v0.3.39

0.3.39 (2026-08-14)

Features

• recovery: qualify durable secret and catalogue restore state (6cb8dff)
• stateful: wire fail-closed convergence posture (55c0b01)
• stateful: wire outage recovery serving spine (e3b80e2)

Bug Fixes

• config: include convergence in override keys (90aca6c)
• deploy: preserve stateful pod template (b697026)
• models: bound legacy alias publication context (dbbf4b7)
• models: clarify legacy alias repair failures (0ee373d)
• models: complete legacy lifecycle edge cases (8695dc1)
• models: enforce alias lifecycle safety (6654fd0)
• models: preserve legacy alias lifecycle compatibility (5f65ac3)
• models: retire aliases with disabled targets (80895ad)
• qualification: retire catalogue recovery dependency (5edd69a)
• recovery: align evidence and qualification docs (39299a3)
• recovery: expect unready inference refusal (2d80335)
• recovery: keep provider key out of child environment (8d0fcaf)
• recovery: make restore evidence non-repopulating (813b5ee)
• recovery: scope provider key to evidence check (f2587b7)
• recovery: stream drill secret material (01e8c50)
• recovery: stream secret schema into postgres (d0e1389)
• recovery: wait for catalogue import (5b7e614)
• stateful: remove rebase conflict markers (de4b4fe)
• stateful: validate preflight cache posture (9118b8c)

Documentation

• stateful: clarify fail-closed rollout contract (146cf80)
• stateful: preserve outage section anchor (55fa76e)
• stateful: scope convergence to fail-closed wiring (0441f51)

Tests

• recovery: align restore contracts with runtime ordering (f8fc066)
• recovery: assert auth-first stateful refusal (1e59740)
• recovery: qualify durable restore state (c143559)