v0.6.0

0.6.0 (2026-09-28)

Features

• a lowering-only JEV_AB_MAX_USD spend override for the A/B study (1b65b35)
• confine live agent evals behind a broker sidecar and a capability (ADR-0074) (f6453b8)
• grade added tests apart from weakened ones (67bc438)
• out-of-task exploration is recorded, not a study stop (ADR-0074) (1a92ded)
• package the owner's jev skill and keep Jev on demand (56ccb0f)
• ship the jev skill with the MCP server (19100ac)
• stop the study when a run leaves its boundary (5cfcaae)
• the cap persists in the ledger, and a paid pi model needs a ceiling (85bd171)
• the without-Jev arm runs a boundary with no TypeSafe channel (3ed1c09)

Bug Fixes

• allow the README hero in the hidden-character guard (62827ca)
• an irrelevant added test fails the run (8eacae7)
• answer every question the load stub is asked (525b7c9)
• assert the load stub's derived source names the caller's evidence (33631a1)
• attribute the repo to elkaix and reject hidden characters (337fd52)
• close the j6, j7, and j8 acceptance defects (30099f8)
• close the review findings on the hidden-character guard and adapter path (98124e5)
• correct the bench D3 telemetry (cbf6c36)
• do not count an unasked source question as fail-closed (925c53b)
• do not reflow the packaged jev skill (f9078b8)
• doctor --help prints a real argparse page and exits 0 (edee34b)
• doctor reports whether the typesafe SDK is importable (3c381e9)
• evals: keep Claude login working and refuse dead batches (a829584)
• evals: scope the keychain link and refuse a dead preflight (f19c02b)
• exploration and the failure category part ways, derived at render (f58f3da)
• fail the build when a wheel file has no uv cache key (5c27bc1)
• grade added tests the way the agent ran them (30d9a05)
• inspect exactly one built artifact and name the check for what it does (383593e)
• install the pinned actionlint in hosted CI so the workflow lint runs there (77e9309)
• keep host paths out of the agent-visible MCP config (d995026)
• keep the ci stage list on the ci line and sync as a prerequisite (cf009bb)
• keep the escape category on every record path (b9c69ab)
• keep the study key out of the harness process environment (7f942a3)
• keep treehouse checkouts from shipping ignored sdist files (a1f252d)
• launch the study servers from a wheel-built venv outside the repo (8cbb522)
• let make ci-linux check a linked worktree (eb1b13b)
• make j4 through j9 hinge on their judgment (d1a6c0e)
• make restraint on a control measurable (7083023)
• make sdk_importable's docstring true and its probe cover RetryPolicy (92cd660)
• make the outcome charts readable in the README (f908726)
• map an upstream 401 to auth (7b863e5)
• match the diagram to the server and free the replay route (81f725c)
• name elkaix as the only author and maintainer (94e8ffb)
• name every file that carries the reference tool text (a58e17f)
• name the skills, the instructions, and the CLI surface in the README (e8feb0c)
• name the uv 0.10.10 cache-key boundary and cover LICENSE (b339b1f)
• narrow the notice-test walk for strict pyright (f317365)
• notice the copied tool text and the Archify diagram (8c888b3)
• one AST rule for pre-existing test content (9ef905e)
• one shell tokenizer for the canary (heredocs, quotes, redirections) (dc55d5d)
• patch the probe seam in the gate tests, never sys.modules (6df8a73)
• pin uv to 0.12.19 across local, Linux, and GitHub CI (91a5702)
• reach the Jev server's key by sandbox keyfile, not the config env (84b17b5)
• read Jev's answer from the one field that carries it (c823c0c)
• rebuild the escape canary on a run boundary (295aa2f)
• rebuild uvx from current sources instead of a stale cache (8138719)
• refuse at startup when the selected typesafe provider cannot run (dae5ffe)
• refuse checkout installs on uvx older than 0.10.10 (853a231)
• render the diagram without an embedded font (193113d)
• replace the release workflow's ls count with find; lint workflows with actionlint (c14296f)
• rerender the architecture diagram on Archify 7c3ae9a (6dc23f8)
• restore owner labelers and cited sources (8f22070)
• resync the packaged jev skill to a596996 (164b44f)
• satisfy the fake-secret guard on the new test credentials (77041ee)
• scope models.json and make the key strip unconditional (13454cf)
• scope the agent auth copy to the arm's provider (2d2b6a1)
• state the completion hook's ask reason as a fact, not a directive (6bcc531)
• stop naming the removed PROVENANCE resource; point threshold warnings at limits.md (1e429d4)
• strip quotes and brackets from URIs the skill-text guard scans (1749a91)
• sweep the critique's P3 rows (495bc61)
• sync the dev extras before the local CI stages (143caa5)
• the capability token is scrubbed from the kept records; no operator paths in tests (bbe53df)
• the confinement review findings F1-F11, the P3s, Linux CI, and the D3 re-run shape (ADR-0074) (a9ef345)
• the container canary reads tool data as data, not as commands (e2d1883)
• the fixture tripwire checks real paths, on every file tool (2e073a7)
• the report's Jev telemetry says only what the data can support (4631130)
• type the cache-key glob walk for pyright (96d8a0f)

Documentation

• ADR-0074 amendment, the canary polices outcomes not wandering (b2b9203)
• ADR-0075 records the selected-uninstallable-provider startup refusal (23270fa)
• cite the parity freeze for the exists thresholds (9010769)
• collapse the README rule block (2cc7173)
• correct the Jev docs drift the research note recorded (45f5abf)
• index the official TypeSafe Jev docs; keep the corpus in a local cache (1a7f790)
• name the exact Archify viewer source behind the diagram (5c9dd21)
• name the wire-arguments behavior half as the non-vacuity tie it is (d6f73c6)
• pin the 2026-09-27 agent-study figures (f9f12a2)
• record that a required completion hook asks on an upstream 401 (848b283)
• record that the five drift decisions are settled (1a36711)
• record the D3 paired study (44babc0)
• record the TypeSafe key exposure in the void notice (461c38c)
• renumber the grader ADR to 0073 (5863d4e)
• replace the README banner with an optimized hero (46b595e)
• research the best use of Jev and how this MCP could enforce it (2638ac3)
• say classify thresholds probability, not confidence (49add52)
• say plainly what single-evidence verify rows carry (c9e7002)
• split the operator-notes lead-in from the later facts (a8f1512)
• state the wire-argument strip semantics where callers read them (c30df48)
• state which model each provider reports (9e8f795)
• the confined D3 paired comparison, and the canary fixes it forced (e3eea69)
• the confined D3 report, re-rendered under the critique's corrections (58cbc1a)
• tick the 64-concurrent load gate (661bd8a)
• void the D3 paired report (2e9f8df)
• wrap the operator notes at the surrounding column (7cb270b)
• wrap the README code blocks that still scroll (bd7e4b4)