v2.2.0

Changelog

• cafbfcf Merge commit '3cc678d1fc8fc9ebe2d66bcbde79162e6a96164e' into maintainer/pr-1591
• 92fec82 Merge commit '61added8d4839c0bf4a35746b5ec1e8da992973d' into maintainer/pr-1587
• d88e455 Merge commit '6f2f8a8e955401badd70ab54b8502662f32cf981' into maintainer/pr-1544-fix
• 1735af4 Merge commit '9c7c371bfea9ba522c37a150615b5ab4e78d3e13' into maintainer/pr-1737-fix
• e27bfe8 Merge commit 'fc5dfe292567db4031a274eb6cf3f6aea439275b' into maintainer/pr-1747-fix
• 3adca78 Merge main into maintainer/pr-1481
• 62ff30b Merge main into maintainer/pr-1620
• 9c7c371 Merge pull request #1225 from decode2/feat/1197-doctor-01-domain
• fc5dfe2 Merge pull request #1252 from decode2/fix/issue-723-relative-prompt-paths-v2
• aaa1732 Merge pull request #1481 from ardelperal/feat/upgrade-release-integrity-core
• 61added Merge pull request #1502 from Cobies/fix/release-windows-signing
• 0116234 Merge pull request #1544 from julianbruno/fix/codegraph-antigravity-validation
• 7f934dc Merge pull request #1550 from MataM15/fix/1455-reject-empty-reviewer-result
• 6f2f8a8 Merge pull request #1578 from dnlrsls/fix/sdd-planning-blockers
• e427524 Merge pull request #1587 from dnlrsls/test/1384-finalize-retry
• 74f6130 Merge pull request #1588 from dnlrsls/fix/1477-windows-artifact-manifest
• 89e06d2 Merge pull request #1590 from dnlrsls/fix/1453-workspace-overlay-base
• 4907129 Merge pull request #1591 from dnlrsls/fix/1476-review-start-recovery-provenance
• 47b1513 Merge pull request #1594 from AndySabina/fix/review-cwd-locator-storage
• 08bec1b Merge pull request #1620 from decode2/fix/sdd-preserve-attempt-budget
• 61ef804 Merge pull request #1638 from Gentleman-Programming/fix/windows-drive-object-manager-link
• 56720ef Merge pull request #1650 from Gentleman-Programming/fix/update-detect-command-race
• 8881b60 Merge pull request #1668 from Gentleman-Programming/fix/status-history-projection
• 3cc678d Merge pull request #1684 from Gentleman-Programming/fix/classified-authority-repair
• d4b1b10 Merge pull request #1693 from Gentleman-Programming/fix/1554-final-verification-retry
• 2f608ad Merge pull request #1701 from Gentleman-Programming/fix/1379-finalize-live-target
• 1f3fda4 Merge pull request #1706 from Gentleman-Programming/fix/1261-git-authority-root
• 48c428f Merge pull request #1708 from Gentleman-Programming/fix/1674-provider-apply-context
• 942a395 Merge pull request #1714 from Gentleman-Programming/fix/1705-common-dir-identity
• e296d98 Merge pull request #1715 from Gentleman-Programming/fix/1616-git-scoped-binding
• 5fd65c9 Merge pull request #1736 from Gentleman-Programming/fix/1601-start-transition-context
• 8b8dac0 Merge pull request #1737 from decode2/fix/issue-1733-antigravity-skill-dirs
• 770bd32 Merge pull request #1740 from Gentleman-Programming/fix/1657-empty-index-overlay
• 82370ad Merge pull request #1741 from Gentleman-Programming/fix/1605-publication-topology
• 807adc4 Merge pull request #1746 from Gentleman-Programming/fix/1551-typed-missing-upstream
• b205a91 Merge pull request #1747 from pablontiv/fix/sdd-lossless-blocking-prompts
• 6cf6252 Merge pull request #1754 from Gentleman-Programming/fix/1525-verify-report-admission
• 2da330e Merge pull request #1758 from Gentleman-Programming/fix/1692-selector-transitions-v2
• 12e1e3b Merge pull request #1762 from Gentleman-Programming/fix/1683-staged-scope-recovery
• 0a0ca9e Merge remote-tracking branch 'upstream/main' into fix/sdd-planning-blockers
• 3684a95 chore: merge main into PR #1502
• a223d28 chore: merge main into PR 1502
• a6b53ca chore: merge main into PR 1588
• 6eff987 chore: merge main into PR 1590
• 43c650f chore: merge main into PR 1594
• 4c7b4cc chore: merge main into PR 1594
• 3cd202e chore: merge main into issue 1646
• bfdffbc chore: merge main into pr-1550
• 8337a48 chore: merge main into pr-1550
• 0d95c39 docs(audit): add systemic remediation architecture
• 0d216f2 docs(audit): make SDD an optional implementation route
• 974b756 docs(audit): publish organic recovery plan
• 222949c docs(review): publish RDD system audit
• 5cde071 docs(review): publish binding conflict fixture
• e01b114 docs(testing): explain deterministic real-agent E2E
• 200b7cd feat(doctor): add typed diagnostics domain
• d86cf83 feat(doctor): harden remedy metadata and runner
• fcc5641 feat(review): acquire before launch in the review-result plugin
• 81aa5f7 feat(review): add ResultIncidentClass extraction-failure type
• f8abcde feat(review): add durable pre-launch reviewer-result acquisition
• 6f3cb68 feat(review): harden provider artifact lifecycle
• c8d58ce feat(review): inspect all compact recovery edges
• 333a9b0 feat(review): persist incident class durably in preserved artifact
• 557162d feat(review): require acquisition binding on capture, preserve, and dispose
• b933056 feat(review): split conflated empty/nested-envelope reviewer throw
• e034192 feat(review): validate --class fail-closed before incident preservation
• c38c4fe feat(sdd): expose native runtime attempt control
• 09e4b14 feat(work): restore organic delivery with recoverable authority (#1801)
• 71bc45d fix(assets): extend lossless blocking prompts to kiro, codex, and antigravity
• 0f4ec94 fix(assets): re-issue blocking prompts losslessly in SDD orchestrators
• fa644ce fix(codex): remove residual permissions profile
• 2043ab9 fix(doctor): cast CheckID to string in doctor_test.go after rebase
• 013d2e6 fix(installer): reject relative Antigravity CodeGraph commands
• 3e577a2 fix(installer): validate Antigravity CodeGraph wiring
• 6ddf8d1 fix(opencode): handle non-relativizable prompt roots
• f23b4de fix(opencode): use relative SDD prompt paths
• d581834 fix(opencode): use relative SDD prompt paths
• 2242051 fix(opencode): use relative SDD prompt paths
• 5e71256 fix(release): bind policy to current snapshot
• a1e1ac0 fix(release): fetch the tag object the preflight verifies
• 3981df6 fix(release): isolate post-publication verification
• ef13eec fix(release): mirror the tag fetch into the frozen workflow policy
• c4b764d fix(release): omit unsigned Windows distribution
• ee83e83 fix(release): restore the annotated tag the checkout clobbers
• 854416e fix(release): sign Windows binaries to prevent Smart App Control blocks
• a3d127c fix(release): validate resolved distribution plan
• ed783f8 fix(review): accept BOM-bearing artifact manifests
• 7c24c86 fix(review): add Windows-safe artifact manifest input
• f52f715 fix(review): add classified authority repair
• 4e48c46 fix(review): add final verification retry boundary
• 45869fd fix(review): add secure repository locator storage
• aec12f6 fix(review): allow overlay recovery base renegotiation
• 1f86767 fix(review): authorize attested recovery advances
• f3bdc11 fix(review): bind Git common directory identity
• b47835c fix(review): bind finalize to the live target
• c26efd1 fix(review): bind provider-owned review context
• def5114 fix(review): bind start transition context
• 23ebcef fix(review): bound artifact manifest input
• 7140c65 fix(review): classify status maintenance lock failures
• d1eb52f fix(review): classify valid invalidated authority
• bd34d8c fix(review): close provider artifact validation gaps
• c3f0807 fix(review): compose accepted scope recovery
• 6cb56ec fix(review): enforce one ordinary correction attempt
• ddd7ba7 fix(review): exclude merge-parent publication history
• 0b069c7 fix(review): expose immutable candidate diff and changed-path manifest from START
• 2abbd88 fix(review): harden Git authority root resolution
• 9a57b29 fix(review): harden classified authority repair
• 20a046a fix(review): harden final verification retry
• 1f9af71 fix(review): parse repository path references safely
• da25736 fix(review): preserve historical correction recovery
• 54a987d fix(review): preserve selector-bound transitions
• faf8823 fix(review): preserve staged scope diagnostics
• 1b67fc2 fix(review): preserve target resolution failures
• e424f5d fix(review): project terminal status from one live snapshot
• d2eb457 fix(review): reconcile multiple invalid recovery edges
• 362c272 fix(review): recover acquire-result ID after a broken stdout handoff
• d77b361 fix(review): recover approved staged scope expansion
• 2bbcb23 fix(review): require --acquisition upfront on capture-result
• 7d4736d fix(review): require recovery for same-scope candidate changes
• 76aada8 fix(review): resolve Windows drive mappings securely
• d79afcb fix(review): resolve class-suffixed incident artifacts in dispose-result
• 6cc6d59 fix(review): resolve repository locators safely
• a13dc05 fix(review): retain recovery authority wrappers
• 4c5c6d4 fix(review): revalidate pre-pr proof artifacts
• 7fb3fdd fix(review): scope SDD binding discovery to Git paths
• 2129388 fix(review): stabilize status authority projection
• 4354ee7 fix(review): support empty-index workspace overlays
• 10048f4 fix(sdd): advance remediation authority atomically
• 2a3a30e fix(sdd): align Engram remediation routing
• 128b431 fix(sdd): forward provider apply context
• 311a36f fix(sdd): import review bindings into runtime ledger
• 8071d27 fix(sdd): key attempt ledger by work_unit and validate schema/fields strictly to fail closed
• a317ec0 fix(sdd): omit expected planning blockers
• 2018eca fix(sdd): persist runtime attempts in native CAS ledger
• 44a0fc5 fix(sdd): preserve blockers after runtime routing
• 9cd5c62 fix(sdd): preserve blocking prompts across runtimes
• 6da3ff0 fix(sdd): preserve cumulative runtime-attempt budget across apply continuations
• be39a41 fix(sdd): preserve runtime objective continuity
• 56ecf8d fix(sdd): route continuations through native runtime authority
• fe62ceb fix(sdd): validate verify reports before persistence
• adf04cc fix(skill-registry): prefer Antigravity Desktop skills
• ba7ec0e fix(skills): scan Antigravity skill installation paths
• 97e6537 fix(update): remove detect command lifecycle race
• 155a794 fix(upgrade): authenticate release manifests
• b5cc9c6 fix(upgrade): harden release authentication bounds
• ea8ae28 fix(upgrade): scaffold minisign signature verification (slice A)
• 5eb5616 refactor(review): centralize compact target relations
• 55ee732 test(assets): pin the single grouped call clause for question-tool variants
• 9f9e2d8 test(review): acquire the slot before exercising empty/nested payload rejection
• dffe8fc test(review): bind PowerShell artifact subject
• a09d1ce test(review): cover approved start isolation
• 2038250 test(review): cover duplicate and interrupted incident-recovery scenarios
• f65225e test(review): cover same-lineage finalize retry
• 846e48a test(review): pin split empty/nested-envelope reviewer messages