v1.8.1

What's Changed

• fix: archive the five stranded accepted SDD records (unblocks spec-check) by @0xGaspar in #506
• refactor: name the two remaining --json schema literals (#444) by @0xGaspar in #503
• ci: pin Trust to v1.2.0-rc.4 and SpecSync to 6.0.0-rc.12 by @corvid-agent in #514
• Update: pin Trust 1.2.0 and SpecSync 6.0.0 by @0xLeif in #515
• ci: pin SpecSync Action to @v6 with version 6.0.0 by @0xLeif in #516
• Fix: lifecycle hooks could not work, two ways by @0xLeif in #520
• Add: the hi habit, so intent gets written before the work by @0xLeif in #519
• Adopt hi: record what fledge should be, as 197 criteria by @0xLeif in #518
• Fix: AGENTS.md told agents not to do what this repo just did by @corvid-agent in #523
• Fix: make the hooked-plugin regression test actually guard the bug by @corvid-agent in #521
• feat: add root-level action.yml GitHub Action for installing fledge in CI by @0xLeif in #511
• test: mocking harness + $HOME isolation + publish coverage (#447) by @0xGaspar in #504
• feat: fledge spec lint — quality gate for the spec itself (#429) by @0xGaspar in #505
• feat(run): opt-in --stream for live task output (#507) by @0xGaspar in #509
• Fix: a diamond dependency is a DAG, not a cycle (#508) by @0xLeif in #513
• Fix: the diamond-deps change declares main, the spec that owns src/main.rs by @0xLeif in #524
• Fix: bound task-graph walk depth so a deep chain errors instead of aborting by @0xLeif in #525
• chore(lifecycle): land the depth-bound change's SpecSync evidence by @0xLeif in #526
• Fix: upgrade Astro 5 to 7, clearing ten Dependabot advisories by @0xLeif in #528
• chore(lifecycle): close out the SDD ledger — audit passes, 0 stale by @0xLeif in #527
• chore(lifecycle): close the last two SDD records by @0xLeif in #529
• chore(lifecycle): archive fix-diamond — the SDD ledger is now empty by @0xLeif in #530
• Fix: publish to crates.io from the release workflow, and verify the registry by @0xLeif in #531
• Chore: pin Trust 1.2.1 by @0xLeif in #533
• Add: high-level design doc with Mermaid diagrams by @0xLeif in #534
• Fix: accept Windows' refused-connection wording in the isolation test by @0xLeif in #535
• chore(lifecycle): finalize the isolation-test change and #531's crates.io-publish change by @0xLeif in #537
• chore: release v1.8.1 by @0xLeif in #536
• Fix: upgrade wasmtime past RUSTSEC-2026-0316 and RUSTSEC-2026-0314 by @0xLeif in #538
• Fix: drop wasmtime's unused cache feature so zstd advisories stop failing audit by @corvid-agent in #543
• Fix: mask recognized secrets in config set confirmation by @0xLeif in #541
• test(config): isolate config checks from operator state by @0xLeif in #540
• Prepare Fledge 1.8.1 release closeout after security upgrade by @0xLeif in #542
• chore: date the curated v1.8.1 changelog section for the release cut by @0xLeif in #545

Full Changelog: v1.7.2...v1.8.1