20260910

What's Changed

• fix(admin): require authentication for routing disclosure by @realtmxi in #1380
• fix(auth): fail fast when required secrets are missing by @realtmxi in #1381
• fix(ci): isolate Buildx config and clear frontend dependency audit by @realtmxi in #1383
• fix(console): restore FreeInference landing and scope developer home to example by @realtmxi in #1385
• feat(backend): load trusted startup adapter extensions by @realtmxi in #1384
• fix(console): compact example models and prioritize signup by @realtmxi in #1386
• fix(routing): scope RouteWise route state to the model it routes by @realtmxi in #1388
• fix(console): restore the Agents tile for standalone sites by @realtmxi in #1390
• fix(embeddings): honor route-level endpoint paths by @realtmxi in #1389
• docs: remove deployment-specific quota setup guidance by @realtmxi in #1394
• docs(community): add contribution, issue and pull-request entry points by @realtmxi in #1392
• fix(backend): enforce RAG policy and prevent stale allowlist cache writes by @realtmxi in #1393
• docs(configuration): document runtime configuration from the admin console by @realtmxi in #1397
• feat(grants): report one grant's usage over a request-start window by @realtmxi in #1396
• docs: point at the cloud agent repository by its new name by @realtmxi in #1354
• fix(auth): enforce distribution public signup policy by @realtmxi in #1387
• fix(console): fail explicitly when site configuration cannot load by @realtmxi in #1382
• docs: fold CLAUDE.md into AGENTS.md as the single agent guide by @1a1a11a in #1401
• fix(deploy)!: default console to loopback and document upgrade paths by @realtmxi in #1400
• feat(admin): derive route targets from the deployment, not a built-in vendor list by @realtmxi in #1398
• feat(quotas): report provider quotas through an extension-filled fetcher registry by @realtmxi in #1399
• test: name the shared fixtures after what they test, not after our models by @realtmxi in #1402
• Revert "test: name the shared fixtures after what they test, not after our models" by @realtmxi in #1403
• Remove source labels from provider registry by @realtmxi in #1404
• perf: Clarify provider actions and open the selected provider’s keys by @realtmxi in #1405
• fix(console): preserve mixed quota rows and source units by @realtmxi in #1406
• docs(config): remove fixed local API key from env example by @realtmxi in #1407
• docs: sanitize historical deployment verification details by @realtmxi in #1409
• feat(agent): expose deployment-owned access permissions by @realtmxi in #1408
• docs(readme): lead with deployment benefits and admin console by @realtmxi in #1410
• feat(identity): omit account profiles from Agent tokens by @realtmxi in #1411
• docs: fix deployment examples and publication checks by @realtmxi in #1412

Full Changelog: 2026090...2026091