Release v3.3.3

What's Changed

• Add project secrets management API and UI by @chelojimenez in #4469
• Make evaluation failures understandable through the user-value chain by @chelojimenez in #4536
• Frame-stream: the browser inside the product, on one shared runtime by @chelojimenez in #4526
• Harness evidence: capture firsthand tool calls at the MCP proxy and enrich the trace by @chelojimenez in #4534
• ci: put dependency updates on rails by @chelojimenez in #4537
• Local harness execution: the supervised-native foundation (I0/I2/I3) by @chelojimenez in #4532
• Only signal a process group we can still prove is ours by @chelojimenez in #4557
• search_sessions: drop the transcript coverage disclosure (backfill complete) by @chelojimenez in #4568
• Do not report an unprovable termination as a pid-reuse mismatch by @chelojimenez in #4570
• ci: give the desktop packaging chain its own Dependabot groups by @chelojimenez in #4571
• chore(deps-dev): bump the development-dependencies group across 1 directory with 18 updates by @dependabot[bot] in #4572
• harness: pre-seed the adapter's skills write so MCPJam's skill passes stop colliding with it by @chelojimenez in #4576
• ci: stop Dependabot PRs from carrying false failures, and unblock the production group by @chelojimenez in #4575
• Electron-native embedded browser: the zero-lag WebMCP viewport (and the packaged app's fix) by @chelojimenez in #4574
• feat(design-system): adopt DESIGN.md as the agent-readable design system by @chelojimenez in #4567
• Add .gitattributes so line endings stop being a Windows minefield by @olartgabo in #4507
• Stop local chat turns fetching project skills for a guest by @olartgabo in #4504
• Record which hop failed on http.request.failed by @olartgabo in #4360
• fix(user-testing): stop branding the tester shell as Claude while it loads by @olartgabo in #4061
• Skills UX simplification: one library, one button, one rule by @chelojimenez in #4583
• Make the user-value chain first-class for agents by @chelojimenez in #4578
• Frame-stream performance pass: WS binary frames + adaptive rate + responsive wheel by @chelojimenez in #4573
• Cursor CLI: a harness that pays for its own model by @chelojimenez in #4585
• Only ping the frame socket while the document is visible by @chelojimenez in #4590
• Check the packaged app exists before electron:install deletes the installed one by @chelojimenez in #4591
• BB-59 Swarm update personas page and ux by @weimar-torres-herrera in #4499
• user-testing: one header and one Share modal across detail and edit by @ZeHuari in #4587
• Every trial gets a chain: the per-trace user-value report card by @chelojimenez in #4593
• Document per-trial user-value chain in eval run view by @mintlify[bot] in #4594

Full Changelog: v3.3.2...v3.3.3