aterm v0.106.0

2026-10-18 · 2388 changes since v0.105.0

Features

windows: the macOS readline keys at the PowerShell prompt
gui: Alt+arrows reach the program without a pane that way; palette readline keys
windows: Iosevka Term Semibold at 17 px on a 1.1 line is the default face
harness: one reading folds today and 7 days, with a tally per session (§10.3, slice 2a)
harness: Settings ▸ Harness per session — today in STATUS, a day and Show per row, the pane named (§10.3, slice 2b)
autopilot: under Cruise the chip says when the work is done (§10.2, slice 1b)
autopilot: one voice, one clock — face clocks name their day, AgentOff, the records (§10.2, slice 1c)
harness card: the kitty rides in (design §10.6, slice 5b)

Fixes

root-cause fixes across font autohinting, ligature shaping, overlay scrubbing, and AI review
forge: measure shipped browser roots independently
clear imported test lint and narrow compaction claims
release: require cancellable keeper connections
agent: report skipped Codex usage records as partial
render: admit sealed font mappings only on macOS
aterm-agent: drop an unused mut that turned main's lint red (…)
revoke dead sources on retained session logs
slog: preserve legal pinned carries and Host serialization
gui: retire Claude light presentation on Codex chips
effects: scope owed erase admission to Rainbow Kitty
gui: preserve validated handoff resume lines in initial publication
gui: retain revocable authority across session retirement
redistribute log memory around retained minimums
gui: share live chip admission and rename settlement with readers
gui: remove unused accessibility projection imports
harness: require a measurement before releasing disk holds
atpkg: record staged cache removals before deleting bytes
slog: retain autocompact prompts in the wire vocabulary
slog: reconcile parallel autocompact vocabulary repairs
harness: require a person count before autocompact keys
harness: construct escalation in its existing public form
supervise: require elapsed eligible idle observations before memory restart
agent: require generation and person proof for option-choosing digits
link: close owned subscriptions when Bridge drops
supervise: enumerate programs for the focus person fence
gui: keep unknown spare gate state cold and preserve staging entries
relaunch: LC-2..LC-7 and LC-9 of ATERM-KI-1015-1 — the restart offers what its relaunch carries, a crash moves only onto a proved build, a person's restarts are no crashes, a held upgrade carry is waited out
relaunch: LC-4 measured live — the relaunch's mark has its own attention owner and is whole or none
relaunch: tippy — told_home answers a ToldHome, and the loop's attention owner is the tests' name only
relaunch: a relaunch mark no ask of this host's keeps is unset as an agent runs
relaunch: carried_through_hand matches the agent exhaustively, and leaves seen_gone its doc
relaunch: a failing relaunch's mark ends with its trying, and names no command where running it here is no remedy
upgrade-status: a tab's leader answers only a fresh restart's agent-down row, and is read only for it
build-start: a crash's probe holds the upgrade only by what it found failing; LC-7's renewal tested
gui: refuse incomplete spare scans and missing shell posture
site: preserve immutable assets and atomically publish the engine
ai: refuse unproven inherited review permissions
windows: aterm-gui compiles for Windows again — two cfg(windows) paths missed today's moves
windows: Ctrl+H deletes one character behind ConPTY, not a word
core: defer journal cuts that would swallow parser state
agent: bind inherited Codex permissions to the observed process birth
retain required-feature lint for versioned package selections
record vendor choices without overwriting existing files
report errors restoring kept ALab commands
base reds: census items after its test module; forge and png drop pinned counts
sink: a guarded write the kernel takes in part is delivered whole
harness: the rate-limit nudge is decided on Codex's records read at the box
harness: a Codex text drawn as its paste placeholder is submitted
phase: a Codex draft over the warnings indicator is still the composer
harness: the Codex switch puts back a thread that ran its model's default effort
harness: the paste-placeholder read-back names every program in one match
harness: no carry-on typed into a task done under Land after a restart
harness: a reply a wall cut never said done; a Codex is adopted once
autopilot: the chip's title offers its menu, and the open menu is in the accessibility tree
autopilot-menu: a reader's click names the rows it heard; the chip's node opens the menu
autopilot: the hovered title gives up its trail, then its menu line, before v1's words
the resident cat sits beside Codex's chips (D4); a quiet desktop wakes nothing it does not need (D5)
the chrome cache keeps no unread stamp; the idle bar names what stays (the harness's per-step look)
the review of … — tests on the shipped paths, menu ages read where shown, a bare commit holds
harness: a done report is respected — the check's own words, done by family, a carry-on's done, a reversible check
harness: an idle report never ends the task at the check; done words read in their clause; a release's answer is a carry-on's
harness: read the status row as its line, the vendor's retry rows whole, and the wait Claude Code carries (SM-3, SM-4, BG-1)
harness: an empty queue and the check's echoed words never end the task at the check; their real work there is progress
harness: a token quoted from a report the worker passed on is not its done
harness: the lane's review findings — the carried wait read on its line and overruled by the transcript, the status row's other readers on their line (SM-3, BG-1)
phase: a box title, the plan question and a held message's label Ink wrapped are read as lines
phase: a rating card whose options Ink wrapped is still the card
harness: Enter must send what the composer shows: no draft is submitted over the slash menu's other entry
phase: a Select row that opens with a capital is never the rest of the label above it
harness: a turn that ended on Claude Code's own error row is never an ordinary idle point
harness: a confirmed API Error the screen cannot name takes the kind its notice is typed as
harness: a /resume'd conversation's old auto-continue ends no armed limit (KI W1, LIM-3)
harness: the transcript names which limit a generic footer does not (KI W3, LIM-4)
harness: a limit only the transcript shows holds the relaunch's carry-on (LIM-1, KI LC-10)
harness: a countdown a relaunched process redraws goes on by nobody (KI W4, LIM-5)
harness: the books' read places a transcript limit only where the screen reads no wall (LIM-1)
harness: a move outlives the relaunch records written over it (LIM-1 review)
harness: the review's minors on the transcript's limit read (LIM-1, LIM-4)
harness: a limit only the transcript names takes its row's type there too
harness: no agent is moved onto a build no probe here proved to start (LC-5)
harness: a relaunch is promised only where its line carries the agent's Claude home (LC-3)
harness: a tab the owner held stays held across a quit or crash, its agent not relaunched (LC-8)
test: the limits lane's standing-limit Snapshot names home_carried (LC-3's field)
harness: the transcript's limit read keys whom the host answered for (LIM-1 re-review)
phase: a plan approval's label Ink wrapped is its label, so full power never presses auto mode for it
harness: the review of … — an open notice is read until it closes, a stale one names nothing, a 413 that says Run /compact is a full context
harness: a first probe's pass blinds no build and a probe out of time fails none (review of LC-5)
harness: the owner's hold rides its tab's leaf, goes back by the hold's own path, and its end is journaled (review of LC-8)
harness: a carried wait the transcript ended is one point at every read (review F1, XT-1)
harness: a carry-on answered in seconds that says done gets the check (review F2, DOCS-4)
harness: a done phrase beside a wait on the worker's own work is no done word (review F4)
harness: what the harness typed is keyed to the conversation, not the tab (review XREV-LC-1)
harness: every restart looks at what did not come back, and the owner hears of a loss (review XREV-LC-2)
phase: a status glyph a narrow pane wrapped away from its text is the status row (review screen F1)
phase: a status line's join never loses the row's own busy reading (review screen F2)
harness: a retry's wall whose notice a look drew under keeps its rung (review F3)
harness: the host's step reads the point's wall as its decision did (review XT-2)
harness: a moved agent's finish and limit are read where it writes now (review XT-3)
harness: a layout that outlives its agent reads the agent's own record as it is taken (LC-1)
harness: the review's minors on LC-1 — the residual as the code gives it, the ring that a shell-held tab repeats, the handoff carry pinned (review of LC-1)
phase: a multi-select text drawn against its checkbox reads whole (ATERM-KI-1015-1 F2, the reader's half)
harness: a question dialog's memory goes only at a look that reads the composer (ATERM-KI-1015-1 F4, hardened)
harness: an Edit's own box under a Bash rule or hook is the levels' where the agent's transcript proves it (ATERM-KI-1015-1 F1, the over-hold)
harness: a proved call proves one mount of its box, no read where the level presses nothing, and the docs say what holds a file box (review of …)
harness: an agent back in its tab lowers agent-down, whatever conversation it holds (ATERM-KI-1015-1 LC-2)
harness: a tab's upgrade= names its own row — a restart in flight, its live conversation, else its newest record (ATERM-KI-1015-1 LC-9)
harness: the review of LC-2/LC-9 — a move down stays its tab's row, a word lands on the row shown, an answer replaces no other conversation's row
test: LC-1's handoff test's restored-relaunch stub takes the cross-lane review's fourth argument
harness: the crash back-off counts crashes; an exit someone asked for neither climbs nor waits it (LC-6)
harness: a hand on a restart's tab is waited out uncounted and stops its clock, in every carrier (LC-7)
harness: the relaunch carries an agent's own HOME, every told line carries its Claude home, and a Cannot word ends only when its conversation is held again (LC-4)
harness: the review of the relaunch-pacing lane — a lost word ends with its tab and one word per tab, a misses-only crash streak gets a healthy clock, a held line asks after a person's keys (LC-4, LC-6, LC-7)
test: the live upgrade fake answers the build-start probe as Claude Code does, never as an agent launch (LC-5's four live reds)
harness: a done word beside a list line, a stop for a person or once more is the end (review RR-DEC-1)
harness: a repaint of the handed point keeps its decided wall for the host's gate (review RR-DEC-2)
harness: the host's step waits where a retry's wall left the screen, as the policy does (review RR-DEC-3)
phase: a bare status glyph's text laid out as two columns is read column by column (review RR-LC-1)
gui: the line of what a restart lost ends when its tab closes (review RR-LC-2)
harness: a cold restore notes the tab it reopened from whatever it does next (review RR-LC-3)
harness: an earlier tab's loop turns count only until the conversation left it (review RR-LC-4)
harness: the Cloud gateway's sign-in is the lost login, never the server's error retried (review R1)
harness: a limit's wait ends under its notice only in the conversation that holds its row (review R2)
harness: a move hides the limit it left only from an agent under the move's target (review R4)
harness: a restored landing's adopted agent the record says died is relaunched again (review R5)
harness: a relaunch reads a moved agent's finish where it last wrote it (review RR-LC-5)
harness: a stop until your review or until the owner's sign-off is a stop for a person
harness: a done phrase is a done word only as whole words outside code (review RR3-TE-1)
harness: a list its sentence introduces, and a hyphenated noun, stay in the done phrase's sentence (review RR3-TE-3)
harness: a move to the default login is met by an unset login variable under the default home (review RR3-R4-1)
harness: a moved agent's .writes note goes once it names no transcript (review RR3-LC5-CLEAN)
harness: a relaunch into a done report in words asks the done check, never keep going (live lab LIVE-RL-1)
harness: a relaunch the tab's loop resumed first is carried on with nothing (live lab LIVE-RL-2)
harness: a person's own exchange stays theirs past the loop that left it (review RR3-TE-2)
harness: a relaunch after the done check answered with an idle report carries on as the policy would (live lab LIVE-RL-1, follow-up)
harness: a done report that says completed is a done word again
harness: a look at a done tab takes no done report back (review RR4-RL-1)
harness: a done check never answered takes no done report back (review RR4-RL-4)
harness: the upgrade notice's READY takes no done report back (review RR4-RL-2)
harness: a relaunch's done check after an irreversible act says to approve none (review RR4-RL-3)
harness: a restart's carry-on that asks the done check is the check to the record (review RR4-RL-5, record side)
harness: the loop reads the restart's done check as the check (live lab LIVE-RL-3, review RR4-RL-5 live side)
harness: at the done check the record's closed answer overrules a done word drawn from code (review RR4-TE-1)
harness: a person's exchange is left under its answer's key, the transcript's lag read out (review RR4-TE-3)
harness: a person's exchange at a wall stays theirs in a new loop (review RR4-TE-2)
phase: a busy status row takes the rest of a parenthesis it left open
phase: an unticked free-text box drawn with no space reads unticked
phase: a limit quoted under a tool's call names no bucket over the generic footer (merge review F2)
harness: a person's exchange at a wall carries its work into a new loop (merge review F3, MAIN-SURVIVE-1, XR-2)
harness: a left exchange's key is read as far back as the finish, past an idle compaction (merge review XR-1)
restore: the owner's hold is captured beside a fleet hold (LC-8 on main's two-slot Holds)
harness: a limit's end types no keep going into a done report (the act)
harness: a limit's end types no keep going into a done report (the record)
harness: a limit's end types no keep going into a done report under a background shell (D1)
harness: a limit's end types no keep going into a done report, and the done check in its place is the limit's retry (D2)
harness: a limit's end types no keep going into a done report, nor into a question naming an irreversible act (D4)
harness: under Land a limit's end gets Land's own act, not Cruise's done check
restore: a tab the cold drain still owes keeps its own agent and hold through a quit (RV-SURV-1)
restore: a restart inside the cold drain keeps the landed tabs' agents not yet handed (F1)
harness: under Autopilot Land a relaunch's carry-on types nothing of Cruise's (F2)
harness: Land's instruction and nudge are the done check to the record (XM-LAND-RECORD)
harness: a wall's retry delivers the check it cut again, to the record too (M5-R1)
supervise: a carried wait's break reads the owner's Off before the host step (XM-OFF-CARRIED-BREAK)
phase: a retry head that fills its column is still read by its columns (M7-RV-1)
harness: a successor loop works a limit from the act typed in its place, never keep going into it at once
harness: a successor at a model bucket's open wall waits on its reset beside the usage act it takes up (D1)
harness: the limit's try names its limit in the ledger, and a successor works that limit from it (D2)
harness: the limit's try carries the wall's attempts, and a successor resumes on that rung (D3)
harness: an act at a track only a seed made is no limit's try until its limit is read (D4)
harness: the wall a loop's own try meets again is written again for a loop that follows (V2-1)
harness: a limit's try names the entitlement ladder it was on, and a successor's seed stands until that ladder's next rung (V2-2)
png: the corpus test's floor is the 20 PNGs the repository tracks now
harness: a roster read a worker's own step ran through hands no exit
harness: a step that panics is over all the same
supervise: a task the done check ended is journalled as the check's end, not as ATERM-TASK-DONE (F2)
harness: a relaunch's last step is settled where its loop takes a point itself (F1)
harness: a settled relaunch keeps its restore look open for its whole window (F1-V1)
harness: a relaunch's last step a settle missed is settled again by the host, off the loop's points (F1-R2)
harness: a bucket's notice a cancel left answers the loop's own try, as a window's does (V21-1)
harness: a wall that was written has its end written, an act typed since or not (V21-3)
harness: a limit's try names the ladder its decision used: a countdown's is the short one (V22-B)
harness: a limit's try ends with the episode the worker's work ended, for a loop that follows too (V22-A)
harness: the bucket the fallback's relaunch left is no wall of the relaunched session (V21-2)
harness: a try met again is read from the ledger's wall row after it, open or closed since (B-1)
harness: a turn asked on the fallback with no act of the loop's is written for a loop that follows (A1)
harness: a bucket's notice the transcript wrote after the fallback's relaunch is the wall (A2)
harness: a limit's track the policy drops with no work row ends its try for a loop that follows (B5-1)
harness: a wall read inside a try's take window is no try met again where the try is taken (B5-2)
harness: a bucket its rateLimitType named is that bucket when read back from the ledger (B5-3)
harness: the fallback's relaunch is made at its run's first ask, for the policy and the row (A-2, C-S2)
harness: a settle again is its worker's, bounded where it fires and caught on the host; an open task's restore line is never decided off the point (F1-R3)
harness: a relaunch's last step is settled at its loop's own withheld points, with no timer on the host thread (F1-R4-S1, F1-R4-A1)
harness: a tab's act on the GUI host's own thread is caught, its fault that tab's alone (the note behind, the follow, a closed tab's forget)
harness: a wait's first quiet ask is a point's, whenever its host begins wanting one (F1-R5-A1)
harness: a mark's step down that panics on the GUI host thread is that tab's alone (F1-R5-G1)
harness: a wall's ledger row names the kind the loop read, and a loop that follows reads it back (R5-1)
harness: a live turn that takes a wall's retry met inside its take window says so with no memory standing (M7-2)
harness: a try met again is seeded from the wall that met it, its time and its ladder (M7-3, R5-2)
harness: a seed's try whose own turn a successor saw run is answered where that turn ends (R5-2)
harness: a limit's try still inside its take window is awaited by a loop that follows (M7-1)
harness: a restart of another kind begins a run of its own, its first ask its own (R5-3)
harness: a fallback's relaunch in flight when its loop ends is made at its run's first ask for a loop that follows (M7-4)
harness: a done check a loop before this one asked is answered for this one (M7-5)
harness: a point the host passed over waits a step; no act nobody's tab owns unwinds what runs it (F1-R6-A1, -H1, -H2)
harness: a point a step left standing waits a step, save one follow-up; one restored tab's panic is that tab's; a view that panicked is asked again in a while (F1-R7-B1, V-1..V-5)
restore: a landed held tab keeps its agent through a restart inside the drain; a closed queue keeps a panicked step's attempt
harness: the open-items challenge is the done check's kin in the record, a successor's seed, a limit's place and its words (MG7-A1..A6)
restore: a landed held tab's leaf carries the holds the restore could not put back (GUI-M7-1); the held tab's earlier-tab note tested through the App (GUI-M7-2)
harness: the follow-ups a point goes back to the host for are counted, not once (F1-R8-L1)
harness: a restored step that panicked ends by what it knows; every restored row names every tab said; the queue is let go only once its row is said; a Codex is said as Codex (F1-R8-G1..G5)
upgrade: one record whose read panics is an unreadable record, never the whole look's fault (F1-R8-G6)
merge: the LC-5 and LC-3 tests of both lanes held to the merged rules (8 aterm-agent reds, 1 aterm-gui red of …)
merge8: the upgrade lane's LC-5 said and tested as main's policy; LC-2's Codex holder said (MG8-A1..A5, DOC-1)
merge8: the GUI host's words end with what they say; the disk resume keeps a continuation's gates (GUI-1..GUI-6)
merge8: the live upgrade tests pin main's unprobed first move (2 aterm reds the merge left)
harness: a word that moved keeps the point's follow-up count (F1-R9-L1, -L2)
harness: a typed restored line whose step panicked is stepped again; the restored row has one line per agent, drops tabs an agent holds again, and is said only for a miss (F1-R9-G1..G6, -L3)
harness: a loop that follows takes up the take window, Off, the task's end, the Land episode and the short streak from the ledger (RS7-1..7)
harness: a record is no read of a try, a try aged out ends no wall, a late first read opens the window a successor awaits (RS8-R1, RS8-R2, RS8-F4)
harness: the point a loop judged is recorded, and a loop that follows takes up its streak, its time and the answer judged there (RS8-R3, RS8-R4, RS8-F1, RS8-F2, RS8-F3)
harness: a turn read running is recorded, every point's time too, a person's exchange after the task's end is left in the ledger, and the cut keeps what the readers read of a run of records (RS9-R1, RS9-F1..F5)
merge9: a challenge whose answer ended the task seeds no challenged job
merge9: main's landed-restart control re-fit to the ledger's land episode; a landing spent is restated spent
merge9: the restored row's single-agent words decide Claude by an exhaustive match (census agent-gate)
merge9: the box-call proof tests run on a host that fences a digit by the person count
merge9: a landing a later point or turn followed seeds nothing; the seed matrix journals its lines (MG9-S1, MG9-S2)
merge9: a loop that follows knows the job was challenged past the challenge's answer (MG9-S3)
merge10: a Land relaunch mid-work types nothing of Cruise's, in main's lab and prose too
merge10: a loop that follows holds a person's Esc from the point its record marks (RS9-F2 over main's …)
harness: a turn after a landing is never read as the landing on a restart
autopilot: read a landing's point by its words, not its seq, across a restart
autopilot: the rule's title fits beside the facts as they fall; the land_at offer names its day; agent titles lose their spinner frame
autopilot: an open menu or page turns its land_at offer at the minute; every snapshot of a session's name drops the spinner frame
tape: preserve excessive Instant-shaped text as literals
tape: escape active Unicode in text output
tape: bound file input on an admitted regular handle
link: admit the opened acked file before appending
gui: bind modifier anchors to the modifier handler
link: transfer owned inherited descriptors across safe APIs
retain literal hyphens in Codex tape observations
require complete observations before cleanup passes
harness: judge a multi-select text's fit from the layout Claude Code measures (ATERM-KI-1015-1 F2 closed)
phase: a zone cut inside a multi-select's free-text row is the dialog with its head off the screen (ATERM-KI-1015-1 F2)
phase: a multi-select cut at its focused Submit or its divider is the dialog with its head off the screen (ATERM-KI-1015-1 F2 review)
core: discard pending host resync requests when opting off
gui: record control input from accepted delivery receipts
gui: complete input receipt debug and test call sites
machines: retain lock cleanup through failed login waits
crash-journal: a tab's word about typing is journaled at once, never after the write throttle
crash-journal: a word about typing is captured on its loop turn, once a turn (review OW-P1)
relaunch: an adopted row under Land promises no continuation (lab finding B)
upgrade: a local command's output in a system row starts no task (2.1.302's /clear)
relaunch: an adopted row ranks nothing owed before Land, as the carry-on does (review RV2-REL-1)
harness card: hold the card through Claude Code's fullscreen entrance instead of blinking
phase, docs: pin launch_card_words's banner clause; the docs say the card is held once it is on
restore: reject history frames with mismatched line counts
spare: read again a record whose parent the escape scan dropped
spare: no escape from a process gone since its read or started by launchd
spare: an orphan of a session older than the shell is no escape
harness page: the review of v3/stats-fold — midnight without land_at, the landing's doors and its letting go, rows that keep their place, Show's fence
autopilot-menu: an open menu card is on top of the caret and the pet (surfaces-F3)
autopilot-menu: a row never moves under a still pointer to another choice (lifecycle-1)
ctl: help open lists every aux target it opens, from the one roster (surfaces-F6)
autopilot-menu: the press guard holds on a Mac click (review of lifecycle-1)
render: a menu card takes back its cells from a selection, a meter and a jittered sparkle (review of surfaces-F3)
ctl: the GUI targets are one table, not a roster and an enum (review of surfaces-F6)
autopilot: the wire's meta wake indexes the timer before it publishes Settings ▸ Harness (§10.2, slice 1a)
autopilot: Land's amber clears the text floor on every built-in theme (surfaces hunt F2)
autopilot: a face clock that moves under its face repaints the title being read (§10.2, slice 1c follow-up)
harness card: the kitty rides once, the rim keeps off the trail and the toes' gaps (review of 5a, 5b)
harness card: the burst stays whole under the quad cap (5b's busiest frame)
windows: aterm-uds's ownerlock module exists on every platform
windows: gate Unix-only items so the Windows build is warning-free
gui: refresh timed card when its weekday changes
input: retire native page gestures when the front changes
wayland: construct read guards only for announced reads
wayland: keep clipboard pipe workers nonblocking
wayland: retain globals through surviving windows and cursor requests
wayland: preserve display admission in the new live read fixture
2 further changes are not itemized in these notes.

Performance

harness: a decision's lag re-reads ask the file again, never the agent (review XT-4)
harness: the wall's exchange row is keyed once per screen (review RR4-TE-2 follow-up)
footer: keep each pane's fitted chip block and its unchanged rows' reads

Refactors

harness: approvals::usage_attempt is the one reader of a limit's try (C-S1)
gui: remove superseded plain input wrappers

Tests

agent: detach stand-in upgrade holders from the test runner's controlling terminal
agent: cover each Codex usage loss independently
select an explicitly conserved headless executable
release: own keeper fixture directories exclusively
aterm-phase: classify the 0.163.0 lab captures in the Codex chips' corpus
codex chips: a status row of the model alone is a refusal; the design names 0.163.0's refusals
revoke a closing sources grant on its retained log
slog: cover carried pinned paths and persisted field tiers
gui: retain pointer hover across Claude to Codex switch
effects: keep delayed erase licence scoped to Rainbow Kitty
handoff: v0.105.0's producer fixtures, written by its own cut
retain carried Codex resume line through successor publication
require live-copy authority outside restored publication
gui: fence reader chip clicks by chrome and rename custody
gui: require the reader action to focus Settings
gui: match the complete Settings view target tuple
gui: keep disk holds when recovery cannot be measured
atpkg: require write-ahead intent for staged cache bytes
slog: exercise the autocompact prompt vocabulary
harness: bind Muse focus keys to a person and question
harness: keep the Muse count across generation retries
harness: read addressed Muse key request fences
harness: require person fences for autocompact keys
harness: put autocompact fixture outside person grace
harness: publish recent input age after the raced key
supervise: bind standing-idle observations to elapsed time and eligibility
agent: exercise digit guards through watched and controlled Gemini prompts
agent: reject every weaker digit request after missing generation proof
agent: label digit custody assertions separately from admission controls
agent: use explicit current-host digit stamps and retire unsafe fallback expectations
agent: judge digit refusal by outcome and preserved guards
agent: state current-host custody in approval policy fixtures
agent: borrow the owned expected digit wire strings
agent: include current-host verdict wait in the watch trace
agent: make program approval premises and missing counts explicit
link: require reader shutdown on a live Bridge drop
fabric: give Fleet exclusive scratch ownership
link: retain an inbox refusal that published no verdict across reconnect
gui: expose untrusted spare gate cache admission and staging writes
r20-relaunch: reproductions of LC-2..LC-7 and LC-9 of ATERM-KI-1015-1, ignored
r20-relaunch: looks_put_off on every platform — the LC-7 test is shared (gate cells-foreign: win and linux-arm test targets)
harness: the restored landing's crash test waits for the look's verdict, not for a still_wanted count
r20-relaunch: the lane's two Snapshot literals name stored_login, which main's usage tap added
relaunch: main's CODEX_HOME carry test asks carries_restart with the user's home
r20-relaunch review: reproductions of the review's majors and minors, ignored
relaunch: LC-5's crash-path test pays its stand-in's first-exec assessment before the bounded reads
gui: refuse unknown spare scan and shell posture evidence
phase: own the Gemini bundle fixture exclusively
site: preserve unrelated bytes across engine publication
the merged restore leaves carry B's land_at and main's sid/lineage
gui: exercise launch marker and temporary-file custody
ai: keep unknown ancestry and argument data from granting yolo
core: require lossless journal keyframe cuts
observe completed warm-spare samples and own rc barriers
agent: fifteen digit and question tests read the person fence
agent: the Codex no-count note test is named for what it now asserts
agent: give the loop, stall and autopilot tests a current host's digit stamps
agent: require process birth for inherited Codex permission floors
retain required-feature lint for versioned package scopes
preserve a private file behind a vendor choice link
count errors restoring kept ALab commands
agent: the Codex upgrade-drive tests read the TUI's birth from their own kernel
gui: cover refused theme work and superseded tab trials
gui: cover launch-pinned specimen size across scale drafts
agent: give the permission-setting fixture an exclusive directory
delete the timing-bound and vendor-census tests (L53, X3, L10)
the last environment skips in aterm and aterm-agent end COULD NOT RUN (OF-30)
no source-text scans in aterm and aterm-phase (HYG-3, OF-49)
keep broker option values opaque when reading durability
reject malformed journal bounds and end markers through readers
exercise journal retirement and read-only admission through owned fixtures
harness: the nudge freshness test fences its digit as a current host does
harness: the nudge freshness test's rollout opens with its session_meta
harness: the carried-done ledger check compares against a slice of the outcome (tippy cloned_ref_to_slice_refs)
parser, core: reproduce ATERM-KI-1015-8's broken-off DCS (ignored)
core: reproduce ATERM-KI-1015-8's late OSC 7 (ignored)
shell-integration: reproduce ATERM-KI-1015-3's unmanaged ~/.aterm/bin (ignored)
core: reproduce the OSC 7 hold's lost reports (ignored)
SKIP-and-return sites end COULD NOT RUN or load the checked-in face (OF-30)
the AltScreen Tier-1 reads both screens and each mutant admits its control; Tier-0 never drops a verdict
the context-menu card is the composed model with its timeline aged as it opens
harness: a restored landing's crash comes after the look that kept its attempt
gui: the restored relaunch's told list is a named type (tippy type_complexity)
harness: a multi-select text that moves against its checkbox is submitted by its button, at the run's level (review of …)
harness: the missed-frame tests hold their premise, a look that took the frame (review of …)
gui: a worker winding down is stopped once, counted by its cuts alone
loop: the relaunched countdown is drawn as Claude Code draws a live one
corpus: re-record the three serde answers our side's fields moved
gui: the park test's unlanded queue says no row into another test's read
harness: the merge's two turn-end compositions, each with its control
restore: the serde corpus answers for the merged AgentRestore's thirteen fields
harness: a limit's end types no keep going into a done report — pin the clauses no test held (D3)
harness: a limit's end types no keep going into a done report — its loop tests assert structure, not the wait's words (D5)
turn-end: Land lands on the worker's own word, as the check ends on it (M5-R2)
harness: a land act typed in a limit's place is the try a successor backs off from
gui: a restored queue's row is read by the test whose queue says it
agent: a busy sink's tries are asserted by their order, not counted against the clock
harness: the stamp boundary of Worker::stepping_since, and the exit a step leaves across the held pass
harness: the end of a written wall is pinned where no WALL_WORKED row stands in for it (A3, B-2)
harness: the loop's switch seed is one Session method its tests run (A-1)
harness: a loop that follows types as the first loop at every handoff, the seed matrix (the whole class)
two of our tests re-fitted to main's shapes after the merge of …
harness: the record's challenge test passes tippy (cloned_ref_to_slice_refs)
merge9: the open-items challenge's record arms of done_check_owed, compared whole (MG9-S4)
autopilot: name the controls of the landed-seed loop tests
cover recorder text and append-file admission regressions
harness: cover provenance, evidence and approval ownership
distinguish absent observations and literal Codex text
harness: reproduce a multi-select text given up at widths where it keeps its rows (ATERM-KI-1015-1 F2)
phase: reproduce a tail cut inside a multi-select's free-text row read with its head on the screen (ATERM-KI-1015-1 F2)
harness: reproduce a multi-select read head-on-screen when the tail is cut at its focused Submit (ATERM-KI-1015-1 F2 review)
harness: pin the multi-select fit above 160 columns, where the row stops overflowing the pane (ATERM-KI-1015-1 F2 review)
harness: drop two helpers whose tests … retired
reproduce a pending alternate-screen request after opting off
reproduce ATERM-KI-1015-2's update and handoff leads (ignored until fixed)
linux: return the reporter's notices without a let binding
reproduce the review of ATERM-KI-1015-2's fixes (ignored until fixed)
reproduce the second review of ATERM-KI-1015-2's fixes (ignored until fixed)
hold the multi-select read-back and its cuts to every swept width
gui: expose an input mark from a refused turn delivery
machines: expose lost relay cleanup and incomplete lock facts
machines: use a minute detector for eventual lock readback
seam tests for the switched sites that had none
the install lane's own call sites record their tier, on and off the install device
restore: match the malformed-frame error without Line equality
harness stats: the one-pass fixture's untouched-today journal holds a bad line too
autopilot-menu: a pointer still over a menu closed and opened again by the keyboard
footer cache: pin the refusal's reason in the fit key and every clause of the stamp lane
footer cache: hold the stamp lane's no-lane clause and the spacer run's ground
footer cache: the fit tests build v3's title reading and task stamp

Docs

the engine owns the reported colour scheme
the community theme pack
the chrome keys and the chrome tokens
describe SGR 2's readable floor wherever faint_opacity is documented
theme typography shipped (DTP status, ATERM_DESIGN §8.5, GUIDE, TEMPLATE)
program colours are allowed by default, session-scoped and reset by Reset Terminal
the session log's Phase 2A as built, and the claims it proved wrong
state font mapping admission by platform
forge: describe package source inventory accurately
align explicit Trust verdict guidance with release policy
measure Gemini CLI and agy in the lab; agy's reader, the truth of its Error ID
supervise: retain the working-directory helper documentation
r20-relaunch: the lane's rulings and limits in main's handoff, its runs in the lab record, the specs kept true
the derived palette and per-session themes
Keep colours only is withheld for a theme that sets font_weight
session log Phase 2B as built; D3 stays open and the journal ships off
manual: machines verbs as wired
current verify commands for the retired xtask ones; no dated phrasing
Windowed's rustdoc is its own; the debug-assertions coupling is written down
the carry rows and the distribution audit say what the DCS and PATH fixes made true
WP.8's audit notes back in order; the GPU web module is described as it now draws
no deleted binary, law kind or ported spec is named; each note states the current rule
harness: drive --help, the AUDIT's upgrade and resume_limits rows, and the auto-resume grace say what the code does (review DOCS-1, -2, -3, -5)
harness: the quiet upgrade's "types nothing" names its one line (review RR-LC-6)
harness: links to the met try name UsageAttempt::met_ms
comments: two merged comments rewrapped to main's 100 columns (GUI-M7-4)
merge9: the older-tape test's comment rewrapped to 100 columns (MG9-MAIN-1)
autopilot: the landed seed's ledger rule and its mark hold together
tcc: S4 — a held grant covers removable volumes on macOS 26.6.2 and 27.0
the prose A11Y.4 made false: aterm-dbus's consumer, who holds rustix 1.1.4, indexmap and serde
session log Phase 3A as built; the skills learn the log, the supervise wait stays
cite the lab run for the cut at Submit; say the multi-select fit needs a new sweep per build
ATERM-KI-1015-2 and the specs say what the review of its fixes left
what still named sctk-adwaita, tiny-skia or Linux's ttf-parser says LW.5 took them out
crash-journal: the Lane's header says the word-about-typing exception in one wrapped paragraph
the prose the A11Y.5 review found stale, and the changelog's paragraph fix
the switched sites' comments say ordered where they said durable
the tape's end flush and the video members say flushed where they said durable
the yank test has its doc back; pinned_dir no longer names the network-drive token
rule 1 amended, and every shipped word says a vendor codex is shown, never supervised (retire C6)
the pane word's example after the codex-lane retirement
harness card: a card at rest is up to three pieces more, not "no more"; the manual's paragraph reflowed
KI-1015-9 and its SPECS rows record the two edges review 4 probed
the session log's Phase 4 as built; aterm fabric brief and [fabric] log in the man page
input: state when a page gesture retires

Other

aterm-core: report the colour scheme of the background on screen
aterm-gui: the projection carries the scheme baseline; status says scheme_from
aterm-wasm: format facade_api.rs at its crate's edition (2021)
aterm-types: built-in ports name their source; the theme-file cap moves here
aterm-verify: a folder literal seeds its consumer
aterm-theme-pack: a vendored, permissively licensed community theme pack
aterm theme pack | install: list, print and install the community pack
Settings > Themes: Get More adds a community pack theme and tries it
aterm-release: aterm-theme-pack's trust memory row
Settings > Themes: Get More joins the toolbar where the row has room
contrib/themes/pack: Get More is a chip and a footer button
aterm-link: read the deleted script's shell job for the broker it runs
fabric doctor/off read the root of the fabric the report is about; fabric_cli sealed from $HOME
ink: dark/light is the WCAG pole (black text out-contrasts white), not luma > 150
aterm-messages: chrome tokens, the one source of the chrome's shared colours
Theme files author chrome colours: accent, active tab, border, search match
aterm-gui: chrome keys in aterm.toml, ChromePalette and the chrome surfaces
aterm-gui: the tab strip, band, presence and pane headers draw the tokens
aterm-gui: native roles take the chrome tokens; settings::Roles is NativeRoles
aterm-gui: chrome over the grid takes one palette (chrome-8), find's tint is a token
aterm-gui: split dividers are the seam token and follow High Contrast (chrome-11)
aterm-gui: rain and the drop/upgrade rims wear the chrome accent; reach tests
aterm-wasm: format messages_api.rs at its own edition (2021)
aterm-png: the corpus floor is the 20 tracked .png files
aterm-release: aterm-messages trust row re-measured (1005/4329)
aterm-core: SGR 2 keeps a readable floor on palette colours
themes: typography in theme files (DTP Stage 1: format, package, resolver)
themes: theme typography applies live (DTP Stages 2-3) and shows everywhere
settings: the theme picker's file rows name the type settings and skipped keys
aterm-core: closing the palette gate drops a program's palette; a manual reset puts program colours back
aterm-gui: programs may set the palette by default; colors shows what they set
aterm-types: the short catalog budget takes the colors row's growth
aterm-gui: the palette-refusal test's prepared generation names its reason
aterm-verify: a headless WebGL2 browser lane (verify browser, verify fetch-browser)
LAG-4: the proxy queue's lock lends its waiter's priority; a request's identity is checked on the spawner
LAG-4 review: the proxy queue's note carries the reviewer's re-run too
Test mode-12 cursor policy behind explicit console-host admission
Test mode-12 behavior after console-host posture is revoked
Preserve cursor style during active console-host mode
aterm-gui: test that a carried exit someone saw writes mark - seen
aterm-slog: look field keys up by match, not by scanning the table
aterm-slog: level-aware eviction, a node index and exact gaps across holes
session log: seq is never reused across a seamless update (log_seq, the timeline's reserve)
aterm-slog: the fold snapshot, the tracker's carry and the Log carry codec
aterm-gui: carry the session log across a seamless update
aterm-gui: crash adoptions take an epoch above the keeper tag's
aterm-gui: hold every session log together under a 64 MiB cap
aterm-gui: log and brief answer a closed session from the closed index
aterm-gui: a restored session names its predecessor and its lineage
aterm-gui: put back the line continuations in the control carry's WARN
session log: a seq no log reaches is never continued
session log: a carry's sender writes only lines its receiver reads
aterm-slog: where an append hangs never depends on what was evicted
aterm-slog: the ring conformance drives every eviction and binds the half rule
aterm-gui: a carried block cursor must fit the engine the successor adopted
session log: the export encodes a session's log once, and only what crosses
aterm-gui: test that a crash recovery takes the keeper tag's log epoch
aterm-gui: test the session log's carry where it meets the product
session log: a closed session's summary is at most a kilobyte
aterm-gui: a close builds only the closed-index entry anyone will read
aterm-gui: a closed session's read grants stay revocable, one table each
aterm-gui: the log memory cap is reached in one pass from far over it
aterm-slog: find the newest wall open from the back in the carry test
aterm-gui: an ambiguous closed sid's revoke is refused as a live one's
aterm-gui: revoke a closed session's grant through the revoke verb itself
aterm-slog: bind the amend's re-index of its closed ancestors
aterm-gui: pin the revoke verb's route to the closed sessions' grants
aterm-gui: the app's last close is shown to link nothing for a live log
aterm-gui: a window's close ranks its skeletons by closes, not views
Keep effects conformance anchors in the unit-test build
Test bounded Claude compact-state admission with private files
Bound Claude compact-state reads before choosing defaults
Keep compact-default checks behavioral and qualify estimates
aterm: prune and correct comments
aterm-agent: prune and correct comments
aterm-core: prune and correct comments
aterm-forge: prune and correct comments
aterm-gpu: prune and correct comments
aterm-grid: prune and correct comments
aterm-gui: prune and correct comments
aterm-keeper: prune and correct comments
aterm-pty: prune and correct comments
aterm-release: prune and correct comments
aterm-render: prune and correct comments
aterm-spec: prune and correct comments
aterm-types: prune and correct comments
aterm-uds: prune and correct comments
aterm-update-core: prune and correct comments
aterm-verify: prune and correct comments
atpkg: prune and correct comments
Describe current restart and mapped-font contracts
Test person-count continuity throughout Codex note entry
Format Codex note person-count regressions
Require a current person count for every Codex note key
Keep the Codex context fixture in an exclusive temporary home
Admit only regular nonblocking Codex rollout reads
Format the rollout reader positive control
Test refusal of a relative Codex home whose resolved path is not UTF8
Refuse a resume line when its resolved Codex home is not UTF-8
aterm-verify: drop the browser lane's tautological and prose tests
harness: Autopilot v2 slice D — Codex chips on the blank row over Codex's status row (design §9.5, §9.6.4)
harness: Codex chips — chips_for names main's new agents (Agy, Muse) as having no chips
harness: Codex chips — no mode light after Claude Code, no per-frame allocation, one frame per goal hold
Promote memory-bound scrollback floods without splitting open cuts
Keep pressure promotion within its remaining owed rows
Format scrollback pressure test module
Test pressure drain after a real history erase and refill
Recheck the pressure floor after interleaved history changes
rainbow: a torn echo's print anchor is withheld with its hidden caret
rainbow: the hand rides its line when the composer box moves under its echo
rainbow: a Backspace's echo keeps byte order (the owner's the▯subtrees)
harness: answer Claude Code's autocompact offer at 400k
harness: bound the autocompact offer's stepper
disk watch: reclaim a removed workspace's build cache, a reserve against ENOSPC, volume-share thresholds
disk watch: read ENOSPC off a supervised Claude Code's screen, free space, resume it once
disk watch: write-ahead sweep, rate-limited pass not look, capped shares, withheld not owned
aterm-win32-oracle: the windows-sys 0.52 oracle is the oracle-052 verb, not run.sh
aterm-verify: wasm-glue's second row is the wasm-bindgen oracle, not oracle.sh
aterm-win32-oracle: the clean before each oracle build is --locked too
aterm-verify: format the wasm-glue oracle row's tests
harness host test: wait for both workers' runs before the program leaves
aterm-gui: the disk tick covers every Codex session, supervised or not
aterm-agent, aterm-gui: the watch-only worker's remedies find their idle point in codex-alab's own record
aterm-agent, aterm-gui: a codex-alab comes back on its validated line after aterm's own crash or a seamless update
aterm-agent, aterm-gui: under a person's hold the self-claim's watch-only worker stands and types nothing
spec(kitty): the listener model knows a glued run's guess waits for Enter or the name
harness: Autopilot v2 slice A — the act ticker, and the chips' voice (design §9.2, §9.6.1)
harness: slice A review fixes — the page hears every act, a dialog's label is seen, a run of one act is bounded
harness: a label's end wakes the loop once — the glass expires before its deadline is folded
atpkg: the sandboxed-stub test denies the start-time read, not process-info-setcontrol
aterm-gui: the Codex disk-tick test reads the watch's look with no session
supervisor: a force-push is destructive however it is spelled
ship cut: moving the cut tree removes what a departed directory ignored
Enforce session-log carry bounds and preserve settle age
Exercise closed-log reads and revocation over the control wire
Carry retained echo probes with a proven hand-line move
Bound browser requests and isolate concurrent fetch scratch
Clarify harness glass retention and reread freshness
Recognize reordered force-push flags in turn-end questions
Compare Wasm oracle declarations within their owning classes
aterm-uds: Command::disclaim_responsibility, a child that is its own responsible process
devtools panel: measured with a hand in a macOS 27 VM; hover, the password window, a grant that applies at once
render: the translucency contrast floor lives in aterm-render
core: Terminal::rebase_colors, the colour half of apply_config
types: one shared draw of a selector's built-in side
web: named themes, splits, registered themes, and the shared floor at the boundary
aterm-release: aterm-wasm's trust row re-measured after theme_api (142/714)
aterm-release: aterm-gpu-web's trust row re-measured after theme_api (128/593)
aterm-gui: the Themes toolbar puts its chips on their own row at any width
aterm-gui: a sub-page's rail row is listed, selected, under its parent
aterm-gui: record the serde corpus answers for v0.105.0's handoff fixtures
aterm-release: aterm-wasm and aterm-gpu-web trust rows re-measured on the merged tree
aterm-phase: read Muse Code 1.4.10's boxes, question and walls
harness: supervise Muse Code end to end; prime it; say so
aterm-phase: read Muse Code's question and file box in a narrow tab
Keep the shell-hook advice test true now that Muse Code is supervised
aterm-phase, aterm-agent: read agy's lab captures — its API walls, its survey, its first run
aterm-agent, aterm-phase: agy's survey and first run are pressed by no level and typed into at no point, by any name
aterm-phase: read Gemini CLI — grammar, reader, anchors, sniff, canary
aterm-agent, aterm-gui: answer every Program arm for Gemini CLI
aterm-phase: Gemini CLI's box span opens on its title; read its redirection warning
harness: supervise Gemini CLI end to end; strip GEMINI_*; say so
aterm-phase: read Gemini CLI in a narrow pane, under a wrapped error notice, and after a refused box
aterm-agent, aterm-gui: keep other agents' lost-login wording; hold a refused Gemini CLI box
merge fixups: check all six Harness card rows; say only what was measured of Gemini CLI's usage
Describe the reserve path admission boundary accurately
Release disk episode state before host callbacks and I/O
Publish resolved policy on same-text config refresh
Preserve files exposed by moving the release cut tree
Refuse checkout over ignored cut-tree work
Keep cut-tree refusal guidance non-destructive
Keep cut preservation contracts focused on retained work
Preserve autocompact prompt and need words in session logs
aterm-agent, aterm-gui: the review of retire-prereqs-20261016 fixed (handed line, stall alone, a standing idle point, a lease uncounted)
aterm-agent, aterm-gui: the review fix's tests formatted and the flicker's parity spelled is_multiple_of
serde corpus: record v0.105.0's shipped-state answers
census: register disk_episode as a guard helper of DISK_EPISODE
Exercise disk recovery scenarios within one state-owning fixture
Require person metadata before Muse focus answers
aterm-verify: delete the verify trust check
stardust: a light star's body is steady on the size clock; only its tips twinkle
Remove duplicate session-log vocabulary entries
Record final audit evidence and code-signing availability limit
aterm-verify: cells leaves the release set; provision stops asking for the foreign std
aterm-verify: the pure-guards test decides by finish order, not by a timer
Fence Muse focus attempts on their original person and question
aterm-agent: the Muse fences ask Program by an exhaustive match
aterm-gpu-web: synchronous GPU init; wasm-bindgen-futures leaves
aterm-grid/core: a colour stored beside extras is never shadowed by stale RGB-ring bytes
approval_loop: is_muse names Gemini CLI too (…'s exhaustive match met Program::Gemini)
aterm-release: ship site builds the /terminal engine itself
aterm-release: the engine's rustflags outrank every other source, as the script's did
aterm-gui: a new tab adopts a warm spare shell spawned ahead
aterm-gui: the spare's wake classification lives beside it; the model's structural laws get a mutant
aterm-gui: no QoS lift around the spare's fork; the bind reopens the gate
aterm-gui: an update retires the spare, tested; the design records what was measured
aterm-gui: test the update gate on adoption; drop a racy FIFO unit test
aterm-gui: review of the warm spare: run waits for a fresh stamp; no main-thread stat
aterm-gui: the rc generation's moves are pinned; the spare's validator comment sits beside its code
aterm-gui: the spare conformance rig is not a new
aterm-lab: the Linux runtime lane (lab linux, verify linux)
aterm-uds, aterm-pty: three tests that only held on Darwin now hold on Linux
aterm-verify: the linux check's NOT RUN is COULD NOT RUN, exit 3, never a pass
aterm-link: route a bare @s-<sid> from a live presence view, not a walk per post
aterm-link: row faces scan in pages of 4096; post faces keep 256, by name
aterm-link: confirm a presence-view route with one bounded read
two_nodes_sealed: a second bare post across the sealed wire
aterm-link: trustfmt the presence view, its bridge test and the sealed test
aterm-link: name the presence view by path in bridge.rs
aterm-link: the crate doc says what the presence view costs per post
aterm-link: reserve producer sequences 64 at a time
aterm-link: pipeline fire-and-forget publishes, commit the inbox per burst
aterm-link: prove the burst commit, the one-record refusal and pipelining
fabric_world: a kill before the inbox burst's commit loses and doubles nothing
aterm-link: name the settled-ack pair (tippy type-complexity)
aterm-link: the bridge's module header says what is pipelined and batched
Fix reconnect custody of uncommitted inbox refusals
aterm-predict: the reconciled-view safety theorem, and the two defects it found
aterm-spec: the visibility model states attributable proof, bound to the code
aterm-predict: the safety theorem's world passes tippy -D warnings
aterm-wasm: the web predict seam declines a key typed behind a submit in flight
aterm-predict: the safety theorem's header describes the world it runs
Test returning session custody of in-flight echoes
Preserve pending echo debt with a session estimate
Preserve unowned spare files and remove a timing-dependent check
aterm-verify: a stock toolchain's drivers get its lib on the loader path, past taskpolicy too
Keep escape-scan fixture cleanup within its owned process tree
Expose startup control peer loss before binary and subscription dispatch
Scope startup control attribution to each direct serving connection
harness: Autopilot v2 slice C — the landing's ends (design §9.4, §9.6.3)
harness: slice C review — one record a landing's end, landed restated across a loop restart, a landing at its last nudge never spent
File access on a new Mac, by default: Full Disk Access at launch, then the folders
File access at launch: a second review's fixes
File access at launch: a third review's fixes
File access at launch: a fourth review's fixes
File access at launch: a fifth review's fixes
File access at launch: a sixth review's fixes
aterm-grid/core: serialize() replays every rendition the SGR decoder stores
File access at launch: a seventh review's fixes
aterm-gui: the seal island cites Trust's review 14 on trust main (…)
harness: Autopilot v2 slice B — Cruise until a time, then Land, and the Autopilot menu (design §9.3, §9.6.2)
harness: the Autopilot menu in a capture, open autopilot-menu, and a controller's keys
harness: the SESSIONS row's Timer disclosure sits beside its mode buttons
harness: slice B's tests take the record with rfind (the lint's double-ended-iterator rule)
harness: slice B review fixes — the menu's cancel is a compare-and-set and an open menu follows its session; the Commit's rebuild rides the park; the timer folds after its fire
harness: a timer arms by its session's own posture — tests for the merge's rule
harness: the same instant indexed again is no move — no footer wake per meta write
harness: the settings' text list holds main's autocompact_offer and B's land_at (36 keys)
spare: the backstop classifies B's WallMoved (a window-wide wake, no session)
aterm-render: prove correction-gate, trim the test part it subsumes
aterm-shell-integration: a warm zsh spare stamps its history file again
aterm tests: L5 waits for the spare gate's backoff, which the spare thread decides
aterm-phase: the Gemini bundle test that makes a symlink is unix-only
aterm-phase: an agy box whose options quote a multi-line command is read
aterm-phase: an answer agy saves is kept, whatever its words
aterm-phase: fixes from agy 1.4.0's own review of its reader (dogfood)
muse: Meta's installer's muse-bin-<version> is Muse Code; MUSE_ is stripped
muse: its prompt hint is no draft; the mail nudge types only into an empty composer
aterm-phase: Muse Code's screens main's reader missed, from the dogfood branch
Refuse unknown launch markers and preserve temporary-file ownership
Create owned roots for private headless fixtures
aterm-gpu-web: the render-tick reflow pump decrements through a local, so Trust proves it again
ai: reviews on at the asker's own permissions; the fleet document from a signed URL; every choice in Settings
predict: an armed guess's echo debt is custody, not an RTT sample
update: a predecessor this build cannot verify no longer holds its trial
update: a verdict settles a trial only when it is one; name the model's gap
aterm-gui: an unset theme is the dark Default again; Follow system is a choice
aterm-gui: a written Default pair offers the theme's Reset; review fixes
aterm-types: themes may derive the 256-colour palette (palette_generate)
aterm-gui: palette_generate config and introspection; per-session themes
aterm-wasm: the theme projection test reads slots 16-255 off the shared projection
aterm-wasm: theme_api.rs back in its crate's 2021 import order
aterm-gui: a Choose Tab Theme trial answers only to the window that opened it
aterm-gui: a layout captured mid Choose Tab Theme writes the tab's prior theme
aterm-gui: a split's inherited theme is decided once, at booking
aterm-core: opening the palette gate re-arms the refusal report
aterm-core: a 2031 push a program provokes passes the program-reply gates
aterm-wasm, aterm-gpu-web: set_theme hands the reported scheme back to the host
aterm-types: a newer-schema theme's skipped key names are recorded escaped
aterm-gui: Settings ▸ Themes trial bar, toolbar, save row and pack cards say what they do
CHANGELOG, contrib/themes/README, aterm-themes skill: say what themes carry now
aterm-verify: a bare ../ literal no longer seeds its crate into every cone
aterm-gui: disposition_appearance drops its test-local predicate
aterm-link: Role::of refuses with a typed RoleError; fabric tests stop pinning prose
aterm-link: enable.rs back in its crate's 2021 format
aterm-messages: the chrome floors are the theme checker's constants
aterm-theme-pack: port licences derive from the built-ins; build.rs refuses stray files
SPECS: find's match tint is ChromeTokens::search_match; the chrome-token tests have specs
aterm-gui: drop semantic_keys, unused since the typography tests read TrialTypography
harness limits: a window's placed reset is taken only for the wall words it placed
codex relaunch: carry the thread's model, and judge the sandbox by the first launch
codex relaunch: judge the launch's -m by the thread's newest model setting, a /model choice since its last turn included
Read Codex's warning cell and slash popup as Codex's own in a report
Never report a Codex reply whose head never reached the terminal as whole
Say reply-head-missing for a tall Codex reply under an archived status row
codex reader: a box in a narrow pane is read whole
supervise: a Codex note taller than its notes field is entered on its tail
Read every Codex limit family by login, pick the window a fork cannot fake, and read paginated forks whole
End a 0.163.0 legacy fork's copy at its own settings line, and test Codex's limit end
aterm-slog: the box vocabulary names autocompact-offer
codex chips corpus: classify batch 3's 0.163.0 captures
aterm-slog: drop the duplicate autocompact-offer main already lists
File access at launch: an eighth review's fixes
File access at launch: a ninth review's fixes
lint(ai): rely on Result for permission resolution must-use
Own the theme catalog fixture directory exclusively
trust: aterm-phase's floor rises to 810/4577 (was 582/2977)
Test mixed Autopilot activation and timer cancellation without a local face
Compose the real footer before exercising mixed-pane chip input
Preserve Autopilot menu intent and raw timer cancellation
privacy: read Full Disk Access again on macOS 27, and say which tab drew an uncovered dialog
Publish atomic replacements from exclusive owned stages
aterm-release: aterm-core and aterm-spec fit a 36 GiB host's verifier ceiling
supervise: clocks and sleeps through one injected door (Fx), no behaviour change
aterm-census: the supervise-fx guard keeps clock reads on the loop's door
aterm-gui: the host's ledger row hands its own stamp to Ledger::write
Exercise reviewer credential and saved-login custody
Keep reviewer outcomes bound to the stored login
Fix credential filter module and iterator types
spare: a zombie leaves the escape scan whole, so warm spares warm again
aterm-core: DEC 2048 reports the measured cell box, and reports its changes
aterm-core: serialize() keeps a deferred wrap, so a replay wraps where the source would
aterm-predict: guesses measure glyphs as the grid writes them under ambiguous_width = "wide"
aterm-core/gui: paste and IME commits are priced with the grid's own column walk
aterm-grid/core: a glyph past a double-width row's half wraps first on every writer
Keep observer ancestry reads on its injected instance probe
Hand Claude Code's MCP server dialog to a person at every level
Clear the two reds main brought into the change cone's verify
Keep every MCP dialog answer, the Chrome setup's consent and Esc out of reach
Fix forward: main's unused mut in a self-claim relaunch test
Match the vendor's kept answers as whole labels; read a half-drawn box as unread
Fix forward: main's four question tests read a host's person count
Format the vendor-answer question control
Fix forward: the live fence test reads a digit's person count
supervise: rebuild a policy from its own texts (SupervisorConfig::rebuild)
supervise: SessionSetup and a tape's header (Header::capture/encode/decode)
supervise/tape: trustfmt the new files; is_multiple_of; no reassign-after-default
Test remapped tape file-path confinement through the public codec
Reject file paths outside remapped tape roots
Test literal position-shaped MCP server names through the full parser
Preserve literal position-shaped suffixes in MCP server names
Exercise unknown composer evidence before task and watch input
Refuse input when composer cell evidence is unknown
Collapse the optional cell-link refusal condition
export: astream's root names no member; a test quotes no forbidden word
aterm-spec: the CrashRestoreJournal model and its Tier-0
aterm-core: the crash-restore journal's engine accessors
aterm-grid: a wide half ICH/DCH/ECH or a column shift blanks gets the erase background's ring bytes
Cargo.lock: aterm-theme-pack follows the workspace to 0.106.0
aterm-gui: a non-finite line_height or font_size_scale sets nothing
aterm-gui: Settings names a kept themes-folder theme by its name
aterm-gui: the Themes stage badge names a folder theme by its name
aterm-census: a tests_<topic>.rs file is a test file
aterm-census: a tests_*.rs part of a test module is a test file
Admit only regular files in the newest Codex model-setting reader
Keep PowerShell test homes and profile state inside exclusive fixtures
aterm-types: modifyOtherKeys reports the shifted keysym, as xterm does
aterm-types: the wasm DOM encoder reports a shifted key's unshifted kitty code
aterm-core: RIS and DECSTR return DEC 1007 to the host's alternate scroll
aterm-core: the DECRQSS DECSCL report says 7-bit C1 as 1, not 2
aterm-gui: writing display_font retires its game_font spelling
aterm-gui: [fabric] receipts and presence are known config keys
aterm-core: the title stack saves and restores slot by slot, as xterm's does
aterm-core: XTSMGRAPHICS advertises only a sixel geometry the DCS path places
provision: the audit asks the build's rustup-shim question
aterm-pty: the recycled-pid teardown test's bystander is born after the shell
rustix: the differential holds from_io_error's range and leading slashes
aterm-verify: the change cone names a member the lock shares by name@version
aterm-gui: the crash rule's test counts one relaunch, judged by its own signs
supervise: the ride-out's virtual clock stands a day behind, so a bypassing read fails it
supervise/tape: a later build reads an older tape; relative files are rooted; one setup shape in every build
supervise/tape: the relative-path test builds its setup in one binding
atpkg: codex-alab becomes the managed codex where the signed index pins it (managed-codex B1-B10)
atpkg: trustfmt the managed-codex files
atpkg-publish: codex-alab gets a package row, pack-package, and an index that switches codex only on an explicit, verified pin (managed-codex C1-C3)
atpkg: a dev-linked codex on ALab's channel says unlink returns it to the codex-alab build
atpkg: a rollback onto an ALab codex build names codex-alab's channel, not OpenAI's latest
aterm-shell-integration: spell the test gate on the PowerShell ConPTY helper for the censuses
atpkg: an ALab codex is revoked by its floor and yank, never revived from the vendor, and its live upgrade fires
aterm-spec: SuperviseTapeRecovery, the harness tape's recovery (model 1)
supervise/tape: the tape format — records, per-key delta, frames, torn-tail recovery
supervise/tape: trustfmt the tape files; the bind's docs say what it holds
aterm-slog: the journal's lines, the reader's view, and the writer's wake
aterm-spec: the SessionLogJournal model of the reader's view
aterm-gui: the session journal, built and off by default
aterm-gui: the journal's version skew and every torn-write offset, tested
session journal: close the review's classes (bounds, snaps, rollback, ring, quit)
session journal: no #fin over an unfinished drain, reply epochs keyed by head, no decode in the index
aterm-gui: bind the journal fallback to main's revocable closed grants
session journal: a reply hands out the journal's cursor; one it never numbered is reset
aterm-phase: Claude Code 2.1.302's idle notice, with its · hint, is still housekeeping
aterm-gui: the escape scan skips a pid that is exiting or was reaped mid-scan
aterm tests: L8 waits for the retired spare's PTY to drop
Fix forward: 23 engine tests run their boxes on a current host
aterm-agent SPECS: drop the row of the deleted fallback-press survey test
aterm-agent: drop the stray-1 backspace the removed fallback press left behind
Exercise saved empty title slots across every checkpoint projection
Preserve saved empty title slots through terminal checkpoints
Read icon titles through the public checkpoint API in the handoff test
aterm-restore: the crash-restore journal, headless
aterm-restore: Tier-1 of CrashRestoreJournal over every death point
aterm-restore: engine conformance, screen half, and the K7 regrid rule
aterm-restore: the resize unit test follows the regrid rule
verify perf: the crash-restore lane, and a tail tap that copies once
aterm-census: aterm-restore is an engine crate
aterm-restore: a floor that evicted the whole tail reads as an overflow
test journal counter prefix frame and resize admission boundaries
format the frozen journal boundary regression fixtures
type the upstream panic-free fixture loop counters
bound journal admission before replay and allocation
Move legacy history serializer import into its tests
Document the shared chrome floor dependency accurately
test owned theme publication and keep pack fixtures exclusive
Validate theme pack ids and exclusively own atomic staging
Return the atomic publication result directly
Align supervisor look documentation with the removed unreachable fallback
aterm-phase: keep a banned word out of the 2.1.302 idle-compaction fixture
verify fmt: hold a new source before it is staged
harness: hold a person's Esc from the read that shows it
drive phase: say what Esc does, from the reader
harness journal: an event's summary joins the reply's wrapped rows
drive phase: agy's trust box says exit esc, its terms screen cancel esc
verify fmt: a new source where a manifest declares a target is held too
watch help: an event's summary is the worker's last line, joined
Muse Code's network box, notes, several questions and review; CHOSE for every agent's question
Muse Code: the panel's pointer is no part of a reply; review fixes
Read Gemini CLI's YOLO, shell mode, hidden details and new boxes; map agy's measured statuses
Read a Gemini CLI box kept over its open composer; take a daily quota beside a per-minute one as agy's spend wall
muse tests: format the review test the d1-muse merge wrote
question policy: a Muse Code note open under the recommended word is a person's
question policy: a Codex note open under the recommended word is a person's too
turn_end_loop test: a box read clears the Esc read, whatever the fences let the policy press
codex reader: a question too narrow for its labels is never misread
codex relaunch: carry a settings-only permission choice; tell what it carries
aterm-render: a specimen's cell width, beside its height
aterm-gui: the color sample fits its tile at every theme type size
aterm-gui: the escape-scan tests judge their own fixture's processes
aterm-census: SPECS names the tests_<topic>.rs test-file rule
aterm-gui: SPECS rows for the phase-2 Themes and rail tests
aterm: the forged-subject test waits for its refusals' ev records
aterm-gui: an incomplete escape scan is taken again before it reads Unknown
fabric_world: topic_gap makes the GAP's hole by construction, not by racing a stopped bridge
machines: design v2 and the aterm-machines skeleton
machines: controller contracts and streaming port operations
machines: the controller's command layer and starter files
machines: person steps, per-user GitHub access, key registration, the screen flow
machines: review fixes for person probes, git reads, key revocation
machines: the controller core (inventory, ssh, discovery) and the aterm machines verb
machines: review fixes for the controller core (deadline kills, scan tri-state, terminal-safe names)
machines: the trust core, the root agent and enrollment (design §3, §4)
machines: review fixes for the trust core (run lock, floors, tri-state)
machines: host facts and the root-level system families
machines: review fixes for the system families
machines: the preference engine and the families on it (prefs)
machines(prefs): review fixes — unreadable domains, root owner/mode race, wide integers
machines: pinned-artifact installs for apps, Homebrew and aterm (design §8)
machines: harden pinned-artifact installs after review (design §8, §4.4)
machines: one env field with masked secrets; defaulted set_owner_and_mode
machines: wire every verb; batch signing; agent upgrade before apply
machines agent: exec rows carry status/stdout/stderr apart; inbox copies removed; install refuses an enrolled Mac
machines agent: review fixes for exec rows, inbox copies and the self-account env
machines: Screen Sharing through the forced command; the fleet key forwards nothing
machines: screen checks the host greets before the viewer opens; Nagle off on both relay legs
machines: Homebrew's release asset is Homebrew.pkg (same bytes, ……)
machines: hello hashes the agent file bin/aterm names; plan names builds, not two equal versions
machines: a plan reads an item waiting on a planned prerequisite as planned
machines: a Gatekeeper rejection on an App Store only Mac says so
machines: checking for updates reads softwareupdate --schedule; NetBIOS names compare without case; upgrade rows name builds
machines: enroll refuses a Mac whose hardware UUID is already enrolled
machines: Homebrew's install ends with its portable Ruby fetched
machines: Mac Analytics writes its consent version too
machines: person flows judge the admin's session by launchctl's exit status
machines: agent-side review fixes #9 #15 #16 #21 #23 #24
machines: review of the agent-side fixes: #21's unrelated blocks, #15's item pins
machines: controller fixes from the review (contact errors, refusals, signers, GitHub keys)
machines: review of the controller fixes (Local Network wall, signers, docs)
Cargo.lock: aterm-machines at the workspace's 0.106.0
machines: greet a host again after its agent upgrade, so status shows the build it runs
trust: aterm-machines floor 858 -> 903 (ship trust run --update-ratchet)
Answer the folder-trust dialog of a launch the server witnesses
launch_witness: format the module trustfmt flagged
launch_witness: say that a controller's line after the person's Enter reads as theirs
aterm-slog: drop the autocompact words a merge listed twice
launch witness: controls that bite, a true scope, Caps Lock plain
Fix forward: main's digit-proof reds and a bridge test's lock race
spare: a process gone since the listing leaves the escape scan whole
Fix forward: a PowerShell test the censuses read as shipped; spare waits
launch witness: the shells it covers on any host; a gone pid's test
control: the push loop's peer probe peeks without waiting
SPECS: subscription-peer-liveness states that the probe never parks
control: the push probe's doc carries the measured numbers and says plainly why its no-wait is a per-call flag
Settle refused font work and retain theme preview custody
subscribe: the push loop's probe contract is 'never wait', not 'tightly bounded'
Own fabric hold scratch directories through exclusive temporary guards
Describe the specimen fit search and clipped minimum accurately
candidate gate: answer the publisher's question in-process (B18/L34)
trust judge: drop the bash-era decisions and plan fields; facts format 7 (TR10/L21)
trust lane: commit the cost-history seed, crates/aterm-release/trust/costs.tsv (L26)
release cutter: the interrupt module is src/interrupt.rs (SITE-5, part 1)
ship site: a typed site::Failure — Interrupted, Refused, Child (SITE-5, part 2)
ship site: a live site that cannot be fetched is LiveUnchecked, never Synced (SITE-2)
ship site: stop reading a step's output 5 s after the child exits (SITE-3)
ship site: an interrupted sync's own files are put back from HEAD (SITE-4)
release tests: read publish/config.sh at run time (SITE-6)
ship check: drive the wasm32 gate with a stub rustup (EX11)
ship tap deploy: the Homebrew tap deploy is a ship verb, not a script (L87/OF-68)
release fixtures: the generator shares verify release's compile (OF-52, generator half)
release cutter: no test reads this crate's source as text (HYG-3/OF-49)
release cutter: doc comments on their own items; names of moved and deleted items
release fixtures: the generator compiles in its own target directory again (OF-52, generator half)
candidate gate: one receipts store, one tree_root check; the lapsed-roster test drives the publish (B18 review)
trust lane: a cost row keeps when it was measured; --update-ratchet's seed rewrite is tested; facts key 5 (L26 review)
ship site: the drain is a parameter of streamed; its test takes 0.1 s, not 5 (SITE-3 review)
ship site: a refusal carries its kind; the end-to-end tests assert it (SITE-5/SITE-4 review)
ship tap deploy: commit only what it wrote; refuse a tap index already staged (L87 review)
release cutter: gh_raw refuses a name-based download; the build test reads build_one's command (HYG-3 review)
docs, atpkg-publish SPECS: the candidate gate is answered in-process (B18 follow-through)
forge: one ratchet; budget returns the resolver's notes into its report
census: derive the vendored-fork review from vendor/forge.toml
census guards: tighten four rules, add std-command, retire watch-hands, type shared-application
aterm-http TLS fixtures: mint.sh becomes PROVENANCE.md
retire the two hand-run stock oracles: wasm-abi toy and windows-sys 0.52
aterm-bidi: gen.py and subset.py become examples/gen_tables.rs
aterm-effects art: the five Python rigs become examples/art_rig.rs
census: scripts floor at the post-wave count; SPECS follow the guard changes
docs and comments: current commands, the type that replaced each guard, AGENTS.md
census shared-application: a Windowed proof fetched before the send holds it
lint: the three ported generators pass targo-tippy -D warnings
census shared-application: name a stale row by the proof that holds it
census guards: the Windowed proof holds a send only when answered for; tests own their list
forge budget: a missing armed row is RED, restoring OF-42's coverage
atpkg-publish: one tag(), manifest_name() and sig_name() (D18)
atpkg-publish: an unreadable channel is COULD NOT RUN under lane --dry-run (L38)
atpkg-publish: elect the signing roster once per run, not once per pack (A9)
atpkg-publish: lease the hello sysroot when it is a store build (A16)
atpkg-publish: a keyless builder reads the channel head anonymously (D17)
atpkg: the cargo stub runs lane-free queries on targo, quietly (BLD-3)
atpkg: the two SKIP-and-return tests no longer pass silently (OF-30)
atpkg: atpkg_suite's header names only what it pins (L68)
install.sh: the embedded verifier refuses what the updater refuses (INST-2, L42)
atpkg: pack-time relocation and the LINEAGE stamp/tree scan move to the producer (A8, L32)
atpkg: one declarative verb table drives dispatch; the source scans go (HYG-3, OF-49)
install.sh hands post-placement work to the installed binary (OF-38, INST-4)
atpkg: the cache's system-shape test runs everywhere; SPECS records the scans' removal (OF-30, HYG-3)
atpkg: shell-setup asks its resolved binary for completions; the sweep reads a desktop entry as install.sh did
atpkg-publish: the hello sysroot's lease refusal is one sentence again; its fail-closed arm is tested (A16)
atpkg: the arity edge runs over a scratch HOME only, never in-process
atpkg: shell-setup writes the Linux desktop entry; install.sh's copy and its cross-file pin go
atpkg: ops::managed is the one door past a shim, so no door exports half of it
atpkg: the toolset verb's change of mind is held by behaviour, not a scan
atpkg: the bundle resolve check sniffs a symlinked bin through to its object
atpkg, atpkg-publish: no text names a deleted scan or verb; SPECS state the current facts
atpkg-publish: a group dry run asks the candidate gate
candidate gate: hash the committed retraction ledger in memory
aterm-gpu: no self dev-dependency; the wgpu oracle is its own lane
winit: the synthetic key event is a test/debug seam, not a feature
winit: retire the aterm-test-key-event feature to an inert row
aterm-cg: CoreGraphics leaves aterm-objc's cg feature for its own crate
aterm-objc tests: adversary files folded by subject; the re-exec family is one binary
checked_msg: every debug-build ObjC send is prototype-checked, cached per class
aterm-gui: a Windowed proof gates every +sharedApplication send
objc_live_class_audit: name the command that runs it
raster_accuracy_survey: spell its run lines with targo and opt-test
gpu/render tests: no SKIP half passes; each ends in could_not_run
aterm-gpu: one raster_changed door drops the atlas; the source scan goes
aterm-gpu: pipeline_table builds every wgpu pipeline; no test reads source
X3: the two hidden #[ignore] measurements are [[bench]] targets
aterm-render: the two process-reading tests join the suite; 6 binaries become 4
aterm-render: a checked-in variable mono face; portable_bold stops borrowing one
gpu_matches_cpu: record why a primary face's long arrows are not condensed
aterm-objc: doc citations follow the adversary tests to their subject files
aterm-objc send.rs: restore the licence header the checked_msg rewrite dropped
first_frame_compile bench: the warm thread is the bench's, not the library's
objc examples: two checked sends that would panic in verify appkit
aterm-gpu: three Metal-only tests return to the default lane
gpu tests: one run per parity body; the last SKIP half ends COULD NOT RUN
aterm-gpu: the monitor-change upgrade's order is driven, not scanned
winit_seam: the three source scans go; the table names files, not lines
SPECS: the package's citations follow the tests to where they live now
trust floors: the new aterm-cg crate gets its row (1 of 20 proved)
aterm-cg: a default member with a workspace row; its edges inherit it
aterm-gui: main's password-sheet sends go through checked_msg
shared-application: the Windowed proof holds seven sends; their rows go
aterm-render: coretext_answers_the_emoji_lines ends COULD NOT RUN
NOTICE, road-to-zero: the variable Cascadia Mono fixture and aterm-cg
aterm-release hooks test: the export fixture's relocate.rs is atpkg-publish's
agent: one Timings value for the upgrade, relaunch and supervisor waits (P2)
disk watch: retire the cells cache discovery (FOLD-4, L72)
headless: --ready-fd, the instance's own word that its control socket listens (LAB-6)
live suites: one boot that waits on --ready-fd and refuses as COULD NOT RUN (HAR-4, OF-30, P5)
live suites: the headless control-socket smoke as a plain test (OF-08)
live suites: nothing typed is judged at the host's own record, not after a quiet window (HAR-5, OF-53)
fixture: the owner's bash box names the lab's capture verb (OF-65)
fixtures: the Claude Code 2.1.301 footers, read by a test (LAB-3, L46)
drive, fleet: the control client is this build's own ctl verb (LAB-5)
upgrade watch: no hands by its connection, not by a census of its call graph (GC11)
conformance_login_wall: the Env literal loses the retired cells root (FOLD-4)
host_live: the last quiet windows become journal orders, or go (HAR-5, OF-53)
supervise_turn_end: the task's line in one feed-bin frame, never a draft the loop reads
upgrade watch: every connection a dry run makes is read-only, pinned by a test (GC11)
SPECS: name the live functions, drop dated history, and map the new tests
comments: state the rule, not its history
host_live: drop the near-vacuous negative controls instead of calling them an order
timings: the fast-timers seam has one name, aterm-types' deny-listed one
lifeline: restore the line continuation in the --ready-fd close-on-exec error
headless_boot: an environment refusal is said at once, not after a minute
fixture: the bypass rm box names no recorder, because none exists (OF-65)
relaunch: ShellBack is built only on a clock, never on zero durations
supervise: the hosted-claim test keeps the production clock and pins ttl=90000
supervise tests: a run that must type nothing more ends at the loop's own word that nothing is due (P2)
supervise tests: tails sized to the clock the tests run, and runs that end at their act (P2)
harness tests: the control-fixture gate follows the descriptor limit (P2)
timings: one real-clock test per family, live and unit (P2)
docs, specs: the upgrade watch's read-only connection and the by-construction Program list, as merged
Cargo.toml: [profile.test] debug = false
aterm-toolchain: one std-only crate for the toolchain, rustup, the build cache rule and the lease
aterm-libc-oracle: a missing union.json could not run (exit 3); a malformed one stays a finding
aterm-verify: neutral names for the libtest refusal fixtures
verify perf arena: every ctl call is bounded by its verb's timeout plus a minute
verify cone: read the root manifest and the lock table by table before widening; publish/ selects aterm-release
verify test run: three times the cores for a binary whose tests mostly wait
verify exec: the libc crate's declarations, starred env removals, a pure TIMEOUT test
aterm-verify: one build cache with plain targo, no driver lane, the release's feature builds
[profile.opt-test]; rust-analyzer runnables name targo's lane
verify test children: --tests alone; recorded binaries matched by file name
docs/PROCESS.md, aterm-verify SPECS.md: the engine as it now runs; store-current scope follows the move
verify exec: drop Capture::Append, which only the headless smoke used
verify doctests: keep them beside the test run (measured against after it)
aterm-toolchain: Homebrew's rustup keg is an input; the store layout's names in one place
verify doctests: a scan that fails wide, so no doctest is dropped
verify feature builds: compile beside the test run, test after it; the oracle keyed on its suites
verify: what it builds to drive, it builds under the test profile
verify trust: the clone's cost rows over the seed's, library by library
aterm-verify: SPECS rows follow the tests; no pin tests or history comments
verify feature builds: the gpu oracle's suite, then the checkers', never both at once
verify doctests: the scan's doc names the manifest-dir include it follows
verify gpu-oracle: a suite's tests are its binary's or its module's
verify: a selection holding aterm-gpu tests and lints its wgpu-oracle arm
verify-engine follow-through: stale references in merged packages' files
trust floors: the new aterm-toolchain crate gets its row (55 of 301 proved)
census headless-lifeline: an anchor, not a count, proves the read reached the tree
aterm-gui: delete the two timing-flaky harness host tests (L53)
aterm-gui: delete consent_observer's source scans and seamless_tests' include_str half (GL10/L19)
aterm-gui: delete every_dispatched_verb_is_in_the_table (HYG-4)
aterm-control/aterm-gui: the conformance seam is a debug build's, not a feature's (OF-09/OF-24)
aterm-gui: control_privacy reads the dev mark with aterm_update's reader; names the census guard (DEV-3, GC4)
aterm-gui: lib.rs's clean island compiles under cfg(clean_islands) (L55)
aterm-gui: SKIP-and-return test sites end in could_not_run (OF-30)
aterm-gui: delete the ignored visual captures and the two exhaustive sweeps (X3)
aterm-gui: one timing value for the fabric waits and the harness cadences; fence waits awaited, not slept (P5, HAR-6)
aterm-gui: every lane thread is made by qos::spawn_lane_thread; atpkg children by qos::atpkg_command (HYG-3)
aterm-gui: trail_audio's queue teardown lives in a private module that alone names AudioQueueDispose (HYG-3)
aterm-gui: the terminal present takes its visuals from host_visual_state; wysiwyg_gates deleted (HYG-3)
aterm-gui: delete the remaining source-text pins (HYG-3/OF-49)
aterm-gui: extract the document models and the access card below the window (P9/OF-55)
aterm-gui: extract the tab model below the window (P9/OF-55)
aterm-gui: footer_pass_cost_probe is a [[bench]], not an ignored test (X3)
aterm-gui: the document tests' root-authority mint stays in aterm-gui (launcher-mint guard)
aterm-gui: drop the test-fixtures and aterm-test-key-event dev-dependency feature requests (OF-24)
census: the main-loop walk covers aterm-gui's split-out crates
aterm-gui: extract the fabric endpoint below the window (P9/OF-55)
aterm-gui: the restart act's grace and look cadence read the one timing value (P5)
aterm-gui: the listener watchdog's pace is a value a test can shorten (P5)
aterm-gui: turn_submit_verification_rows waits a short submit window, not the 2 s default (P5)
aterm-gui split crates: the debug-build seams compile for the foreign cells
aterm-gui: a_connected_tab_is_connected_as_it_lands is unix's, as its booking is
aterm-gui: the host's turn-end answers wait through the one timing value
aterm-gui: one real-clock test per timer family; the stamp test's margin back
census: every GUI fence reads aterm-gui's split-out crates
aterm-gui SPECS: citations follow the files the split moved
aterm-gui: image is shown never to photograph the window
aterm-gui and its split crates: docs say what the code does
messages: the persistent-hold fixtures compile in test and debug builds, not by feature (OF-24)
workspace: the aterm-gui split crates get their rows; the fast-timers seam has one name
winit: delete the inert aterm-test-key-event row
aterm-gui: the devtools helper drive holds the Windowed proof; its shared-application site row goes
gui-split follow-through: the footer bench measures a hovered chip; stale references after the split
census lock-order: the synthetic fixture mirrors the disk_episode guard helper
aterm-gui-tabs, aterm-gui-fabric: the serde rows ask for the derive
trust floors: the five aterm-gui split crates get their rows
aterm tests: the warm-spare live suite boots through boot_with
aterm tests: the warm-spare suite's L8 and L11 decide by state, not by a race
aterm-gui tests: IME composition takes no RTT sample, judged against an unmeasured twin
aterm tests: the live fenced press carries the person fence first
aterm-shell-integration: the PowerShell key test is a _tests.rs file
Review fixes: the fd-leak detector, two stale mentions, AGENTS.md's interim models line
aterm-restore: the journal's Tier-1 conformance is a _tests.rs file
aterm-agent: drive's prompt is sent after --, so its text is never read as send's options
aterm-agent: drive await keeps a caller's own timeout=<ms>
aterm-core: row guards and row watchers read the live screen, not the scrolled view
aterm-grid: a row a taller window brings back from history keeps its images and spacer colours
aterm-gui: screen never sends a line past the reply-line cap its client enforces
aterm-grid/core: a colour-blanked early-wrap hole is no text on screen or in the ring either
aterm-link: an inbox record's commit waits for its own verdict, and an exit hands it over
aterm-link: a keepalive is not held back by an ack owed a whole interval
aterm-link: ack_halt says what pipelining did to its bookkeeping
aterm-link: delete Slot::note_published; Link::peak is test-only
aterm-link: the presence view dials off the loop, and a confirmation is a mark
aterm-link: a view confirmation's heard head counts the acks just owed
aterm link broker --durability strict|relaxed, safe across a power loss
aterm fabric on --durability; status and doctor say the tier in force
aterm-link: a relaxed power loss is a log change to the bridge and the notifier
aterm help fabric: the broker's --durability, and what relaxed costs
fabric_world: the report reads the broker's durability off its process
aterm fabric: the tier row is acks, so BROKER's columns do not move
aterm link broker: the relaxed mark under the log's lock, and a clean stop that retires it
aterm-link notify: prune old logs' stores, and say what a renewed log costs
aterm fabric on --service none: keep the hand-run broker's tier
fabric durability: the help, manual, CHANGELOG and second-host doc say what relaxed costs
aterm-core: one ghost painter that changes only the guess's own cell
aterm-predict: exact owed-echo attribution, and a theorem whose clauses can fail
aterm-core: a refused extended colour consumes what xterm consumes
aterm-core: a stray ?1049l restores the cursor, as xterm does
aterm-grid: DECSEL/DECSED erase with the BCE background, as xterm does
aterm-grid: a reverse index resets the pending wrap and scrolls a one-row screen
aterm-core: a 47/1047 switch carries the BCE background to the buffer it swaps in
aterm-conformance: a differential VT oracle against astream-term, in the test lane
aterm-release: the public export carries the astream crates members dev-depend on
forge, vendor/README-astream: astream-term is the sixth astream crate aterm resolves
aterm-conformance: SPECS.md counts the oracle outside its spec-sample recount
aterm-grid: name the selective-erase test's case type (clippy type_complexity)
aterm-conformance: vt_oracle doc fixes (a stale test name, a wrong projection example)
aterm-grid: the margined LF clears the wrap; a one-row screen's margined scrolls blank it
aterm-core: a stray ?1049l moves nothing again
aterm-conformance: excluded oracle cases still check aterm; the shrinker stays in the subset
aterm-grid: the margin-arm table is a struct (tippy type_complexity)
fabric_bench: measure the fabric over the real stack (latency, burst, attach, records)
verify perf fabric: a MEASURED lane for the fabric bench, with a yardstick
fabric_bench: name the idle bridge and the yardstick in the phases' module note
fabric bench: review fixes — exactly-once burst, quota-safe window, honest attach
fabric_bench: name every check the bench makes in its module note
vendor/astream: 4e91e82, astream main with the term oracle fixes; the 30 astream exclusions go
fabric_world: a forged subject's verdicts are waited for on ev, not read once
Fix merged performance lane array length
Keep the legacy role fixture explicit about strict durability
Read bounded process argv and share broker option parsing
Remove redundant conversion in pure running-argv fixture
supervise/tape: the reader bounds what a forged tape costs; a damaged magic is its own move
supervise/tape: the delta's docs and tests say what the table does
forge OB-1: the astream crates checked are read from the graph, not a list
supervise/tape: the reader's bound docs say only what holds
linux: a Linux host can type-check the mac-arm cell, and an island comment any Trust lexes
install.sh: judge the signed Linux candidate by its --version identity line
install.sh: Linux skip lines name remedies that exist on Linux
ship site: alab.systems serves install.sh and offers it as Linux's one command
install.sh: match a channel slug in the C locale
aterm-update, install.sh: a Linux install path under Ubuntu's umask 002
aterm-update: a test's replacement candidate gets the mode a writer gives it
aterm-agent: disk-discovery fixtures make Claude Code's temp root 0700
atpkg: the Linux store stays put whatever $XDG_DATA_HOME says
install.sh: the store-path pre-flight is a function its tests call
aterm-update: ancestry's module doc names what the private-group rule cannot see
aterm-pty: strip other terminals' identity variables from the shell's environment
aterm: carry the Linux app icon and the man page in the binary, and set the X11 window icon
aterm-window, aterm-gui: consume the launcher's startup token and end its launch sequence
aterm-window: draw the Wayland frame before Resized, so a fullscreen round trip keeps the window's size
aterm-gpu: name an adapter that cannot present to the window, and log the CPU fallback
aterm-pty: keep the outer terminal's identity in a session that does not claim the terminal
publish: export man/, which aterm-gui embeds
aterm-update: the piped-install test proves a foreign BIN_DIR aterm never runs
aterm-gpu: tell the two surface-format refusals apart without pinning their wording
keybinding: a shortcut on a non-Latin layout matches its US key
aterm-gui: ignore a key that was already down when the window took focus
aterm-gui: a middle press on the tab strip closes the chip, never pastes
aterm-gui: Shift+drag selects over a mouse-tracking program off macOS
aterm-gui: Alt+arrow reaches the program when no pane can take focus
aterm-window: one X11 wheel notch from a valuator-less pointer is one step
keybinding: Shift+Insert pastes the PRIMARY selection on Linux
aterm-gui: a busy tab or pane asks before Ctrl+Shift+W closes it
aterm-gui: Linux asks a busy close in the window, not the titlebar
aterm-gui: the confirmed tab/pane close replays build on Windows
aterm-gui: a confirmed tab or pane close takes the question's attribution
aterm-gui: the focus-replayed key press filter is a tested predicate
aterm-gui: say the close banner asks off macOS, and retire stale specs
aterm-render: admit a font installed as a symlink as the file it names
aterm-render: draw a script no list names from the installed face that covers it
aterm-render: font_family = "monospace" means the default face
aterm-gui: --show-face and --show-config name the default face
aterm-render, aterm-gui: trustfmt the generic-monospace and show-face changes
aterm-render: search the XDG font roots, and only this OS's roots
aterm-render: a curly underline waves however low the font puts its underline
aterm-render: an emoji-presentation scalar draws in colour over a text face's outline
aterm-gui: GNOME's Cantarell backs the Linux UI face ladder ahead of DejaVu Sans
aterm-gui: size a Top Settings choice for the default it paints; "Match terminal"
aterm-render: the supplement shadow-law test counts CJK punctuation foreign only to a non-CJK face
aterm-render: the script supplement asks for Noto Mongolian and Yi by name before any cmap pass
aterm-gui: Windows says "Match system" for automatic window appearance
atpkg: an unserved ALab toolset is a note off macOS, not a doctor PROBLEM
atpkg: no Trust signpost where Trust has no build for the target
aterm-gui: deliver desktop notifications on Linux over org.freedesktop.Notifications
aterm: an answer into a closed pipe ends cleanly instead of panicking
aterm-agent: drive and fleet run this image's own ctl, not an aterm-ctl file
aterm-cli: say "session started" only once the shell has spawned
atpkg: a command nothing runs is answered by the program that ships it
atpkg: pkg which trust names p11-kit's trust unrelated with no index or behind a stub
aterm: macOS consent guidance stays on macOS; ctl privacy says there is none elsewhere
aterm-ctl, aterm-uds: judge a graph entry's writer on Linux too
aterm-ctl: the Linux-only placement slack is compiled only on Linux
aterm-ctl: a long-lived client places each judgement's births by its own clocks
aterm-uds: say what else reads None from the Linux exe link
linux: the Linux build of aterm and its libraries prints no warnings or clippy lints
linux: test targets build without dead code, unused imports or clippy lints
aterm-verify: a fleet OS's cells are red on any rustc warning
aterm-gpu: one GPU context at a time, and no Vulkan debug labels
aterm-gui: tests of macOS-only lanes and macOS metrics hold on Linux
aterm-pty: fd-leak probes name descriptors through /dev/fd, which dash reads
aterm-uds: Linux's AF_UNIX shutdown and signal numbering, in tests and docs
aterm-spec, atpkg: exec a just-written file past ETXTBSY, one helper for all
atpkg: the no-store reroute test cannot run where /etc/passwd lists the account
aterm-shell-integration: the xtrace test reads past bash 5.1's bracketed-paste reset
aterm-render: font tests judge the drawn outline, and end typed without host fonts
aterm-agent: a Read box judges every reading's text before the disk
aterm-agent: harness tests run where zsh is not installed and the state dir is XDG's
aterm-agent: the zsh stand-in lives beside the test binary, never in shared /tmp
aterm-dirfd: the mode_t cast expectation names exactly the targets it holds on
aterm-verify: say that a cell's warnings are judged by an unpinned rustup rustc
aterm-pty: one Unix shell resolution, with PATH names and the passwd shell
shell: start the Linux shell as Linux terminals do, each startup file once
aterm-gui: run the shell the spawn resolves, and a working one when it cannot
aterm-gui: the Unix --help and starter config describe the Unix shell lookup
aterm doctor: check the shell the spawn resolves
shell-integration: bash reports the command line as typed, not its first part
aterm-uds: without $XDG_RUNTIME_DIR, Linux keeps its control dir under XDG state
aterm-gui: the atpkg children's PATH asks a shell Linux has, and no Homebrew
aterm-uds, aterm-ctl: keep the new control-dir fallback in the proof-friendly shape
aterm-gui: the substitute-shell line is text, never a terminal sequence
shell-integration: an array PROMPT_COMMAND's elements are no typed line
aterm-gui: a substitute shell starts without the broken shell's shell_args
shell-integration: the bash loader tilde-expands a --rcfile from shell_args
shell-integration: -o posix and one-dash long options in bash's shell_args
aterm-pty: the shell's PATH lookup skips relative entries; a large passwd entry fits
aterm-cli: the doctor test no longer says an empty $SHELL is exec'd
linux: the merge with main builds warning-free on Linux
ship linux-build: the Linux release executable carries no debug info
linux: the census, and two tests two fix branches broke between them
aterm-gui: the warm spare's macOS-only askpass and escape-scan items build warning-free on Linux
shell-integration: bash marks reach the terminal, never a redirected stdout
aterm-gui: devtools panel's dead-code expectations hold on rustc 1.96
aterm-slog: the autocompact prompt word is listed once
aterm-gui: the self-claim test's lane service exists only on macOS
aterm-shell-integration: gate the test helper added like its caller
aterm-gui: gate the test helper exit_of like its callers
aterm-render: walk the font table directory with as_chunks
aterm-render: read_face_tables walks table records as fixed chunks
aterm-grapheme: script_runs exposes the Script table as its runs
aterm-render: the script supplement counts only faces that draw a missing probe
aterm-render: a family resolves to its font file over a symlink alias
aterm-render: only a link to a file beside it ranks behind that file
aterm-render: the script census test takes the embedded DejaVu face
aterm-gui: a Linux wheel notch scrolls VTE's ceil(rows/10) lines
aterm-uds: drive, fleet, link, fabric and keeper answers into a closed pipe end cleanly
aterm-cli, aterm-gui, atpkg: their closed-pipe printers write through aterm_uds::stdout
atpkg doctor: a local rustup trust where no Trust is published is a note
install.sh: the piped Linux CLI skip names the clone that follows Trust
aterm-uds: a verb's answer a full disk lost exits 1 and says so
aterm-link: an inbox --peek that could not be printed does not say it marked nothing
atpkg doctor: the local-trust note test checks the marker, not the sentence
aterm-verify: a group down to its exited leader reads as empty on Linux
aterm-verify: a /proc entry that cannot be read keeps a group alive
aterm-keeper: the classifier test reads the parent's wait status off Darwin
aterm-cli: the shim tests exec their just-written files past ETXTBSY
aterm-pty: the recycled-pid teardown test's bystander is born after the shell's tick
aterm-verify: a missing node or binaryen names the OS's package off macOS
aterm-lexicon: the dictionary gates read Webster's Second by name, COULD NOT RUN without it
aterm-types, atpkg: a passwd-file dev seam lets the no-store reroute test run on Linux
aterm-gui: tests build on Linux again after the merge with main
aterm-shell-integration: the spare hold's SIGWINCH negative control runs on macOS only
aterm-uds: one user-private-group rule, shared by the updater and every reader
aterm-agent: a fleet document on its owner's private group is read
aterm-gui: the self-claim tests import Mutex and Scope on every platform
trust_lane: a target root and slots targo trust admits under umask 002
trust_lane: a check's dep-info is judged by its slot's own clock
aterm-uds: shared_write in trustfmt's layout
aterm-uds: read the account databases on Linux only
aterm-uds: no private-group exemption for a file with an access ACL
aterm-update: re-export the ACL seam on Linux only
aterm-uds: no private-group exemption past an NFSv4 ACL, a remote filesystem or a failed enumeration
aterm-gui: the self-claim and warm-spare tests' imports build on Linux
aterm-gui: band seam tests read the closing line as underline or rail
aterm-gui: the web band golden is drawn on the web's band base on Linux
aterm-gui: the comet smoothness test checks each band base it ships on
aterm-gui: the resize re-announce test posts the installed words as a row
aterm-gui: Top's Music effects status is the stop after its switch where both do not fit
aterm-gui: Settings tests give macOS-only rows and audio their Linux arms
aterm-gui: a twin's tab label sheds the state the whole strip shares
aterm-gui: the clamped-selection band test collides its pair in one face
aterm-effects: libm-dependent golden folds are pinned per libm
aterm-gui: a cluster's survivor rule measures against its own members
aterm-gui: only a status line keeps with the control above it in a split card
aterm-gui: macOS-only tests' seams and helpers are gated to macOS
aterm-gui: the IME prediction test allows the pending guess's echo debt
aterm-gui: a twin's or cluster member's shed tab ending is whole words
aterm-effects: x86_64 glibc reports its golden folds instead of asserting aarch64's
install.sh: the Linux verifier's python3 runs isolated
aterm-restore: the generated-input test's rounds are typed
trust: aterm-restore's floor is 171/497
Cargo.lock: aterm-restore at the workspace's 0.106.0
aterm-restore: a clear leaves no byte from before it in the region
aterm-restore: a mark's slice is counted before its append, K6 or not
aterm-restore: a replay that ends inside a swallowed sequence is counted
aterm-core, aterm-restore: no keyframe is cut inside a signed mark
aterm-restore: a death inside a history append keeps the committed run
aterm-restore: only a RESIZE past the keyframe speaks for the host's word
aterm-restore: negative controls the Tier-1 death half alone must reject
aterm-restore: the generated-input test reaches the u64 edges it promises
aterm-restore: the clear settle's floor is the keyframe's own tail_from
trust: aterm-restore's floor is 180/508 after the R2 review fixes
aterm-agent: idle compaction under Claude Code's own suggestion is no turn
Preserve unseen journal retirements and refuse uncertain read boundaries
Give the replacement journal test a fresh instance identity
Full Disk Access probe: open TCC.db from a child; measure the update handoff (S1-S3, S7)
Exercise owned setup stages and pure machine input boundaries
Preserve owned setup stages and refuse ambiguous integration inputs
aterm-gpu: src/gl, a first-party GLES 3.0 arm, byte-identical to wgpu on Mesa
aterm-gpu: the GL arm draws armed readback frames through encode_frame
aterm-gpu: bloom, shimmer, the tray card and inline images on the GL arm
aterm-gpu: GL presents, EGL window surfaces and the GL tap ring
aterm-gpu: EGL window surfaces take exactly-RGB888 configs
aterm-gpu: Linux renders on the GL arm; wgpu leaves the shipped Linux graph
aterm-gpu: a lost GL context reaches device_lost; the arm's facts come from its own device
Compile inert typography construction in benchmark fixtures
Exercise rollback custody and complete result admission before repair
codex reader: the exec and patch boxes in narrow panes are read whole
codex reader: a Reason row that opens $ is still the reason's
census: name the journal's retirement lease apart from the census's guard words
Preserve owned staging, recovery bundles and complete result handoffs
indexmap: the last vendored fork goes back to the registry, at 2.13.0
sink: a discard never splits a frame; the operator's paste is whole too
sink: the drainer holds the spill mutex across its write only where it cannot park
style: trustfmt the memory-banner carry-on loop test
machines: inject screen's opener; dev screen-headless verb; measure Screen Sharing input on 27
machines: the lock screen takes Screen Sharing keys; a relative --controller works
machines: GitHub controller fixtures follow gh 2.92.0's measured output
machines: GitHub controller notes and design doc state exactly what was measured
aterm-predict/gui: the wide ambiguous width is under the theorem; no guess or cursor on a wide glyph's right half
aterm-core: a restored session leaves a dead ?1047 screen where the live one would
aterm-link: the durability hazard list counts the inbox commit owed outside the log
fabric bench: the burst's fence is checked against the log; the README stops calling burst commits deterministic
vendor/astream: 0fafa2e, whose RIS keeps the alternate buffer as xterm's does; the oracle records aterm's difference
trustfmt the wave-1 review fixes
parser: a DCS ends at ST alone; an ESC that does not begin ST cancels it
core: an OSC 7 at the signed shell's idle prompt waits for its next prompt
shell-integration: no integration puts an unmanaged ~/.aterm/bin on PATH
parser: assert_invariants back under the line cap
core: an OSC 7 waits for the prompt only where the shell's phase is its word
aterm-gui: the cost test pins the lean form a hovered Autopilot chip lays; tippy's needless borrow
control: the push probe's no-wait guard counts the probe's kernel entries, not one read's flags
subscribe: a pass budget gives the push loop back the coalescing window the probe's sleep was
aterm-dbus: lane-bus, the Linux lane's AT-SPI reader and Mutter seat
aterm-lab: the Linux lane records LW.4's baseline, and every proof replays it
aterm-lab, aterm-dbus: trustfmt the baseline and lane-bus
aterm-dbus: lane-bus seat waits on the window's focus, and xdnd drags a file over an X window
aterm-lab: the Linux baseline waits on events, records XDND and text-input-v3, and pins no prose
Reproduce lost person custody across a fenced paste
Retain the original person fence through paste submission
Exercise held cwd restoration and same-face reader timer identity
Preserve timer identity, restored cwd lineage and idle pacing credit
Remove the strain row and its samplers; slim aterm-sysprobe to the shared readers
spare: L5 drives visible runs until the gate opens, not exactly three
trust: aterm-messages measured on the merged tree, 910 of 3954
session journal: build on Windows (errnos behind cfg(unix))
aterm-uds: anonymous shared memory for the crash-restore region
aterm-keeper: companions, the crash-restore region beside each master
aterm-spec: KeeperCompanionCustody, which region the keeper offers
aterm-keeper: Tier-1 of KeeperCompanionCustody over the real core
aterm-census: keeper-no-mmap, the keeper holds regions and maps none
aterm-keeper: the kernel lane carries a crash-restore region across a SIGKILL
aterm-keeper: unit tests of the companion check and the link's re-telling
aterm-keeper, aterm-restore: tippy clean on the change cone
trust: aterm-keeper, aterm-uds and aterm-restore floors after R3
aterm-keeper: the outgoing window never reads again after its successor's Commit
aterm-uds: a region is Send, not Sync, and reads its read-only words by the rule
aterm-keeper: the regions the keeper holds are read from its descriptors
aterm-keeper: clippy.toml rows ban the region API; the census guard keeps the FFI words
aterm-keeper: trustfmt the region rows' expectations
aterm-uds: gate complete.rs's stdout drain for the wasm census
Gate the complete-stdout drain thread off wasm32 for the census
Exercise known birth changes across the keeper EOF grace
Keep known process births distinct during keeper reconnect
Require explicit backing-object custody for shared-memory regions
machines: screen measured at the login window and the lock screen
machines: lint clean again after the owned-staging merge
verify perf fabric: an optimized arm, --profile dev|opt
verify perf fabric: the opt refusal says what cargo plans
verify perf fabric: the opt arm's label holds against rustflags, the binary is the build's, one cache with a shell build
fabric bench: a binary's identity is its length and time, not its inode
fabric bench: profile.rs's dev bullet no longer opens a list with "1)"
fabric bench: a durability knob, so a Relaxed broker shows the ceiling
Read Muse Code's tool-action and Unix-socket boxes, drawn outside the lab's jail
Pin Gemini CLI 0.46.0's screens under its own sandbox
aterm-phase: the drift canary reads the store's version record, never runs the build
aterm-gui tests: a break's notice is once when TYPED, not when its act is asked once
aterm-verify: the browser lane records the GPU module's frames; the wgpu-WebGL module's are committed
aterm-wasm-abi: a JS object crosses by its glue table slot; verify glue provides WebGL2 as aterm_gl imports
aterm-gpu, aterm-gpu-web: the browser draws on the GL arm over WebGL2; wgpu and wasm-bindgen leave wasm-gpu
aterm-gpu: a canvas device that fails to read its caps drops its context; the glue forgets a deleted pack buffer
aterm-release: raise aterm-wasm-abi's and aterm-gpu-web's Trust floors to what WP.8 proves
Retire WebGL context resources and reject mismatched canvases
Format incoming GPU-web comment and import joins
aterm-gui: the seal island's check-build sentence says what trust … does
aterm-gui: Cmd-click a plain-text path:line opens aterm's own editor at that line
presence: a background codex finishing its turn puts the story dot on its tab
presence: a proven self-claim with resume_limits on reads a usage wall as note
status: hand_pid= names the kernel-attested taker of a drive lease
aterm-gui: review fixes for the citation, lease-attestation and codex-turn-end work
uds: one StdCommand alias carries the Command ban's excuse; no fn-wide expects (GL11/L20)
link: forbid(unsafe_code); the inherited lanes are adopted by aterm-uds, checked (HYG-7/L63)
link: the per-session maps are one PerSession value whose prune destructures every field (HYG-3)
lexicon: the fold tables' ASCII-free rule is a compile-time check, not a source scan (HYG-3)
update: delete the source-text pins of the boot, check and Linux lanes (HYG-3/OF-49)
containment, ctl, digest, gpu-web: delete the remaining source-text pins (HYG-3/OF-49)
web: the message-band and scrollback-tier tests both hosts run are written once (HYG-5)
web: a test the host cannot run ends COULD NOT RUN, never a silent pass (OF-30)
conformance: paint and spin end an undecided take with aterm_spec::host::could_not_run (L05)
Cargo.lock: aterm-spec as the dev-dependency OF-30 and L05 added
uds: the spawn-cost benchmark is a [[bench]] target, not an ignored test (X3)
effects: delete the ignored exhaustive twin of the busy-status laws (X3)
effects: one integration binary; the exact-allocation pins share it (P13)
islands: bidi, grapheme, rle, search and grid's write.rs on cfg(clean_islands) (L55)
comments: name the Trust verify lane, not a "strict Trust gate" (L74)
effects: trail_sound's determinism check names --profile opt-test, which compiles (L67)
effects tests: cite lab ptyrec and the tests' own Ink composer, not repro scripts (SCR-4)
link: the bridge's round runs at test pace under ATERM_DEV_FAST_TIMERS (P5)
http: the fixture-root verifier and the github.com checks end COULD NOT RUN, never SKIP (OF-30)
containment: the scratch-HOME proofs end COULD NOT RUN where no scratch HOME can be made (OF-30)
lexicon: the three dictionary gates end COULD NOT RUN without a system word list (OF-30)
containment: the private-data gating check ends COULD NOT RUN without a HOME (OF-30)
effects tests: the common module's header names one test binary (P13)
lexicon: the fold tables are pattern macros the predicates match inline, back at the Trust floor (HYG-3)
messages: delete the test-fixtures feature; merge with gui-split's … (OF-24)
uds: the spawn-cost numbers cite benches/spawn_cost.rs, the test they came from is gone
specs: drop the rows of deleted tests and say what holds now, without dates or workflow tags
link: the host-name test ends COULD NOT RUN where the OS cannot be asked; the fast-timer seam says who must pass it
messages: say plainly what the debug-build fixture gate does not catch (OF-24)
containment: PROOF 11's doc says a missing tool ends COULD NOT RUN, not SKIPPED
wasm: the tier-caps wire-contract doc spells targo --unverified test --workspace
comments: "the verify trust lane", without nested parentheses (L74)
fabric: the bridge child runs its instance's fast-timers clock (P5)
comments: name the generators and rigs that replaced the deleted scripts
GL11 over code main added: no fn-wide Command ban excuses
shell-integration: main's new zsh tests end COULD NOT RUN without zsh (OF-30)
--ready-fd: an update successor is not told it; the manual says what it is
aterm-link: the broker's stop signals go through aterm-uds, so the crate stays unsafe-free
spec anchors: a std-only aterm-spec-anchor crate under debug_assertions, no spec-anchors feature
models: out of aterm-spec into eleven aterm-models-<domain> crates and the aterm-models check crate
specs: port the eight hand-written .tla specs to derived models and re-bind their Tier-1 on the interpreter
aterm-core: the fuzzers join core_suite; four binaries keep the isolation they need

Truncated to fit GitHub's release-body limit — the complete note is release-notes/v0.106.0.md in this release's source tree.

Source release. SHA256SUMS is a per-file manifest of the released tree, with a detached Ed25519 signature (SHA256SUMS.sig) by a machine key named in the attached master-signed roster (aterm-machines.toml + .sig). Verification chain and key inventory: SIGNING.md in the publication engine; the roster pin is committed in aterm crates/aterm-update-core/src/pins.rs.

Navigation Menu

Repository navigation

aterm v0.106.0

Choose a tag to compare

Sorry, something went wrong.

Sorry, something went wrong.

Uh oh!

No results found

aterm v0.106.0

Features

Fixes

Performance

Refactors

Tests

Docs

Other

Contributors

Uh oh!