v1.0.0-beta.99

1.0.0-beta.99 (2026-11-09)

Features

• analytics: serve the recorded failure reason on the recent tape (ba6b712)
• evals: support secure bearer authentication for HTTP qualification (c2aba7c)

Bug Fixes

• analytics: read automation truncation from the ledger page (02eba51)
• analytics: stop reporting absent authorities as zero (564d244)
• automation: report a reset-blocked scheduler instead of configured (da9fdf8)
• automation: stop retrying blocked scheduler ticks (8dd26c6)
• build: clear root clippy failures on this branch (2117618)
• ci: format SQLite TEMP regressions (a9c68c2)
• ci: preserve hosted macOS DNS during fleet setup (53928aa)
• ci: prevent cross-workload dependency restore fallbacks (7aca898)
• ci: restore hosted macOS DNS after fleet enrollment (a994819)
• ci: use the job token for pinned launcher downloads (1827ffb)
• dashboard: nest scheduler census store patterns (a2ba26e)
• evals: atomically publish scored summaries (c4ed744)
• evals: bind HTTP scoring labels to recorded case annotations (11f4f62), Refs #4535
• evals: constrain HTTP decisions to the selected endpoint (682b66f)
• evals: hold writer lock through completed publication (fd5217f)
• evals: preserve foreign files during link probes (c4f0871)
• evals: preserve recorded runs instead of inventing hybrid costs (6f60e58)
• evals: publish complete HTTP results without partial files (a03aca4)
• evals: refuse HTTP scoring without experiment identity (5b97b7e), Refs #4535
• evals: refuse nonregular HTTP resume files (af7fb3f), Refs #4535
• evals: refuse unsupported atomic result volumes (990e9ba)
• evals: reject inconsistent calibrated score evidence (569184b)
• evals: reject malformed scoring evidence (daa3f7a)
• evals: require HTTP transport for decision evidence (f02c6f5)
• evals: serialize concurrent HTTP result resumes (62fa329)
• evals: validate dataset before HTTP inference (a83262f), Refs #4535
• evals: validate typed HTTP decisions before recording results (9caa3fc)
• evals: verify HTTP score experiment fingerprints (7194f4d)
• explorer: cancel superseded and abandoned query runs (856fad2)
• explorer: cancel superseded query admissions (adf0220)
• explorer: claim admitted runs before callbacks yield (9f37cac)
• explorer: keep terminal effect dependencies precise (87a5dff)
• global-db: name drifted workflow schema objects in refusals (29a6f0c)
• global-db: report a retrying workflow upgrade as retrying (239ae2f)
• global-db: retry a failed workflow upgrade in its own task (5ea4ee2)
• global-db: stop census rewriting published artifact rows (8a0dbd0)
• global-db: upgrade published workflow artifact table in place (fd310d6)
• global-db: upgrade published workflow table in background (1dba4d9)
• hints: match repository discovery on whole words (284e84f)
• integrate storage, workflow, retention and evaluation repairs (684f9b7)
• intent: preserve admitted subagent handoff action evidence (ea17e50)
• intent: preserve admitted subagent handoff action evidence (55695a9)
• intent: trust tool calls only from assistant transcript rows (dd4d9b5)
• projection: isolate SQLite TEMP preflight and integrity fixes (be2e134)
• projection: remove SQLite TEMP output preflight (1c3344e), Refs #4152
• projection: verify canonical bodies before rebuild activation (d5a9ef5)
• recover workflow stores and repair agent runtime behavior (45d50cc)
• release: keep SDK build credentials out of nested actions (962f1fb)
• release: keep SDK build credentials out of nested actions (33be49e)
• retention: bound active pointer reads in storage reports (#4809) (ca8ffa5)
• retention: preserve unsafe orphans without starving GC (#4752) (12d327b)
• retention: release scope scans before quarantine (29196f8)
• retention: resume bounded artifact scans across ticks (b16b584)
• runtime: preserve bootstrap refusals and storage deadlines (e675fd0)
• scout: accept bounded rounding across choice options (ad525ff)
• scout: reject explicitly malformed answer type tags (696df68)
• scout: validate choice distributions and picked labels (8e4c451)
• sessions: park blocked history through its idle backoff (#4755) (e5eecc5)
• sessions: preserve profile Codex coverage on shared scan waits (#4757) (f172e4e)
• sqlite: centralize shared-pin teardown at attachment (e8f20f0)
• sqlite: preserve POSIX locks for verified readers (#4803) (66963c8)
• sqlite: reclaim dropped TEMP pages without deleting live state (d6acbc4)
• sqlite: reclaim dropped TEMP pages without resetting live state (8d707da)
• sqlite: refuse reader locators after shared pin release (d83bc0e)
• sqlite: release shared lost-file pins after workers exit (4755a36)
• sqlite: share pinned descriptors across live workers (ac6047e)
• status: disclose blocked history despite healthy ingest coverage (#4758) (109b151)
• storage: avoid POSIX lock loss in daemon size reports (715c7bb)
• storage: preserve daemon locks in project reports (4b95aa6)
• storage: preserve durable vacuum modes during maintenance (3a3ecf4)
• storage: update report tests for safe sampling policy (4d7cd95)
• work: admit output authority before provider effects (14d7608)

Performance Improvements

• evals: avoid quadratic AUC and leave-one-out rescans (d479d1b), Refs #4535
• proximity: use bounded caller adjacency for qualitative hints (#4790) (cf54e03)
• sessions: amortize Codex admission gate cleanup (8cd3391)
• sessions: skip empty JSONL scope resolution on re-offer (c231fb7)
• sessions: skip settled Codex directory scans (0497fd8)