v0.17.0

What's Changed

• fix(upgrade): strip kernel (deleted) exe marker before it reaches units + PATH check (#274, #276) by @laulpogan in #280
• fix(upgrade): don't kill stale daemons the supervisor won't respawn (#275) by @laulpogan in #282
• fix(pairing): honor --relay in claim/add/accept-invite (#279) by @laulpogan in #283
• fix(tail): flag undecryptable enc DMs instead of dumping ciphertext (#281) by @laulpogan in #285
• fix(add): warn when not federation-reachable on a federation add (#278) by @laulpogan in #286
• fix(mcp): flag undecryptable enc DMs on agent-facing read surfaces (#281 follow-up) by @laulpogan in #287
• fix(config): make write_trust atomic + lock-serialized (part of #246) by @laulpogan in #288
• feat(pairing): surface DID+fingerprint + refuse poisoned cards on discovery (part of #247) by @laulpogan in #289
• fix(relay): validate claim relay_url + responder-health slot_id; fix false rate-limit comment (security audit) by @laulpogan in #290
• fix(send): classify peer_unknown + expose MCP wire_send queue (#284 parts 6-7) by @laulpogan in #292
• feat(mcp): wire_whoami flags stale_binary on server/daemon version drift (part of #247) by @laulpogan in #293
• fix(trust): refuse pin-overwrite by a colliding nick from a different identity (part of #245) by @laulpogan in #295
• fix(trust): atomic update_trust RMW transaction to close pin lost-updates (part of #246) by @laulpogan in #299
• feat(relay): per-nick intro rate-limit to stop the unauth pair-intro flood (part of #247) by @laulpogan in #304
• fix(tests): unblock cargo test/clippy on Windows local dev by @laulpogan in #294
• feat(relay): wire unclaim + DELETE /v1/handle/claim/:nick (part of #247) by @laulpogan in #305
• feat(relay): backstop count ceilings on slots/handles/pairs/invites (part of #291) by @laulpogan in #306
• docs(integrations): add Local LLM recipe (Ollama/llama.cpp/LM Studio/vLLM) (part of #145) by @laulpogan in #307
• feat(probe): wire ping + daemon auto-respond — RFC-004 Tier-1 (part of #142) by @laulpogan in #308
• feat(pairing): rotation-refresh — already-trusted peer re-pairs without manual accept (part of #15) by @laulpogan in #309
• fix(config): bound relay.lock acquisition + reclaim from stale owners (#284.5) by @laulpogan in #296
• fix(session): Windows adapter for identity-collision detection (#247.4) by @laulpogan in #297
• fix(platform): bound Windows shell-outs so wire status/up/doctor can't hang (#284.1) by @laulpogan in #298
• feat(status): bounded --wait-daemon-running for SessionStart loops (#284.2) by @laulpogan in #300
• fix(upgrade): stream prebuilt-download with progress so it can't silent-hang (#284.3) by @laulpogan in #301
• fix(session): fail-fast (or warn loudly) when launcher dropped session key (#284.4) by @laulpogan in #302
• docs: GB10 Spark wire 0.14→0.16 upgrade field notes (#274, #275, #276) by @laulpogan in #310
• feat(identity): same-machine signed attestation — sessions on one box auto-pair (#182) by @laulpogan in #311
• feat(nostr): dual-key transport binding — secp256k1 npub cross-signed by Ed25519 identity (#227 D3.1) by @laulpogan in #312
• feat(nostr): NIP-01 event codec — wire event ⇄ Nostr event (#227 D3.2a) by @laulpogan in #313
• feat(nostr): NIP-01 relay protocol — client/relay message framing (#227 D3.2b-i) by @laulpogan in #314
• feat(nostr): NostrWs WebSocket transport — publish + pull over wss:// (#227 D3.2b-ii) by @laulpogan in #315
• feat(nostr): NIP-44 v2 encrypted DMs — Nostr confidentiality layer (#227 D3.3) by @laulpogan in #316
• test(nostr): prove NIP-44 interop against the official vectors (#227 D3.3 follow-up) by @laulpogan in #317
• feat(nostr): NIP-W1 wire pairing over Nostr — no-SPAKE2 codec (#227 D3.4) by @laulpogan in #318
• feat(cli): wire nostr — pair + fetch over a Nostr relay (#227 D3.4) by @laulpogan in #319
• feat(cli): wire nostr accept — complete a bilateral pair over Nostr (#227 D3.4) by @laulpogan in #320
• feat(nostr): record peer Nostr reachability on accept (#227 D3.4) by @laulpogan in #321
• feat(nostr): route wire send over Nostr when no HTTP slot reaches the peer (#227 D3.4) by @laulpogan in #322
• fix(rfc-006): close Part B stragglers — kill the last stale peer-flat reads (#277) by @laulpogan in #323
• ci: promote the hello-world first-connection round-trip to a CI gate (ROAD_TO_1.0 §3) by @laulpogan in #324
• docs(1.0): threat-model truth pass + ANTI_FEATURES↔SSO honesty + disarm the SSO timer by @laulpogan in #325
• feat(1.0): golden-lock the 27-tool MCP catalog + publish the deprecation policy (ROAD_TO_1.0 §6) by @laulpogan in #326
• docs(1.0): outward-truth audit — README says v0.16, not v0.15 (ROAD_TO_1.0 §7) by @laulpogan in #327
• docs: ROAD_TO_1.0 progress — items 1–6 landed, only hygiene + soak remain by @laulpogan in #328
• chore: prune internal/scratch docs from the public repo — cut 6.7k LOC by @laulpogan in #329
• docs(1.0): promote org-SSO to a supported 1.0 feature (revises #325 scoping) by @laulpogan in #330
• fix(#277): MCP accept pins a routable peer + accept flags loopback-only reply path by @laulpogan in #331
• feat(nostr): daemon pull-loop — receive over Nostr, completing RFC-007 D3 (#227) by @laulpogan in #332
• feat(nostr): persist self nostr relays — pull-loop correct when pairing is asymmetric (#227) by @laulpogan in #333
• fix: 4 security issues from code audit by @HermanShermanBot in #334
• test(relay): lock the handle_intro security filter against regression (#334 follow-up) by @laulpogan in #335
• fix(relay): bound SSE subscribers per slot + evict stale intro-rate nicks by @laulpogan in #336
• refactor: dedup wire-send body parsing + collapse hex32/hex64 to a generic by @laulpogan in #337
• fix(daemon): route daemon push through endpoints[] (fixes silent push=0) by @laulpogan in #339
• fix(supervisor): keep a daemon for unbound, idle sessions that have queued mail by @laulpogan in #340
• test(it): clear a leaked relay off the fixed port before booting by @laulpogan in #341
• fix(relay): raise concurrency ceiling + bump VM (fixes read-path saturation) by @laulpogan in #342
• fix(security): fail closed on corrupt trust.json (no silent plaintext send) by @laulpogan in #343
• fix(rotate-slot): preserve self.endpoints[] + reach endpoints[]-only peers by @laulpogan in #344
• fix(supervisor): keep a daemon for any real identity, not just queued mail by @laulpogan in #345
• fix(daemon): drain delivered outbox + back off instant-EOF stream reconnects by @laulpogan in #346
• fix(relay): stop cloning whole slots under the lock + leaking dead SSE subs by @laulpogan in #347
• perf(relay): sweep intro_times on the background tick, off the hot intro path by @laulpogan in #348
• fix(daemon-stream): reset reconnect backoff after a long-healthy stream dies dirty by @laulpogan in #349
• fix(mcp): wire_send uses a cheap pidfile liveness check, not the full scan (#350) by @laulpogan in #353
• fix(dial): bare-nick dial surfaces the same unsendable reason wire send emits by @laulpogan in #354
• harden + validate wire for sandboxes (Docker / OpenShell) by @laulpogan in #357
• feat(pairing): dial loopback relays by handle (E4) + close MCP poisoned-card gap by @laulpogan in #358
• chore(deps): bump anyhow + quinn-proto to clear RUSTSEC-2026-0190 / -0185 by @laulpogan in #359
• wire dash + the "open BAND" positioning (P1 ...

v0.16.0

What's Changed

• feat(session): RFC-008 §C session-key precedence over legacy-shape WIRE_HOME (re-open from #224 closure) by @WILLARDKLEIN in #234
• docs(rfc-006): D1 NIP-44 DM-encryption implementation design (ultra-reviewed) by @laulpogan in #230
• fix(group): reject path-traversal in group id (arbitrary-path-write via join code) by @laulpogan in #238
• fix(cli): five operator-input/IO error-path bugs in cli.rs (TDD'd) by @laulpogan in #239
• refactor(cli): split the 15.7k-line cli.rs monolith into a src/cli/ module tree by @laulpogan in #242
• test(cli): backfill deadline error-path + group-family integration coverage by @laulpogan in #241
• fix: kill the three engines that kept taking the dev host's wire down by @laulpogan in #243
• fix(identity): bind DID to key, enforce one-name server-side, verify ack before trust by @laulpogan in #244
• fix(status): scope orphan-daemon detection to the current WIRE_HOME (fresh-install false alarm) by @laulpogan in #248
• fix: launch-hardening onboarding — stale breadcrumbs, default toasts, doctor blind spot by @laulpogan in #249
• fix: MCP agent first-run — kill the dial dead-end, arm the daemon, add wire_here by @laulpogan in #250
• docs(cli): clean up wire --help — start-here footer + intent-first verbs by @laulpogan in #251
• feat(cli): wire demo — see two agents talk in one command by @laulpogan in #253
• docs: lead the hello-world with wire demo by @laulpogan in #254
• docs(mcp): sync agent-facing tool docs with the live catalog + guard by @laulpogan in #255
• feat(identity): per-peer block-list (RFC-001 §T16 rogue-admin containment) by @laulpogan in #256
• feat(identity): project routing fan-out — wire send-project + wire project (RFC-001 §6) by @laulpogan in #257
• docs(rfc-005): amendment — Phase 4 KILL_CRITERION fire (2 of 4 shims preserved as live) by @WILLARDKLEIN in #235
• docs(rfc): RFC-008 session-key precedence + WIRE_HOME pin observability (was RFC-005/006; renumbered twice after #220 + #221 slot collisions) by @WILLARDKLEIN in #211
• RFC-001 amendment: same-machine session auto-pair (Option C from #182) by @WILLARDKLEIN in #188
• feat(identity): DNS-TXT org binding — wire org bind/list/forget (RFC-001 §2 floor) by @laulpogan in #258
• feat(identity): op/org key rotation via succession-cert (RFC-001 §T19/§T20) by @laulpogan in #259
• fix(daemon): stop wire up's daemon self-aborting on its own singleton pidfile by @laulpogan in #263
• test(tooling): salvage the hello-world round-trip validation harness by @laulpogan in #262
• refactor(cli): init/up surface cleanup — no name inputs, one onboarding verb by @laulpogan in #270
• refactor(session): RFC-006 Part A — collapse to a single by-key session store by @laulpogan in #269
• test(it): poll post-accept VERIFIED check (fix cross-process race) by @laulpogan in #271
• feat(rfc-006): Part B — endpoints[] is the single peer-routing source by @laulpogan in #268
• docs(rfc-006): accept collapse as 1.0 format-freeze gate + scope Part B (footgun fix) by @laulpogan in #267
• docs(security): threat-model truth pass for 1.0 — honest DM-sealing posture by @laulpogan in #266
• fix(landing): correct wireup.net to v0.15 reality (one-name, wire up, no SAS) by @laulpogan in #264
• chore(docs): declutter root — drop scratch/stale-spec .md, archive history to docs/history/ by @laulpogan in #265
• test(it): remote-relay (non-loopback) federation integration test by @laulpogan in #272
• release: cut v0.16.0 — RFC-006 format freeze + onboarding cleanup by @laulpogan in #273

Full Changelog: v0.15.0...v0.16.0

v0.15.0

What's Changed

• feat: wire nuke — hard machine reset (Phase 1 of de-deprecation) by @laulpogan in #220
• docs(rfc): RFC-006 confidentiality sequencing + RFC-007 Nostr transport binding by @laulpogan in #221
• feat(v0.15): RFC-006/007 schema reservations + session_source + curve spike by @laulpogan in #228
• docs(rfc-006): resolve Q2 → NIP-44 for DM encryption; defer vodozemac (D2) by @laulpogan in #229
• feat(mcp): remove deprecated wire_pair_* alias tools (Phase 2 of de-deprecation) by @laulpogan in #231
• feat(cli): remove deprecated alias verbs + deprecation_warn shim (Phase 3 of de-deprecation) by @laulpogan in #232
• refactor: remove the genuinely-dead legacy on-disk shims (Phase 4 of de-deprecation) by @laulpogan in #233
• feat: rip out the SAS code-phrase pairing flow (dial becomes the sole pairing path) by @laulpogan in #236
• release: v0.15.0 — the de-deprecation (BREAKING) by @laulpogan in #237

Full Changelog: v0.14.2...v0.15.0

v0.14.2

What's Changed

• docs: RFC-003 + planning prompt — per-company relay architecture (federation topology, A2A landing, apex-routing) by @laulpogan in #129
• docs(rfc-003): status Draft → Discussion + tracking link to #130 by @laulpogan in #131
• docs(rfc-003): iterate per #130 review — S1+S2+S3 fixed, M1+M2 addressed, Q1-Q4 resolved by @laulpogan in #132
• RFC-003 amendment: personal vs organizational deployment tiers by @WILLARDKLEIN in #133
• docs(rfc-003-amendment-deployment-tiers): lock personal-tier signing-key-first explicit (paul directive) by @laulpogan in #134
• docs: clarify did= accepts both did:wire:org:* and did:wire:op:* (RFC-001 §A + RFC-003 §2 + TL;DR cleanup) by @dthoma1 in #136
• docs(rfc-003): status Discussion → Accepted + tracking link to #137 by @laulpogan in #138
• docs(sso-amendment): §B point 5 — pin JWT iss comparison as byte-equal (AC-SSO-strict-iss) by @dthoma1 in #139
• feat(plugin): ship wire as a Claude Code plugin — manifest + skills + MCP + SessionStart hook by @laulpogan in #140
• docs(plugin): advertise plugin install path on README + landing + plugin-vs-wire-setup note by @laulpogan in #141
• RFC-004: Connection health probing — daemon-level pulse + operator dashboard by @WILLARDKLEIN in #135
• docs(rfc-004): status Discussion → Accepted + tracking link to #142 by @laulpogan in #143
• docs(canonical): correct event_id strict-mode verification comment by @dthoma1 in #144
• docs(rfc-001): remove org/v1 from capabilities[] example + lock schema_version as normative identity-layer signal by @laulpogan in #147
• feat(relay-client): parse RFC-003 DNS-TXT pins with field-additive v1 semantics by @dthoma1 in #146
• docs: surgical drift fixes from #145 audit + docs-lint CI step by @laulpogan in #148
• feat(upgrade): wire upgrade --restart-mcp signals MCP server subprocs to respawn on new binary by @laulpogan in #150
• fix(whoami): degrade gracefully on uninitialized per-session WIRE_HOME by @laulpogan in #152
• docs(integrations): add OpenCode + Pi harness integration docs by @laulpogan in #153
• feat(install): native Windows install.ps1 + Scoop manifest (#149) by @laulpogan in #154
• docs(readme): local-first restructure — hero + 60-sec local-only demo + client-picker + collapsed Status by @laulpogan in #155
• fix(install): harden install.ps1 fallback, hash, and PATH shadow checks by @dthoma1 in #157
• feat(daemon): pidfile singleton guard on wire daemon (#162 fix-6) by @laulpogan in #163
• feat(daemon-status): wire_status MCP tool + last_sync tracking + wire_send annotation (#162 fix-1 + fix-3) by @laulpogan in #164
• fix(send): canonicalize against pinned peer's full DID (#162 fix-4) by @laulpogan in #165
• fix(tier): durable bilateral_completed_at stops VERIFIED PENDING_ACK flap (#162 fix-5) by @laulpogan in #166
• docs(deployment-tiers): two-tier operator walkthroughs (AC-DT2, #137) by @WILLARDKLEIN in #161
• feat(send-lifecycle): per-peer pushed log + pending_push_count in wire_status (#162 fix-2) by @laulpogan in #167
• feat(daemon-stream): tighter TCP keepalive + stream_state.json + tool_status surface (#162 fix-7) by @laulpogan in #168
• feat(status): hoist pending_push_count + stale_sync + stream_state into CLI wire status (#162 surface gap) by @laulpogan in #169
• feat(daemon): --all-sessions supervisor — one child per session (#162 launchd-vs-session-isolation) by @laulpogan in #170
• test(rfc-004): heartbeat body-roundtrip property test (AC-HP7, #142) by @WILLARDKLEIN in #160
• fix(pair): clear stale pending_inbound on bilateral pair_drop_ack (#162 cosmetic) by @laulpogan in #171
• fix(enroll): refresh capabilities[] in wire enroll republish (closes #126) by @laulpogan in #172
• feat(status): annotate orphan pids with their served session (#162 diagnostic) by @laulpogan in #173
• fix(supervisor): drop --session flag from child spawn — broke v0.13 by-key sessions (#170 hotfix) by @laulpogan in #174
• feat(status): walk per-session pidfiles for orphan→session map (#173 follow-up) + legacy pidfile parse fix by @laulpogan in #175
• 🚨 fix(tls): rustls-tls-native-roots → webpki-roots — launchd can't read macOS keychain (#170 critical hotfix) by @laulpogan in #176
• fix(notify): cross-process toast dedup — kill the 134-daemon notification storm by @laulpogan in #179
• feat(cli): wire supervisor — multi-session topology view (closes honey BUG 3) by @laulpogan in #178
• fix(daemon): wire daemon --session resolves v0.13 by-key persona names (#174 follow-up) by @laulpogan in #180
• docs(changelog): v0.14.2 — 13-PR batch (silent-send class + supervisor + 3 dogfood hotfixes) by @laulpogan in #181
• feat(tls): dual-roots verifier — webpki bundled + native when accessible (closes #177) by @laulpogan in #183
• docs(changelog): add #183 dual-roots TLS to v0.14.2 entry by @laulpogan in #184
• feat(setup): Pi + OpenCode adapters — wire setup auto-detects + upserts by @laulpogan in #185
• feat(upgrade): skip redundant spawn when supervisor will respawn (#170 follow-up) by @laulpogan in #186
• feat(send): collapse send→outbox→push into sync POST by default (paul's 'queue is a headache' ask) by @laulpogan in #187
• feat(mcp): wire_pull — symmetric receive primitive (#187 follow-up) by @laulpogan in #189
• docs(changelog): v0.14.2 — add #185 #186 #187 #189 (queue collapse + adapters + upgrade polish) by @laulpogan in #190
• fix(status): outbox event count excludes pushed-log audit entries by @laulpogan in #191
• fix(status): suppress stale pending_inbound for already-VERIFIED peers by @laulpogan in #192
• fix(status): exclude supervisor from orphan scan + clearer annotation by @laulpogan in #193
• feat(adapters): harness registry — adding a host is one struct + one test (#92 cat 1) by @laulpogan in #194
• fix(doctor): recognize supervisor topology — stop recommending pkill on the working architecture by @laulpogan in #195
• docs(send): retire stale 'queues and pushes' references post-#187 by @laulpogan in #196
• docs(agents): retire stale 'status: queued' examples in README + AGENT_INTEGRATION (post-#187) by @laulpogan in #197
• feat(supervisor): surface stale-binary daemon sessions by @laulpogan in #198
• feat(status): attribute pending_push by peer + tier by @laulpogan in #199
• feat(send): warn when --queue writes to an unpushable peer by @laulpogan in #200
• fix(here): use effective tier so wire here matches wire peers + wire status by @laulpogan in #201
• feat(doctor): surface pre-#171 stale pending_inbound for VERIFIED peers by @laulpogan in #202
• docs(changelog): v0.14.2 — append #198 + surface-honesty 4-PR batch (#199-202) by @laulpogan in #203
• fix(stream): preserve last_event_at + reconnect_count across reconnect by @laulpogan in #204
• fix(mcp): tool_peers uses effective tier — surface honesty parity with CLI by @laulpogan in #205
• feat(enroll): wire enroll add-membership — ingest member_cert bundle (closes #127) by @laulpogan in #206
• feat(doctor): daemon-written sender-side staleness signal (closes #14) by @laulpogan in #207
• docs(changelog): v0.14.2 — append #204-#207 (post-#203 backfill) by @laulpogan in #208
• feat(upgrade): --refresh-stale-children — kill session daemons stuck on old binary by @laulpogan in #209
• fix(daemon): idle filter for --all-sessions — stop per-home fork storm by @laulpogan in #212
• test(os_notify): make kill-switch tests hermetic — kill suite flake by @laulpogan in http...

v0.14.1

What's Changed

• docs(rfc-001): clarify op/org tail is quadrupled (not doubled) by @WILLARDKLEIN in #109
• feat(identity): wire enroll republish — close the enroll-after-init DX gap by @laulpogan in #110
• ci: serialize test threads — eliminate heavy-e2e parallel-self-contention by @laulpogan in #111
• docs(v0.15): hydrated full SSO/identity-connector prompt + ignore demo-narrator/ by @laulpogan in #113
• fix(identity): surface inline op claims on whoami / peers / whois read verbs (v0.14) by @laulpogan in #114
• fix(identity): MCP wire_whoami + wire_peers surface op claims (v0.14 parity with CLI) by @laulpogan in #115
• docs(v0.15): iterate connector prompt — fold in v0.14.x regression-debug lessons by @laulpogan in #116
• fix(notify): wire quiet on/off/status — operator kill switch for desktop toasts by @laulpogan in #117
• chore(cleanup): kill strip_did_wire — dead since v0.6 by @laulpogan in #118
• chore(cleanup): inline format args repo-wide (clippy autofix) by @laulpogan in #119
• docs: hydrated repo-scrub prompt — durable artifact from todays bounded cleanup by @laulpogan in #120
• fix(identity): bump schema_version to CARD_SCHEMA_VERSION when op claims attach (v0.14.x) by @laulpogan in #121
• fix(identity): MCP wire_whois accepts bare nicks (mirrors CLI resolver) by @laulpogan in #122
• fix(upgrade): warn about stale wire mcp server subprocesses (v0.14.x) by @laulpogan in #123
• fix(setup): drop redundant WIRE_SESSION_ID=${CLAUDE_CODE_SESSION_ID} mapping (silences MCP Config Diagnostics warning) by @laulpogan in #124
• release: v0.14.1 — v0.14.x DX completion + operator quality-of-life fixes by @laulpogan in #125

Full Changelog: v0.14.0...v0.14.1

v0.14.0

What's Changed

• profile: auto-republish card to the phonebook on set/clear by @laulpogan in #58
• feat: Add GitHub Copilot / VS Code adapter for Wire by @dthoma1 in #59
• fix(cli): reject relay URLs that embed userinfo (Bugs 1 & 3) by @dthoma1 in #61
• fix(pair-ack): try every peer endpoint with failover on pair_drop_ack (Bug 2) by @dthoma1 in #62
• feat: GitHub Copilot CLI adapter (Phase 2) by @dthoma1 in #63
• docs: Phase 3 MS Copilot feasibility spike (no viable hosts under current pattern) by @dthoma1 in #64
• refactor(cli): dedup cmd_push inline failover onto try_post_event_with_failover by @dthoma1 in #65
• fix(pair): self-pair guard — refuse loudly when peer DID matches own DID (issue #30) by @dthoma1 in #66
• SEO: Optimize README and add structured data for search discoverability by @dthoma1 in #60
• fix(session): case-insensitive cwd-registry lookup on Windows (issue #30 root cause) by @dthoma1 in #67
• feat(doctor): sender-side peer-staleness check — surface silent pinned peers (issue #14) by @dthoma1 in #68
• feat(push): handle-directory 410 → whois re-resolve (issue #15) by @dthoma1 in #69
• RFC: Token-efficient agent-to-agent communication by @laulpogan in #72
• session: add CODEX_SESSION_ID env adapter by @WILLARDKLEIN in #70
• fix(doctor): heal stale userinfo-bearing self-endpoints (closes the remaining half of the #61 bug class) by @dthoma1 in #71
• docs: establish RFC process (docs/rfc/) by @laulpogan in #74
• install: default to ~/.local/bin + warn-and-instruct when $PREFIX isn't on $PATH by @dthoma1 in #75
• RFC-001 v2: Operator / Organization / Project identity layer by @dthoma1 in #76
• cli: tighten 4xx slot-rotation predicate to word-boundary match (closes #69) by @dthoma1 in #77
• relay_client: comment producer sites that error_smells_like_slot_4xx depends on (followup to #77) by @dthoma1 in #78
• RFC-001 amendment: SSO-attestation channel (organization tier) — addresses #73 by @dthoma1 in #82
• RFC-001 amendment: receiver-side filtering surface + project fork ruling (A) by @WILLARDKLEIN in #83
• cli/mcp: flip tail default to newest-N + add --oldest flag (#79) by @dthoma1 in #84
• fix(os_notify): dedup toast notifications by stable key + TTL (#81) by @dthoma1 in #86
• cli: enrich wire upgrade PATH-shadow detection with sha256/mtime/active-marker (closes #80) by @dthoma1 in #85
• docs(rfc): clarify org_attestation exact-match footgun (filtering §1.1) by @WILLARDKLEIN in #88
• fix(session): identity-collision warn fires on every inbox-owning role (partial #29/#30) by @dthoma1 in #87
• feat(identity): RFC-001 Phase 0 — agent-card v3.2 schema + Tier::OrgVerified + cert verifiers by @dthoma1 in #90
• feat(identity): RFC-001 Phase 1a — org-membership verification (#93) by @laulpogan in #94
• feat(identity): RFC-001 Phase 1b — pairing decision bridge (membership × policy → action) by @laulpogan in #95
• feat(identity): RFC-001 Phase 2 — inline op_pubkey + org_pubkey in v3.2 cards by @laulpogan in #96
• test(identity): RFC-001 end-to-end — operator+org card → ORG_VERIFIED offline by @laulpogan in #97
• feat(identity): RFC-001 Phase 3 (minimal) — file-backed per-org policy store by @laulpogan in #98
• feat(identity): RFC-001 — enrollment producer core (op claims + member certs) by @laulpogan in #99
• feat(identity): SSO provider-adapter trait — the pluggable IdP seam (#92) by @laulpogan in #100
• feat(identity): wire enroll CLI — operator/org keygen + member certs (#92/#93) by @laulpogan in #102
• feat(identity): card-emit producer core — op claims onto the agent card by @laulpogan in #103
• docs(rfc-001): record as-built v0.14 (offline-minimal) + fix inline-pubkey snippet by @laulpogan in #106
• docs: wire as an A2A citizen — extension spec + did:wire method spec + PROTOCOL.md audit + blog by @dthoma1 in #91
• feat(identity): RFC-001 Phase 1b — wire org-auto-pair into pair_drop receipt (REVIEW, do not auto-merge) by @laulpogan in #101
• feat(identity): card-emit wiring — agents publish op/org claims [REVIEW, pairs with #101] by @laulpogan in #104
• test(identity): live two-process e2e — offline ORG_VERIFIED loop by @laulpogan in #107
• release: v0.14.0 — RFC-001 identity layer by @laulpogan in #108

New Contributors

• @dthoma1 made their first contribution in #59

Full Changelog: v0.13.5...v0.14.0

v0.13.5

What's Changed

• session: derive CC session id from ~/.claude/sessions/.json (fix Windows per-session identity) by @WILLARDKLEIN in #56
• v0.13.5: reliable per-session identity (PID-file adapter) + ${} guard by @laulpogan in #57

New Contributors

• @WILLARDKLEIN made their first contribution in #56

Full Changelog: v0.13.4...v0.13.5

v0.13.4

What's Changed

• v0.13.4: per-session identity (MCP+Windows) + statusline + group chat + wire update by @laulpogan in #55

Full Changelog: v0.13.3...v0.13.4

v0.13.3

What's Changed

• v0.13.3: group chat + merged wire update/upgrade by @laulpogan in #53

Full Changelog: v0.13.2...v0.13.3

v0.13.2

What's Changed

• v0.13.2: Windows hardening (liveness + relay.json) + wire setup --statusline; remove reactor by @laulpogan in #52

Full Changelog: v0.13.1...v0.13.2