v0.0.1-nightly.20261024.92.gda68e676

AUTOMATED SIGNED NIGHTLY - nightly/v1 trust profile
Version: 0.0.1-nightly.20261024.92.gda68e676
Source commit: da68e67
Includes six archives and eight native Linux packages.
macOS: signed tarballs; notarization was NOT verified for this release. Disk images are omitted because the notarization job failed.
Server installation requires the authenticated offline bundle and upgrade evidence.

Changes since the previous nightly

Full comparison

• test(ci): prove sourced fixture diagnostics (8dd599d)
• chore: update Node.js to 26.12.1 (089066d)
• chore: update Node.js to 26.12.1 (e073c21)
• fix(deps): Bump the npm_and_yarn group across 3 directories with 2 updates (7955dfc)
• fix(deps): Bump github.com/google/certificate-transparency-go (4c6c0e4)
• fix(ci): make release checks portable (5b15222)
• feat(ci): add reusable release admission (424e074)
• test(ops): refresh doctor floor fixture (5c4e57d)
• fix(ci): upgrade artifact action runtimes (b1edbc1)

v0.0.1-nightly.20261023.91.gcd2352d2

AUTOMATED SIGNED NIGHTLY - nightly/v1 trust profile
Version: 0.0.1-nightly.20261023.91.gcd2352d2
Source commit: cd2352d
Includes six archives and eight native Linux packages.
macOS: signed tarballs; notarization was NOT verified for this release. Disk images are omitted because the notarization job failed.
Server installation requires the authenticated offline bundle and upgrade evidence.

Changes since the previous nightly

Full comparison

• fix(docs): align markdown peer with Astro update (d070df3)
• fix(deps): bump kin-openapi to v0.152.0 (3cb2d65)
• fix(deps): Bump the go-minor-and-patch group with 6 updates (325d8c9)
• build(deps): Bump the npm_and_yarn group across 2 directories with 2 updates (f787f6e)

v0.0.1-nightly.20261022.90.g9ab46cda

AUTOMATED SIGNED NIGHTLY - nightly/v1 trust profile
Version: 0.0.1-nightly.20261022.90.g9ab46cda
Source commit: 9ab46cd
Includes six archives and eight native Linux packages.
macOS: signed tarballs; notarization was NOT verified for this release. Disk images are omitted because the notarization job failed.
Server installation requires the authenticated offline bundle and upgrade evidence.

Changes since the previous nightly

Full comparison

• test(store): complete settlement validation (abe6774)
• fix(store): join SQLite transaction settlement (392a482)
• fix(release): require notarization diagnostics (fa7167d)
• fix(ci): remove redundant admission reads (dfb32fa)
• feat(docs): send an event when readers click Edit on GitHub (bdb82a7)
• fix(release): restrict notarization fallback (3d45972)
• fix(ci): accept pending publisher metadata (d222058)
• fix(release): validate nightly fallback custody (40118ab)
• refactor(release): share Apple artifact digest (94c0bc1)
• fix(release): separate nightly notarization gate (fb98652)
• build(deps-dev): Bump storybook (30f365f)
• fix(release): select tested notarization client (cd36e1b)
• fix(release): pin notarized images to HFS+ (cd594c5)
• test(release): require imported identity keychain (0de6750)
• test(release): cover keychain restore failures (7da1ae8)
• fix(release): register Apple signing keychain (507deb6)
• test(ci): count early paired-read cancellation (a98aeee)
• fix(release): retain rejected notary logs (f1bca42)
• fix(ci): tighten checks and update MCP tools (85ad419)
• fix(release): retain notarization diagnostics (3c765e2)
• docs(release): explain Apple tag protections (f960ebd)
• test(ci): allow isolated Apple signing runners (d8036ea)
• test(release): align fixtures with Apple distribution inputs (7392a04)
• fix(release): derive OCI inputs from verified archives (e0825e2)
• fix(release): protect signing custody and artifact handoffs (96696dc)
• docs(release): record Apple signing delivery evidence (104493b)
• fix(release): preserve deployed nightly reader compatibility (f60208d)
• feat(release): notarize stable and nightly macOS builds (752b48d)
• build(deps): Bump the npm_and_yarn group across 3 directories with 2 updates (be475a4)

v0.0.1-nightly.20261021.84.gfdbf9116

AUTOMATED SIGNED NIGHTLY - nightly/v1 trust profile
Version: 0.0.1-nightly.20261021.84.gfdbf9116
Source commit: fdbf911
Includes six archives and eight native Linux packages.
Server installation requires the authenticated offline bundle and upgrade evidence.

Changes since the previous nightly

Full comparison

• fix(build): update Go security patch (b8233ff)
• fix(ci): bind framing to official CLI output (9df4d38)
• fix(ci): accept AWS CLI not-found framing (486ba26)
• fix(remotes): complete pairing integration guards (74a9301)
• docs(remotes): ratify PR-only pairing amendment (288fa6d)
• docs(remotes): record pairing verification evidence (9e3cdad)
• fix(web): make pairing invitation QR readable (97ad658)
• feat(remotes): add manual phrase and QR pairing (a1207c4)
• fix: align OpenCode Graphify reminder (0cd5f52)
• docs: record Graphify guidance handoff (08c3745)
• docs: make Graphify navigation optional (40d1330)

v0.0.1-nightly.20261020.83.gad65a00d

AUTOMATED SIGNED NIGHTLY - nightly/v1 trust profile
Version: 0.0.1-nightly.20261020.83.gad65a00d
Source commit: ad65a00
Includes six archives and eight native Linux packages.
Server installation requires the authenticated offline bundle and upgrade evidence.

Changes since the previous nightly

Full comparison

• fix: address project capacity review findings (e600cd4)
• docs: record capacity delivery prerequisites (c75fdff)
• fix: repair capacity upgrade and demo integration (13e08c3)
• fix(config): bound key default before int cast (b9fdf73)
• feat: add configurable project key capacity (c6b5ef8)
• test(ci): virtualize queue reserve deadlines (ab9e18c)
• docs(ci): link the queue proof repair from the #1008 handoff (2ac6477)
• fix(ci): re-read lagging merge-group proof before refusing (f179e1f)
• fix(ci): retry transient GitHub reads in queue publication (69eefc0)
• docs(ci): map the version-2 feedback seed (5f93c96)
• docs(ci): attribute the #1008 queue refusals and fix delivery order (044d865)
• perf(ci): skip dependency vet and the parallelism cap in feedback (04bf38e)
• revert(ci): move queue proof repair out of the feedback bootstrap (a16d666)
• fix(ci): bootstrap backend feedback and queue proof (31d1390)
• fix(ci): name workflow fixtures for reuse (a812732)
• feat(dev): reuse Graphify seeds across worktrees (a227a00)
• docs(aws): record bounded reuse approval (deeabe7)
• ci(aws): support bounded fixture reuse (1df4378)
• fix(ci): keep unfinished queue jobs visible (a8de0b7)
• docs(adr): note that the merge queue is required again (c8835db)
• docs(ci): map every workflow and note best-effort schedules (272b19a)
• fix(ci): lead merge queue reports with progress and failures (a0fdbe0)
• ci(invariants): run repository-invariant suites on PR heads (612dbd3)
• perf(ci): share one race build cache across all race shards (c0bbe45)
• test(web): verify settings chunk module ownership (38e1b8d)
• docs: record settings bundle CI dependency (75a6587)
• docs: record settings bundle evidence (#971) (d8d42ac)
• perf(web): split settings route imports (#971) (384ef2c)
• docs(cli): prepare TLS trust amendment (9f33998)
• fix(ci): read DCO metadata without rename detection (ef95264)
• fix(ci): cover queue movement in group workers (6619519)
• fix(ci): recover from merge queue transitions (80627c3)

v0.0.1-nightly.20261019.82.geb991c99

AUTOMATED SIGNED NIGHTLY - nightly/v1 trust profile
Version: 0.0.1-nightly.20261019.82.geb991c99
Source commit: eb991c9
Includes six archives and eight native Linux packages.
Server installation requires the authenticated offline bundle and upgrade evidence.

Changes since the previous nightly

Full comparison

• test(web): avoid expired redemption response bodies (ff2a955)
• perf(store): batch occurrence reads (#982) (5a4b5b2)
• perf(store): reuse audit actor and filter state (fed2b2c)
• perf(store): index grant and pending reads (ed01deb)
• ci(aws): retain bounded acceptance diagnostics (20f8d28)
• perf(service): profile authorized delivery polls (#985) (1b3dc16)
• perf(web): idle disclosure clocks (#972, #973) (bca20f4)
• docs: finalize #979 and #980 validation (d797ac4)
• docs: record #979 and #980 delivery evidence (c6b17f2)
• perf(service): index catalogue presence (#981) (a02b0a9)
• fix(crypto): guard LocalKeys redaction (#977, #989) (d0fcf22)
• docs(admission): record #988 validation (f56b62d)
• fix(server): harden responses (#975, #976, #978) (7eff31b)
• fix(install): secure stable archives and floors (#979, #980) (fe46f23)
• perf(admission): reduce full-map eviction scans (#988) (bcd08ed)
• fix(ci): use approved hosted runner for AWS fixture (7b86887)
• fix(web): add value modal corner close (1ecc351)
• fix(cli): require explicit SPKI inspection consent (d793b79)
• docs(release): clarify duplicate nightly behavior (4876f85)
• ci(aws): bootstrap bounded acceptance runner (47a4e04)
• feat(cli): add explicit system-CA trust (7dc30f9)
• test(ci): preserve frozen coverage selection (9ffe11a)
• feat(web): complete transit key operations (#820) (c2342ee)
• docs(ci): explain manual nightly safeguards (900b652)
• ci(release): add safe manual nightly trigger (98824dc)
• fix(ci): require backup retention doctor finding (7a37d80)
• fix(ci): bound retirement discovery reads (3326810)
• fix(cli): warn when backup retention is unmeasured (77c7685)
• fix(backup): enforce retention ceiling with durable recovery safety (bcf571e)
• fix(web): guard cleanup folder catalogue (d54ed01)
• feat(web): add editable folder comboboxes (da72e5e)
• feat(web): administer workload file targets (3214159)
• fix(upgrade): register canonical catalog protocols (1b281f2)
• fix(ci): finish merge queue verdicts without polling (e489496)
• fix(upgrade): canonicalize PostgreSQL catalog rendering (d2d469d)

v0.0.1-nightly.20261018.81.g35db63eb

AUTOMATED SIGNED NIGHTLY - nightly/v1 trust profile
Version: 0.0.1-nightly.20261018.81.g35db63eb
Source commit: 35db63e
Includes six archives and eight native Linux packages.
Server installation requires the authenticated offline bundle and upgrade evidence.

Changes since the previous nightly

Full comparison

• feat(web): complete developer credential administration (136d491)
• docs(web): record replayed-tree story and demo evidence for #819 and #807 (be98b84)
• fix(web): serve demo sample data for the new project panels (2ac4b64)
• test(web): wait for settled project reads and repair story fixtures (8dd925d)
• test(web): assert native invalidity and update handoff validation status (78f4bf2)
• fix(test): move retention ranking tests to internal/isolation (63e74f4)
• test(web): clean up developer credential fixture independently (84668fd)
• fix(web): reconcile sensitive inventory after rebase (ba8061c)
• docs(web): record combined project directory acceptance (0a0ada1)
• feat(web): complete developer credential administration (613bd3d)
• feat(web): administer workload file targets (d5e1e95)
• fix(web): distinguish project directory loading and failures (e29ee39)
• fix(dynamic): reject overflowing lease lifetimes (#955) (bc620c7)
• test(mcp): record current native Codex read and wire evidence (f5c3f70)
• perf(store): bound retention ranking by retained revisions (7f0f954)
• docs: reconcile roadmap execution and acceptance dependencies (a62b03d)
• docs(access): reconcile issue 15 review disposition (46d99b2)
• docs(spec): reconcile amended product scope for issue 41 (3267601)
• docs(ops): close RFC 8628 amendment review for issue 612 (42a9204)
• docs(auth): reconcile social sign-in synthesis acceptance (8f7b34b)
• docs(mcp): record accepted managed-credential decision (88997bb)
• fix(dynamic): enforce monotonic renewal ceilings (9ab31ad)

v0.0.1-nightly.20261017.80.g00dc9dbe

AUTOMATED SIGNED NIGHTLY - nightly/v1 trust profile
Version: 0.0.1-nightly.20261017.80.g00dc9dbe
Source commit: 00dc9db
Includes six archives and eight native Linux packages.
Server installation requires the authenticated offline bundle and upgrade evidence.

Changes since the previous nightly

Full comparison

• fix(ci): bound recovery and isolate cleanup failures (9becae1)
• fix(ci): reconcile hidden and stranded check records (cbdae8f)
• fix(ci): retire obsolete checks and preserve green merge results (9c4930a)
• fix(web): distinguish unavailable topology from empty lists (ed908f0)
• fix(release): restore amended acceptance inventory and gates (a851cb0)
• fix(web): reconcile Matrix environment topology (ff4d3de)
• feat(operator): deliver all authorized environment keys (21a69cd)
• fix(importer): clean up helpers when stdout closes (66314e8)
• fix(importer): clean up descendants after helper failure (e0037dd)
• docs: clarify offline-only HTML companion (c6a55ce)
• docs: keep Markdown counterparts of HTML reports (bf6e5a6)
• test(web): require prebuilt mail helper in CI (4151c29)
• test(web): avoid duplicate social security accessibility scans (8082937)
• test(web): target provider save confirmation during refresh (dc8d8ca)
• fix(bench): prevent floor readiness port collisions (8d7fd52)
• test(ci): conserve baseline with mail fixture artifacts (8bbf159)
• docs(auth): correct provider citation and CLI instance example (21366c9)
• test(auth): close social sign-in acceptance gaps (0f1078e)

v0.0.1-nightly.20261016.79.gc20ab43e

AUTOMATED SIGNED NIGHTLY - nightly/v1 trust profile
Version: 0.0.1-nightly.20261016.79.gc20ab43e
Source commit: c20ab43
Includes six archives and eight native Linux packages.
Server installation requires the authenticated offline bundle and upgrade evidence.

Changes since the previous nightly

Full comparison

• fix(auth): repair enrollment gate and queue diagnostics (8d9040c)
• test(auth): verify CLI login credential isolation (00a30c6)
• chore: preserve reviewed rebase integration (c9992ba)
• fix(auth): resolve credential review edge cases (0910a2d)
• fix(auth): address credential establishment review findings (921c919)
• feat(auth): establish local credentials for social accounts (55a7e47)
• fix(app): repair maintenance binding and CLI validation fixtures (da5ddd1)
• docs: record portable-path cleanup handoff (4ae80b4)
• docs: remove machine-local paths (66fabdb)
• fix(cli): clear transport review lint findings (79e5f1b)
• test(web): await provider query notification task (f7bddc6)
• fix(auth): address CLI login recovery and clock skew reviews (100bd91)
• feat(auth): implement CLI browser and device login (916e857)
• fix(web): avoid rebuilding unchanged matrix query state (ee8e5fa)
• refactor(ci): clarify concurrent reader and diagnostic handling (c20f67a)
• fix(ci): bound source security compiler cache restores (3ec2b25)
• fix(ci): overlap independent admission authority reads (d51cd5c)
• fix(ci): identify pending metadata feedback jobs (755a522)
• fix(docs): remove trailing blank lines from CI handoff (c666a38)
• fix(ci): handle queue report URLs and lifecycle races (8bdab60)
• fix(deps): Bump the go-minor-and-patch group across 1 directory with 2 updates (5af9f6e)
• fix(ci): refresh reviewed caller pins and ignore Python bytecode (219f7c9)
• fix(ci): preserve merge workflow callback identity (de06b37)
• fix(ci): preserve shared inputs and completed full validation (28fcffd)
• fix(deps): align native security fixtures with WebAuthn origins (3bad1af)
• test(ci): cover queue reporter review boundaries (b40c4fe)
• feat(ci): stage docs queue selection and PR diagnostics (71329e7)
• fix(deps): preserve legacy origin adoption and chart validation (5cb7da2)
• fix(deps): complete grouped Go dependency compatibility (dce9ffd)
• docs(ci): retain whole-shard measurements and retire trial harness (aecc825)
• test(ci): enforce planner provenance and effective mutations (f465a36)
• test(ci): compare batched binaries across complete race shard (29ae9b7)
• docs(ci): make hosted trial evidence portable and dated (0bf5b6f)
• test(ci): record hosted trial results and remove harness (48189ff)
• fix(ci): declare Bash in shard workflow fixtures (7f594d7)
• perf(ci): plan validation shards in one inventory pass (3ae586d)

v0.0.1-nightly.20261015.78.ge5baadde

AUTOMATED SIGNED NIGHTLY - nightly/v1 trust profile
Version: 0.0.1-nightly.20261015.78.ge5baadde
Source commit: e5baadd
Includes six archives and eight native Linux packages.
Server installation requires the authenticated offline bundle and upgrade evidence.

Changes since the previous nightly

Full comparison

• fix(ci): reuse direct admission role inventory (720f135)
• fix(ci): reuse initial queue worker snapshots (afdc011)
• fix(ci): avoid cache classification of policy tests (d61e95e)
• fix(ci): prebuild the native security harness (8af142e)
• fix(security): bind disposable database protocols (07e2b03)
• fix(security): harden native validation fixtures (dfe02a7)
• fix(ci): scope app artifact reuse guards (ffd78e0)
• fix(ci): isolate native validation and share tool pins (982a515)
• docs(security): link replacement PR handoff (1756814)
• test(security): validate releases with native campaigns (5e71b5e)
• docs: highlight VU Amsterdam sponsorship (198479d)
• fix(web): repair touch previews and CI navigation checks (#913) (eaa7d04)
• fix(deps): group Dependabot updates into two batches (3a687ab)
• fix(deps): Bump golang.org/x/tools from 0.51.0 to 0.52.0 (5ddbc93)
• fix(web): merge-queue failures and Qodo findings (0df9a17)
• feat(web): UI review pass across the app shell, matrix and admin surfaces (87441c2)