v1.38.0

What's Changed

• fix(guards): FORGE:GUARD comments are accepted from any author — untrusted guards can fail unrelated lanes (release review SEC-1) (#4750) by @rapiercraft-forgedock[bot] in #4753
• fix(needs-human): re-check blocker premises, ignore closed dependency edges, dedupe owner asks, split mixed issues (#4725) by @rapiercraft-forgedock[bot] in #4731
• fix(batch): pinned secrets in plan.json are world-readable, and refresh-bot-token.sh is excluded from the npm package (release review AUTH-1/SPEC-1/SPEC-2) (#4751) by @rapiercraft-forgedock[bot] in #4754
• follow-up: 2 deferred item(s) (deferred from #4724) (#4727) by @rapiercraft-forgedock[bot] in #4756
• fix(sequence): migration renumber leaves self-references stale, then rejects the builder for fixing them; collides across lanes in one batch (#4732) by @rapiercraft-forgedock[bot] in #4758
• follow-up: 3 deferred item(s) (deferred from #4725) (#4730) by @rapiercraft-forgedock[bot] in #4757
• follow-up: 1 deferred item(s) (deferred from #4727) (#4755) by @rapiercraft-forgedock[bot] in #4759
• fix(execution): host-capability placement reads only the issue body; contract validate commands and decision comments are ignored (#4785) by @rapiercraft-forgedock[bot] in #4790
• feat(lean): north-star decision engine — settle decision-only escalations from the target repo's NORTHSTAR + anchored decisions; external actions stay human (#4766) by @rapiercraft-forgedock[bot] in #4794
• perf(admission): continuous local lane cap from cores/memory; validation steps through the heavy semaphore (#4777) by @rapiercraft-forgedock[bot] in #4796
• perf(execution): pin host capabilities by need, not by mention in the issue body (#4776) by @rapiercraft-forgedock[bot] in #4795
• fix(orchestrate): an offline compute pool stalls remote batches silently; sandbox.unreachable counts toward max_deferrals (#4788) by @rapiercraft-forgedock[bot] in #4798
• fix(review-prepare): fix commit after a complete reviewer round resolves to FULL instead of DELTA (#4771) by @rapiercraft-forgedock[bot] in #4802
• security(orchestrate): batch plan.json persists the computeshare token in plaintext with mode 0644 (#4787) by @rapiercraft-forgedock[bot] in #4797
• fix(lean): a scratch-only lane branch (.forge-lean only) makes every relaunch resume a stale contract (#4786) by @rapiercraft-forgedock[bot] in #4813
• fix(contract): frozen vitest validate commands use '-q', which vitest 3 rejects; lanes end needs-human as conformance.unimplemented and block dependents (#4761) by @rapiercraft-forgedock[bot] in #4814
• feat(review-pr): merge-gate mode for hand-built PRs — owner-approved PRs without a /work-on phase trail can't merge through the gate (#4770) by @rapiercraft-forgedock[bot] in #4812
• feat(lifecycle): default-off rollouts ship dormant with no activation owner; activation row, shadow-mode conformance, owner ask, dormancy report (#4769) by @rapiercraft-forgedock[bot] in #4807
• fix(orchestrate): transient network failure during lane resolution is a terminal lane-refused that cannot be requeued, added or resumed (#4791) by @rapiercraft-forgedock[bot] in #4803
• fix(lean): contract quote check rejects every requirement quote (normalization), issue can never run (#4789) by @rapiercraft-forgedock[bot] in #4799
• feat(orchestrate): issue-level dependency/hold — parse 'Blocked by #N' into DAG edges and honour a blocked label on --add (#4773) by @rapiercraft-forgedock[bot] in #4804
• feat(review-pr): changed-file scoped typecheck/test verification commands so Phase 2 isn't SKIPPED on large repos (#4772) by @rapiercraft-forgedock[bot] in #4801
• fix(schedd): daemon cannot listen on Windows — unix-socket path refused with EACCES; needs a named pipe (#4762) by @rapiercraft-forgedock[bot] in #4816
• chore: sync version 1.37.0 to staging by @rapiercraft-forgedock[bot] in #4752
• fix(runner): argv prompt threshold (64 KiB) exceeds the Windows command-line limit — lanes fail with spawn ENAMETOOLONG (#4763) by @rapiercraft-forgedock[bot] in #4819
• fix(schedd): stay responsive under host load — priority, async saves, heartbeat, watchdog restart (#4780) by @rapiercraft-forgedock[bot] in #4809
• fix(needs-human): premise sweep and owner asks read only trusted comments on the current block (release #4820 SEC-1/BUG-1) by @rapiercraft-forgedock[bot] in #4822
• feat(issue-watch): named, scoped, capped watches — milestone/version/label/search selectors, max_issues/until caps, forever mode, optional long-lived batch (#4765) by @rapiercraft-forgedock[bot] in #4811
• feat(pool): read-only capability relay from sandbox to dispatching host, plus dispatch-time pre-fetch (#4778) by @rapiercraft-forgedock[bot] in #4821
• fix(issue-watch): author-only bot detection and crash-safe claims (release #4820 AUTH-1, BUG-1; closes #4824 #4825) by @rapiercraft-forgedock[bot] in #4823
• feat(issue-watch): threshold-triggered themed releases — pool issues per target, cut a security/stealth/... release when a threshold is crossed, orchestrate it, open the deploy PR (#4767) by @rapiercraft-forgedock[bot] in #4829
• fix(relay): trusted hash-verified pre-fetch, capped answers, CodeQL alerts (release #4820 API-1, INFRA-1; closes #4830 #4831) by @rapiercraft-forgedock[bot] in #4832
• fix(issue-watch): release-mode crash-safe claims, milestone reuse, pool-only claims, CodeQL (release #4820; closes #4839 #4840) by @rapiercraft-forgedock[bot] in #4841
• feat(prod-watch): signal adapter contract + memo/alertmanager/sql/prometheus adapters, read-only enforced (#4833) by @rapiercraft-forgedock[bot] in #4842
• fix: Oversized relay answer gets 413 from router, is swallowed, request stays pending and host re-runs the command each poll; sandbox times out rc 125 (review finding — PR #4820) (#4831) by @rapiercraft-forgedock[bot] in #4844
• Release: offline-pool resilience, north-star decisions, dormant-rollout owners, merge-gate mode by @rapiercraft-forgedock[bot] in #4820

Full Changelog: v1.37.0...v1.38.0