Unpin v1.3.0

Unpin v1.3.0

v1.3.0 adds revision-pinned workflow modes that dynamically narrow the
tools, skills, hooks, and MCP capabilities visible to an active agent session.

Highlights

• Built-in planning, implementation, and review presets expose only the
  capabilities selected for the current task. Custom workflow definitions can
  compose the same typed tool, skill, hook, and MCP selectors.
• Workflow revisions are immutable. New sessions pin the selected revision,
  while active sessions retain their existing revision until an explicit,
  validated transition.
• The CLI and terminal TUI can create, inspect, propose, and apply workflow
  transitions. The native desktop workbench adds workflow and active-session
  controls with explicit desired and observed state.
• MCP and authenticated gateway connections route capabilities per connection,
  preventing one session's workflow mode from changing another session's
  visible surface.
• Transitions support cancellation, bounded recovery, connection-scoped
  authority, durable journals, and fail-closed validation for stale or invalid
  requests.
• Provider-matrix evidence now derives workflow exposure from real RMCP
  tools/list responses and verifies CLI, TUI, MCP, and desktop parity.

Upgrading from v1.2.0

Use unpin update check to inspect the candidate and unpin update apply to
install it after confirmation, or download and verify the matching archive from
this release. The stable macOS certificate and the dev.unpin.cli,
dev.unpin.workbench, and dev.unpin.workbench.bridge identifiers are
unchanged. A verified update therefore preserves the designated requirements
used by existing Keychain Always Allow grants.

Artifacts

The release provides three CLI archives and two native desktop archives:

• unpin-v1.3.0-aarch64-apple-darwin.tar.gz
• unpin-v1.3.0-x86_64-apple-darwin.tar.gz
• unpin-v1.3.0-x86_64-unknown-linux-gnu.tar.gz
• unpin-desktop-v1.3.0-aarch64-apple-darwin.tar.gz
• unpin-desktop-v1.3.0-x86_64-apple-darwin.tar.gz

Every archive has a CycloneDX SBOM, GitHub build-provenance and SBOM
attestations, and an entry in SHA256SUMS.

Trust boundary

The stable personal certificate preserves code identity for Keychain access;
it is not an Apple Developer ID certificate and the artifacts are not
notarized. It therefore does not establish Gatekeeper trust. Verify checksums
and GitHub attestations before using Finder's Control-click Open flow. Do
not disable Gatekeeper or strip quarantine metadata. The release uses timestamp
mode none and does not claim secure timestamping for the personal self-signed
certificate. Full instructions are in the desktop guide, and
certificate expiry and rotation are covered in the release
guide.

Verification

This is an ordinary program release. Publication remains blocked until the
exact merged release commit passes the locked Rust workspace checks, macOS
XCTest suite, live Pi and OpenCode validation, and finalized provider matrix.
The draft artifacts must then pass complete checksum, attestation, stable
signature, exact-identifier, designated-requirement, bridge-handshake, and
fresh-download verification. The approved provider-matrix evidence bundle is
attached before publication.

Known limitations

• Workflow changes affect new tool discovery immediately, but an agent host may
  need to reconnect or refresh its MCP tool list before its UI reflects the new
  exposure.
• MCP write authority remains constrained to reviewed workflow operations;
  provider mutation still uses the existing CLI, TUI, or desktop review flows.
• No Developer ID signing or notarization.
• Desktop support remains macOS-only and architecture-specific.
• crates.io, Homebrew, Linux ARM64, and Windows distribution remain deferred.