v1.28.0

What's Changed

• feat(orchestrate): maintenance budget: reserve a share of lanes for deterministically scanned health issues (#4197) by @rapiercraft-forgedock[bot] in #4224
• feat(issue): greenfield mode — accept planned Affected Files validated against a declared repo layout (#4172) by @rapiercraft-forgedock[bot] in #4226
• feat(core): host-aware verification concurrency (FORGE_HOST_PARALLELISM) (#4182) by @rapiercraft-forgedock[bot] in #4225
• ci: run devdocs freshness on every PR so it can be a required check; wire two unwired shell suites; dossier for #4181 by @rapiercraft-forgedock[bot] in #4231
• perf(specs): /issue loads a 51 KB spec on every programmatic create; move it into one script and budget all specs (#4164) by @rapiercraft-forgedock[bot] in #4229
• ci: wire affected-files-check and maintenance-scan tests into shell-compat by @rapiercraft-forgedock[bot] in #4232
• feat(scripts): deterministic symbol index + module import-cycle detector for refactor:split (#4196 part 1) (#4208) by @rapiercraft-forgedock[bot] in #4233
• feat(milestone,decompose): accept a precomputed /bootstrap plan and skip code-read gating for greenfield milestones (#4175) by @rapiercraft-forgedock[bot] in #4234
• feat(cli): forgedock gc reaper — dry-run report, --apply, scoped, ownership-safe (#4180) by @rapiercraft-forgedock[bot] in #4227
• perf(audit): structure-delta and decision-provenance events replace ~40-call comment archaeology per audit (#4165) by @rapiercraft-forgedock[bot] in #4242
• feat(lean): run the repo's devdocs freshness rule before the PR and resume the builder once on stale docs by @rapiercraft-forgedock[bot] in #4243
• feat(orchestrate): account-scoped usage-limit holds keyed by backendIdentity + forgedock limits show|clear (#4190) by @rapiercraft-forgedock[bot] in #4230
• fix(lean): lanes spend builder turns on host toolchain mismatch; pin packageManager and node at lane setup (#4163) by @rapiercraft-forgedock[bot] in #4236
• feat(scripts): refactor-verify.sh — baseline vs after: test counts, symbol resolution, no new cycles, moved-only diff (#4196 part 2) (#4209) by @rapiercraft-forgedock[bot] in #4238
• perf(lean): change-scoped typecheck/lint/test with shared incremental caches keyed by base commit (#4218) by @rapiercraft-forgedock[bot] in #4237
• feat(orchestrate): host-global lane cap and cross-batch priority admission (P0 first) (#4191) by @rapiercraft-forgedock[bot] in #4248
• fix(lean): local-mode lanes end ci.red on the first failed required check — no fix round, and repo lint gates never run before the PR (#4240) by @rapiercraft-forgedock[bot] in #4246
• feat(scripts): Python codemod mover — move symbol groups into a package, rewrite imports, leave a re-export shim (#4196 part 3) (#4210) by @rapiercraft-forgedock[bot] in #4249
• feat(scheduler): forgedock schedd — one host scheduler process; orchestrate submits and streams, --resume reattaches (#4192) by @rapiercraft-forgedock[bot] in #4250
• feat(lean): refactor:split lane — grouping prompt over symbol index, codemod moves, deterministic verify, label routing (#4196 part 4) (#4211) by @rapiercraft-forgedock[bot] in #4251
• feat(scheduler): cross-repo fairness weights in the host scheduler (#4193) by @rapiercraft-forgedock[bot] in #4252
• feat(runner): api agent backend only as an explicit owner-approved option, never an implicit fallback (#4257) by @rapiercraft-forgedock[bot] in #4259
• perf(admission): phase-aware, reservation-based admission — many cheap LLM-phase lanes, semaphore-gated heavy steps (#4169) by @rapiercraft-forgedock[bot] in #4260
• feat(execution): forge.yaml execution {mode, max_remote} + sandbox-provider seam at launchLane/waitLane, ledger-tracked sandbox teardown (#4253) by @rapiercraft-forgedock[bot] in #4261
• feat(execution): pluggable remote sandbox provider adapter (cloud runner pool) with shared cache store and per-repo scoped secrets (#4254) by @rapiercraft-forgedock[bot] in #4262
• feat(execution): per-lane sandbox cost in the batch report + hard execution budget cap (#4255) by @rapiercraft-forgedock[bot] in #4263
• feat(execution): hybrid mode — keep cheap phases local, ship heavy ones to a sandbox (#4256) by @rapiercraft-forgedock[bot] in #4264
• fix(lean): incomplete conformance replies cost a second reviewer run on 75% of PRs, and shadow mode merges real failures (#4160) by @rapiercraft-forgedock[bot] in #4239
• perf(lean): shared dependency caches keyed by lock hash (pnpm store + hardlinked node_modules, uv/poetry venv reuse) (#4220) by @rapiercraft-forgedock[bot] in #4241
• feat(bootstrap): commands/bootstrap.md + templates/bootstrap — interview, defaults, doubts, spike doc, backlog generation and creation (#4176) by @rapiercraft-forgedock[bot] in #4244
• fix(lean): a PR that turns conflicting during the CI wait idles the lane for the full 360-min budget (no workflows run on conflicting PRs) (#4266) by @rapiercraft-forgedock[bot] in #4268
• feat(lean): hotspot prevention: route new code out of over-threshold files at plan time and block unexempted growth (#4195) by @rapiercraft-forgedock[bot] in #4228
• feat(orchestrate): deterministic milestone drift summary from per-lane structure deltas; file an issue only on a threshold (#4161) by @rapiercraft-forgedock[bot] in #4247
• docs(decisions): #4199 amended — adopt Verify/repro/test-map/Judge incrementally, no restructure by @rapiercraft-forgedock[bot] in #4274
• feat(cli): npx forgedock bootstrap — headless subcommand with --dry-run plan preview and resume from GitHub state (#4177) by @rapiercraft-forgedock[bot] in #4276
• feat: hygiene config, doctor Resource hygiene check, orchestrate preflight GC, /cleanup unification (#4183) by @rapiercraft-forgedock[bot] in #4245
• feat(scripts): TypeScript codemod mover (ts-morph) for refactor:split (#4196 part 5) (#4212) by @rapiercraft-forgedock[bot] in #4277
• feat(lean): bug lanes freeze a failing repro test in the contract when testable (#4199, additive) (#4271) by @rapiercraft-forgedock[bot] in #4279
• docs: "Start a new project with ForgeDock" guide with worked example (#4178) by @rapiercraft-forgedock[bot] in #4280
• tracking: verify zero owned leftovers after a 3-issue batch (#4156) (#4184) by @rapiercraft-forgedock[bot] in #4283
• chore: sync version 1.27.0 to staging by @rapiercraft-forgedock[bot] in #4285
• perf(lean): smaller lane worktrees: sparse checkout and warm worktree reuse per base commit (#4221) by @rapiercraft-forgedock[bot] in #4278
• feat(lean): deterministic review trigger, shadow-first — skip the LLM reviewer only off risk paths (#4199 Judge) (#4273) by @rapiercraft-forgedock[bot] in #4284
• fix(lean): single-pass gitignore escape in sparse worktree patterns (CodeQL #72) by @rapiercraft-forgedock[bot] in #4288
• Release: lanes self-recover (CI-fix rounds, conflict-aware CI wait), host scheduler + phase-aware admission, gc/hygiene, remote execution, refactor:split, /bootstrap by @rapiercraft-forgedock[bot] in #4287

Full Changelog: v1.27.0...v1.28.0