aterm v0.105.0

2026-10-16 · 2157 changes since v0.104.0

Features

aterm-phase: launch_card_place, where the newest launch card sits, for the harness card
kitty: name+command glued in unspaced scripts, a flash that picks the copy that fired, a job chord that trusts no poisoned line, and two trick models
harness: Claude Code autocompacts at 400k tokens — a sixth window default

Fixes

harness: hold a sed box under any Bash ask rule or hook; never type a multi-select text the dialog overdraws; forget a gone dialog's text (ATERM-KI-1015-1 F1, F2, F4)
aterm-phase: read a ticked free-text row drawn [✔] with no space (ATERM-KI-1015-1 F2, the reader's half)
aterm-phase: a box's title and the plan dialog's hint read across the rows Ink wraps them onto (ATERM-KI-1015-1 W2, F3)
aterm-phase: read the status row across the rows Ink wraps it onto (ATERM-KI-1015-1 S2R-F1)
aterm-phase: read the rating card whose question and options a narrow pane wraps (ATERM-KI-1015-1 S2R-F2)
aterm-phase: the vendor's auto-mode notice is nobody's last words (ATERM-KI-1015-1 LC-10)
aterm-phase: bound each narrow-pane join by its grammar (title, status row, vendor notice)
aterm-phase: a generic usage-limit banner is the limit the turn's own notice names (ATERM-KI-1015-1 W3)
aterm-agent: the vendor's continuation ends a limit's wait only under that limit's own notice (ATERM-KI-1015-1 W1)
harness: a countdown Claude Code dropped is a cancelled one, and a cleared conversation ends the limit's wait (ATERM-KI-1015-1 W4)
harness: a model bucket no relaunch moved off is waited on like any limit when its countdown ends (review of ATERM-KI-1015-1 W3)
harness: a countdown's record in a resumed history is no countdown (review of ATERM-KI-1015-1 W4)
harness: a relaunch decided where a bucket's notice left knows the bucket (amendment of ATERM-KI-1015-1 W3)
render, gui, effects: bottom overscroll apron, word-nav hint hold, and kitty caret clearance
enforce live per-agent harness admission in host workers
revoke in-flight restored work across agent off and on
retain Commit exit debt and account rollback when gated
make per-agent revocation supersede an earlier Commit pause
preserve generic admission and bind off-only policy transitions
project per-agent harness admission into the owner herald
keep wall and rekey remedies within agent admission
rotate bounded outbox peeks across sender sessions
distinguish dedup verification failures from refused publishes
make worker revocation sticky through handovers and late landings
stop treating revoked own claims as an answering supervisor
fence revoked restored landings and denied handoff adoption
link: describe login restart from installed job location
link: preserve known fleet identity and refuse uncertain role state
link: resume fleet reads during duties and reset detached say clocks
link: fail attach while in-flight journal fate is uncertain
gui: admit list completions for the current panel only
agent: release model buckets only after a different family choice
link: keep fleet halt authority human-only and honor post delimiters
agent: keep live evidence when restoring a hidden limit
gui: re-read timezone identity beside current offset reads
spec: fail requested checks on every interpreter error
spec: require successful AY solves and nonempty proof inputs
release: attest all local cutter sources before export
render: blank absent scroll aprons only at the live bottom
link: account for a broadcast recipient opting out
link: release departed sessions attributed commit debt
forge: retain unknown requirements in renamed patch scope
windows-sys: fail the oracle when import probes cannot run
harness: a spent landing and Off end the carry; a turn never seen busy is a person's by their hand
harness: a turn nobody saw run is a person's only as the screen draws it; Off's park and lift keep what they judged
harness: a turn no read saw run is never left to a person; the never-seen-busy first-point arm is removed
harness: an Off session's worker is stopped when another program takes its tab
harness: an unseen point after Off never leaves a wall-retried exchange; a wall never costs a land act or the done check its done reply
link: discard log-scoped debt and reject uncertain reset reads
link: keep unreadable directory entries distinct from absent state
link: require the endpoint log clock acknowledgement before attach
link: scope keyed publication offsets to the broker log
link: bind referenced journal recovery to its originating log
theme: fail closed when exclusive publication fails
link: use this publisher identity for journal reference recovery
theme: report lossy cell-background selection text
gui: bind each session clock before registry publication
isolate Trust proof syntax from stock foreign parsers
accounts: keep checked homes after uncertain renewal publication
accounts: propagate required state errors before due renewals
grid: hide inline proof syntax from stock foreign parsers
finish isolating inline proof modules for stock foreign checks
accounts: refuse unknown binding identities instead of restoring old logins
gui: refuse account attribution when login bindings are uncertain
gui: gate renewal advice and commit on the live login policy
agent: name the restart process probe apart from Codex probes
zstd: hold every resolved match to the declared window
atpkg: retain queued requests while wanted installs remain unfinished
atpkg: publish agent reconciles in the executable writer turn
atpkg: retain rider names when reordering the set queue
serde: preserve opaque macro input during receiver replacement
gui: validate inherited identity directories before spawning
gui: persist Default as an explicit palette choice
cli: publish theme exports through the exclusive atomic writer
metrics: publish preparation total before first presentation
gui: keep theme previews owned by their ordered save intent
workspace: retain new macro crates in the default member set
cells: resolve and shim test-target dependencies separately
link: judge reservation witnesses before subject budget admission
reduce feature-row reports using the Cargo package identity
integration: include the WASM export macro in default builds
gui: merge owed restore tabs into their quit-time positions
atpkg: require known archive sizes for download-ahead
keep broadcast cursors behind uncertain refill state
integration: keep appearance reads inside the existing application
wasm-glue: keep metadata names and filenames out of source
font: share an outline expansion budget across recursive work
wasm-abi: check Rust type identity before borrowing handles
complete Settings theme previews by their actual request
font: distinguish exhausted gvar work from existing traversal errors
gui: keep queued theme completion metadata compact
settings: bind Save As cleanup to its admitted values and request
gui: keep pending tab spawns alive through update admission
agent: suppress capacity for unpriced one-hour cache writes
release: preserve per-host Trust memory facts across the merge
publish: own compressor cleanup through scoped work
spend: preserve cursors when transcript discovery is incomplete
harness: revalidate switched-off snapshot claims before clearing
xtask: label keyboard replay digests as input answers
gui: carry theme trials into native page palettes
effects: bound light beam minimum to its available row
gui: name the shared coding agent harness page
verify: resolve the replay font after the tooling move
gui: preserve loaded cursor pack identities in row keys
verify: cancel and reap bounded walks output children
verify: retain output ownership through abandoned result drop
gui: honor Claude admission for usage notes
accounts: reject older credits words before extending an episode
gui: reserve every manual row key before using it
cli: read usage credits only for Claude Code sessions
cli: make the credits reader admission exhaustive
accounts: own terminal signal dispositions across spawn and wait
atpkg: exclusively own a promise temp before publishing it
atpkg: publish a readable plan before retiring its promise
atpkg: bind pending waits to observed pass generations
atpkg: use shared process liveness for promised pass owners
wasm: align band replay with deliberate status ink change
gui: revalidate async connected origins and reserve operator starts
win32-oracle: bootstrap host records without old answers
win32-oracle: require exact recorded struct field sets
gui: restore empty settings without misreading legacy lists
core: express normalized faint endpoints without exact float equality
render: a dark-theme weight nudge cannot re-grid a window at any size
control: a handoff successor no longer stands down when its predecessor's listener closes mid-probe
control: say what disconnects a handoff probe; the held dial stays queued
census: rust_source_views sits above the test module, so the workspace tippy gate is green
census: keep the source-view API before the test module
gui: share neutral tab booking fixture across platforms
gui: retire only the input state a Settings save owns
spec: honor compiler-validated integer suffixes
gui: yield gallery title so feedback cannot clip a card
trust: retain the updater proof floor pending attribution
effects, gui: eliminate remaining kitty cursor overlap, wall oscillation, and apron cursor leaks
dbus: include dictionary entries in container depth
trust: include macOS ancestors in the recovery probe
gui: invalidate host cursor overrides before snapshot reuse
dbus: enforce call deadlines and bound deferred messages
dbus: validate unique Hello names and explicit address encoding
wasm: fail the declaration oracle on tool errors
documents: prove clean edits with the exact observed image
dbus: refuse writes when their deadline cannot be installed
documents: reconcile save rebinds against the last exact image
askpass: fence synthetic keys before attaching the secure sheet
askpass: drain earlier keys through the documented nonblocking queue API
askpass: cast the default mode to the Objective-C pointer type
askpass: retire abandoned password requests and their native sheets
askpass: keep secret codecs and wire lines in scrubbed storage
askpass: use bounded secret transport and unbuffered password output
askpass: keep secure-field extraction and replies in scrubbed buffers
askpass: require an owner field click before admitting password keys
census: track password posting permit holds
gui, effects, gpu: scrub overlays past disjoint selection clips, seed pet caret/wall_side early, and shift glow crowns on sub-row scroll
agent: separate code and blocker scopes in finished reports
restore: a cold restore names the conversation the record names now (LC-1) and a held tab stays the holder's (LC-8)
restore: a held tab's record names a lift the socket takes and its own agent's resume line (LC-8 review)
restore: a fleet hold stays on the live shell the PTY keeper gave back (LC-8 review)
restore: a shell the PTY keeper gave back keeps its own hold; the layout's goes onto a fresh shell alone (LC-8 amend)
harness: a tab's first look owes the settle once its screen has moved (LC-1)
report: keep incomplete searches from certifying a turn
harness: let the newest Codex card own its quota
agent: refuse Codex question fence downgrades
ai: fence the resolved git executable target
ai: retire stale window readings and recheck settings actions
ai: share restrictive fleet discovery with window settings
ai: redact captured review text before display cuts
ai: preserve repository pathname whitespace
preserve explicit empty home on self-claimed relaunches
ai: use the live session factory for Windows sign-in shells
keep holder records readable under Windows locks

Performance

3-pass latency & efficiency audit fixes with inline Clean proofs & ty_model specs
wave2-3: O(1) ASCII BiDi/grapheme, RLE local compact, AlphaMemo bg LUT, plain-cell style memo, and inline Clean proofs
claude footer: a frame at rest costs the footer nothing; a rebuild reads only what its changed rows can move
render: keep a window's cell box per px; derive it only when an input moves
core: keep faint light ink on its linear fast path

Security

This Mac's status sits under its own row, in plain words
This Mac's status is a stop of its own under its row

Refactors

macros: separate numeric decoding from suffix admission

Tests

harness: reproduce ATERM-KI-1015-1 F1, F2's policy half and F4 (ignored)
handoff: v0.104.0's producer fixtures, written by its own cut
the foreground handback lane as aterm_suite tests
the render desync lane as aterm_suite tests
the handback lane asserts its forced miss, 1007 on every count, and a second handback
the nudge give-up test waits for the short and true reads, and the run gap is cast drift's
cover Trust remeasure reuse and source invalidation
aterm-phase: ATERM-KI-1015-1's narrow-pane reads, reproduced on 2.1.300 captures (ignored)
aterm-agent: ATERM-KI-1015-1 W2's decider half, reproduced on the 2.1.300 26-column dialog (ignored)
aterm-phase, aterm-agent: the round-20 review's narrow-pane misreads, reproduced (ignored)
limitpolicy: reproductions of ATERM-KI-1015-1 W1, W3 and W4 (ignored)
limitpolicy: reproduce the review's major on W3's fix — a bucket's ended countdown types into it (ignored)
limitpolicy: reproduce a resumed history's countdown record read as a live countdown (ignored)
limitpolicy: reproduce a relaunch at a left bucket notice that records no model and no return (ignored)
sub-minute budgets become typed outcomes or minute hang detectors
let-chains in the 2024-edition fabric harness, no needless borrow
the live boot refusal speaks through aterm_spec::host::could_not_run
exercise per-agent off during a host upgrade read
project disabled-agent questions through the owner herald
keep disabled-agent walls and integration remedies honest
expose outbox starvation across bounded peeks
publish the wall fixture through the real timeline boundary
keep publication debt after denied dedup verification
exercise stale handover and landing claims across agent revocation
use the real adopted result for the late landing regression
bound fake instance lifetime to its fixture
own fake instance threads for each fixture
retain request log debug formatting
keep disabled own claims out of the herald suppression path
exercise revoked restored landings and denied handoff snapshots
retain instance guards through every client read
preserve UTF-8 control resynchronization on production parser
link: isolate handshake saturation descriptors
link: preserve deployment identity through uncertain role and fleet repairs
link: cover paused fleet duties and shorter-log topic opt-ins
link: keep uncertain in-flight journals pending through recovery
link: avoid cross-log delivery dedup in shorter-log fixture
gui: retain the replacement panel read completion
agent: hold a model bucket after same-family selection
link: cover human-only halts and literal person post text
link: separate signed fixture capability lines
agent: keep live limit evidence through remembered walls
gui: observe a replacement of the local timezone link
agent: seed the measured bucket before composing background work
bind local compaction and ASCII boundaries to derived models
agent: open the direct-session limit ledger before folding
spec: reject interpreter errors in requested model checks
release: attest cutter dependencies and build inputs before export
spec: reject failed AY processes and empty proof walks
render: retain the scroll fallback for a real BiDi incoming row
link: preserve mail after a broadcast opt-out race
link: release only departed sessions inbox commit debt
forge: keep renamed fork requirement checks fail closed
harness host: the review's nits on the restored-landing wait — the negative control states the contract, not the queue's ask order
gui: the kitty-flash tests read the flash's state, not the wall clock — a stalled test thread aged it to Idle
typed tricks: the cat's forgiveness is judged at an instant before the line, not at the wall clock
harness: the Autopilot Off test waits for both runs, not only both workers
update: name the explicit uninstall store without a home-path shape
link: exercise log reset debt, subject reserve and unreadable state
link: retain a listed unreadable topic during log replacement
link: distinguish missing offset directories from dangling entries
link: require an endpoint log transition acknowledgement before attachment
link: keep a recovered key winner distinct across broker logs
link: fence journaled references to the log they answer
link: retain legacy no-reference journal recovery in key regression
theme: exercise unavailable exclusive publication
link: distinguish a remembered log from this publisher identity
gui: cover fabric clocks for sessions registered after attachment
gui: assert the offset lookup metadata frame
accounts: retain a home after partial renewal publication
accounts: refuse due renewal when state cannot be read
gui: exercise login renewal opt-out before advice and commit
gui: change login policy at the account commit boundary
link: require frozen relay fixture sockets to close on drop
gui: retain renewed identities while bindings cannot be read
accounts: refuse uncertain binding identity before actions or writes
agent: inject stable process facts at upgrade restart fences
zstd: fence match distance after a literal prefix
link: bind person inbox snapshots to their head and log
link: name the inbox cursor string type explicitly
agent: change Autopilot during a busy card read
agent: preserve badge waits through refused journal results
link: refuse a known log identity whose head rewound
two-slot hold tests take tippy's slice and rfind forms
harness_host: the lifecycle conformance sees an eager start and an uncapped fault history
atpkg: keep requested agents queued until their first install finishes
atpkg: reproduce overlapping vendor policy mutations
atpkg: reproduce fresh rider replacing a captured dangling shim
atpkg: release policy schedule at a blocked publication
atpkg: retain rider queue positions when a tuple is bumped
atpkg: isolate the dangling-primary publication fixture
serde: bind opaque type macro input to its wire encoding
gui: preserve identity directory admission before deferred priming
gui: keep an explicit Default choice on a light desktop
cli: preserve symlink targets when replacing theme exports
startup: reconcile live headless preparation with its parent
theme: retain exports whose destination resembles the temporary name
gui: bind pending theme previews to their save completion
cells: separate test-only C oracle override selection
link: retain keyed dedup and uncertain pins at budget admission
link: keep dangling reservation witnesses queued too
link: prepare reservation parents before corrupting pin witnesses
retain feature-row obligation reports under their Cargo identity
gui: retain tab order when quitting during restore
keep broadcast recovery behind uncertain refill floors
atpkg: keep unknown-size archive units off download-ahead
wasm-glue: exercise metadata and JavaScript name boundaries
recover a broadcast floor without its later cursor checkpoint
link: assert recovered floors through their state reader
font: bound acyclic outline expansion with guarded sinks
bind Settings Keep to actual queued theme completion
gui: pass the action identifier as a string slice
wasm-abi: cover class identity and generated local collisions
preserve a later Settings trial across an older Keep completion
settings: preserve Save As drafts and newer intent across completion
settings: bind Save As draft and completion ownership
gui: keep queued tab spawns outside update Commit
font: repeat the fixed charstring byte pair directly
gui: reap uninstalled tab completions before normal Quit
gui: await owned child disappearance after Quit escalation
agent: measure profile allocations without reading padding
agent: retain unpriced streamed cache lifetime evidence
agent: construct streamed usage through mutable object access
spend: retain cursors across incomplete walks and refuse FIFO caches
agent: iterate cache fixture values directly
fabric: execute the offered repair for a quoted log path
fabric: check the doctor remedy instead of raw display escaping
compile portable archive fixtures and scope Unix journal coverage
harness: keep claims created during switched-off snapshot probing
format the executable fabric repair-command fixture
gui: keep theme trials visible over terminal overrides
effects: exercise light beams in one-pixel cells
gui: follow the generic harness heading key
verify: expose output child surviving a bounded walk timeout
gui: distinguish loaded cursor pack punctuation
verify: cover cancelled result destructors launching output
gui: cover Claude admission for usage notes
accounts: reject an older credits notice extending an episode
gui: render manual key suffix collisions on both pages
cli: bind credits diagnostics to the sessions reader
accounts: expose terminal signal overlap and unwind restoration
pkg: contain seed fixture child descriptors
pkg: use spawnfd child and stream types throughout the seed fixture
atpkg: preserve promises when their temp name is occupied
atpkg: distinguish a promised pass from same-second stale failure
atpkg: expose promise retirement before a readable plan
gui: own the cell geometry reload scratch directory
themes: preserve newer sparse drafts and uncarried palette slots
themes: expose fallback Trash redirection and publication collisions
gui: exercise async connected and operator admission at landing
rustix: isolate long shm names and clean up on assertion failure
win32-oracle: expose missing-answer recorder bootstrap
win32-oracle: reject incomplete recorded field sets
gui: cover empty collection Undo and bracket-prefixed legacy lists
render: the dark nudge's advance check is still decided by size; the grid never is
forge: the first-party patch targets are pinned by their list, not a stale count
gui: cover slider default and submitted input ownership
gui: preserve newer keyboard history across a text save
spec: cover compiler-lexed Unicode integer suffixes
spec: keep floating exponents refused with Unicode suffixes
gui: retain shipped handoff consumer-loss controls
render: preserve raster and SDK oracle controls
gui: keep reverted gallery cards reachable whole
dbus: count dictionary entries at the recursion boundary
gui: restore idle cursors after real modal and vi exit
documents: retain dirty state across a content fingerprint collision
dbus: bound calls against private socket peers
dbus: refuse malformed connection identity sources
config: remove editorial rules from the schema suite
documents: track exact saved and refreshed collision baselines
documents: publish the edited journal head before saving
documents: keep a save rebind safe through the next watcher read
askpass: expose synthetic input during sheet attachment
askpass: retain request identity through caller retirement and answer deadline
askpass: reject payload-bearing unknown refusal diagnostics
askpass: expose password-field admission before an owner click
askpass: preserve sudo option and argument boundaries
askpass: preserve the off decision through unknown marker state
construct the native Enter event directly
control: cover reply erasure through actual socket delivery
agent: cover report fences, emphasis, and mixed blockers
agent: keep report items apart across fenced code
restore: reproduce LC-1 and LC-8 of ATERM-KI-1015-1 (ignored)
harness: the restored-landing crash test waits for the landing's look, not a count that moves before it
restore: reproduce the review's LC-8 findings on the held tab's record and the keeper's fleet hold (ignored)
harness: LC-1's /clear through the production wiring: the publish rings, the roster carries the screen
restore: reproduce the layout's hold seeded over the PTY keeper's fresher carry (ignored)
harness: reproduce LC-1's first look at a screen's ring owing no settle (ignored)
report: expose incomplete Codex search certainty
harness: retire quota from older Codex cards
agent: keep Codex question keys generation fenced
font: reject malformed contour and empty-edge expansion before allocation
font: exercise autohint fixed mul-div boundaries
render: run portable hint rasters on macOS
render: expose linear advance to macOS raster tests
update: give SHA fixtures exclusive private directories
lab: isolate Gemini stub fixtures in exclusive temporary directories
ai: cover settings actions after a use policy changes
ai: reject repository git hidden by an outside symlink
ai: preserve unknown fleet review restrictions
ai: retain newer login after stale review completion
ai: retain redaction across review display cuts
ai: keep whitespace repository roots bound to their change
harness: retain self-claimed Codex home identity
keep the scripted home control on its owned lock path
accept either valid environment word spelling
consolidate self-claimed home omission controls
stop the durable-file reader before reporting writer failures
bound the record-lock observer to its readable prefix

Docs

one terminology pass, the merge contract becomes the checks
say "the release set", not "every check"; review fixes
no README names aterm beside a version; astream's floors row moved
the twelve-step release in RELEASING.md
the release's re-asks, the staging tier and the seam; stale step text
host 1's uid is the fleet's root of trust
the cross-host guard, the PTY seam and the unix-only reason name only surfaces that exist
the libc generator's references name aterm-libc-oracle regen
the landed-since note keeps astream out of aterm's workspace; transport.rs has no listener
prune and correct the top-level documents
the fleet broker lives as long as the serving host's login, and the per-role remedies
plan for replacing unit tests with the specs they stand for
keeper: describe sampled metadata without an age guarantee
keep spec audit citations valid across publication boundary
an update re-offers unhandled broadcasts; dropped= counts the rest
theme: describe supported listing alias without a fixed builtin count
harness plugins design puts the agent switches on Settings ▸ Harness
harness plugins design says what the review found it left out
theme docs say what the parser accepts and what is achievable
preserve historical spec context without excluded links
askpass: distinguish implemented relay from planned security gates
fabric: the owner's hold outlives an end nobody chose; seed_hold carries a cold restore's too
restore: LC-1 and LC-8 leave the KI list; ruling 23 names the lift the socket takes, the keeper's fleet hold and the halt's reach
approve is one level for every agent; say what "safe" leaves to a person
explain partial search and runtime identity boundaries
phase: describe the final option box clamp
font: retain modification attribution beside upstream notices
font: state the oracle coverage guard precisely

Other

build: delete crates/trust-gate, the compile-time refusal of non-Trust compilers
grid, search: delete the build-time model checks
tree: delete dead files nothing runs
lints: crate-level denies become warnings; the lint run enforces them
update-core: the release slugs are constants; delete the manifest-parsing build script
build: the root manifest stops citing profile_pin.rs
spec: StreamingSearch's docs stop citing aterm-search's build script
update-core: delete the publish slug constants and their pin tests
spec, search: StreamingSearch's Tier-0 runs once, in aterm-spec
comments: drop stale build.rs and merge-gate wording
census: delete OB-17, the standing registries and the closure pins
census: --all runs every census, flags combine, one live-tree test each
tools: delete freeze-safety-gate and temporal-extract
census: typed verdicts and floors; the CLI prints verdicts and reruns
census: synthetic fixtures for the tests that pinned real crates
aterm-release: find the Trust toolchain with atpkg's one discovery
aterm-release: own its clean-tree judge, build-env scrub and memory probe
ship release: step 7 runs verify release, and the release owns its pass record
aterm-release: delete the LAND receipt report
ship cut: the mandatory L0 gate is aterm-census --all in the cut tree
ship provision: audit the stable std the release's cells check needs
ship release: only a FAIL from verify release is a red
aterm-release: drop the last words about gate receipts
ship release: record a pass only for a clone that stayed at R and clean
aterm-release: the clean judge never follows a link at a gitlink, nor GIT_DIR
ship cut: name the cut tree to the census; quote pasted paths
aterm-release: say verified, not measured, of what a release ships
aterm-cli: help rust names targo --unverified verify, not tools/verify.sh
README: no merge gate; every release runs the checks
aterm-cli: pkg help names no "check run" among the lease holders
atpkg: drop the lease mirror's pin test
aterm-verify: one CLI for every check, run in place
cargo aliases: ship, forge and winsign build under [profile.gate]
aterm-verify: leave targo's lane banners out of finding excerpts
aterm-verify: --json names each check under "name"; test the CLI's refusals
aterm-verify: a check with several skipped rows lists each once
aterm-verify: the run says where its log is; an empty cone plans no test compile
aterm-verify: no per-stage start lines on stderr
aterm-verify: the cells check runs the forge matrix once
aterm-verify: no freeze-safety-gate in the cone's fixtures
aterm-verify: a finding's excerpt shows its errors before its warnings
aterm-cli, aterm-conformance: name targo --unverified verify, not tools/verify.sh
aterm-verify: the cells check is the foreign cells, built under the target dir
aterm-verify: a failed test's rerun line sets what its child ran under
aterm-verify: the lint gets <target>/verify/tippy; dead memory probe and stale words out
aterm-verify: CLI polish — one hint per usage error, refusals summarized under --json
aterm-verify: the cone lists edits an index flag hides
aterm-verify: drop two tests that pin other crates' source text
verify vocabulary: no merge contract, no tiers, no dated diaries in owned text
aterm-verify: comments state the rule, not the diary
aterm-verify: trustfmt
aterm-verify: a shorter needs column for cells
aterm-verify: an error cargo prints for two targets shows once in a finding
aterm-verify: a cells skip names its cells and the install that fixes it
census: find the checkout without spawning git; .gitignore says what the retired gate left
accounts v2 S0: the account move runs nothing under the login it moves to
accounts v2 S0: delete accounts check; a failed accounts login runs nothing
accounts v2 S0: an account move's relaunch types nothing
accounts v2 S0: a lost login after an account move is waited at, never signed in
accounts v2 S0: the design's S0 row, pointers in the v1 handoff and spec, two comments
accounts v2 S0: a lost login before any turn is the old process's; the login wait's bounds and its alert
accounts v2 S0: a lost login signed back in relaunches its tab; no way back onto a dead login
accounts v2 S0: the accounts login and signed-out texts say what the code does
accounts v2 S0: a lost login with no account left asks the owner on the glass until the move back
accounts v2 S0: a lost login is struck on its own login before any advice for its point
accounts v2 S0: the login back needs a sign-in since it was lost and keeps the canary; no shell for two dead logins; an answered move ends the way back
accounts v2 S0: a told move outlives the window and is told served where it ends; answered once struck; a lost login met at its tell and told off its track; the way back's login resumed under itself
accounts v2 S0: a told move's first point after a relaunch is its start-up; only a told row that says until=served outlives the window; T4's control holds the strike out
accounts v2 S0: a relaunch's start-up is no service for an untold move either; a typed turn ends the start-up
aterm-gui: ATERM_RESIZE_RUN_GAP_MS, a dev seam for the resize ledger's run gap
aterm-agent: RelayClient::request_frame, and the live suites type through feed-bin
aterm-verify: the live lanes are aterm_suite tests, so the live check goes
libc-oracle: the gate in Rust — crates/aterm-libc-oracle
libc-oracle: delete run.sh, symgate.py, negative_controls.py and the cell-table policing test
aterm-libc-oracle: a full disk is could-not-run, not a finding
aterm-libc-oracle: findings outrank a stop, a stale lock is a finding, a symbol control
aterm-verify: the libc check runs aterm-libc-oracle
aterm-conformance: paint and spin measuring in Rust
Cargo.toml: the paint scanner and PNG inflate at opt-level 2 in dev
aterm-gui: comments cite the Rust measuring rows, not the deleted probes
aterm-conformance: a take has a whole-run budget and says why it missed
aterm-verify: the MEASURE stage runs the ignored rows and refuses an empty take
aterm-verify: the measure check runs the ignored paint and spin rows
aterm-verify: the measure check needs a passed row in each target
aterm: the handback and render-desync lanes refuse as COULD NOT RUN
aterm-conformance: the paint probe states what each capture perturbs
release: --prepare stops PREPARED after the stage; a bare run asks the live world again, then publishes
release(cli): ship release --prepare, its --help, and refused beside --forget or --abandon
release: only a claimed cut is past its prepare — a --prepare after a publish that stopped short of the claim records PREPARED anew
release: the PREPARED engine re-ask — judged by the attestation alone, a missing or rewritten staged commit stages again, handoff/ is data plane, asked once more right before the publish
release: the owner is waited on only by the half that needs the gap closed; the visible half audits once; the re-ask and a dry run's wait say what happened
release: pending_reask names the PREPARED re-ask (tippy wrong_self_convention); trustfmt over the prepare commits
clippy: ban the guard's API rows in clippy.toml; spawnfd children reap themselves
aterm-gui, aterm-gpu: WindowServer doors are private, reached through one choice
aterm-agent: the upgrade record's path is private to its one writer
aterm-gui: aterm's own notification doors are named and the raw ones private
aterm-gui: handoff env names are a type the process environment cannot take
aterm-core, aterm-messages: the engine clocks are clippy rows, not source scans
aterm-time: std's clock on wasm32 is a lint on the browser cells
aterm-uds: Windows kill_self_now carries its abort expectation
aterm-forge: forge check enforces deny.toml's [bans] and [sources] ([OB-18])
comments: name the fences that replaced grep_guard's ported rows
aterm-uds: off Unix spawnfd's Command is a type alias, not a re-export
comments: the DevToolsSecurity runner's fence is the census, not privacy
aterm-core, aterm-messages: the injected-clock rows lose their test blanket and gain elapsed
atpkg: the toolchain probes carry item-level expects, not a module allow
aterm-gui: each notification door takes what only its decider makes
aterm-gui: a handoff name leaves handoff_env.rs only bound to a value
docs, comments: keep a past run's record as measured; drop a dead negative control
aterm-core: the shared fuzz seed's clock read is allowed, not expected
aterm-census: the source guards, one command with the censuses
aterm-gui: the AppKit menu-bar reader exists only for a windowed launch
tools: retire grep_guard.sh, its fixtures and license_check.sh
aterm-census: guards name test code by a path word; the cut says it runs them
aterm-census: a gated item with no trailing comma ends at its block's close
aterm-census: guards restore key-material and store-current, and hold their scopes
comments: say what scans keys now; reflow the reworded lines
aterm-release: the Trust lane is ship trust run, in Rust
aterm-release: the candidate gate is ship trust candidate, in Rust
aterm-release: the replay fixture names no home directory
trust lane: name the Rust lane and its tables where the scripts were named
trust candidate: refuse an --out targo trust refuses; a dry run creates nothing
trust_oblig: name the reduction's function, not the verb it lost
aterm-forge: the budget's parse error names no other file
trust lane: a run files facts only for HEAD's bytes, hashed raw
trust lane: keep a fork's lockfile, name vanished floors, say why nothing ran
trust lane: the tree test's grandchild leads a session of its own
trust candidate: the guard and the preflight are what the bash gate held
trust lane: the ACL rule, a keeper that ends at once, costs kept on any end
trust lane: test a run a host's memory narrows
aterm-release: ship check is the read-only publication pre-flight
aterm-release: ship check prints a fix line only when a gate names one
aterm-release: an unresolvable cut toolchain is a could-not-run, not a refusal
aterm-release: the export guards judge by cause, on a scratch copy of the engine
Merged tree: the clippy.toml bans and the wasm census hold over main's newer code
aterm-verify: guards, trust, export and cells run the Trust tools
aterm-census: the door guards no type or clippy row can hold
aterm-gui: the harness protocol's model, progress claim and binding on main, read only on the seal lane (temporal P5)
aterm-gui: the seal island's unsafe-impl rule exempts auto traits, as Trust's does
xtask: a cross cell's GREEN line says it was linted for the clippy.toml bans
accounts v2 S3a: the usage tap on the machine's own login, opt-in by [harness] usage_tap
accounts v2 S3a: a silent tap's line ends with its process; a reading not taken is tried again; the tap's promises say what is true
atpkg tests: the assessed programs' directory is canonical
release: the cut reads R's tree-only gates from the release, never re-runs them
pre-promote: ask the running release's own cutter, build none
release: twelve steps — the real stage first, two audits, READY
release: step 4's work and the fixture generator run beside the long ones
release: list the step children's notes from one read_dir
release: one plan_print arm for step 4
release: a judge that cannot answer stops a resumed run at step 4 too
release: audit 2 before every fresh cut, the publish skipped or not
release: ask the staging tier again before the publish; stage R again if it moved
release: audit 1 after the candidate, and on every re-exec; withdraw an unjournaled ask
cut: require the guard and census facts; re-ask the two gates that read origin
release: refuse at step 4 an engine with no pre-promote seam
release: one child starts at a time, process-wide
release tests: a cut call is cut <args>, not the audit's cut-gates; trustfmt
aterm-census: the guards read the checkout's scripts; core-signal and devtools-door whole again
verify trust leaves this clone's heavy libraries to the release; cells name each skip's fix
install.sh: follow atpkg's build-dir targo shim to its last-line exec
aterm-agent: the usage tap's mode and symlink checks are unix-only in its tests
aterm-release: step 4's census line says the source guards passed too
atpkg-publish: the producer crate's skeleton, and its design
atpkg-publish: the arch gate and the tar writer, in Rust
atpkg-publish: the lineage receipt switch, read from the trust repo's live main
atpkg-publish: the manifest writer and the signing ceremony
atpkg-publish: the pack's toolchain and its external tools
atpkg-publish: the trust bundle's frozen rustc-dev and rust-src closure
atpkg-publish: pack, the plain-program packer
atpkg-publish: pack-bundle, the sysroot-bundle packer, as a typestate
atpkg-publish: build-local, the development build
atpkg-publish: retire the WP1 shell suites and their gates
atpkg-publish: a proven seal's LINEAGE end to end, and the staged hello
atpkg-publish: a bundle pack holds its program's lock; PROCESS.md drops the atpkg check
atpkg-publish: the review's fixes — the admitted sysroot, one trust repo, offline signing
aterm-verify: rewrap the merge-contract help line the AtpkgTooling removal left long
atpkg-publish channel: index, mirror, publish-group, status and the gh host in Rust
atpkg-publish channel: retire the shell index tooling it replaces
atpkg-publish channel: reads need no channel token, and leave nothing behind
atpkg-publish index: the compare-and-swap compares in scratch, not in --out
atpkg-publish channel: a lapsed head is re-signed, the gate's reason is read, review fixes
atpkg-publish cli: the channel verbs' synopses name every flag they take
lane: the Apple lane and the lanes' shared state, holds and reports in Rust
lane: the Linux lane, the snapshot install and its units, proven in Rust
provision: acquire the stock exceptions; bootstrap-publisher.sh folded in
provision: acquire under the build-stack header, before the checks it feeds
host: fetch_repo — a scratch clone is fetched as the host's identity
lane: sign only what is proven — verified bases on both owners, a live key, the head's groups
lane: the snapshot is the tree it names; state that survives the migration
lane: delete the shell lanes and the suite that drove them
provision: acquire over an injected rustup, proven against a stateful one
docs, cli: the lanes' signing rules as they now stand; the lane synopsis whole
lane: one check that a signed pair is the program and build it claims
atpkg-publish: the group's trust repo reaches its packers; one roster election
atpkg-publish: one signer check, every head key carried or refused, one exposed list
tools: the last atpkg producer scripts go; every reference names the Rust verb
atpkg-publish: a release's SHA256SUMS is read under its own bound, not a manifest's
trustfmt: the integration's own edits, formatted
trust floors: atpkg-publish measured at 555/3239 through the lane
aterm-link: one mint-secret reader, and on reads the modes it reports
aterm-link: the one-host broker fabric on runs is guarded
aterm-link: a supervised broker rolls onto a replaced build
aterm-link: join takes a ring that expires, and mint-for --expires
aterm-link: tidy the broker's exe watch and guard note
aterm-link: on reads the rendezvous file's mode before it says 0600
aterm-link: one connect, bounded from the dial to every read and write
fabric tail over granted faces: a rendezvous hand-off, not an unbounded queue
aterm-link: back off a link that did not stay up, with jitter, holding nothing
aterm-gui: build.rs reads pins.rs by #[path], not an aterm-update-core build-dependency
aterm-spec-macros: drop syn's extra-traits; delete the dead syn/quote/proc-macro2 workspace rows
aterm-http, aterm-net: one provider() seam each; ring is one workspace row
harness: a person's own exchange is theirs — no token needed to answer a greeting
aterm-link: a roster read that did not finish is "unknown", never "nobody advertises it"
aterm-link: the routing read folds in the records its Last walk omitted
aterm-link: the fleet-halt splice folds newest-wins on offset
aterm-link: the attach answers the halt it applied from the Last snapshot
aterm-link: key the sender's refusal notice on the offset it answers
aterm-link: correct three comments about what astream does
vendor/astream: integrate the first-party capability digest
release: check source signing before a fresh cut on resume
forge: classify the bus digest without requiring the retired sha2 graph
bridge_recovery: wait for the halt-acked watermark before deleting it
Fix audit findings in shared policies and resource boundaries
Record measured search and selection obligation totals
Account for vendored modification notices in source measurements
Keep the GUI ABI census attached to sends after module extraction
Refresh dependency measurements after the bus digest merge
vendor/astream: bump to 9a8a6c2 -- astream-cap hashes with astream-digest, not sha2
aterm-forge: bill a vendored first-party crate's dependencies, tested on a built edge
aterm-link tests: say what deleting halt-acked sets up now
atpkg: vendor versions gain the revision tier (x.y.z-R<n>[.<s>])
atpkg: sha512 as an alternative payload digest (D4)
atpkg: the tar-gz-binary payload lane (one file of a gzip tar at bin/<entry>)
atpkg: a vendor row may declare an exact URL query and never have been index-pinned
atpkg: a sha512 sighting still writes an empty sha256
agy and muse outside atpkg: shell twin watch, table-driven agent predicates, copy
atpkg: agy and muse join the vendor-direct agents
atpkg: a wanted vendor program serves the seed without the index
vendors: one candidate builder, laid-only shadowing, whole four-agent titles
atpkg: seal a single-binary build's bin/; a pass keeps an unread vendor head's download
atpkg: agy/muse digest logs survive older clients; muse logs after its pin
atpkg: say what the seal does not stop for agy install
aterm-gui: the frozen-tab note's widths follow the product-name title
release: use descriptor-isolated children across parallel work
link tests: accept the supported entropy fallback in backoff checks
aterm-objc: add cf and cg, CoreFoundation/CoreGraphics held to the SDK
winit: call CoreFoundation/CoreGraphics through aterm_objc::cf/cg
aterm-objc: say what cf's opaque types are
aterm-forge: the mac rows and winit's marker floor as the CF/CG carve left them
aterm-objc: the cg feature's comment says what feature unification does
aterm-objc: the GUI sent-prototype census walks app_menu_bar.rs
aterm-link: one state dir is one bridge — hold it for the bridge's life
aterm-link: bound a bus-supplied presence inc= below astream's reserved half
aterm-link: a deduped answer to a just-reserved sequence is a collision
aterm-link: a reader thread that cannot start fails the attach
atpkg-publish: lane install refuses a missing machine record; two refusals read as one line
help fabric: stalled says when it shows and how the bridge's jittered back-off redials
aterm-link join.rs: a forged human's lift withdraws that human's halt, not every halt
winit: cut the Android, iOS, Orbital and Web backends
winit: drop the unused startup_notify extension
winit: print the platform cfgs from build.rs, retire cfg_aliases
winit: count key-text graphemes with aterm-grapheme, not unicode-segmentation
winit: hash the Wayland backend's maps with aterm-hash, not ahash
winit: decode X11 drop URIs with the backend's own helper, retire percent-encoding
winit: define SmolStr in the fork, retire the vendored smol_str
aterm-release, aterm-census: drop smol_str's floor and winit's iOS exemption
winit: carry the modification notice on every file aterm changed
winit: review tidy-ups — SmolStr's invariant, stale pointers and docs
aterm-forge: re-pin winit's marker floor for the trim and the CF/CG carve together
Preserve agent aliases in frozen-tab guidance
Report a sequence collision as a stalled fabric link
lz4: remove unsupported total contracts from partial sink operations
gpu: settle resident atlas readers before CPU uploads
gui: reconcile predictions against untouched logical cells
aterm-link: a standby bridge is neither the proof's instance nor the retirer
aterm-uds: the /dev/urandom fallback waits for the seeded pool, as getrandom 0.2 does
getrandom: first-party getrandom 0.2 over aterm_uds::rand, patched under ring
aterm-uds: the readiness poll declares bionic's nfds_t as unsigned int
getrandom: the macOS row names aterm-uds's /dev/urandom fallback
cleanup(phase): trim aterm-phase's dead API, trait boilerplate and policing tests
cleanup(supervise): drop copied defaults, the footer mode copy, word registries and free-text retry matching
cleanup(harness): drop dead paths, duplicate helpers and policing tests
cleanup(harness): review fixes
cleanup(gui): fold the harness row tests, drop dead registries and pins
cleanup(gui): review fix: the harness row test checks the rebuild against the reader
cleanup(atpkg): doctor reads primer's Claude defaults; dead params, checkers and duplicate edge tests out
cleanup(atpkg): review fixes
aterm-link: on re-mints a node cap its guarded broker would refuse
aterm-link: test that on --service systemd refuses an unmanaged broker
lab: the real-Claude lab as a Rust crate (crates/aterm-lab)
lab: Claude Code's screen text from aterm_phase::anchors; footers accept the bypass dialog
lab: retire tools/real-claude-lab, capture-claude-screens.sh and harness-capture.sh
lab: dated measurements name the real-Claude lab, not a crate that did not exist then
xtask perf: every lane selectable, typed outcomes, the arena and wasm lanes in Rust
docs, comments: point at the xtask perf lanes and crates/xtask/golden
xtask perf: only the floor lanes decide whether the trend appends
xtask perf: the arena lanes run end to end and clean up after an interrupt
docs, census: name the perf lanes, not the scripts they replaced
xtask perf: a re-record excuses only its own lane's trend breach
xtask perf: an unusable baseline fails, and a lane that judged nothing says so
xtask: the interrupt test hands its runner the default signal disposition
xtask perf start: the worker and GPU drill-downs are summarised again
xtask perf compare: RFC 3339 run timestamps; drop an unreachable refusal
xtask perf: the arena ledger template is read before any trial
aterm-spec: models register themselves and declare their bounds
aterm-spec: the Trust checkers run from spec-check, never ambiently
aterm-spec: test that writing a model registers it
aterm-spec: drop the per-test copies of the non-vacuity sweep
aterm-spec: the model workflow names uncaught laws and spec-check
aterm-spec: spec-check counts uncaught laws, it does not list them
aterm-spec: a vacuity audit finding names the reason, not ty's transcript
ay: each obligation declares its verdict; spec-check walks the bundles
aterm-spec: models declare their scenarios; each law is what it declares
aterm-spec: drop two tests left with empty bodies
aterm-spec-macros: #[refines] requires its projection
aterm-spec: spec-check holds its controls to the real tools
aterm-spec: spec-check's doc names how test obligations run
aterm-spec: a violation step must break a law from a lawful state
aterm-spec: the checker run is a feature, not an environment variable
aterm-release: ship dev-app builds this checkout into aterm (dev).app
aterm-release: dev-app's tool calls take their words and paths as one argument list
aterm-release: dev-app takes its targo from the cutter's resolve_targo
aterm: the words that said tools/dev-app.sh name targo --unverified ship dev-app
tools: delete dev-app.sh, dev-sign-id.sh and test-dev-sign-id.sh
aterm-release: dev identity tests pin the keychain settings and read this Mac's keychains
aterm-verify: the delivery roster drops test-dev-sign-id.sh and its run-alone lane
atpkg: comments name ship dev-app, not the deleted tools/dev-app.sh
aterm-release: dev-app pins its build to the plist's stamp and scrubs CARGO_BUILD_TARGET
aterm-release: site and transforms ported to typed Rust (not yet wired)
aterm-release: ship site and ship hook — the publication hooks and the site deploy in Trust
publish: site-sync.py and the two shell suites deleted; docs name ship site and ship hook
aterm-release: a signalled pre-promote check exits 128 + its signal
aterm-verify: the delivery stage drops the two suites ship site and ship hook replaced
aterm-release: the site tests name a neutral site layout
aterm-release: the site sync keeps the release's child rules, and says what it did
aterm-release: the export transforms run as the captured commit's own code
aterm-release: the commit's own cutter command is built in one place and tested
aterm-update: install.sh's tests as a Trust integration test
aterm-update: install.sh's Linux verifier held to the updater's chain
aterm-update: install.sh's source-build cargo gate under test
tools: retire install.sh's bash and Python suites for the Trust tests
aterm-update: the cargo gate through a case-changed checkout path
aterm-update: name install.sh's real floor in its tests' doc
aterm-update: install.sh's verifier tests fail closed and reach every binary check
aterm-update: install.sh's tests fence what the bash suites fenced
libc-oracle: the binding generator is aterm-libc-oracle regen, in Trust
libc-oracle: regen writes nothing until every cell generated
Verify pinned publication identities before accepting retry offsets
fabric: remint root node caps when their mint secret changed
link: watch the broker invocation across executable replacement
Keep grant grammar checks in combined cap validation
Resolve bundle staging paths before changing probe cwd
Keep bundle admission sysroot when skipping hello
Keep publisher snapshots alive until service arming succeeds
aterm-link: the sealed rung is a required-features target, so its arms are linted
aterm-forge: delete the real-checkout OB-1 unit test that attest already runs
aterm-verify: a vendored change selects its dependents from the graph, not the workspace
aterm-release: a release refuses a submodule pin its declared branch does not carry
aterm-release: the Trust lane discovers forks from every feature's graph
aterm-verify: say that a cone seed can be a vendored package
smallvec: replace the registry crate with a facade over aterm_alloc::SmallVec
aterm-link tests: the harness mints the shipped node ring
aterm-link tests: polled bus reads share one healing read connection
aterm-link tests: an outage is observed before it is asserted on
aterm-link tests: the will is followed across a broker restart, not only a kill
aterm-link tests: what must not happen is counted behind a barrier, not a pause
aterm-link tests: two vacuous crash tests go, the refill test proves dedup
aterm-link tests: astream's own contracts are astream's to test
release: fetch declared submodule branches from refs/heads
aterm-types: fabric_grammar, the one definition of the fabric's words
aterm-link: subject, body and the bridge take the grammar from aterm-types
aterm-gui: the endpoint checks the fabric's words by the one grammar
aterm-agent: the mail lane names kinds from the fabric grammar
aterm-census: the guards' script floor sits below what the ported tree holds
transforms: say what the lock pruning buys, as measured
aterm-census: installer-network fences install.sh's fetches to web_curl
aterm-spec-macros: pin the anchor records the attribute tests collect
aterm-spec: absorb inventory into aterm_spec::registry
aterm-link: a fleet halt is applied between the requests of a long duty
aterm-link: a replaced bus log lifts no fleet halt
aterm-link: an observer answers no halt, holds no inbox cursor, and is no node's twin
aterm-link: the presence retirements read the whole face, not the walk's rows
libm: first-party facade over std replaces the vendored libm fork
document-features: no-op proc macro replaces the crate behind wgpu
unicode-width: UnicodeWidthChar over aterm-grapheme replaces the crate behind naga
libm, core_maths: docs say libm is first-party and atanh is std's own
aterm-link: the merge's state import, formatted
aterm-spec: the registry holds only Sync values
aterm-gui: name the registry, not inventory, in the xref gate
aterm-scrollback: cold tier on the LZ4 codec, zstd feature deleted
pkg-config: un-fork to the registry 0.3.33 copy
aterm-census, aterm-forge: delete the userless build-dep-only fork class
Separate publisher baseline, quad emission and upload stages
Preserve atanh precision near negative domain boundary
link: refuse observer takeover when a local holder pid is unreadable
aterm-wasm: keep the binding module's import order its gpu-web twin mirrors
harness: an upgrade record whose agent word this build does not know is no record
aterm-phase: Program names its product, and identify dispatches a named program through its reader
harness: a [harness.<agent>] switch in the policy, and the lanes table
harness: review fixes for W4
aterm-spec: the harness host's worker and leave models gain the per-agent switch
aterm-spec: review fixes for W6 (the harness host models' per-agent switch)
atpkg: VENDORS is the one agent roster; the names, verbs, stub lines and activation set derive from it
aterm-spec: the worker model's switch-off mutant is Start's own Buggy branch
aterm-zstd: XXH64 and a raw-block frame writer, held to libzstd
atpkg: test fixtures write their .tar.zst frames with aterm-zstd
serde corpus: record answers on registry serde for every persistence surface
serde corpus: read a CRLF answers file as the LF one it is
serde corpus: one answers file for every host: '/' desk ids, LF inputs
serde corpus: its own bless variable; every edit through the once-only assert
serde corpus: toy-pack overrides in key order, not the hash table's
serde corpus: record a readable fabric carry, the ambiguous gate, an escaped key
aterm-gui: seed the alt-screen shed fixture under half its budget on LZ4
link: service urgent halts between last-value pages
trust: record completed link measurement at 565/2952
verify spec: run the ty-only conformances beside spec-check
xtask perf wasm: label the stock build STOCK EXCEPTION
integrate review: cone, publication pin, dead code, a stale citation
aterm-link: hold astream's capfile::Line as Cap, and redact Config's token
aterm-link: attach a whole ring under one Hello (Client::attach_all)
aterm-link: name a broker refusal by its code, not by ErrorKind::Other and its words
aterm-link: retire a post or receipt the broker refuses for good, and keep draining
aterm-link: long-lived subscriptions read with recv_live, so a silent link ends them
vendor/astream: bump 543f4bd -> dc7c7d1 (astream main)
aterm-link: the attach_all call sites, as trustfmt writes them
aterm-link: a refusal not known to be permanent holds back only its own session
aterm-gui: outbox takes the sessions in turn, so one full queue is not every drain
Cargo.lock: pin tempfile's getrandom to 0.3.4, dropping the 0.4.2 tail
winit: KDE blur behind an off-by-default feature, plasma off linux
aterm-update-core: pin the Linux SHA-256 arm's answers from ring
aterm-update-core: Linux SHA-256 on aterm-digest, not ring::digest
harness: a relaunch snapshot names its agent, and the relaunch and upgrade-drive gates match on it
harness: upgrade status, watch and resume answer each agent by an exhaustive match
supervise: a Codex lost login types nothing and escalates with codex login; the policy's agent gates are exhaustive matches
supervise: the engine loops answer every per-agent question with an exhaustive match on Program
aterm-gui: every per-agent gate outside the harness host is an exhaustive match
aterm-render: record the font oracle corpora and pin them (TF.1)
aterm-render: commit the font oracle's recorder; spell out the hinting digest (TF.1)
aterm-render: shape every face the font_features gate reaches; pin non-default instances (TF.1)
NOTICE: name the COLR v1 test fixtures' Apache-2.0 terms (TF.1)
harness: Claude Code's idle compaction ends no turn
harness: read the worker's last words through an idle compaction
aterm-phase: format the idle-compaction see-through
aterm-gui tests: size the alt-screen history by the bytes the store holds
aterm-gui: prune and correct its documentation
aterm-primer: prune and correct its documentation
aterm-link: the group-record waits in the bridge tests are hang detectors again
aterm-census: the guards' script floor sits just below what the tree holds
aterm-link: launchd is asked by the gui/<uid> domain it writes to, and a login with no such domain is refused by name
aterm-link: doctor's remedies are spelled for what the host is, and on will not take a host out of its fleet
aterm-link: a broadcast the gate refuses is read past by every frontier cursor
aterm-link: a broadcast catch-up pages one owed topic over its own filter
aterm-parser: drop the test-only batch path and tests that sample no spec
aterm-link: a bridge answers a fleet halt only with the state its holds reached
winit: headers, upstream's rustfmt style and lint-clean code, ahead of the re-home
aterm-window: re-home vendor/winit as a workspace member
aterm-window: repoint the vendored-winit wording the re-home left behind
aterm-link: a person side for the fabric — mint-for h-<name>, and aterm fabric halt|inbox|post
aterm-link notify: ask:<person> pages on an ask addressed to that person; a selector no cap grants is refused
aterm-link: Bridge::new checks its node against its cap, and refuses one minted for another node
aterm-link, aterm-cli, docs: what lifts a fleet halt and reaches a person names the command
aterm-link tests: the sealed two-host test tails the guarded broker through its faces
aterm-link: aterm link's usage names the person selector and the ring mint-for makes
aterm-cli: the fabric verb's front-door line lists halt, inbox and post
aterm-link: mint-for's expiry stamp takes the grant without a needless borrow (tippy)
aterm-link: a face at its mailbox bound pauses; its reader never sits on an unread socket
aterm-link: a subscription the broker cut while it answers reads cut-<face>, not closed
aterm-link: hold the broadcast face only while a local session has a topic
link/fabric status help and the manual: name the cut-<face> reason
aterm-link: a bridge whose aterm is gone stops at the next step
aterm-link tests: a bridge run through an update's ordering
aterm-link: the state dir flushes only what a power loss would outlive
aterm-link: a relaunched bridge re-learns its own in-flight offsets before it judges any
devtools: one spelling of the hand-over's words, and a decline marker
devtools: the digest line in atpkg's words, a Security capsule, and two window fixes
devtools: one hand-over lane for every origin, its quiet moment, and the panel's model
devtools: a DEVELOPER TOOLS status card leading Settings > Security
devtools: the helper panel on AppKit, beside System Settings, with aterm to drag
devtools: the helper panel comes in front only while System Settings does
devtools: aterm ctl devtools hand-over [now], and doctor asks the window first
devtools: record the panel, the card and the verb; manual, help and changelog
devtools: one spelling of each step, and doctor says what is true
devtools: the status card never cuts its state short, and every press hears how it came out
devtools: a row already on while macOS still checks is never "done"
devtools: a failed spctl run reaches the panel and the Settings bar
devtools: judge the quiet moment again when a spctl run ends
devtools: an automatic hand-over refused as unknown can ask again
devtools: a panel with no icon leads with +, and learns a late subject
devtools: the live panel hides for a minimized Settings, spends no drop outside it
devtools: the digest line follows what the list holds of aterm
devtools: the status card never cuts its state sentence short
devtools: the status card says which switch matters and when Not now holds
devtools: doctor honours Not now in its own open, and a stale window verdict
devtools: say what Open Developer Tools… does on an empty list
devtools: one copy fence for every surface, a lean state table, Linux-clean arms
devtools: leave a listed-on row alone, judge a drop by its image, hide on a lost window
aterm-gui: devtools names ship dev-app, which installs the dev bundle
aterm-gui: a keeper-recovered session comes back with its fabric
aterm-types: the hold and post help say what a keeper crash recovery carries
aterm-ctl: a cut post says a crash does not carry it, and so does the gone note
aterm-link: a login with no systemd user manager is refused by naming it, before the unmanaged-broker check
aterm-core: name the plain-cell style memo's key and value types
aterm-gui: deliver checks the session's own topic set and refuses a dropped topic
aterm-gui: inbox seen and a parked inbox get @<off> wake the push lane
fabric: inbox seen reports the addressed lane's refill floor, and the bridge persists it
aterm-gui: a seamless update keeps dropped= and counts the unread broadcasts it drops
aterm-gui: rewrap the fabric comments the floor edits left over-long
aterm-cli: rewrap the topic-drop sentence to the help page's width
devtools: the docs say what the hand-over and the panel do
capabilities: hold the token seals and the mint seal by type; delete their source scans
aterm-spec: delete foreign_facts_are_observed
aterm-objc: delete the send censuses and the objc2 exit-condition count pins
shims: delete the once_cell and core_maths consumer tripwires
triples: delete the two cross-tree roster tripwires
aterm-update-core: delete the env_reads registry
web bindings: one source for the six shared modules; delete the parity test
aterm-types: delete the control-verb prose and registry pins
aterm-cli: delete the help-page prose pins
aterm-primer: delete the block-budget and no-hook word pins
aterm-link: deny unsafe_code instead of counting it in the source
aterm-spec: delete the fabric Tier-1 pointer pin
consent card, exception digest: delete the banned-word and copy pins
control: a verb with no dispatch arm is refused, never a panic
aterm-types: hold the short catalog's byte budget at compile time
aterm-census: the launcher-mint guard keeps the root mint in the launchers
web bindings: one facade body for the 81 exports both terminals share
aterm-objc: a debug build checks every typed send's prototype at the send
atpkg: every published triple is a forge cell, checked on typed data
aterm-link: the screen-reader law is a forge ban; say what deny(unsafe_code) holds
atpkg: name the anchor test for what it checks
fabric tests: the world suites run the one aterm binary from crates/aterm
render tests: checked-in faces, and a typed could-not-run for the host's
gpu tests: the fixture face on both backends, and no GPU is could-not-run
fabric: format the injected fence-wait call sites
effects tests: no hidden tools behind #[ignore]
render/gpu tests: could-not-run only on host facts, checked-in faces elsewhere
gates: the test run waits on no lane, fence_wait is the one fence bound
perf gates: release benches, not #[ignore]d tests
gpu tests: one constructor that tells the host's lack from the code's
aterm-release: decide the cutter's identity at cut time, delete its build script
workspace: default-members leave out the publication tools and check runners
clean_islands: the owning crates' build scripts ask the compiler
test seams: debug builds carry them, so dev dependencies stop flipping features
aterm-release: judge the cutter as it starts, and refuse another checkout's build
aterm-verify: the changed-crate cone reads every member, not the default ones
build: rust-analyzer keeps going in its own target dir; stale references
aterm-release: a test that the cutter's verdict is never taken after its start
w4a: after the three merges — formatting, two AGENTS.md rules, stale mentions
fabric_world: main's joined-root test drives aterm link broker|serve
Foreign cells type-check again: islands stock can parse, two unix-only gaps
vendor/astream: bump dc7c7d1 -> aa9fb85 (astream main)
aterm-link: the will's TCP connection keeps alive, so a vanished host is marked gone
aterm-link: a broker that cannot be talked to says why — another protocol, or its own last word
aterm-link: offsets are one log's — a log of another identity forgets them all
aterm-link: a subject only this node writes, past its budget, is retired; topics keep a reserve
aterm-link: a re-base still owed is judged against what this process knows
aterm-gui: after a log switch the addressed refill floor is the new log's
aterm-link: the reserve test's one known subject is a slice of it, not a clone (tippy)
aterm-forge, aterm-census, xtask: a renamed [patch] row patches the package it names
windows-sys: first-party windows-sys 0.52 for ring, under a renamed patch row
harness: a person's question is theirs though its answer takes minutes
harness: a wall splits a job, it never makes it an exchange; primer keeps a job's token
aterm-core: name the plain-cell style memo's type
aterm-link: only a human halts the fleet — an a- service's cap holds no halt row, and every node takes a human's task
aterm-gui: the config watcher's thread runs a named fn, so the stamp source is made in a madeBy body
aterm-serde: carve serde_core 1.0.228 and serde's derive support into a std-only member
trust: record aterm-serde's first floor at 295/1818
aterm-serde: keep the ported suite inside aterm's attribute set
aterm-serde: pin the duplicate-tag error and the preallocation cap
aterm-link: a kept sid listed after the attach resumes from its topic cursors on disk
specs: recover the specs behind 8,350 tests in 21 more crates
aterm-link: the one writer onto aterm's lane refuses a line aterm would misframe
aterm-link: only the recipient's verdict books a refused delivery; a lane fault keeps the record owed
aterm-link: a roster the endpoint cannot list in is named once, not served; its rows read past added columns
fabric: the bridge and its instance name their lane grammar and build to each other (hello)
fabric: fabric attach arms only the command the instance's config names, never one the Owner token picks
aterm-link: the build-skew remedy names the host's own on, as every remedy now does
fabric: hello takes its place in the verb table's derived sets
aterm-forge: RowScope's doc names RowScope; in_row_scope says it reads the key alone
aterm-link: link log is bridge lane 2, written only to an endpoint that reads it
atpkg: bulk SHA-256 on ring's hardware digest (archive digest and extract fold)
aterm-digest: SPECS.md §5.3, the stale "compiled by path" claim, is done
aterm-digest: SPECS.md §5.3 names the date it closed, not a branch that is deleted on landing
aterm-effects: delete 30 tests that sample no spec
aterm-grid: delete 224 tests that sample no spec
aterm-core: delete 24 tests that sample no spec
aterm-messages: delete 3 tests that sample no spec
aterm-types: delete 17 tests that sample no spec
aterm-search: delete 45 tests that sample no spec
aterm-selection: delete 8 tests that sample no spec
aterm-grapheme: delete 21 tests that sample no spec
aterm-vi: delete 8 tests that sample no spec
aterm-regex: delete 1 test that sample no spec
aterm-predict: delete 1 test that sample no spec
aterm-rle: delete 1 test that sample no spec
aterm-alloc: delete 1 test that sample no spec
aterm-digest: delete 1 test that sample no spec
aterm-lz4: delete 1 test that sample no spec
aterm-sixel: delete 1 test that sample no spec
aterm-log: delete 2 tests that sample no spec
aterm-link: a broadcast on a topic the session dropped is its verdict, not a lane fault
Require the explicit serde corpus blessing value
Exercise the intended serde corpus field shapes
phase: preserve indented worker words through idle compaction
phase: stop attachment backtracking at blank rows
Correct current Trust and export documentation references
Show the package selector in Trust lane help
aterm-link: expose unconfirmed halt acknowledgements and missing retry
aterm-link: confirm all live holds before acknowledging a fleet barrier
style(link): format the isolated saturation helper
build: lock the model conformance test dependencies
aterm-release: main's export-cutter attestation test expects <target>/pre-promote
themes: stale comments and docs say what the code does
aterm-core: config/theme changes move the colour baseline; program-set colours and the kitty colour stack survive
surface refused OSC 4/21 palette sets once; default stays off
aterm-types: the themes folder is derived from the aterm.toml directory
theme catalog: every skipped file gets a row, caps apply after filtering, truncation keeps a prefix
aterm-types: one ThemeSelector grammar for dark:/light: values
one dark/light classifier: renderer, effects and web use ink::bg_is_light
aterm-render: Theme derives PartialEq/Eq/Hash and converts from ThemeParts
theme parser: duplicate keys, DTP spellings, #RGB, description/author, foreign-format hint
ink: ensure_contrast picks its anchor by the contrast it can reach
band: warn and error inks seed from the theme's ANSI yellow and red
tab strip: floor the accent at 3:1 and stop calling the text floor AA
find: highlight-all is a visible tint, apart from the current match
matrix rain: hue = "theme" falls back to the accent on a neutral fg
aterm-gui: Config::resolved_colors resolves the theme and every colour override once
themes: ThemeMeta on catalog entries; built-ins carry description, pair and Default Light
themes: aterm theme import converts other terminals' themes into a native .conf
theme colours: #RGB needs its #, so a bare word stays an error
aterm-gpu: the Metal path takes the NSView from aterm-window; raw-window-handle leaves macOS
Retire Smart Titles (title_summary): every chrome label is the title alone
Retire Smart Titles: fix the review's residue findings
aterm-http: delete the request/response half Smart Titles left callerless
trust: aterm-http's floor follows the deleted request/response half
aterm-http: the probe's handshake is the crate; drop the stream it never used
aterm-http: restore the request/response half for aterm-lab
aterm-gui, aterm-link: a receipt for a row of an earlier log is retired, never published on the new one
aterm-link: an in-flight record decided on another log is dropped at the re-base, never republished
atpkg: discovery asks its HEADs in rounds, quads and manifests at once
atpkg: pin that the fetcher's walk and the set completion really go out at once
aterm-render: take rustybuzz types out of the public API (TF.2)
aterm-render: read the hinted advance and the unhinted LCD outline off skrifa (TF.2)
aterm-render, aterm-gui: font_hinting = native renders as light (TF.2b)
aterm-render: pin the hinted advance on a face whose width moves with wght (TF.2)
docs, aterm-render: list TF.2's sub-pixel deltas for acceptance (TF.2)
atpkg: a session's detached passes run at utility QoS, like the window's
new tab: an unanswered network folder starts in home; zsh/bash integration forks less
spawn folder: a failed home folder is asked about once; the zsh tty comment says which bodies defer
accounts v2 S7: the login lifecycle — renewal through a staging home, waited-at ended logins, one ask per machine
accounts v2 S7: one machine deep per sitting; a renewable login never signed in where it stands; renew named where it signs in; the default login stays the own row's; staging homes claimed outside the label space
accounts v2 S7: a login a renewal replaced is never sent to renew again; the tab is told what still holds it
accounts v2 S7: a renewal made while its escalation stands decides the point again; renew names the master switch
accounts v2 S7: a renewal made under a wall is waited for, not asked again; a superseded login's end strikes nothing
accounts v2 S7: a superseded login follows its renewed one whatever the account's usage
accounts v2 S7: the opener's profile is internal protocol; a module a test-only file declares is test-only
accounts v2 S7: no follow onto the same account at a usage limit; one account's tap readings are recorded
accounts v2 S7: at a usage limit a session is its account's; the tap follows the one account through its renewals; the off switch's docs name the real gate
accounts v2 S7: [harness] hosts names the machines; renew says sessions move at their next idle turn end
spawn folder: trustfmt the home-check test
spawn folder: say where a hung network home still holds the child
aterm-zstd: recorded CLI frames for the decoder, held to libzstd
aterm-zstd: the decoder, carved from ruzstd 0.8.3, held to libzstd
xtask perf: a zstd decode floor (aterm-bench zstd_decode_harness)
aterm-zstd: a cargo-fuzz target for the decoder (STOCK EXCEPTION)
aterm-zstd: recorded RLE-table and 9 MiB-back frames, held to libzstd
aterm-zstd: Decoder docs name each check libzstd skips; stale zstd notes fixed
aterm-zstd: literals header read as fixed-width words; floor 157/720, reproduced
aterm-gui: a post still queued at a log switch lands on the new log and keeps its re-id
aterm-link: a log switch forgets the inbox-group debt the old log owed
harness: Autopilot — the [harness] autopilot key, Land's turn ends, and Off's park in the loop
harness: what the harness did, folded from its ledgers for Settings ▸ Harness (Autopilot slice A2)
harness: the harness card's pure emitter (rainbow border, pixel-art kitty, trail, stars) and its motion and serious-mode entries
harness: Autopilot and its stats, the review's findings — Off gives the claim back, Land's answers and ends, a person's wait while a badge stands
harness: review fixes on the card locator and the harness card — a narrow banner is refused whatever follows it, the card's version, a kitty clear of the border, an owed episode, a final deadline and a pane clip
harness: Autopilot in the window — the session's word, the host's Off, status and ls, Settings ▸ Harness and the API the chips build on
harness: the review of … — Off published before any start, the disk watch and the exit read hands-off, an Off restored drop clears its word, a real let-go caught
harness host: the review's nits on … — the design names every Off skip, the probe pauses while a pass publishes, the measured flake rate
harness: Autopilot's second review — Off's panel gets one plain close, a park takes the loop's badges down, every badge's end is journaled, Land's rules are the policy's, a holder is said once
harness: second review on the card locator and the harness card — a bare narrow banner only at the narrow column, the version from the banner row itself, a bounded settle ask, nothing drawable holds the episode, an owed episode lapses
harness: the Autopilot and ⚙ chips in the rule under Claude Code's input box
harness: Settings ▸ Harness as its own page — switches, each session's Autopilot, what the harness did, the A/B wait share and the effective table
harness: the harness card on the glass — Claude Code's launch card wears the rainbow border, the kitty on its trail and the enhanced by aterm harness line while the harness carries the session
autopilot: the merged surfaces settle the API's dead-code allows — default_mode had no reader, ALL is the tests' sweep
harness: Autopilot's third review — Off's ledger panel waits out its grace, a park's badges come back without a second ask, the card's owed show covers the latch
harness chips: a pill too wide keeps Autopilot, the gap between chips is theirs, the reader allocates nothing
harness card: the review of … — cut out under the tab menu, frames anchored and judged every wake, the card moves with its pane, no wake behind Settings, serious mode in the key
harness: Settings ▸ Harness review fixes — session presses Owner-only on both control paths, no ghost row for a closed tab, the A/B per Autopilot state (Cruise against Off), the default's button hands a session back
autopilot: what a real aterm showed — a lock-order cycle, a dropped second click, Sessions on page one
autopilot: an Off loop's busy reads act on nothing; a spent landing wraps no relaunch; an adopted limit ends where the worker answered
autopilot: Off forgets an ended agent, the upgrade view sets Off aside, a lapsed claim moves the A/B arm
claude lights: one narrowing order, every button and the rename on the chips' glass
Settings ▸ Harness review fixes — Search draws Default autopilot, an Off press pins Off, the A/B says a finished agent waits, midnight that comes twice
autopilot docs: say what Land, the chips and Settings ▸ Harness actually do
harness card: no per-frame copies under the menu or per pane, no window-server ask without a card frame
harness_host tests: wait for the restored landing's look, not the step's count
autopilot: the harness card and chips cost a frame at rest nothing
claude_card: an episode draws a frame a frame time, never a frame a wake
harness card: an episode cut off by lost motion rests — replayed, no clock
aterm-phase: the launch card's scan says where it stopped, and a kept reading is checked without one
harness card: a repaint that moved nothing the card reads costs it nothing
harness card: a kept layout re-reads only what its layout read, and a refilled stream costs the strip no sort
aterm-link: fabric inbox reads a long catch-up to its end and marks read what it scanned
aterm-cli, aterm-link: the manual and fabric help say what a bare on keeps, and when it is refused
atpkg: the seed puts bin/ on PATH and answers targo before trust lands
atpkg: the toolchain walk's pending-stub check reads its head lossily
atpkg, aterm-cli: a pending command stub holds no call hostage
Tests and benches build with debug assertions: say so, drop what assumed otherwise
Stale pointers to deleted tests and helpers
aterm-gui: the theme-catalog tests' imports compile on Windows
aterm-update: find a release in about a minute, and check 3 s after a wake
aterm-gui: about_to_wait is O(1) in tabs, booked and watched; no UI-thread wait on a helper is unbounded
aterm-gui, aterm-types: the paused-writer test fails instead of hanging; metrics help names main_busy_ms_per_s
aterm-gui: harness_host's retry-plan doc no longer says the clock is a date subprocess
aterm-link: aterm fabric and notify --on halt report a halt by the bridge's own rule
aterm-gui, aterm-link: the fleet never lifts the owner's local hold
aterm-gui: the wake-surface comments say what the surfaces print, now the hooks are gone
fabric: a stopped bridge's log and the comments say what the default does to its sessions
fabric: a refused Release and the fabric skill name the command that lifts a fleet hold
aterm-rle, aterm-grapheme, aterm-grid, aterm-search, aterm-bidi, aterm-gui: Clean islands under cfg(trust_verify) go through a token-dropping macro
xtask: gate cells does not owe a target artifact for a crate only proc macros reach
bumpalo: first-party Bump::new + alloc_str for wasm-bindgen's interner
aterm-gpu-web: take the canvas types from wgpu::web_sys and drop the web-sys row
aterm-wasm-abi: the console.error panic hook replaces console_error_panic_hook
aterm-time: the browser clocks are a link-time seam the wasm module defines
bumpalo, aterm-effects, forge: WP.1-4 prose says what was measured; parity keys its non-vacuity per file
aterm-gpu, aterm-gui: compile the first window's Metal shaders on a launch worker
aterm-gpu, aterm-gui: the first-frame Metal warm runs at Responsive on every order, and its hold test waits on a hang detector
aterm-link: a log restored under its own identity keeps no in-flight record decided before it
aterm-update: the installed-build cache is not held across the PlistBuddy read
aterm-gui: the messages writer's overflow is locked in place, so the lock census sees its holds
Exercise GUI record references across bus log switches
Keep GUI mail record references on their bus log
Exercise log switching at Commit and successor boundaries
Exercise notifier identity uncertainty without changing its saved offsets
Use the scalar log floor in addressed refill filtering
Apply endpoint log transitions before admitting a new bridge
Refuse uncertain notifier log ownership before adopting offsets
Exercise supervisor stderr attribution by recorded deployment role
Attribute broker stderr only to a locally served endpoint
Own Link fixture threads and bound concurrent broker cases
Cancel fixture relay accept without a spare descriptor
Let scripted lane hangups close their active stream
Keep Link socket fixtures under a short private path
Resolve roster links before reading the write target
Keep person inbox snapshots within their captured log and head
Bound concurrent agent control fixtures before opening descriptors
Keep seed coverage when zsh is unavailable
Refresh Autopilot before actions inside a busy wait
Count badge waits only from confirmed journal results
Exercise per-agent Autopilot projection against live policy admission
Reach the real roster through its test-only control reexport
Join effective Autopilot projections with each agents policy gate
Measure the WASM panic stack separator when slicing smoke output
Exercise durable rewind refusal through regrowth and bridge reopen
Refuse a rewound known broker identity until a durable new-log fence
Exercise recovered message writer draining without another UI call
Refresh native timezone rules before reading local offsets
Let the message writer drain accepted overflow without a UI wake
Observe the actual endpoint clock requests in rewind refusal regression
harness: trust_roots defaults to Claude Code's own temp root, not one person's folders
harness: Claude Code's temp root is a Read root only once proven the user's own
harness: no root reaches into a temp root the probe refused
harness: trust_roots is empty by default; the temp-root ownership probe is gone
harness: say trust_roots' empty default matters under "safe"; pin trust_dialog = false's clear
harness card: Off back to Cruise plays the episode though the claim lands a frame late
Settings ▸ Harness: a session with a blank title is named by its program
aterm-gui: the bus-log retirement wait uses the session's fence bound
new tab: identities are made on the control thread, no per-spawn edge sweep, one stat per private dir, warn once, scripts warmed at boot
atpkg: a first run lands the Trust toolchain first, the agents beside the rest of the set
atpkg: two lanes of one pass never lay agents/ or one shim name at once
atpkg: a first run's progress queue names the toolchain before the agents that wait for it
atpkg: the agents/ turn is taken at each site, where the lock-order census sees it
atpkg: an agent a person asked for lands beside the toolchain, not after it
xtask: gate cells owes no target artifact for what only a proc macro reaches
aterm-serde-derive, aterm-macro-support: a syn-free serde derive over aterm's closed attribute set
trust: record first floors for aterm-macro-support (97/484) and aterm-serde-derive (106/441)
aterm-macro-support: read a discriminant as an expression, not a type
aterm-macro-support: keep a leading :: in an attribute key
aterm-serde, aterm-serde-derive: say who depends on aterm-serde before SP.6
trust: raise aterm-macro-support's floor to 100/491
aterm-agent: prune and correct comments
aterm-census: prune and correct comments
aterm-core: prune and correct comments
aterm-ctl: prune and correct comments
aterm-effects: prune and correct comments
aterm-gpu: prune and correct comments
aterm-http: prune and correct its documentation
aterm-render: prune and correct its documentation
aterm-gui: one theme-install path; DSR 996 / mode 2031 report the palette on screen
theme listing: aterm theme list, list-themes and --list-themes print one report
settings preview: draw the colours Config::resolved_colors resolves, not a VGA table
themes: built-ins legible as shipped, a derived selection band, split-override warning
themes: signature themes, two light/dark pairs (Aterm Night/Day, Hearth/Linen)
aterm-types: one import write path for the CLI and the window
Settings theme picker: filter, sections, Needs-attention rows, verbatim labels, swatches
aterm ctl theme: live theme read verb, transient preview lane, miss-reporting replies
theme: the OS appearance has its own source, read before launch and independent of window chrome
aterm theme check | new | export | schema: theme authoring for humans and AIs
aterm-types: Default's description says pale grey, so a "light" filter finds light themes
Settings: Follow system light/dark pair editor on the theme card
aterm-gui: command palette Theme section with live preview; View ▸ Choose Theme…
aterm-gui: an unset theme follows the OS (dark:Default,light:Default Light)
aterm-gui, xtask: name the time before winit runs, and the freeze's end on the successor's clock
aterm, aterm-types, xtask: a real headless boot reaches every preparation cut
aterm-zstd: Decoder::require_checksum refuses a frame without a content checksum
atpkg: .tar.zst decodes with aterm_zstd::Decoder; an unsigned tree_root requires the frame checksum
aterm-zstd: trust floor 157/720 -> 156/719, the obligation NoChecksum took away
aterm-gui: a session holds a set of origins, so a fleet lift never frees the owner's stop
aterm-link: the bridge converges the fleet's slot alone, beside the owner's hold
help, manual, fabric skill: a hold is a set of origins
aterm-gui, aterm, atpkg: bin/ on every session's PATH from the first tab; the first run's row and seed at launch
aterm-gui: the early first-run row claims no outcome for a pass that only waited
aterm-verify: fold xtask in; fmt, forge, cells, census and guards run in-process
docs, config: point every xtask reference at verify
aterm-verify: cells audits only rows no foreign cell can use; fmt names
aterm-verify: fixture tests for fmt and the in-process checks' refusal
aterm-verify: a census walk the library no longer has is NOT RUN
aterm-gui, aterm-forge: name verify cells and verify forge in two comments
aterm-verify: one JSON reader, one lifeline, one rustup cargo
aterm-verify, aterm-forge: apply the fold's review
aterm-agent, aterm, docs: no live text names the deleted xtask
contract-probe: the Trust contract probe as a crate and its tests
forge: forge serde-attrs, the serde key inventory in Rust
docs/measured: the NSEvent accessor matrices, without their probes
lab: lab instance, a private headless aterm for agents; visual-judge goes
lab: lab codex-upgrade, the Codex live upgrade in Rust; tools/ is install.sh
trust: floors for aterm-contract-probe and the grown aterm-forge
contract-probe: the off-switch lane builds through targo --unverified
aterm-verify: codex drives lab codex-upgrade; the contract probe is an ordinary test
aterm-verify, aterm-forge: trustfmt over the merged files
atpkg: lease, quiet and toolchain docs name the runs that exist
aterm-gui: comments state the rule, not merge-gate measurements
comments: drop merge-gate vocabulary across the crates
tools, docs: name verify's checks, not tools/verify.sh
aterm: headless_activation names only the posture a regression reads
aterm-digest: the SHA-256 header states only what is true
aterm-types, aterm-update-core: keep the strict Trust gate wording
atpkg: a view lease is an aterm pkg lease holder's
aterm-gui: the last gate vocabulary goes from comments
comments: a loaded machine, not a loaded gate
comments: a test failure, not a gate failure
aterm-census: the shared-application guard admits os_appearance's two windowed-only sends
aterm-verify: a run, not a gate, in its own comments
AGENTS.md: tools, checks and tests are Trust code in crates
aterm-verify: cells finds a third-party proc macro through forge's package_dir
atpkg: the frame-checksum install test is unix-only, like the vendor helper it calls
aterm-wasm-abi, aterm-wasm-abi-macros: the export layer that replaces wasm-bindgen's runtime and macro
xtask: wasm-glue writes a module's JS glue from its aterm_abi descriptor; gate wasm-glue binds the toy
aterm-wasm-abi-macros: string literals through aterm-macro-support
xtask: gate wasm-glue builds the toy staged, so its module carries no host path
aterm-wasm-abi, aterm-wasm-abi-macros, xtask: an export returns its throw in the return slot
xtask, aterm-wasm-abi: wasm-glue refuses an unrecorded export; the oracle against wasm-bindgen
aterm-link: the bridge reads its cap ring again before every dial
aterm-link: aterm link broker --repair <log>, and doctor prescribes it
aterm-link: the systemd unit appends the broker's stderr to <root>/broker.err
aterm-link: fabric on and doctor compare and name each bridge's program
aterm-link: keep the mint usage row's column after the --repair row
aterm-link: QueuedPost keeps its doc line beside the new ring helpers
aterm-forge: OB-1's mutation controls start from a built valid tree, not the live checkout
aterm-release: the Trust lane gates a member feature that turns on fork code as a row of its own
trust: floor aterm-link+sealed at 623/3380, measured; the roster says the sealed arms are verified
aterm-link: read_fleet_halts says what a second page of the halt walk really takes
aterm-link: directed mail cannot spend the node's subject budget on made-up destinations
aterm-link notify: a standing attention pages once per transition, not once per offset
aterm-link: the subject-budget door judges a post once, before its sequence is reserved
aterm-update: the stage pays the first-exec scan, one bundle's helpers run at once, helpers end at their exit
aterm-uds: outputs_until keeps a pipe open across an interrupted read
aterm-update: the stage probe never starts a build the records already withdrew
aterm-uds: outputs_until's tests hold no latency budget on work that must finish
aterm-gui: tell the bridge the handled watermark, and carry what it refills
aterm-link: a durable handled floor per (sid, topic) re-offers unhandled broadcasts
control verbs: topic ls and inbox-seen say the handled watermark they carry
aterm-gui: the topic verb's tests read the seen= its ls header now carries
aterm-gui: a cold launch rebuilds its desk a slice per park, not in one turn
aterm-gui: a drained tab behind the front one redraws only the strip; a quit stops the drain
aterm-gui: Settings ▸ Themes, the Theme Showcase (gallery, live trial, Customize, Save as theme)
docs and model: themes help topic, architecture section, DTP amendments, ghost invariant
community and AI theme-authoring kit: guide, template, examples, aterm-themes skill
aterm-render: record SF India's CFF2 faces; split the oracle's std-only half (TF.3)
aterm-render: record a committed CFF face in the font oracle (TF.3)
aterm-font: carve ttf-parser's outline core into a first-party reader (TF.3)
aterm-render: record every GSUB lookup's subtables in the font oracle (TF.3)
aterm-font: carve the GSUB reader the autohinter's style coverage needs (TF.3)
trust: record aterm-font's first floor at 434/1671
aterm-render: record the faces past 32 gvar tuples with ttf-parser's gvar-alloc (TF.3)
aterm-font: draw a glyph past 32 gvar tuples, as Linux's ttf-parser does (TF.3)
aterm-font: bound cmap enumeration; refuse a CFF2 blend on an empty stack (TF.3)
aterm-font: say why a stack push always finds its slot (TF.3)
atpkg: the window's seed asks no index, the [machine] edge runs beside the pass, the lock re-polls every 50 ms
atpkg: machine apply lets its queue go before the build-cache walk
atpkg: the set completion fetches its next archives while it stages the one in hand
atpkg: the download-ahead lane asks the network nothing to plan, and a finished download waits honestly
aterm-gui: the drain's crash-journal test is unix-only, like the journal's test helpers
accounts stats A5: list-price dollars, the spend file and capacity
accounts stats A5: the spend seam files a non-id model as unknown
accounts stats A5: re-record the transcript usage projection's answer
accounts stats A5: one count per message in the home, a session's price, lab.sh prices
accounts stats A5: a price check compares only a span the table prices whole
accounts stats A5: rewrap the price check's module note to the file's width
accounts stats A5: the price catalog check is the lab's prices verb
accounts stats A5: a price check compares only spans of closed messages
accounts stats A5: a stream the person stopped holds its span's check off
accounts stats A5: count a message approx from the first row that says so
accounts stats A5: drop the price check, take C from five-minute buckets, approx from any row
accounts stats A5: no capacity from an empty numerator, and left's error bar unclaimed
accounts stats A5: any iteration but a plain message makes a message approximate; the backfill seeds C only from windows with no credit use
aterm-zstd: the level sweep and its flip verdicts recorded, held to libzstd
atpkg-publish: packs compress through the zstd CLI, read back by the client decoder
aterm-zstd: the differential runs on recorded answers; zstd, zstd-safe, zstd-sys leave
xtask gate, forge budget, docs: the zstd family's ledger entries retired
atpkg-publish: a compressor that does not start is named without a PATH claim
atpkg-publish: the Apple lane refuses a run without the zstd CLI before any build
atpkg-publish: the pack drains the compressor's stderr while it writes
aterm-zstd: a cut between frames decodes to exactly the frames before it
Cargo.toml, audit: jobserver's stale contracts and the recorded total corrected
aterm-gui: a new tab's shell spawns off the event loop
aterm-gui: a tab spawned off the loop lands at its window's grid and revokes an overlap
harness card and chips: trim the per-frame cost (rest 3.4 -> 2.4 us, episode 13 -> 8.4 us over the bare footer)
harness card: a test that the border's and trail's segments meet; the host model's doc says what its linger witnesses
census guards: os_appearance's two sharedApplication sends are windowed-only sites
aterm-gui: a broadcast the refilling bridge let go of is counted lost
aterm-link: UNHANDLED_KEEP's doc says the endpoint counts what it lets go of
real-claude-lab: claude.ai account routes, the stats readers, and L0's facts on 2.1.301
Read existing AppKit application for appearance observations
Quote the log path in the broker repair diagnostic
accounts stats A0: the typed .claude.json allowlist reader, the account key, the Fable plan answer
accounts stats A0: the Fable plan answer in Claude Code's own order
accounts stats A0: the profile and label of the home CLAUDE_CONFIG_DIR names
accounts stats A0: the roster row's label, and no-home for a home it could not resolve
accounts stats A0: St::home_profile says nothing reads ~/.claude's inside profile
accounts stats A0: the renew conformance test's Env names claude_profile
accounts stats A0: the refused-roster control names the home it refuses
accounts stats A0: read the file Claude Code reads for the home
accounts stats A0: say where no .config.json is looked for
accounts stats A0: the manual and stats' doc name where no .config.json is looked for
aterm-pty: record why the PTY child stays forked, not posix_spawn'd
aterm-pty: name the mechanism behind the forked PTY child's ctty
trust floors: 0.105's whole-tree facts (trust-facts-… on …) — 56 floors raised, totals corrected; aterm-verify lowered with its code
aterm: the corrupt-log test reads the repair command with its quoted path
trust: memory.tsv keeps one row per library and RAM
aterm-verify: a glue test on a machine without node is COULD NOT RUN, not a finding
aterm-link: a lapsed cap is reason=expired, and a lapsed publish waits for the renewal
aterm-link: doctor renews a lapsed cap instead of minting another from scratch
aterm-link: a bridge's dial nothing answers gets the broker's own remedy
aterm-gui: a PTY keeper recovery goes on counting dropped=
fabric_world: the repair test reads the log path as the quoted word cli writes
Reap uninstalled tab spawns before normal Quit
Test whole-request repricing across streamed rows and saved buckets
Retire the whole prior price when a streamed request becomes unpriced
gates: the review's last stale names, and wasm-glue counts only a Pass as ok
harness cli: limits reads each tab by its own program, and the hand-run upgrade obeys each agent's switch
harness cli: review fixes for W9
census: the agent-gate guard keeps per-agent equality tests out of shipped code
aterm-gui: Settings ▸ Agents draws the harness rows and one switch per agent
aterm-gui: review fixes for Settings ▸ Agents
aterm-gui: an agent's switch on Settings ▸ Agents applies when saved
atpkg: a vendor row carries its whole warm
harness: every per-agent gate is an exhaustive match, a Codex is told its resume line, and Claude Code off turns the accounts off
harness: review fixes for W5r
harness: main's stats tests name the sweep's agents_off; trustfmt
harness: W5r's resume-line test builds its worker with main's lifted_off
harness: review fixes — admission names no agent list, a switched-off agent's exit is forgotten, the upgrade view sets its tab aside
aterm-gui: an agent switched off by its own table reads off on the chip, the Settings ▸ Harness row and autopilot=
harness: the CLI and its help name each agent's own switch where it holds a session
aterm-gui: a restore leaf names its agent by its record word, and an unknown agent's leaf is relaunched by nothing
Revert "aterm-gui: an agent switched off by its own table reads off on the chip, the Settings ▸ Harness row and autopilot="
aterm-census: the OS appearance's window-attach sends are windowed-only
harness: fix-verification round — a switched-off agent's snapshot is forgotten only once it is surely gone, --status reads its switch, a contradicting leaf is no agent
harness: a replaced agent is forgotten only once its process is known gone; tippy
aterm-agent: spend's Claude-home fold answers its agent by an exhaustive match
trust: the memory record keeps one row per library and RAM
fabric tests: the broker's repair line names the log quoted, as it now prints it
release snapshot: prune src/ to the commit's tree before vendoring reads it
verify list: test's NEEDS names node in a cell the table can hold
aterm tests: the corrupt-log repair test expects the quoted log path
aterm-gui: the Services claim stamp no longer says it follows the package lane
aterm-gui: a first run's early row withdraws when the update only states a fact
xtask, aterm-wasm: the CPU module's boundary replay, recorded on wasm-bindgen's glue
aterm-wasm, aterm-gpu-web, xtask: aterm-wasm exports through aterm-wasm-abi and leaves wasm-bindgen
xtask: wasm-glue's web glue replaces its TextDecoder before Safari's 2 GiB limit
xtask: the wasm lane times process_str, ASCII and non-ASCII
aterm-wasm-abi: a release build takes the glue's string bytes as UTF-8 unchecked, as wasm-bindgen did
xtask: wasm-glue drops the DWARF sections, as wasm-bindgen does
aterm-release: ship site names the CPU module's glue step the site script owes
aterm-wasm, aterm-wasm-abi, tools: prose that still described the CPU module's wasm-bindgen
aterm-wasm-abi: re-record the toy module on the merged source
aterm-gui: a recovered dropped= is bounded as the carry that wrote it
aterm-link: a test holds the lapsed-publish fix of …
aterm-link: node_ring_of's doc names the token a lapsed ring now reads
themes: the authoring guide ships — docs/themes/README.md moves to contrib/themes/GUIDE.md, and contrib/ joins the export
theme_author: the community folder law admits the authoring GUIDE beside the README
aterm-window: record dpi, cursor-icon and bitflags answers ahead of the absorb
aterm-window: dpi and the six cursor icons aterm sets are the crate's own
aterm-window: the seven flag types are aterm_types::bitflags!
aterm-window: cut the macOS gesture rows, mac device events and never-sent events
aterm-window: carve the macOS extension API to what aterm calls
aterm-window: the macOS FFI module declares only what the backend calls
aterm-window: comments stop naming the API the carve removed
aterm-release: winit's trust floor follows the WC.5 carve (360/3862 -> 312/3348)
aterm-window: cut the shared builders and deprecated shims nothing calls
aterm-window: the window controls aterm never calls leave macOS
aterm-window: custom cursors, exclusive fullscreen and the event-loop extras leave macOS
aterm-window: each window-attribute field is gated to the backends that read it
aterm-release: winit's trust floor follows the macOS API carve (312/3348 -> 263/2922)
aterm-window: input lead L1 names the Option rebuild the WC.5 carve cut
aterm-window: review tidy-ups for the WC.5 carve
aterm-window: ActiveEventLoop::exiting is back on macOS; aterm-gui calls it now
aterm-release: winit's trust row follows exiting() coming back (263/2922 -> 264/2925)
trust: retain the window carve measurement provenance
Settings pickers show every choice that fits and save only what you pick
Settings shows short choices as segments in their row
Settings pickers list an explained default once and keep titles whole
Draw the classic trail as ink on light themes
Draw the water trail as ink on light themes
Show every cursor trail truthfully in the Settings preview
Preview only a setting the search results show
Give the light-theme water wake its full veil range
Leave a free row under the cursor preview's prompt
Read an unchosen font row as automatic in the text preview
Settings: one subtitle per page, and drop dead states and stale docs
Settings: one plain name per setting, and notes under their own rows
Settings: keys that do nothing are not rows, and Modified says so plainly
Settings: effect and sound rows name the switch you can see
Settings: plain copy on Security, Packages, About and the contrast floor
Settings: removing a no-effect key no longer says it was kept
Settings: Modified states a fraction's default as its slider does
Settings: Modified keeps a row's reason in view, and search counts once
Settings: notes name each switch the way its row does
Settings: About heads itself like every page, and dates its build locally
ctl key reaches a focused native view
Settings: every page is one scrolling list, with no pager
Settings tests walk every screen of the special pages
Settings: the pinned preview keeps a whole specimen row
Settings: Page Up turns back a whole screen
Settings: Tab walks the whole list, not just its screen
Settings: a card's words stay on screen with their control
Settings: compact Packages lays its switches on one line
Settings: Cursor Kitty no longer says "No modified settings."
census: the Settings cursor preview's companion engine is its own scope
Settings search takes every word of a query, and the words people use
Settings: an Agents page, true sidebar groups, and an icon for every page
Settings search finds the switches Software Update, Packages and Messages draw
Settings search lists pages first, settings next, aterm.toml keys last
Settings: Appearance says where Color theme and window appearance are
Settings search: "N more…" hands the keyboard to the first key it shows
Settings search lists each Top Setting once
Settings search: aterm.toml keys read as links, and one key never hides
Settings search ranks aterm's updater first and drops stray plurals
Settings: true comments, and the Top Settings link says what it means
Settings sliders save the number they show
Serious Mode drops the rainbow wash behind Settings
A forced Window appearance turns the Settings pages, on macOS too
Appearance leads with its theme; Wallpaper owns its image settings
Tab Color works from the keyboard, VoiceOver and automation
The Window page switches Live Activity and keeps its padding rows honest
Settings states a refused color, a load failure and Live Activity off plainly
Wallpaper's Remove says it removed the wallpaper
Settings tests pass lint
A slider that cannot move looks it, and Tab Color's brightness reads clean
Live Activity's Edit in Manual opens on the provider line
Software Update: a copy that can't update offers no live update button
Packages: a copy without its package tool stops contradicting itself
Messages: say when a filter matches nothing; the load switch is a row
About: name the site once, and don't paint the byline as a link
Packages: a switch that does nothing here names no timing
Messages: docs say what the page draws now
Software Update: test that an empty notes card is one line tall
Settings search: the selected tab color row is found on the Window page
Settings: a short sidebar drops its title before routes shrink
Cursor styles that draw the same look load as aliases, not entries
Settings: a Cursor Styles page lists every style with a live preview
Settings: refresh two comments the Sound and Cursor Styles pages outdated
Cursor Styles: a style's tuning shows only knobs that change it
Cursor Styles: choosing a checked Off saves it over a forced Off
Sound: the volume and the sing-along riff name their real gates
Settings: trail-off notes name the cursor style or the effects switch
Cursor Styles: a short window lands with a style row in view
Cursor Styles: Up, Down and Tab take the preview from a resting pointer
Settings: a reset leaves no empty table behind in aterm.toml
Settings: Changed means written in aterm.toml, and every changed row can reset
Settings: Modified lists keys only in aterm.toml as one group, with Reset All
Settings: Undo names the change it undoes, and goes with its status
Settings: a value that can't be saved says why under its row and stays to fix
Settings: the Manual page says where aterm.toml is and what only it holds
Settings: Undo names the old value whichever news arrives first
Settings: box Modified's prebuilt rows and use is_multiple_of
Settings: Reset All's Undo names the value it puts back
Settings: Explain heavy load says Changed and offers Reset
Settings: a compact Manual page says what Manual is
Settings: an empty Modified says what will appear there
aterm-toml: a reset leaves no header standing over only sub-tables
Settings: every write says what it expects its key to hold
Display faces draw => and != as characters, never boxes
Text & Fonts: three boxes by use, and the specimen caret clears the ligatures
Display faces: reachable at every size, shown in their own letters, previewed as drawn
Font size is always one slider, and an out-of-range size cannot blank the specimen
aterm-render lists installed monospace families, and a family loads its regular face
Text & Fonts: pick fonts from a list, and the specimen settles on its own
Text & Fonts: a one-row specimen draws no stray caret
Text & Fonts: a font the terminal cannot find is "Not found", never "Applied"
Text & Fonts: the specimen names the automatic face, and tests pin the font rows
Font picker: typing keeps Cancel's name and shows which font it previews
Settings: font picker doc comments sit on the items they describe
Display faces: a full mix keeps every switch reachable and says why
Text preview: a font that is not found is not what the sample is said to show
aterm-render: a family's name-table search ends at its regular face
Font lists: Space and typing search the list instead of saving by accident
Font rows: typing on the list button types a name in place of the saved one
Font lists: Other… starts from the name typed into the search
Settings previews draw sample text at its real size, fewer lines when short
Top Settings shows one color preview per card
Preview headers keep the value being tried whole
Look & Feel pages keep one content width
Settings never draws its own numbers in a display face
Display faces draw at full size in their own letter width
Top Settings' tall color preview fills with a terminal session
Pin the 80x24 color preview as shown at its one-row floor
Comments name the status pill as it now reads
Keep Software Update's switch names whole in one wording
Lay out a Modified card's rows alike
Say whether this copy can update on every Settings page from the start
Give About one tagline and list its facts whole
Say once on Packages what the status card already says
Name Security's permissions plainly and explain a missing package tool
Paint no "Now" on rows that apply when saved; say which check applies
Say in plain words what limits agent supervision
Keep the Explain heavy load note on compact Messages
Group the Software Update status card's fit flags
Say "No effect in this copy" so search never cuts off an update switch
Name the escape sequences in Manual now the Security rows don't
Say plainly what All approves on Agents, and what its notes are per
Pin where Universal Control's Saved line names Apply Now
Settings: name an unset tab color and wallpaper in plain words
Settings: Tab Color fits on one screen, and its wheel shows keyboard focus
Settings: the Window row for the selected tab color goes to Tab Color
Settings: name background materials by how they look
Settings: mark wallpaper dim and tint inactive when the image did not load
Settings: the Live Activity card says Off once, plainly, lined up with the cards below
Settings: padding says Sides and bottom and Top, and Top stops at the sides
Settings: say what the keyword toys do; search headings name real places
Settings: search results keep one column width whatever page you searched from
Settings: aterm.toml search rows name each key
Settings: Modified never says nothing to reset beside a row with its own Reset
Settings: the offer after an Undo is a Redo, and an outside change takes a stale Undo away
Settings: a font or display-face status line goes when its value changes elsewhere
Settings: display face credits move to About; the card is a group like its siblings
Settings: no font banner over Settings when its row says Not found
Settings: the specimen keeps drawing its face while another resolves
Settings: timing tags and Apply Now say only what is true
Manual: suggestions wait to be typed or asked for
Manual: opening a key that is not in aterm.toml adds it
Manual: toolbar says Go to Line and Commands, with no EMACS badge
Settings: put stranded doc comments back on the functions they describe
Settings: Keyword kitties says a cat peeks out, as it does
Settings: Search and Modified head the Live Activity rows Tab titles, like their card
Settings: the Window row says Automatic (default) for an unset tab color; Terminal's subtitle reads as a list
Settings: a wallpaper that did not load no longer pushes Settings down with a banner
Settings: an Undo in flight is not mistaken for an outside change to its keys
Settings: the Tab titles card says an online service runs the model, not "provider-hosted"
Settings: Terminal's subtitle keeps the wording that fits a phone-width page
Settings: search result notes wrap to the width of the cards they sit in
Settings ▸ Agents: one note for the supervisor switch
Draw every cursor style in ink under the letters on light themes
Count Classic's trail in trail status and the trail ring
Preview trail colours the way the terminal draws them
Cursor Styles: Off first, every look described, a list in view
Say what changed: Serious Mode, outside edits, units, default colours
Sound and cursor notes say where the fix is, in plain words
Keep long slider readouts inside their control
Open Cursor Styles on the saved style however you get there
Keep light-theme Beam and Comet dust off the letters
Find a saved look-alike style by name; Off reads plain in Serious Mode
Sound notes name the Sound volume row and the Sound page
Settings controls read clearly: accent text at 4.5:1, a visible focus on the selected segment, destructive and idle styles, whole preview lines
Settings rows: notes and timing on the row's own second line, Reset's place kept, the list peeks, drafts and errors stay honest
Settings keyboard: Home and End move the list, the sidebar is one Tab stop with arrow keys, the category grid moves by column
Settings pages: About and Software Update keep their buttons in their cards at 80x24, the first Top card keeps its title, honest preview headers
Appearance preview never paints a sample line its window cuts
Settings lists: a control the list's edge leaves whole answers the pointer, Tab and screen readers
Every Settings page's list fills the room kept for the status bar, not only field pages
The Tab Color page no longer offers a Choose… that opens the page it is on
Top edge's row names the value that was set, now that its slider shows the one used
The All Settings sheet never ends a screen on a group heading with nothing under it
The unsaved-draft bar paints a refused draft's name, not its reason a second time
Doc comments sit on the functions they describe again
aterm-gui: the linux and win cells' dead_code expectations are all fulfilled
accounts v2 S5: usage credits on one account, and the watchdog's retry row as a wall
accounts v2 S5: credits seen in use drop the limit row that said them off
accounts v2 S5: the vendor's served retry ends the remembered wall too
accounts v2 S5: off macOS a reply drawn with a dot is the model's
accounts v2 S5: the usage recorder reads settings only for a named process; true docs
accounts v2 S5: credits seen on outlast their drop; a warning keeps the other window; the usage switch is read with the accounts switch
accounts v2 S5: a kept week's figure is as old as the warning that named it
accounts v2 S5: a reset ends the week's warning; Esc on the vendor's retry is no retry served
accounts v2 S5: one rule for the usage words; the vendor's retry read by the screen and the ledger
accounts v2 S5: of one answer, the later read of its warning stands; turn_served on the fullscreen renderer

Truncated to fit GitHub's release-body limit — the complete note is release-notes/v0.105.0.md in this release's source tree.

Source release. SHA256SUMS is a per-file manifest of the released tree, with a detached Ed25519 signature (SHA256SUMS.sig) by a machine key named in the attached master-signed roster (aterm-machines.toml + .sig). Verification chain and key inventory: SIGNING.md in the publication engine; the roster pin is committed in aterm crates/aterm-update-core/src/pins.rs.

Navigation Menu

Repository navigation

aterm v0.105.0

Choose a tag to compare

Sorry, something went wrong.

Sorry, something went wrong.

Uh oh!

No results found

aterm v0.105.0

Features

Fixes

Performance

Security

Refactors

Tests

Docs

Other

Uh oh!