); --check refuses a record of another tool (#127) by @Calgooon in #296
• ratchet: cover base checks and fail CI on record read errors by @Calgooon in #297
• test(wire): report toolbox message-only differences under the gate knob by @Calgooon in #291
• 0.19.0-beta.1: the version and the assembled changelog by @Calgooon in #305

Full Changelog: v0.18.0...v0.19.0-beta.1