aterm v0.108.0

2026-10-21 · 1912 changes since v0.107.0

Features

machines, gui: live continuous fleet & system monitoring native app tab (/monitor) and CLI
gui: slice 2a — one end, the tab's done mark, the work since a task opened
ctl: a headless instance's chrome prints the tab line its strip would show
agent: harness consumers follow FOREVER LAND; surface the worker's NEEDS YOU
autopilot: FOREVER CRUISE / FOREVER LAND in the GUI, task record, spawn and lab workers
harness: show selected subscription and weekly quota
land: widen Land's strict reading by word family and clause, measured on a defense table
abrew: evaluate search /regex/ natively under bounded aterm-regex
abrew: accept brew's plural --formulae/--casks switches natively
abrew: accept brew's deps direct aliases -1/--1/--declared
abrew: answer named --cache/--repository queries natively
abrew: desc --search/--name/--description over the catalog
abrew: deps --for-each and brew's flat-deps contract
abrew: deps --union and --topological/-n in brew's expansion order
abrew: options --compact/--installed/no-names scopes
abrew: list --multiple and multi-name --versions
abrew: list --versions --json; unlink keeps the opt pointer

Fixes

windows: read Git Bash's MSYS cwd as the drive path it names
windows: atpkg answers the account's own profile and reads a shim's target
windows: the disk scan reads atpkg's own store and its .cmd shims
disk: name the live Claude Code version on Windows and keep what holds the rest
windows: keep the disk reserve on Windows, holding its blocks
windows: a headless package lane runs only over a store inside its scratch home
disk: the owner's watch removes nothing while its home's device cannot be named
windows: a worker with no HOME resolves its Claude Code dir under its USERPROFILE
windows: replace a thin reserve, journal a standing refusal once, test reparse points that are no link
disk: judge every Claude Code version from one process scan
windows: clause 5 records a shim's program as the candidates are spelled
windows: rewrite an MSYS cwd to a drive path only for a report from this machine
windows: the disk watch's discovery finds build directories by file id and places paths by the one rule
windows: tier 3, the guards and the verb place every path by the one rule; an unknown tab cwd refuses tier 3
windows: await sys waits on Windows volumes; a test pins status disk= for a Windows tab
windows: the Claude census tells the measured services apart
windows: the transcripts fence sees through a linked ~\.claude, the census reads claude.exe, ProgramData is the system's
census: scan executable code after imports and each clock hit
messages: bound future-stamp zone observation to a day
ctl: preserve uncertain delivery after request transmission
amacs: refuse unframeable session selectors before resolution
gui: a word carried onto a restored shell keeps the task's work
gui: Off's busy time is no task work for the one end's floor
init: admit the configured GitHub endpoint before cloning
grid: fence ink, fingerprints and lend see every visible mark
core: holder fence evicts before it lays, and a tail never continues
grid: a width change that brings a line head back keeps non-BMP cells
grid: a double-size row is ink to the holder fence
harness: a task's end is noted right after its point's line, never owed past the host's step
harness: a task's end is noted when its point's print or a request after its fold fails; an older build's journal keeps its holds across point lines
agent: retire inherited login seed when work starts
read another program's live SQLite database with no lock on it (agy's summaries, tccd's TCC.db)
v4 slice 3: a first-look cheer appears on its stage, a cut flight flies again, a spent cheer goes home off glass
autopilot: close the adversarial review of FOREVER CRUISE / LAND
supervise: Land keeps a landing only over a clean repo, types Land's words at walls
gui: a self-claim lands only under Land; the end gate pins the clip again
supervise: the three supervise::run reds … landed unrun
ctl: ready answers no prompt from a parked reader's parser (r8 lead U12)
update: a rollback to v0.93.0+ carries the exact screen and its history (r8 lead U24)
update: stand down a successor still undialled when its dial wait ends (r8 lead U41)
update: hand a launched successor the launcher's control directory explicitly (r8 lead U42)
ctl: an update's park ends when the resumed reader has parsed what queued (r8 lead U12)
spawn: build UpdatePark's park, mark and catch-up only where a reader parks
needs: read every NEEDS YOU head form, and none said with more words
repo_work: keep the repository's own excludes, follow global includes
gui: the meta wire test runs the meta arm's own wake loop
autopilot: a landed task's own wake keeps the landing only over nothing open
autopilot: a successor lands only a land act it sees taken, and holds a recorded landing over others' edits
autopilot: every harness's tall report is read whole before it lands
autopilot: a Claude Code turn whose start is above the screen is read whole before it lands
autopilot: name every program where the loop picks Claude Code's turn read
needs: a none that asks, or leaves work open, is no clean none; wrapped prose is no head
repo_work: judge the person's conditional includes in the repository; expand a repository's ~/ under their home
autopilot: a Claude Code turn whose start cannot be read lands nothing
autopilot: a turn read that reaches the history's first row read it all; fixtures serve history
autopilot: a land act nothing can read as taken is judged by its yield's words
autopilot: a successor whose first read is the landed task's own wake keeps the seeded landing
agent: a landed task's own wake keeps the landing over someone else's edits
phase, agent: read a turn's earlier words on every harness
agent: a seeded landing's own words hold over a cut turn read
pet: owner-eye-6 review: the rest seat is reachable, off ink hulls, on the ground plane
pet: keep the rest seat while it is still ground the cat can reach
pet: typing or streaming into Claude Code's composer no longer sets the cat hopping at its rule
harness: login carry, limit notices and logins.json told as themselves
help: login-notice names its disk form
band: a step's short form gets its head back; a step's cut keeps its mark
harness: the limit notice beside a ready row says why the tab stayed
settings: NEEDS ATTENTION holds only the files that did not load
land: close the ninth review's twenty-one strict-reading holes, measured on the defense table
land: read the tenth review's strict-reading holes narrow, failing toward open
land: read the eleventh review's strict-reading holes narrow, failing toward open
link: satisfy strict lint for frontier simulation
keep fresh copies until shown to run; Messages keeps its place when Search closes the Tag pop-up
harness: a usage limit's notice promises only what aterm will do
harness, settings: read an unanswered Autopilot word at the first look; a closed Timer gives its scroll back
settings: keep Messages position across a menu-close resize
shell-integration, effects, uds: export AGY_CLI_FAST_PROMPT_EDITOR in live body, adopt flowing cohorts on typing, and fix census/soft-limit gates
harness: a limit's wait hears a relaunch edit; limit notices name only true causes and steps (r5h-1..4)
card-engine: A4 review findings: registry rung across fg, admitted reading kept, cheapest first
census: register identity_holds and emptying guard helpers in lock-order census

Security

the MACOS ACCESS block's form is measured against the first screen

Tests

windows: pin that atpkg's account_home is not the USERPROFILE a process is given
disk: drop an explicit deref clippy flags in the one-scan versions test
no stop signal meets an exec in flight; the SIGSTOP siblings of …
agent-link: a stand-in agent's banner no longer holds its kill in the tty drain
agent-link: the wedged-roster arm gives up at 50 ms, not the product's 2 s
agent-link: a relaunch's held wait polls at the shell look's pace
agent-link: the never-held agy lock is waited out for 50 ms
agent-link: aterm-json at opt-level 2 in dev, a ledger row in one write
agent-link: bridge fixtures admit sixteen cases where descriptors allow
agent-link: the one-write ledger row names record_with, main's writer
agent-link: a scripted line's end is read over 20 ms, not a real shell's 300 ms
agent-link: trustfmt the four aterm-gui files main left unformatted
agent-link: what the check found
conformance: the login wall walk reads each real look once and judges a defect until it is caught
conformance: the footer walk's replay threads reset one world each instead of making and removing one per replay
conformance: the limit-queue walk judges each defective model until it is caught
conformance: the JSON reader builds at opt-level 2 in dev
conformance: the never-strands walk judges each defective model until it is caught
conformance: question text-mode walk on the resolved interpreter
conformance: the usage-wall defects walk each case until it disagrees
raster: display-glyph containment asks each face's fit once, per set
raster: the never-panic fuzz runs its fixed rounds on a pool
raster: what the check found
restore-census: engine conformance checks each distinct state once
restore-census: census suites walk synthetic trees held in memory
restore-census: scan_set fixtures return the census's answer directly
restore-census: what the check found
host-live-2: a 2 s upgrade settle, and the rating cards side by side
host-live-2: turn_submit's three follow-ups side by side
host-live-2: the fleet listener's retry seam, and the silent port's own read
host-live-2: the spare's scan spacing, and the daemon's release
host-live-2: what the check found
fabric-world-2: hash the binary signature optimized in dev builds
fabric-world-2: judge the no-ack stub under a quarter-second ack deadline
fabric-world-2: what the check found
gui-leftovers: accounts-lock tests hold the lock with a one-try ladder
gui-leftovers: the park's engine hold ends at its give-up, not a 1.5 s sleep
gui-leftovers: astream-digest (SHA-256) at opt-level 2 in dev
gui-leftovers: what the check found
release-publish: site_sync lays a built lab instead of building one per test
release-publish: lane and group repos are made once per process
release-publish: a first run's vendor grace is a pass seam, not two seconds waited out
release-publish: a made fixture is built in its first caller's dir
auth-survivors: kill control_auth's race-only and accounting survivors
auth-survivors: what the check found
uds-survivors: ListenerId's inode and birth each tested; fix its rebind test on Linux ext4
uds-survivors: config writer's race windows staged by a cfg(test) racer
uds-survivors: a receive the kernel could not install whole is refused
uds-survivors: others_can_write_at judges a link as it stands
uds-survivors: what the check found
pkg-verify: a mode-000 rollback floor is not "published"; the floor advances under its lock
pkg-verify: windows for a reused temp name, a swapped claim lock and writes that did not land
containment: a reader that outlives the tool is waited for, not timed out
pkg-verify: name the floor-window act's type
crypto-pkg-survivors: what the check found
gate-gaps: one test-shell resolver; atpkg runs every hook dialect or COULD NOT RUN
gate-gaps: tty Ctrl-C check ends on input, not a 4 s sleep; live shells start with SIGINT at default
atpkg: two suite tests launch claude with a switch the yolo rule knows
aterm-gui: a restarted done's tests wait for its note, not for three screen reads
atpkg: selfsetup's fish arm finds fish through the shared resolver
handoff: v0.107.0's producer fixtures, written by its own cut
core: the holder-fence oracle reads whole cells and the perf corpora
bound subscription acknowledgement reads and diagnostics
satisfy tippy in the fx damage and blit tests
say only what the overshoot test's control showed
two outage and journal checks judge order, not the host's pace
v4 slice 3: the open pane's cat goes home on glass; a cut flight's control fails on where it cheers
gui: serde corpus records CheckpointMeta's holder field
aterm: the held worker's stand-in draws its submitted prompt as Claude Code does
supervise: the skipped-continuation replay names Cruise's continuation
supervise: the turn-end live suite types Cruise's continuation and the answer's NEEDS YOU hint
silent-passes: a multi-lane shell test lacking zsh or fish ends COULD NOT RUN
silent-passes: the frozen job of the signal-term tests ends only by a signal
silent-passes: parked stand-ins outlast the hang detector
silent-passes: a fixture root reads through ends COULD NOT RUN
silent-passes: held-successor and reset-zone tests run on every host
silent-passes: a host prerequisite a test lacks ends COULD NOT RUN
silent-passes: what the check found
spare-races: the escape scan tells another terminal's orphan from the run's
spare-races: a child gone with its gone parent leaves the scan whole
spare-races: a stranger's orphan in a clean run is COULD NOT RUN, not FAIL
spare-races: L9 observes the quit's retire
spare-races: what the check found
proc-table: read the process table in-process, held to ps
proc-table: kproc reads kinfo_proc at the job probe's SDK-held offsets
proc-table: what the check found
agent-cpu: the drive grant's hand-named peer resolves at once
agent-cpu: the gemini and agy exit binds reset one rig and look once per world
agent-cpu: the account rotation graph steps the resolved model and the defects walk asks only the defects
agent-cpu: a resume the gemini exit's own pre-check refuses records nothing
agent-cpu: the footer walk floods just past the tail window and resets only what a replay wrote
agent-cpu: the split-append fold test appends through one writer
agent-cpu: the hand-entry grant test dials the book's bare name under a short deadline
agent-cpu: the rotation read back names its variable without an explicit deref
pkg-shell-speed: a lay holds the publication turn for its rename only
pkg-shell-speed: the removed-member hold runs its nine lanes side by side
pkg-shell-speed: the hook dialect test starts pwsh once for its eight cases
pkg-shell-speed: the small-file extract test pins two allowances with 16 files
pkg-shell-speed: live shells wake on their bytes, fish runs no man-page generator, independent shells start side by side
pkg-shell-speed: independent model steps, records and programs run side by side; the copy run links the binary
gui-speed: five settings and chrome tests stop redoing work
gui-speed: the two phone-width tests read one walk of the screens
gui-speed: two issues at once race fifty rounds, not four hundred
gui-speed: the stacked row's flow test deals its hosts to eight runtimes
gui-speed: many restarts of one program join four times, inside the grace
bus-link: astream stops its writer on a queued stop; notify tests stop brokers before removing their dir
bus-link: backlog tests publish pipelined and page small; the committed incarnation walk runs beside the rest
release-speed: the over-real-curl transfers notice a silence in seconds
release-speed: forge check resolves its cells at once after the first
release-speed: publish fixtures lay one pack and no git template
release-speed: release hooks, moves and site labs spend less on git and files
release-speed: the it crate holds its exec-path-first PATH helper
release-speed: what the check found
coverage-leads: the census walk's skips and its fail-closed stop are pinned
coverage-leads: the bounded run's reader ceiling is spent by the test, not waited out
coverage-leads: the footer floor and the work end at a break are bound
coverage-leads: what the check found
spawn-race: PRODUCT FIX: the bridge adopts its lanes by the descriptor, not a racy /dev/fd stat
spawn-race: probes read the child's own table, never a /dev/fd/N path lookup
spawn-race: name racing_lookups' test gate where the wasm census reads it
spawn-race: what the check found
main's two reds — parse_hold's guard row, and the live turn-end tests on Cruise's continuation
census: parse_hold's synthetic fixture, the half of …'s registration it left out
uds: posix_spawn_raises_note_fork runs alone, where its parent's children are its own
autopilot: the carry test reads the carried work as a range, not an exact ms
update: drive both undialled arms through the one filing that stands the successor down (r8 lead U41)
the share row pins its answer; a long share pins that nothing is read
pet: pin the cheer's stage below a home under the footer; claim each control as run
needs: pin the two none readers' union, failing toward a need
census: drop parse_hold's synthetic fixture with the helper
fd-probes: one shell probe of a descriptor, pinned under contention
fd-probes: every /dev/fd/N path lookup reads the descriptor instead
fd-probes: the inherited-display-socket test sits above the next test's doc
fd-probes: what the check found
clocks-pkg-update: curl's retry backoff at a thousandth under the fast-timers seam
clocks-pkg-update: the store lock's wait runs on an injected clock
clocks-pkg-update: passes on their test's own slot and clock; PASS_TEST_GATE gone
clocks-pkg-update: checker loops on their own lane and gate, each behind a hang detector
clocks-pkg-update: what the check found
release-tail: the Linux verifier corpus asks OpenSSL once per distinct proof
release-tail: snapshot_take lays its fixture from a template made once
release-tail: publish fixtures and FakeHost run git directly, maintenance off
release-tail: claim_landing_model reads a view in one cat-file
release-tail: site, hooks and snapshot fixtures start no maintenance run
gui-flake: a held Commit claim is chosen by its cost, never raced
effects-speed: aterm-effects' test units build at opt-level 2, off other crates' opt-0 generics
effects-speed: the flash meter reads only the pixels a frame can change; the streak's runs run once each, side by side
effects-speed: the knob law scripts each distinct knob set once
effects-speed: probe_f4a replays its twenty takes side by side
effects-speed: what the check found: the typing-streak flash test reads the shipped one_row line
models-link-speed: the model sweeps walk each space once per question
models-link-speed: the link refinement tests make each real call once
models-link-speed: the liveness witness is the space's, at seven arguments
models-link-speed: what the check found
card-engine: A4 review controls: build rung by build, token first, byte arm's group edge; docs
card-engine: the byte arm's group-edge test takes a session id and pgid of its own
small-gates: a gated run the hang detector let go never reads as the expected run
small-gates: each rm_breaker probe lane must find its own shell's names
small-gates: an isolated signal test fails when its child ran no test
small-gates: a fish warm hold's appended history is stamped after the hold began
small-gates: an init-parented waiter starts behind a FIFO gate, not a sleep
small-gates: an atpkg hook test with no zsh ends COULD NOT RUN, not a pass
small-gates: the stub durability ranking holds its bundle shape and temp roots
small-gates: handoff_rendezvous's own test sockets bind under /tmp, not $TMPDIR
small-gates: a stale-pid teardown is judged after its reaps settle, not after 500 ms
small-gates: a retired holder beat is judged after two of its beats, not after 600 ms
small-gates: hook_reroute_first passes each shell by the reference it already is
small-gates: what the check found
spare-2: a stand-in that readied and ended between two looks readied
spare-2: escape fixtures name their own session; a revoked terminal's orphan is no escape
spare-2: a startup hang names where the instance waits
spare-2: a time budget missed on an oversubscribed host is COULD NOT RUN; each L4 case names its rule
spare-2: what the check found
proc-reads: fabric enable reads the login home and uid in-process
proc-reads: one KERN_PROCARGS2 reader and parser, in aterm-uds
proc-reads: lane lock holders by libproc, process names read when asked
proc-reads: live tests ask again when the instance answers busy
proc-reads: SPECS rows name the shared parser and the file scan
proc-reads: the lazy row name's constructor has a name of its own
proc-reads: the holder conformance test compares lsof and the scan alone
proc-reads: what the check found
gui-cpu: aterm-scrollback at opt-level 2 in dev
gui-cpu: the clear-keyframe test reads the region once
gui-cpu: seamless tests no longer park the module on ENV_LOCK
gui-cpu: a headless App opens its draft journal at the first look
gui-cpu: the prewarm-worker tests run their worker at Responsive
gui-cpu: name the deferred journal slot's opener type
gui-cpu: what the check found
clocks-agent-gui: the hosted engine runs on the run's own clock
clocks-agent-gui: turn_end tier1 runs its twelve walks on threads, the task scan cached
clocks-agent-gui: nudge conformance runs on its rig's own clock
clocks-agent-gui: seed_matrix: the dated-try cases on threads, the loop's ledger mirrored
clocks-agent-gui: name the hosted stop's condition type
clocks-agent-gui: control lanes conformance settles before it dials and projects
clocks-agent-gui: what the check found

Docs

harness: the tab's done mark in the CHANGELOG and aterm help harness
gui: one doc line of harness_task_moved, not two
the review's corrections to slice 2a's words
a bundle started through a link posts no notice, and opening aterm.app itself is the fix
predictive editing as the code does it, in adaptive and in always
land the recursive multi-agent audit; ignore aterm-link's stray lockfile
ordered is served when named, in the help, the manual, the module docs and the CHANGELOG
B2's review fixes as built; the row path's overshoot seam is a known issue
the crash restore as built, its measured costs, and the soak gate (increment 8)
v4 slice 3: the kitty's cheer in the changelog, the manual and §11.3.7 As built
v4 slice 3: the cheer appears on its stage at a first look and fades home off glass
known-issues: U6 and U13 cannot happen — no update authority names an older build
update: the launched successor inherits its launcher's XDG_RUNTIME_DIR and HOME (r8 lead U42)
a placed spelling is verbatim once a short name is spelled long
TRUST-REFUSED measured: four refused floors at a 6 GiB ceiling, and ROSETTA's rise attributed
harness: the post-landing check's decisions, changelog and manual
harness: §11.13, CHANGELOG and manual as the review's fixes built; the seat test settles the landing first
cli: iTerm2's close and Quit measured for CLOSING A TAB
DESIGN-init-system — one converge engine for every provisioning surface; which outside programs aterm really needs
FOREVER LAND and CRUISE measured live on the four harnesses
init design S1, the §9 doc rows that need no code (A4, A5, A16, A21, A36)
the hung-volume decisions name the picker's first budget and the restored identity tab
L-BROWSER's record names …'s aterm-gui change; the help splits the browser halves
predictive editing measured; aterm-predict SPECS: increment 5's rows
predictive editing measured, with what its review found
predictive editing before the plan and now, at 30, 100 and 250 ms

Other

sysprobe: one Windows path key for every cross-source comparison
sysprobe: the Windows mount table, volume reader and file identity
gui: match a mount's volume row by Mount::key
sysprobe: fold Windows names as NTFS does, hold 8.3 names, relate two roots only through the table
sysprobe: one table rule for two Windows paths, and the table's own fences
disk: the walk's Windows device is the volume serial, never 0
aterm-dirfd: the unix half moves to src/unix.rs behind a platform root
aterm-dirfd: a Windows half for the disk reclaim — handle-relative, never through a reparse point
aterm-dirfd (Windows): only "not found" is gone, pin starts only at a local volume root, no backup intent
aterm-uds(windows): expose the raw creation FILETIME for procStart
aterm-uds(windows): the path-user scan (holders contract C5)
aterm-agent(windows): kernel_start reads GetProcessTimes, never ps
aterm-uds(windows): the path-user scan holds what it cannot read, and never hangs
aterm-dirfd(windows): a facts-only open, and the owner read through a handle
aterm-sysprobe(windows): is_fixed, the drive kind of a mount's volume
harness disk(windows): reclaim build caches on Windows, by handle
aterm-dirfd(windows): never unlink a folder a volume is mounted on
harness disk(windows): keep a volume mount point, judge tier 3 by its listed id, fence non-fixed drives in the report
aterm-uds(windows): the path-user scan places every kernel path through sysprobe's one rule
aterm-toolchain(windows): the gone-checkout rule reads devices and places paths as Windows spells them
aterm-uds(windows): a module loaded through a junction is placed by the file the kernel mapped
aterm-toolchain(windows): a drive root is never a mount between, and only $HOME's drive is looked at
aterm-agent: tier 3's tree walk asks the device first again, and its docs say what Windows cannot see
aterm-uds: one PEB reader on Windows, and a process's command line and environment from it
atpkg: process_args reads a Windows process (argv as the C runtime splits it, its environment whole)
aterm-uds: build a process or duplicate handle only when the call returned one
harness: one rule for the variable a Claude Code's home comes from (USERPROFILE on Windows)
disk census: read Windows processes whole, homed by USERPROFILE, in their working directory
build cache: say why the workspace rule needs no Windows inverse
aterm-uds: never answer a working directory torn by a cd
aterm-sysprobe owns the one Windows PEB reader; process_cwd answers there
aterm-sysprobe: a test junction from its own FFI file, no aterm-uds dev-dependency
Windows disk code: the system's error boxes off on every thread that asks about tab and agent paths
Windows disk code: a path spelled with 8.3 short names is spelled long by one sysprobe rule
aterm-uds: a Windows path-user scan reads an unreadable process once more before holding it
aterm-uds: no default test scans the whole account; the Namer doc says what a close does
aterm-uds: the holders module doc says how a short-spelled path and a second read are handled
aterm-sysprobe: an 8.3 spelling is spelled long lexically, through its last short name only
aterm-sysprobe: the quiet guard cannot leave the thread whose mode it holds
aterm-uds: the scan spells a short path long on its naming helper, under the deadline
aterm-uds: a process that refuses the scan's open is held without a second read
Windows disk code: the call sites' tests of the lexical 8.3 spelling
aterm-dirfd: see cloud placeholders as reparse points; name a handle's volume by its GUID
disk: fence the measured volume by its GUID too, not by its serial alone
disk: never search or reclaim inside a cloud sync root
aterm-dirfd: name the disguise seam in plain code on a release-built field
disk: keep the walk's volume GUID a Windows-only field
disk discovery: the walk holds its placeholder guard, and reads into no root before it is found outside a sync root
harness disk: test that the tick removes with placeholders exposed; say why the verb's guard has no test
aterm-dirfd: check a sync root's residue on the tree, not in a registry it never writes
disk: read tier 3's sessions again at the removal, not the survey's copy
disk: spell paths plain in the text form; keep the verbatim spelling for tools
ctl help await: name why=automounted and why=no-mount
cwd_native: a drive-letter OSC 7 report from another host is not this machine's
disk_private: dev_of reads Windows devices; say so and test it for real
disk versions: place a process's use on its entry by the one path rule
disk versions: stamp a digest by the one identity export at its full width
harness_host tests: format the removal-reader test as rustfmt 1.97.1 does
sysprobe: export quietly, the thread-scoped no-box guard for an open
disk: resolve a session's cwd quietly, and never on a share or automount
process: read the NetBIOS name from the OS, not from %COMPUTERNAME%
cwd_native: a foreign report stays as written for every consumer; say so
harness_host: the look's remover is one fn, and a test drives it
disk tests: the tier-3 re-read test fences on the volume it measures
Move the document host and its I/O contracts into amacs-files
Stop calling amacs-files a placeholder in amacs's crate docs
Keep amacs-files under the guards it had inside aterm-gui
Say why LegacyJournal's fields are pub, and when they narrow again
Record amacs-files's trust floor
Settings: Off keeps the style it replaced, so leaving Serious Mode loses no cursor style
Settings: HDR glow's row says the preview cannot show it
Settings: a press on a cut control scrolls it whole by its hidden part, under the pointer
aterm-gui: drawn_cursor_trail_style takes its lifetime by elision
Settings: the Adjust card lists a tall row's note after it; its bound counts the row alone
Settings: a press's nudge stands until the list scrolls
Settings: the style kept before Off is a style, by its name in the list
Cursor Styles: the saved Off names the style it replaced
aterm-gui: the nudge test's seat takes its tuple by then_some
serde corpus: CheckpointMeta/(root) records holder
Refuse unknown abrew config and require fresh update indexes
Keep extracted document test helpers available in every test profile
host_live: journaled_at waits for the record; the host journals an approval after its key
atpkg: audit yolo posture spellings; add gemini
supervise/tape: say truly why the policy's home stays put, and replay a run that looked there
Check physical brew roots before native abrew work
Keep cask artifact receipts scoped to their payload version
Keep cask non-UTF8 captures independent of Mac filename support
Normalize abrew cleanup link targets before unlinking
Collapse the cleanup link predicate for strict lint
atpkg: drop the gemini-cli yolo route — agy is the Google lane
Test stand-ins: sign each Apple binary once, then copy the signed file
One fact separator: the palette's theme label and the joins Settings shows
Settings colour picker: measured to its column at every width and text size
fence: the ring round trip also reads a lone emoji
grid: a lent point a trim left past the screen is below the cursor's line
aterm-gui: the seal island records that all three seals hold with cell's Desk::next_need_after entry
Preserve debug document helpers alongside explicit test support
atpkg: resolve a shim's parent only for a shim's name; drop the tautological Store cross-check
gui: the C cut is the engine's C; the edged inbox charges a refused due visit; one output-wake path
status: the pool walk charges a refused due edged visit; a relative script is no shim
Preserve literal holder image paths outside Linux
Add local macOS workstation initialization
Preserve complete keyboard maps and await sign-out confirmation
aterm-census: supervise-fx follows an import that binds a clock to a bare name; a reader's home is its own fn in its own file
supervise/fx: say where "every clock goes through the door" ends
aterm-gui: trustfmt the four files main left unformatted
Format holder and timeline changes composed with macOS init
aterm-gui: the Windows cells build again (stale ConPTY dead_code expectations)
aterm-link: bound_reads goes; astream's Closer takes a hung-up socket's EINVAL
Add the amacs client: aterm edit, the amacs argv0 alias and its alias lists
Wait on the mock window with a hang detector, not CONNECT_WAIT
Say at the --no-wait handoff what the server makes of it
Settings: a label given its own measure is drawn whole, not elided by f32 rounding
Messages: a page's clock is republished when its time words move, never on a blind minute
Settings search: Harness and AI CLIs are found by every agent's name, read from the rosters
Settings: a panel is composited once per distinct pixel, not once per pixel
tray_raster: the rim memo's entry is a named type, and pixel fills take fixed chunks
Messages: the page's clock counts the Mac's sleep, the zone's offset changes and a moved zone
metrics: a key a native page takes is timed to the present of its answer
ctl help metrics: say what closes a native page's key in input_*
Settings: the compact toolbar names the page where it holds the title
Software Update: the status card measures its headline, detail and button words
Settings: About, Software Update and Messages measure against the layout
Settings lists: a hard edge never cuts through a card's caption
Software Update: the detail line's value stays the whole sentence
SPECS layout-policy: the compact toolbar names the page where it holds the title
Settings tests: the page-measure test's doc list ends before its controls
Packages: the consent note wraps to the card's column
Settings lists: one caption rule for the last, nudged and pressed screen
aterm-restore: layout v1's step records are pinned byte for byte against the vendored astream
docs, aterm-cli: fleet allow and the --host step-in are named; link drops hook
docs, aterm-cli: survey --host is a fleet read, not a driven verb
6A-1: the cross cells check clean through their test-target pass again
6A-2: a relaunch under the same sid takes a new epoch, never a repeated one
6A-3: a carried fold must agree with the carried log
6A-4: what reaches the program is what the seam sends, on every platform
6A-5: the turn tracker model tells ctl from the harness
6A-6: the transcript hand tests that are sequences get their .seq twins
6A-4 (review): a paste reaches the program only where the seam writes it bytes
6A-2 (review): no told epoch saturates the allocator, and a relaunch under an adopted id goes above its predecessor's
6A-2 (review): a #handed link keeps one seq space through a disagreement
6A-1 (land): the Windows and Linux cells compile main's new code again
6A-1 (land): the cross cells build main's edit hold and B1's leaf field
serde corpus: CheckpointMeta records holder
6A-1 (land): the Windows cells build main's holder wiring, and main's new tests are formatted
Cover Settings control nudges at both clipped list edges
Preserve launch posture past leading option values
fmt: the four aterm-gui files 0.107.0's verify found unformatted
Require a complete recognized keyboard census before local initialization
style(gui): format harness_screen.rs with trustfmt
Make native casks real: measured 0% of the cask index admitted, now ~17%
Evaluate formula requirements/conflicts as data; golden_gate bottles
aterm-durable: a failed barrier is returned, only a refused one gets the full flush
aterm-durable: pin the barrier's production pair on /dev/null; true its docs off Apple
Make local init converge, recover activation, and apply preferred scrolling
Use boolean assertion for native scroll readback test
Verify real shell selection and repair filesystem test modeling
aterm-restore: the layout v1 pin judges both directions before asserting either
Resolve formula variations; more cask artifact kinds; global PAX
crash restore: a shed region's custody outlasts a full keeper queue; the owed shed stays private and idle
memory pressure: a merged WARN|NORMAL mask is read as the level the system is at now
pressure verb help and CHANGELOG: journal_ring=shedding, the level macOS reported
crash restore: the pressure cell's lock is taken where it is held, so the lock census sees it
Read Claude Code's disk-full notice after the vendor's warning glyph
Read the autocompact offer at any size Claude Code can draw
Forget the autocompact stepper's record once the offer has left
Say why each swept build cache went, with the figures it went on
Delete the disk and autocompact code nothing reads
Journal and log a refused disk reserve once per reason
Say the disk-full alert's cause once, true to its case, and show its step
Wait an hour before writing the disk reserve again after a failed write
Themes pane: fix the audit's focus, list, naming and isolation findings
spare: the verification's window wait wakes on time, so a spare is back ~60 ms sooner
gitignore: keep the retired tools' build output ignored
command_wrapper casks and exact macOS bounds
primer, harness: stop teaching ATERM-TASK-DONE; a job ends in words
harness_host: carry the conformance test's successor on its own clock
Add configured GitHub authentication and repository bootstrap to init
Bind native input latency to handled view revisions
serde corpus: record v0.107.0's shipped-state answers
libc: declare libproc's task, thread and fd readers for the stuck-job probe
sysprobe: the job probe, what the stuck-process engine reads per member
vitals: the stuck-process engine, jobs to verdicts (§11)
models: StuckVerdict, bound to the stuck engine by a Tier-1 replay (§17)
sysprobe: the macOS sweep asks getsid for the session leader
vitals: an agent's call stays a call when its leader exits unreaped
sysprobe: a live check of the stuck engine on this host
Stuck engine: one job per block, safe names, review fixes
Keep identity records within owned staging files
Judge journal spaces only from admitted authoritative rows
Persist desktop activation marker names before preferences
supervise/tape: an inexact policy's tape reads, the loop waits in its setup's step, a header is read in one pass
supervise/tape: a header the format's first build wrote decodes again; redecide_after_skip is supplied, not required
supervise/tape: say which headers lacked redecide_after_skip
supervise/tape: drop the format-1 fixture; say only what the tape fixes did
Lead the disk-full alert's band with the bytes left
Library plugin casks, per-entry variation admission, admission tool
harness(autopilot): who set this mode (design §11.7, slice 7)
harness(autopilot): who set this mode — the row fits; negative controls run
harness(autopilot): a SESSIONS row says who set its word on a line of its own
harness(autopilot): every SESSIONS row has its setting line, so a press moves no row; the review's controls
harness(settings): a stacked row's flow test sees each row whole on some page
restore: main's log_ep and this branch's autopilot_by meet in two leaf literals
aterm-dbus: bound a connection's sends and its handshake on request
aterm-a11y: a deadline on the AT-SPI bus writes, and a backed-off rejoin
aterm-a11y: the no-deadline controls wait out the thaw and leave no thread behind
aterm-gui: Linux reads reduced motion from the Settings portal, not gsettings
aterm-lab: the Linux lane runs the accessibility runtime, Orca included
aterm-a11y: a window focused before its first tree is announced activated
aterm-gui: the Settings portal round trip ends COULD NOT RUN with no dbus-daemon
aterm-a11y: name the glue's first publication first_tree
aterm-lab: the a11y verb's help names speech-dispatcher's log as the sink
aterm-gui: Linux's motion=auto copy says it follows the desktop's setting
aterm-lab: the a11y rows run live_atspi as main's acceptance bench
aterm-lab: an a11y gui row Rosetta ended is NOT RUN, and says how the gui ended
aterm-dbus: open_within's test holds the join to the bound it was given
aterm-lab: Orca's terminal text is a string of its own, before the typed line
aterm-a11y: a join of the accessibility bus waits at most WRITE, and a failed status read keeps the backoff
aterm-gui: text-scale installs the preferences on Linux, which has no OS re-sample
aterm-gui: the portal read's bound is tested, and its live test paced and timed
aterm-lab: Orca reads aterm-gui under Mutter too, on its Xwayland and as a Wayland client
aterm-lab: Orca's output counts when it is spoken with its whole line
aterm-lab: lab linux help names Orca's Mutter rows
fabric bench: the ping-pong arm's four open review findings (w5/s0)
fabric bench: name a fold only where the commit covered the answer (w5/s0)
aterm-link: subscribers re-bound through astream's closer; bound_reads goes
aterm-link: fabric tail --filter passes astream's filter grammar first
fabric_world: a filter the broker would refuse is a usage error before the dial
fabric tail --filter: the notes say what the parse refuses, under Unreleased
aterm-restore: erase_region, for a region that outlives its writer
crash restore: a clear while a shed's custody is owed erases the region the keeper holds
keeper_link: the custody test's regions are files of their own
SPECS: mp-level-table states level_of, resolve, scrollback_shed and level_line(mask, level)
aterm-net: a proven peer's survey speaks only for the node it proved
aterm-net: a member leaves out a copy as itself only on its own proof
verify wasm-glue: the oracle reads a machine-wide wasm-bindgen that ship provision installs
ship provision: the wasm-bindgen install is forced over a copy that does not answer the pin
aterm-link: ls is this machine's escalation view, and astream's fabric design says so
aterm-gui: the win cell type-checks again after the holder edge landed twice
aterm-ctl: the edit tests' hang detector is unix-only, as its one reader is
atpkg: a cask artifact's exec flag is read off unix too, so Windows builds clean
aterm-sysprobe: the stuck_live example type-checks for Windows again
aterm-gui: the setter's restore test captures a handoff only where one exists
Native upgrade (single and bare), naked casks, bundle dump --file
aterm-link: a poisoned broker log exits 75 for its supervisor; the bridge stops calling it connected
fabric_world: a poisoned broker log, cured by the broker's exit, end to end
docs, fabric_world: a poisoned broker log in the CHANGELOG and the manual; the world waits for the inbox
fabric_world, manual: trustfmt the poison world; the manual says a poisoned broker exits within seconds
aterm-link: the poison exit line reaches doctor at real lengths; the docs say what a poisoned broker really does
aterm caffeine: the audit's fixes — uninstall, quit, rollback, the copy, a scratch HOME
aterm caffeine: the fix review's findings — quit's reach, the lock's patience, the decline
aterm-ctl: the Windows cells build again (HANG_DETECTOR is the unix socket test's)
aterm-sysprobe: stuck_live builds off unix again (the Windows cells)
aterm-gui: the autopilot setter's restore test is unix's, like the handoff it rides (the Windows cells)
Native cask upgrade under --cask
Collapse nested if in cask upgrade cleanup (tippy)
aterm-sysprobe: stuck_live takes main's Windows fix alone
atpkg: trustfmt the cask upgrade's cleanup, which main left unformatted
Renew a stale LaunchServices record by a same-image handoff to a fresh launch
aterm-hash: FNV-1a/64's byte loop and offset basis are astream-wire's
aterm-codec: Crc32 is a thin wrapper over astream-wire's CRC-32
aterm-png: chunk CRCs fold through astream-wire's CRC-32
aterm-codec SPECS: the crc rows' blocking gaps after the move to astream-wire
aterm-hash, aterm-codec, aterm-png: say where astream-wire enters each graph
trust floors: aterm-png's floor goes down with the CRC-32 tables it no longer holds
aterm-codec, aterm-hash, aterm-png: the tests the docs name catch the mutants they name
font-oracle recorder and the two fuzz workspaces: their locks follow aterm-hash to astream-wire
aterm-codec and aterm-hash are no longer dependency-free: say so where they are described
SPECS (aterm-codec, aterm-png, aterm-hash): the hash specs cite a contract astream-wire does not have yet
Cargo.toml: the CRC's move to astream-wire, measured in dev, earns astream-wire no profile row
Native formula reinstall with restorative same-keg swap
aterm-render: prove shaping-gate, delete the two tests it subsumes
aterm-gpu: prove should-slice-nonempty
SPECS.md: measured blockers of the scalar-signature specs on Trust seal …
Native cask reinstall, completing lifecycle symmetry
aterm caffeine: the menu opens through accessibility (a Show Menu action)
Greedy cask outdated/upgrade, uses --installed, fetch resolves variations
Preserve preexisting names while staging the disk reserve
aterm-gui: renews_launch_record is asked only by the unix handoff lanes
Multi-name install/uninstall/reinstall/upgrade, planned as a batch
harness: surface multi-day Claude limit notice, resume on /login, and fall back to rclone in accounts sync
Fix unused binding and stale help wording (multi-name follow-up)
fmt: the R6 review tests, as trustfmt lays them out
crash restore: a second shed while a custody is owed keeps the region the keeper holds
aterm-predict: overlay_frame, and a chain composed before any reconcile paints only what it changes
aterm-gui: hand ←, → and Backspace to the edit lane, paint a chain all or none, predictive_echo_editing
aterm-predict: a flush takes the chain's cursor with it
aterm-wasm, aterm-gpu-web: predict_edit_key and predict_overlay_cursor; the CPU replay re-recorded
aterm-predict: the review of increment 2, and an 800-seed sweep, held by the theorem
aterm-gui: a keypad arrow is an edit key unless Kitty reports the keypad; an edit key at a no-echo tty is unmodelled
aterm-predict: a carried epoch's proof is held to its standing tail and its mark
aterm-predict: the theorem's floor counts re-taken after the carried standing tail
atpkg: trustfmt abrew/commands.rs, which main left unformatted
atpkg: trustfmt abrew/mod.rs, which main left unformatted
aterm-agent: replay --why explains one decision on a harness tape (T8)
aterm-agent: replay --why keeps what a tape holds when its header does not read
aterm-agent: replay --why names what this build supplied, rebuilds a box head's join, reads a local time as an instant
aterm-agent: a test that the run's python globs reach replay --why's re-decision
aterm-agent: replay --why boxes a joined box's reading (tippy large_enum_variant)
Refuse incomplete Abrew metadata and preserve owned artifact custody
Complete the constrained cask fixture call for reinstall admission
Messages page: a failure stays listed, a moved-on entry stays open, a story is timed from its start
aterm-verify: verify cells runs both windows-sys oracles with a Windows cell
aterm-gui: typed_into compiles where its one caller does
aterm-window: single-backend Linux builds match the Headless loop
aterm-font: GSUB walks spend a sanitizer-sized budget
aterm-font-fuzz: bound the face target's subtable walk; refresh its lock
aterm-font: cite the autohinter's measured cost on aliased GSUB
aterm-verify: the wasm lane fences the GPU module's size too
aterm-gui: the hold reader, carry clock and symlink test compile off macOS
aterm-containment: the bundle-walk test reads its euid without libc
aterm-gui: the text-scale verb lays its scale over Linux's default reading
aterm-font: the shaper parses every GSUB lookup before any applies
aterm-font: the GSUB budget is aterm's own, its margin 0.26 traversals
aterm-win32-oracle: fetch registry windows-sys 0.61.2 when no copy is cached
atpkg: the cask artifact check compiles clean on Windows
aterm-ctl: the edit tests' hang detector compiles where its one reader does
aterm-containment: drop the unix libc dev-dependency its one reader left
aterm-sysprobe: the stuck_live example compiles on Windows
Launch-record renewal: withdraw the adopted entry, end on auto_apply off, defer a press
aterm-restore: the control slot's record, writer and reader (crash-restore increment 7)
crash restore: the turn ledger rides the region's control slot (increment 7)
keeper restore lane: a crashed window's turns are still in history (increment 7)
crash restore: a crash carry is held to an update sidecar's bound, and unix-only ledger items are gated
Settings themes: one choice rule by what a theme is made for; Follow system round-trips; side and trial state scoped to the surface on glass
Settings theme card: the Follow system switch leads, Browse themes is its own row, a slot picker lists its side first, controls records bind the theme in every mode
Settings preview: one cause for reduced motion; the HDR glow row and preview say the preview caps HDR glow at standard range
Settings pickers: the wheel scrolls, a search seeds by a theme's name, headings are structure, the last screen fills, and one preview rule over a picker; a short page scrolls its preview instead of dropping it
Settings specimens: whole rows at the renderer's real pitch, a fuller text specimen, Top specimens cut only for a control row
Settings window sample: opaque title ink on a whole pixel, a rim where the bar meets its own side's terminal, and Auto takes the terminal theme's side everywhere
Settings Themes: the page keeps its heading, and every screen of the chooser and Customize names the section it starts in
Settings preview ticks: repaint only what moves, draw nothing under an opaque specimen, upload only the changed rows; Top Settings schedules the previews it draws
Settings Themes: the demo gives up whole rows down to one, exactly, so the chooser never runs past a short page
SPECS: the window sample's one Auto rule and rim, and Top Settings' cadence from the preview it draws
Settings search: clearing a search ends what Search Results chose, as starting one does
Settings lint: a picker's peek is one expression, the occlusion rects have a name, the recompute helper goes with the OS-flip tests
Themes Customize: an open colour picker is one whole screen where COLOURS cannot head it
Settings theme card: on a compact list the Follow system row is a switch row like every other
Settings pickers: a key before the opened picker's first layout takes the window with it
Settings theme card: a stacked Follow system row seats Reset after its switch, as a stacked switch row does
aterm-gpu: a tray card slot waits only for the presents that sampled it
Settings Themes: the demo gives up rows for the Customize sheet's least, not the chooser's
Settings tests: the short-host preview cases follow the room main's compact toolbar gives
Settings HDR glow: one cause and one set of words for what the preview cannot show
aterm-agent: the sleep count's boot is astream-sys's 16 bytes; aterm-uds's copy goes
aterm-caffeine: the state file's boot is astream-sys's reading; the unsafe sysctl goes
aterm-update: the Linux lane's steady clock is named only by a boot id astream takes
aterm-census: boot-id-door, the kernel's boot id is read by name only in astream
Preserve validated captured boot spelling in replayed ledger output
Keep package replacement and failed-plan cleanup within prior ownership
Preserve same-keg reinstall receipts in an exclusive recoverable aside
Share receipt-backed reinstall custody with casks and preserve dry-run cleanup
Keep reinstall cleanup conditions explicit for strict lint
Remove redundant borrow in owned-link restoration
Refuse whole-command delegation after successful native package work
Preserve restored holder uncertainty and every visible image layer
Exercise restored holder uncertainty without rebasing the signed block
shell-integration tests: keep the host's VISUAL and EDITOR out of the hermetic shell
update-core: the real-curl transfer tests' hang detector times a step, not the call
aterm live tests: every aterm ctl call waits a one-minute hang detector, not the client's 10 s
update-core: the transfer hang detector also fails a lane that asks past its loop's bound
Launch-record renewal: withdraw without resolving, read the cancel before launch
aterm-gui tests: a restored holder's lineage bit is not screen state
aterm-agent: a boot is written back in the case it was read in
aterm-boot review: true contract row and docs for the boot readers
Fix renewal cancellation before LaunchServices launch
Preserve original posted severity across message handoff
Settle committed Metal rendering when presentation refuses
Carry a lost login's /login across a loop that starts inside it
Deliver the carrier's turn again when the login comes back elsewhere
Tell Console's sign-in menu as the owner's choice, not a stop
Make the login notices lead with the step and say what they mean
Name every accounts form in the manual and say where notices go
Wait for the band's reveal before lab instance --image takes its frame
Bind the login back elsewhere to the login wall model, carrier included
Hold the standing ask to the step-first order, and quiet tippy
Lay out the from_ref assertion as trustfmt does
Flag and name-form parity for common brew spellings
Preserve admitted replay boot spelling without changing kernel output
trust lane: a run's dep-info is what its emptied slots hold, whatever the clock
trust: aterm-grid certifies stack_image's six alone and paired (1173/4747); keeper 233/919; close ATERM-KI-1015-5
trust facts: conclude maps the plan's filing (clippy::manual_map)
trust: aterm-grid 1186/4785 on the tree merged with origin/main …; keeper holds 233/919
trust lane: only a run that files stops on a slot it cannot empty
trust: aterm-grid 1186/4785 and keeper 233/919 hold on the merge with …
trust: aterm-grid 1185/4800 and keeper 234/935 on the merge with …
abrew: name dead reroute stubs and missing prefix PATH
Prime coding agents at the windowed launch, so an update's tabs get the new primer
Wait for the Commit before the launch's primer pass, and prime every identity there
Gate changed_row_band to the Metal and wgpu arms that call it
Launch-record renewal: say why the installed bundle is unproven
Say what the limit reset takes on Claude Code 2.1.304 in accounts --help (ox-19)
aterm-restore tests: a restored holder's lineage bit is not screen state
history help: a crash restore carries the turn ledger too (increment 7)
abrew: an interrupted pour no longer wedges the prefix
agy live test: the summary database is read only once the holder's write is committed
abrew: restore a stranded reinstall aside instead of reaping it
holder image: a re-read keeps an unchanged process's image; time the reads; As-built notes
Refuse ambiguous or mismatched qualified Abrew package kinds
abrew: doctor names installed-but-unlinked kegs
Give the live-stub fixture an exclusively owned scratch directory
Real disk-image checks run in a macOS guest: lab mac dmg, a uds fix, the no-zip lane and install.sh's image path covered
lab mac dmg: a killed lane's VM is reclaimed, a failing row says why, a guest refusal is NOT RUN
crash restore: the turn-id count rides every region, and the lag counts what the slot sheds (R7 review)
Bind message navigation to the session it names
Prove amacs-term's scalar core with Trust contracts and record its floor
Map main's unsendable await error to a failed wait in amacs-term
Format amacs-term's await-error arm
Refresh amacs-term's trust cost row from the final-tree lane run
Refresh amacs-term's trust cost row on the merged tree
Note the second merged-tree lane run in amacs-term's SPECS.md
Prove aterm-tty's decoder byte classes and bound its screen
Format Screen::new's clamp as trustfmt lays it out
Record aterm-tty's Trust floor and its specs
Prove aterm-tty's CSI parameter classes and the trailing UTF-8 bytes
Pin how the decoder reads a broken UTF-8 character
Raise aterm-tty's Trust floor to 208/696 and list its open obligations
Say why aterm-tty's 28 SAFETY-comment rows stay failed
aterm-gpu: read wgpu timestamps only after the frame ran; record the plan's Unorm work
aterm-pty: declare_interactive_thread on every platform
aterm-effects: share the harness card's nova step with its host
effects harness: price the GPU clock, calibrate the reference, cover the B5 producers
verify perf: a trend row names a dirty tree; drop the rows measured on one
gui metrics: an ablation reading cannot fail open; count ink, char_fg and fx layers
effects harness: a counted report needs every way's instruction sample
verify perf: the effects keys written once; ref_text_gpu_rel gated; baseline re-recorded
verify perf: format the effects keys and the trend's tree label
6B-1: the session journal is on by default (D3)
6B-2: the clause is on by default and names a label's author (D6)
6B-3: the session log's Settings switches are proved Bool rows
6B-4: RFC §1 is rewritten as D1 ruled; the supervise skill reports by mark
6B-1: a finished command is logged by its program alone (D3, U21)
6B-1: the armed successor's no-writer check waits for the lane's decision
6B-2: a need or work row names no author, pinned (D6, U22)
6B-1, 6B-2: the D3 and D6 texts say what ships, under [Unreleased]
6B-4: the supervise skill's mail answer is a command post accepts (D1)
Retain unowned Abrew scratch and complete dependency views
Preserve unclaimed lab VMs and exclusively own each run scratch directory
Make the lab scratch guard available to its executable
crash restore: say what a superseded region's count word holds
crash restore tests: wait for the worker's level with its shed, not after it
aterm-uds: read another process's cmdline and program as the kernel holds them, Rosetta's leak avoided
aterm-gui: waive the sidecar's Speculate where the launched lane does not run
aterm-models: print a digest of each collected spec registry
Remove the prose-only required-options test
models: SuperviseReplayCursor's acts arm, a scenario (replay plan T9, model 2)
supervise/tape: acts mode, the counterfactual replay's cursor (replay plan T9)
aterm-agent: counterfactuals over a recorded loop, hosted and engine (T9)
supervise/tape: the shadow, every recorded decision decided again (T9)
aterm drive replay: --set, --policy and --shadow, options of the replay (T9)
supervise/tape: the acts cursor looks up by index, and its guard is tested
supervise/tape: a keyed probe in acts mode is read from the cursor's index
supervise/tape: T9 review — acts mode never compares housekeeping, names the act a candidate goes on without, and ENDS a tape with no end only when spent
supervise/tape: only a WAIT held past the act is the act skipped; a read there stays STALE
session-log journal test: wait for B's first segment before listing the folder
Messages keeps its place under a told-on top row; pack ids stay as shipped
abrew: name the cask artifact that forced delegation; doctor walks Applications
aterm-link: serve ordered for real, with the records a person would miss escalated
aterm-link broker usage docs: one listener, guarded or not
aterm-link notify: on a broker that serves ordered, page a record only once it is durable
aterm-link notify: trustfmt the ported test's connect
fabric bench: the ordered arm, acked and durable apart, flushes counted, on S0's ping-pong
aterm-link notify: a reconnect off ordered pages what it held
fabric_world: the ordered tier end to end, the tests that assume no default
aterm-link: ordered is the default for a guarded broker on macOS, at a 100 ms horizon
aterm-link durability docs: reflow the paragraphs the port widened
Describe only reported fabric durability and bounded notifier guarantees
aterm-link: the ordered promise is astream's bound, and astream decides where ordered is served
verify perf fabric: a bare run measures what aterm ships, and a plan pins the build's git facts
vendor/astream: bump to defb053; notify and the presence view read recv_live_event
aterm-link durability: trustfmt the merged promise
fx: identity damage and scroll-blit marking for fx layers
fx: replay the fx layers into the spill band
gui: carry Window-space fx and occluders through the GPU transport shift
style: trustfmt the fx damage, spill and transport tests
gui: the paste and close questions are in the repaint key
gui: chrome cuts the fx light, panes place it, presents carry hints
bench: the scroll blit under a settled card, against B1a's repaint
render: the scroll blit's overshoot aprons finish the glyph phase
render: the damage seam takes RowBands, with no bare cell_h
gui: the composed repaint gate's hint and question terms get tests
gui: three chrome surfaces cut the fx light in one frame
Prove four amacs-files predicates with Trust contracts
Make amacs-files' read, decode and lock-retry bounds provable
Raise amacs-files' Trust floor to 153/674 and record its specs
Bind amacs-files' contracted limits to their spec literals
Re-measure amacs-files on the final tree: 153/676, and record the review's decisions
aterm-gui tests: one step up is from this platform's default font size
aterm-gui test: copy_on_select's default is the platform's
editor key table: the page rows read the editor's screen
settings chip click test: a picker row every platform shows
tab strip test: the short version rung is never longer
quit_safety test: bash stands in for a job-control shell
login PATH tty test: every interactive shell the host has
quit_safety test: refuse only a missing bash, and clean up on failure
aterm-machines: the envelope tests make their scratch owner-only under any umask
atpkg: an abrew rollback never removes a foreign entry on a recycled inode
aterm-gui: waive Speculate where speculate_layout is not compiled
aterm-render: the by-name bundled-font tests run with an empty HOME
aterm-gui: the stopped-parker conformance test dials only once the lanes are free
atpkg: pin abrew's kind check and activation target check with tests
Declare macro_attr only in the builds that expand an anchor
aterm-gpu: compile apply_hdr_surface_upgrade only where something calls it
Read fixed-width words with as_chunks instead of chunks_exact
aterm-machines: scope the enroll sink instead of dropping it by hand
aterm-gui: spell the presence test's TIOCSCTTY request as the tree does
aterm-gui: the mac-arm and win cells lint clean again
Settings: Software Update reads the one platform-updater fact on Linux
Settings: a Top card's short choice wraps its segments rather than cut a label
Settings: the Customize sheet is as wide as its colour rows need
aterm-gui: Settings tests read macOS-only rows from row_available_here
aterm-gui: the GPU-parity test uses a key the GPU gates on every platform
aterm-gui: two Settings tests follow decisions their parallel branches made
aterm-gui: Settings tests hold on a host with no audio output
aterm-gui: two Settings row tests stop depending on the UI face
Settings: a row's name wraps by the painter's own fit test
Settings: the status bar's Undo is as wide as its word needs
aterm-gui: Top Settings' wide check takes the no-audio host's height too
Settings: a Linux copy's update caption is Linux's updater's
aterm-gui: the no-updater lane test picks its arm by the host, not the page
aterm-gui: Universal Control's Linux note is read from its one owner
aterm-gui: the press-nudge test checks the keyboard on every nudged screen
aterm-gui: the draft bar's stacked case is measured in the host's UI face
Settings: the Serious Mode note keeps its pin at 80x24 in Noto Sans
aterm-gui: the ring-cap log test compares both logs in the same room
aterm-gui: page-down test sees a note line the room cut away entirely
aterm-x11 live test: map its window past any window manager
spare live suite: run under the host's shell, zsh or bash
worker spawn live tests: no silent bash where they name zsh
free_sprite_gpu: hold the cat to the cat bar and its text to the glyph bar
aterm-gpu: the GL oracle takes the instance and lock GpuContext::new does
Live suites: one test-shell resolver, and need_zsh names the test's line
aterm_spec::host: say what each of its two helpers is for
aterm-gui: the folder verdict test waits a hang detector, not the 250 ms budget
aterm-core, aterm-restore tests: a restore's seed lineage is not screen state
aterm-machines: the real-git init tests need the Command Line Tools' git
aterm-gui: a ready index's park waits a hang detector, not 20 ms
aterm-verify: the borrowed-tools test runs each stand-in once as it lays it
aterm-gpu: changed_row_band is built where a tray card uploads
Settings: a focus that left the Tab order resumes where it stood in a list too
aterm-gui: the handoff fixture generator refuses a host with no trustc
aterm-gpu: keep apply_hdr_surface_upgrade's arm cfg across the merge
aterm live lanes test: a reset is the listener's close, as on macOS
aterm-win32-oracle: read imports with the stock toolchain's llvm-nm
aterm-gpu: the free open_frame is Metal's
aterm-gui tests: the folder check is a hang detector in this crate's tests
Keep session journal fixture roots and workers owned
crash restore: the soak gate, judged from the recovery ledger (increment 8)
fmt: the soak gate, as trustfmt lays it out
crash restore: Q1 read in the real-Claude lab; Claude Code repaints in place after a pulse
harness(autopilot): an end nobody has looked at is a Done for you row (v4 slice 4, design §11.4)
harness(autopilot): Go's test clicks from behind another app, where only Go's own mark can quiet the end
harness(v4 slice 4): Read Result is a look at the end; a landed worker's row says landed
status_end_tests: the module doc names Read Result's look
Refuse oversized process argv before translator normalization
abrew: cross-check admission simulator against the binary; fix three divergences
abrew: admit wrappers that exec from their own Caskroom tree (prince)
harness(v4 slice 3): the kitty cheers the landing, when you are there to see it
harness(v4 slice 3): the pet's ♪ and ♥ on paper take the mark's ink
harness(v4 slice 3): the landing's cheer plays in an agent's pane, on open ground
harness(v4 slice 3): the cheer's stage is searched by the motes' own reach, and a sleeper on reserved chrome finds it
cursor trails: one spelling table in the engine; the picker offers 13 looks, default first and Off second
review: trail spellings — no reference to a deleted test or predicate survives; one duplicate picker test trimmed
Settings trails: every choice says what it looks like; reset, search, knobs and page text tell the truth
review: a style-only Off keeps its typing glow in Settings' words; the aurora holds an ink between floor and target
cursor trails: one colour law for both hosts, the intensity dial reaches every body, truthful trail status
review: correct the prose the colour law and heat target left false; the glow demo asks the shipped law
cursor carets: every effect-owned caret keeps 4.5:1 on its page, light pages deepen instead of whitening, bloom fades on light
review: the momentum tint cools onto the plain cursor without a step
momentum glow: one budgeted halo, a veil on light pages, and a cool-down that runs to cold
review: the momentum settle tests pin the analytic step and the page's active term
aterm-effects, aterm-render: the cursor streak rasterizes with no per-frame allocation
aterm-effects: every dark streak spends one over-ink contrast budget; sparkle gets its own tight stack
aterm-effects: light-theme streak rails stay in their row, cap their veil and run unbroken
review: wp08 docs say what the streak budget and its tests actually do
aterm-effects, aterm-render: lightning flashes once and counts it, water and lightning show on light, particles keep off the text
review: wp09 comet glint lays over its body, black ink paints, black lightning stays legible on light
aterm-effects: the fire caret rests as an ember that reads on its page
aterm-effects: fire on a light ground is ink, with flames that read on white
aterm-effects: fire's lights over the letters spend one over-ink account; steam stays off the line above
review: wp10 light fire holds an unread row at the text ceiling; test docs say what is judged
aterm-effects: the default rainbow kitty keeps typed text at the bar on light themes
review: V2 §24 states what the light bed's bar costs in colour; a stale veil comment goes
aterm-effects: the classic wake settles, shows on light, and rides scroll
review: classic settles the light another style left, and keeps the caret it saw
aterm-effects, aterm-gui: Trail Packs draw on light, every knob works, examples install
aterm-effects: water_seen's doc names its second user, the pack light rails
review: wp12 Trail Packs tests discriminate, a bare pack: says why it falls back, stale names go
aterm-effects: re-bake Fire's licensed typed fold for wp10's fire emitter
settings preview: the cursor demo is a real CursorFx host, composited by the terminal's renderer
review: the focused cursor card keeps only its own page's subject; preview tests prove what they claim
cursor trails: integration fixes across the five lanes
cursor trails: post-merge fixes — tippy clean, no hidden #[ignore] tool, formatting
aterm-effects: the dark streak budget caps each sample's peak, so every trail keeps its fade
aterm-effects: the rainbow kitty caret reads at 3:1 on every shipped light theme, pinned
trust: memory.tsv keeps one row per library and RAM; the floors merge doubled seven
aterm-effects: a typed streak run keeps every sample, so the streak cannot re-flare at the typing rate; the flash meter covers it
aterm-effects: the light-theme aurora returns as a soft translucent veil, not a flat bar
cursor carets: the effect caret's floor holds against the cell under the caret, not only the page
Settings preview: a newly highlighted trail starts its own loop, so its first paint replays the warm-up, not the cycle so far
aterm-effects: an output comet retires when the ink it marks is erased, so Ctrl+L leaves no ghost cell
aterm-effects: the comet's cell bed is held to a contrast budget, so the letter beside the caret reads at 3:1 with the momentum glow on
cursor trails: every style that reads the rows beside the caret is handed them, not only the rainbow kitty
cursor trails: the lanes' cheap low-severity review items
trail status: comet_alpha_max is said to follow the bed's legibility share too
trust: aterm-gpu-web's floor follows a verifier lowering gap the trail integration exposed (122 -> 120), with the measurement
aterm-gui: trustfmt the unaccepted_value_warnings assert in app_config's tests
aterm: bring upstream's fabric repair-test fix onto the trail branch
aterm-agent: the two tests that drive a real flow runner hold one lock on the process's interrupt dispositions
aterm-gpu-web: pump_reflow_on_render_tick's grace step proves again, so its floor is back at 122
aterm-effects: classic on a light ground is ink under the letters, and a jump is one stroke
aterm-effects: a pinned cursor colour is the caret at rest
aterm-effects: the light comet nucleus rests clearly above the page floor
aterm-effects: the light page's momentum glow is one round glow in the caret row
aterm-effects: the emitter block's aura is a round glow inside the caret row
aterm-effects: a light band that leaps rows stays on the landing row
aterm-effects: light bands give way to rails over wide glyphs
aterm-gui: the preview's trail verdict judges the whole cycle, the pause holds mid-line
aterm-effects: the serde corpus keeps a Trail Pack v1 manifest that still loads
aterm-effects: with no trail drawn the light momentum glow wears the caret's colour
aterm-gui: Cursor Styles writes a pack's description as it writes the built-ins'
aterm-effects: knob reach is read off the engine, not kept in a table
aterm-gui: a preview of a pack that is not loaded names the trail it draws
aterm-lab: trail-gallery and trail-contrast, the cursor-trail gallery and its WCAG probe as lab verbs
aterm-effects: on a dark ground the streak lies under the letters, and one account holds every light over them
aterm-effects: the dark streak keeps its glow over air and its colour under the letters
aterm-effects: sparkle burns gold over a dusk, fire rises in tongues, every glow is round
aterm-effects: Classic wears its crown on a light ground, as ink on the caret's row
aterm-gui: the cursor preview's least height is a control's, so a short page never cuts its Pause/Play target
core, render: the fx engine's cost counters and one slicer for every backend
gpu: draw fx layers on Metal, wgpu and GL through one instance law
models: MetalAtlasResidency holds the fx regions and the palette ring
gpu: fx parity, band, hazard and binding checks on every arm this desk runs
gui: metrics reports the fx engine's per-frame and at-rest counters
gpu, render: the pass law under test; tippy clean on the lane's crates
gpu: fx_prefetch makes arts resident without drawing, under test
gpu: UPLOADED_SAMPLED is live on the GL arm now that the fx atlases mint through it
gpu: the fx layers under test on the GL arm, against the CPU and against wgpu
Keep paused GPU clocks from booking skipped readbacks
docs, gpu: B1b's GL arm as run on this desk; why the GL palette keeps a ring
Use compatible source-over endpoints in the canvas differential fixture
Put run_verbs' doc back on run_verbs in lab instance
Disk watch: record a finished stage, and say when a full disk kept a pass from removing
Login carry: tell the owner to close a dialog whose login came back, and follow a renewal made while /login was up
Weekly limit on a roster row: name the roster's step, never /login in the tab
Accounts: a login signed back in at the tab is ok again
render: preserve unsigned row-band geometry before signed arithmetic
abrew: evaluate depends_on xcode: from data; drop build/test contexts
spare: a new tab takes a spare while its escape scan waits out the grace, and a verification is not spaced
spare: the grace's wait holds back verification and the next fork, not a tab; two runs pooled
spare: the design's I3 names Verifying; the unspaced-verification test takes whatever the scan reads
Refuse unbounded policy input and preserve unknown shadow evidence
abrew: cask depends_on formula/cask install natively first; nested .app.tar unpacks
crash restore soak: a kill a keeper-absent run's link held is judged; refusals count
docs, census: the soak's keeper-on is the link; the wire table whole; restore-stays-local as checked
keeper link: the boot sets the census's keeper= word; refusals reach the row; a live test reads it
Keep an ask's step whole on the band before its title (audit3 copy-3)
Say what to do about a lost login, a stuck rotation or a full disk in plain words (audit3 copy-1, copy-2, copy-4)
amacs-files: admit missing files, keep BOM and CRLF, resolve open paths
Raise amacs-files' Trust floor to 153/717 and record its specs
amacs-files: compare a version's text in file bytes; saves make no folder
Raise amacs-files' Trust floor to 158/748 with the review fixes
aterm-agent: FOREVER CRUISE / FOREVER LAND policy core, and NEEDS YOU
repo_work: count the commits on HEAD the remote's default branch lacks
models: SupervisorCruise and SupervisorLand, bound to the real decider
Teach FOREVER CRUISE / FOREVER LAND and NEEDS YOU; retire the token's teaching
aterm-agent: a left NEEDS YOU entry comes down; wall acts end on NEEDS YOU; retire dead policy items
codex-alab's wire for FOREVER CRUISE / FOREVER LAND: policy texts, act words, needs beside a self-claim
lab restore --land lands on a clean defense; the harness docs follow FOREVER LAND
summarize: a private folder of aterm's own, or no summary at all
end gate test: a relaunch's first point may journal a SKIPPED act
fmt: the merges' test edits, as trustfmt lays them out
update(handoff): a seamless successor's own update facts wait for its Commit (U14)
timeline: an anchor above every id handed out reads from the first row (U13, keeper lane)
timeline: the shared wire oracle reads the new arm; no link to a cfg-gated item
abrew: $APPDIR generic targets and container nested: archives
Keep result clicks bound to the end their menu captured
abrew: read-only scripted forms stop delegating to the wrong prefix
abrew: help and manual text catches up with rounds 6-22
Run test stand-ins in place; delete a copy only after it echoed (sp-1, sp-2, sp-3)
Hold aterm-agent's test child waits to a hang detector (health-relaunch-unbounded-wait)
Bound the two sqlite3 waits main just added to the agy live-read test
aterm-uds: ProcWatch, the kqueue witness of a session's execs
card engine A2: kernel exec edges through the PTY reader
procwatch tests: use the descriptor-safe child launcher
procwatch tests: use the launcher stdio type with its child
procwatch: keep explicit gather inputs and simplify the test exec guard
ForegroundHandback: ObserveExec and the exec cut's laws
card engine A2: the process watch on a real zsh
card engine A2: I1 through the real reader with a process watch
card engine A2: as built, and the drain's time in metrics
card engine A2: trustfmt over the lane's files
census: register parse_hold as a term guard helper
crash restore soak: a recovery that refused every offer is no recovery to report
Preserve local text contrast across the light fire palette
Use the standard range predicate in the light fire fixture
Judge mixed light fire contrast across each glyph scanline
aterm-lab: lab instance measures in aterm.app's scheduling band (own coalition, APP task, role UI_FOCAL)
aterm-lab: the band test runs aterm-lab band-standin and builds off macOS
abrew: clean not-found errors with suggestions; info falls back to casks
atpkg: lift the pending stub's DirWatch into atpkg::dirwatch::Watcher
claude_footer: read awaited registry rows by push; delete the first-row ladder
card engine A5: re-ask the footer at a drawer's exec edge; registry drift is an exception entry
atpkg dirwatch: the inotify fd accessor is a test seam; pending_wake doc names the shared watcher
claude registry: a level outside sessions/ reads no row; the lab hands ATERM_DEV_ seams
card engine A5: as-built note, live measurements, specs and changelog
abrew: multi-entry bundle install is native with batch planning
abrew: cleanup --prune=<days|all> and -s prune cached downloads
spawn: the Windows reader passes read_or_wake's process watch and matches Proc
aterm-link: aterm fabric and both doctors say what the broker says of its log
aterm-link: a ghost node's rows go to that node's publisher; the health and remedy text says only what holds
aterm-link, aterm-cli: trustfmt the review fixes
fx: one frame art budget every backend obeys; GPU admission packs drawn arts first
fx GPU tests: palette overreach, slot order, bloom feed and crown, art budget
fx GPU: ring-slot residency model, palette identity drill, prefetch gate, fx demand
fx: a fail-closed staging seam and test; B1b finish as-built notes
Re-admit FX art when a layer changes draw eligibility
Reject overflowing cleanup ages before native effects
Keep pending journal regions counted until keeper acceptance
Read the production custody status in captured fixtures
Keep app-band shutdown under launchd label custody
aterm-core: paint_prediction_span, an all-or-nothing painter for a state chain whose shifts move text
aterm-predict: edits that move the tail, held by the safety theorem
aterm-gui, aterm-wasm: a shift's chain painted as one span, its moved text in its own style
aterm-predict: the class ladder bound to the model for every class; tail adoption declined
aterm-predict: say why a glyph a chain cannot place inside the text flushes it
aterm-core: a span cell moved onto its own column is painted; the order test reads styles
aterm-predict: shifts judged by the in-place worlds, a pair that cancels, the standing tail at every chain start
aterm-predict: two thousand seeds: a proof holds its echo's glyph, a cancel owes its blank; decoration tagged
aterm-predict: name only provenance this harness reproduces
aterm-predict: a state an earlier op's echo shows part-way is no match; the world hides a secret on redraw
supervise/tape: the corpus — a check in acts mode, the scrub, the lint and promote (T10)
supervise: format the corpus loop tests
supervise: the loop takes its hand under its setup's holder, so a hosted tape replays in any process
aterm-lab: tape promote, lint, replay-jailed and rerecord; the corpus scenarios c1-c3 (T10)
aterm-agent: the harness tape corpus — eleven lab runs over Claude Code 2.1.304 and their test (T10)
aterm-lab, aterm-agent: the wall scenario waits its rung plus a minute; the drive help does not promise the public build a corpus
aterm-lab: a promote refuses a failed run and a tape that loses what the corpus kept; the manual names every replay --check exit
aterm-agent: the scrub's docs and tests survive the public export
aterm-lab: a corpus scenario finds the idle journaled with its decision
aterm-lab: a rerecord's loss is fewer acts or a kind of decision gone, not a count of decisions
theme pack: only the name line an earlier release wrote reads Installed (r2-6)
Login notices: a sign-in step opens with the account's label (r2-3)
Tests remove a copied test binary only after it wrote a line (r2-1)
session log transcript test: run the kept bash stand-in in place (r2-2)
Abrew: deps --tree --direct and no-name installed trees are native
keeper live test: the shed waits for the keeper's confirmation before shed
Abrew: list --full-name is native; search /regex/ delegates honestly
dirwatch: a watch the kernel let go is gone; the registry places it again
claude registry: the let-go test holds its root as main's fixtures do
Complete gone-watch API on unsupported platforms
Use a hang detector for the removed-object watch edge
crash restore: a clear whose keyframe a replacement skipped is erased from the region the keeper holds (R9 c, b)
keeper link: a full queue drops nothing the keeper is told once; owed ops go in order (R9 a)
keeper link: a live test that a replacement's receipt is the keeper's read, not the write (R9 b)
keeper link: PENDING and BYE have room no owed op takes; the BYE drops what is owed (R9 review)
crash restore test: the skipped-keyframe clear's control is the one the test asserts (R9 review)
update: measure the whole auto-update in a guest; an armed update starts as its read ends
census: register parse_hold, the PTY reader's term hold, as a guard helper
update: one 20 ms read poll for both lanes a pre-park read holds; the intent spec says due at once
Abrew: download setup/publish errors name the path
harness(autopilot): the carried end — an unseen end, its clock and its task's work cross a seamless update (v4 slice 2b)
harness(autopilot): the carried end after review — a done then landed crosses, a withdrawn done stays withdrawn, the intake is tested end to end
harness(autopilot): compose the carried end with the cheer and Done for you (v4 2b+3+4)
harness(autopilot): the carry tests tell the end's instant from its minute (v4 2b review)
render: the fx art registry, its builders and CPU painting (card engine B3)
Reject oversized art before building texels and clip public CPU painting safely
aterm-release: a git credential helper waiting for a person is ended, not waited on; verify export's ceiling lets the release stop its own children
Read Claude Code 2.1.304's limit-reset kinds in the reset step
Port the limit-reset spec and docs to Claude Code 2.1.304
Hold the case-blind read of a first takeable reset row in tests
Refuse a reset menu with a row of a kind this build does not name
Read a zone after the confirmation's week as the week's failure
Delete the duplicate 2.1.287-wording reset test; fix SPECS.md's count of the port's tests
Hold ce()'s count grammar and Kg's {Kind} rule in the reset template canary
Carry a reset's kind past the reader, and end no wall on the still-walled line
Hold the declined row's name to the taken kind's title when none is drawn
Hold reset_shows' title read: a successor Escapes a titled frame with no box until its Enter
Correct the reset docs: limit_reset's rule, spec §0's screen-reader layout, §2's declined row, KI-1019-1
Read a reset row's kind only where its head is a word of its own; hold the measured 2.1.304 dialog again
Hold the offer order and Yn's {limits} in the reset template canary
Read the weekly session reset's in-flight answer as no wall
End only the walls a reset refilled: the claimed one and its kind's windows
Relabel the reset tests' and models' bundle sources as 2.1.304's
Say in the tape codec that a reset step taped before the 2.1.304 port does not replay
Hold how the reset step ends on a walled or count-less spend
Format the reset reader's new test rows
Format atpkg's image.rs as verify fmt --fix leaves it
limit reset: read a spend by its kind's head, add limit_reset_kinds, fix stale docs
limit reset: the accounts page says the one-on-offer rule is the default
Keep recovered turn counts fenced until a new journal is accepted
claude registry: hold the forwarder to the kernel's events; restate A5's final-tree figures
6C-1: a harness relaunch lifts the failure it caused, and only that one
6A-7: the fold's failure comments say what the code does
6C-2: brief keeps by= and ledger= for a turn whose open was evicted
6C-3: brief notes the mail a turn probably answered, always with ~
6C-1, 6C-3: a relaunch lifts only the failed agent run it replaced
census: register parse_hold, the PTY reader's term hold
Bind credential cleanup to kernel process identity
Keep identity-bound orphan cleanup alive after git exits
Stats bars: visual audit fixes, the sill, the lens, View ▸ Stats Bars, meters for VoiceOver
Tab chips: a load meter, each tab's share of the machine (design §12.4)
Stats lens: no work on a wake when nothing is due; the changelog names only what the keyboard lens does
Stats bars: clean under tippy -D warnings
Menu: the Stats Bars form getter exists where the native checkmark reads it
Stats bars: live stuck marks, a truthful lens, and the review's fixes
Stats lens: name no verb that does not exist; say Return in its hint
shell-integration: a shell started before 2026-10-16 proves an older script's ~/.aterm/bin by its start; ATERM-KI-1015-3 closed
shell-integration: the build that spawned a shell answers for an older script's ~/.aterm/bin where its loader cannot
shell-integration tests: name the spawned-by env type (tippy type_complexity)
harness: the login carry's review (acct3-1..5): no dead login proven by its own dialog, one step per loss
Abrew: outdated and missing take name scopes natively
aterm-link: a sequence reservation is an atomic write, fenced by the durable incarnation, not a durable write
aterm-gui: ATERM_DEBUG_LOOP_FIRST, a dev seam that builds the event loop before session 0
aterm-gui: a dense output burst streams at its 16th pass, not only after a frame
aterm-gui: a foreground edge ends the output burst, so a prompt is never held
keeper link: the room's counter uses try_update (fetch_update is deprecated on this toolchain)
Hold a session's typing while its edit ticket is open; Option is Meta in the Editor
Serve edit … wait=0 so amacs --no-wait holds nothing; hold App-lane typing
Keep pointer status answerable under the edit hold; record the amacs and amacs-term Trust rows
Record the merged tree's amacs and amacs-term Trust rows; note the real-Claude check
Give TR4's for-word alphabet test the wait field
handoff carry: a tail short of its room keeps its newest rows (KI-1015-2 U30)
update: a stray launcher limit is nobody's (KI-1015-2 U1)
update: a missed park's rollback never waits on an engine (KI-1015-2 U44)
handoff fixtures: hold the fields each release's desks write; narrow U10
handoff fixtures: the field hold passes a field no handoff writes
handoff fixtures README: name NO_HANDOFF_WRITES beside the field hold
handoff fixtures README: the exception list in a paragraph of its own
handoff carry: a crowded desk shares its rows alike, newest first (KI-1015-2 U30)
update: no rollback waits on an engine; the busy one's size is owed (KI-1015-2 U44)
handoff fixtures: what a baseline wrote stays held, reached or not; variants too (KI-1015-2 U10)
update: the park asks the export to pause and never waits for its last look (KI-1015-2 U20)
generator: carried-state writes autopilot_end, which the field hold refused unwritten
aterm-release: the release's own git never prompts on its terminal, so an ended credential helper ends in git's own failure
aterm-lab: c4-read, the corpus's first box whose decision looks at the machine (T12)
aterm-agent: tape_shadow_cost, what --shadow and --why cost on a long hosted tape (T12)
Register the parse stage's term hold with the lock census
Read the foreground only for a drain that holds an exec
Format the gather's lazy foreground read (trustfmt)
Keep the parse stage's slice hold a plain term_lock binding
Note the slice-hold probe change in the fork-loop record; trustfmt
seamless: WireCaps' carry queries build for tests on every OS
sysprobe: errors_quiet is a test seam, gated as one
uds: the Namer's deadline is per instance; tests wait a hang detector
uds: a path use is reported in the spelling that placed it
harness: a session's cwd is opened only on a local volume, link by link
harness: tier 3's removal reads its sessions on a mount table read whole
sysprobe tests: the output-tail placement test is unix's
disk: say each cloud sync root the home search meets, and why a named one is refused
disk: remove a Claude Code version on Windows through its pinned folder, fail closed
disk: the Claude census passes over its own process, and a Claude scratchpad's programs
disk: the census spells a scratchpad path long, and every claude on a path in the temp root is the temp path's
disk: the home search never opens an entry a look could fetch, a reparse point included
disk: a Claude Code version is removed on Windows only from a fixed disk
disk board: a wait's own reading keeps the watch's room, lines and reclaim
disk board: an 8.3 tab reads its volume's row before any look, and with no watch
disk watch: on Windows a tab busy at the removal is unknown, never the look's copy
disk watch: a private instance says once a change why it removes nothing
disk board: the cwd hook tests a report's spelling before it allocates
disk watch: disk_sessions_now's doc says where the look's copy is still read
disk watch: a private look names the rule that made it private
disk board: an 8.3 spelling waits on the file system one deadline at most
title drift tests: the cwd hook hands an 8.3 directory to the disk board
message reporters test: one private cause, as the glass says one reason for every rule
aterm-gui: one foreground read per status look, the activation wake armed off the main thread, one stat per stamped path
vendor/astream: d9ad10f, the client refuses a request behind an owed ack (AcksOwed)
Control: a glassless pointer's reply reads the frame its event left
Control: pointer wheel turns the wheel through the path a hand's wheel takes
Settings pickers: a wheel at the list's end leaves the tile under the pointer hovered
aterm-gpu: a tray card drawn by a command buffer waited inline records no reader
aterm-gpu: the tray card ring's reader bookkeeping is a pure machine, bound to a model
Control: pointer wheel over a terminal reaches its history, as a hand's wheel does
Control tests: the click reply's look copies the switch's state (tippy clone_on_copy)
Control: on glass a pointer's reply reads the frame its event left
Control: a pointer's ERR over a native page means the page, and says what is shown
style: trustfmt the b8 residual fixes
harness: close the b8/residuals review (wakes, tall turns, none forms, land acts)
Abrew: list -l/--long is native
Settings: Undo puts back a spelling only the file held
Settings: an old classic mono keeps the cursor's colour when the writer rewrites it
Settings: the Trail color row takes the cursor's colour by its word
harness host tests: a run is counted only after what it records
harness host tests: a restarted loop's first point is waited for as the event it is
update handoff: a test park waits out the scrollback export's pause and halt
Settings: a trail colour's Reset is named by what it gives back under the saved style
watchdog: the main-thread watch is a value, and its tests drive their own
Settings tests: choosing Classic over an old classic mono keeps its colour on the Trail color row
Settings: Modified names a style knob's default by the style aterm.toml names
Settings: an old classic mono over a trail colour the loader ignores keeps the cursor's colour
Settings: the trail colour's picker chooses the cursor's colour
Settings: an unset trail accent is named by what a window brightens
Settings: Undo after a later change puts back what the file said
crash restore tests: the custody tests read due stamps on a held ring clock
notices: a command is whole or replaced, limits name their reset, the open entry reads through its last line
Put amacs's scalar core under proved Trust contracts
Raise amacs's trust floor to 310/939 on …
Drop the two remaining provable index hazards in amacs
Record amacs's specs and raise its trust floor to 311/935
Expect clippy's clamp and range-contains lints on the amacs contracts
Re-measure amacs on the final tree: 311/935, every row unchanged
Prove amacs's completion wrap and percent-escape indexes; floor 318/935
Prove amacs's projected column limit; floor 325/942
Bring amacs's SPECS up to the reviewed tree: 325/942, seven contracts
Record the repeat measurement of amacs's 325/942 floor
Re-measure amacs on the merge with main: 325/942, every row unchanged
Re-measure amacs on the merge with main …: 325/942, floor unchanged
supervise/tape: one keyed index per tape, shared by every probe on it (T12)
tape_shadow_cost: check each grown copy against itself; say what --shadow costs on its own build (T12 review)
Abrew: zip structures the strict reader refuses delegate, not fail
trust: re-measure aterm-gui floor on local 1.101 prover (6184/327090)
aterm-lab: an app-band instance is a ProcessType App job, not a utility-clamped submit
aterm-lab: an app-band job is unloaded and asked by its GUI domain, and a path it cannot carry is refused
trust: aterm-gpu holds 462/3366 and atpkg 585/10658 at a 6 GiB ceiling; aterm-gui is cap-bound
trust: aterm-gpu 484/3529 and atpkg 692/9094, re-measured on the tree merged with main
trust: aterm-gpu 514/3805 and atpkg 701/9160, re-measured on main …
trust: atpkg 719/9271, re-measured on main …
trust: atpkg 722/9291, re-measured on the tree composed onto main …
trust: aterm-gpu 513/3714 and atpkg 723/9309, measured on the tree composed onto main …
trust: atpkg 726/11497 and aterm-gpu 513/3714 hold on the tree composed onto main …
aterm-gui: the debugger-access alert is short lines and bullets
aterm-gui: the debugger alert says "your admin password" only to an admin
aterm-gui: the debugger alert's bullets fit one line, and its undo names aterm's Settings
harness(page): the post-landing check's Settings ▸ Harness findings
harness(page): each fact card sizes its label column from its own labels
harness(page): the review's fixes — values wrap whole, labels whole, the timer grid on the row's slots, the fleet raised not re-read, the successor reads at Commit
fabric endpoint: lineage reaches it — link log <id> continues=<f> was=<id> (bridge lane 3)
CHANGELOG, SPECS: lineage reaches the fabric endpoint
fabric_world: a reply and a verdict made while the poisoned broker is down land after its restart
fabric_world: trustfmt the lineage world's stray post line
fabric endpoint: apply each log move once, with no window of its own
fabric endpoint: the two-move test holds parked waits and the watch list's pruning too
Lineage docs and specs say what the endpoint does, and when it matters
trust: one floor ceiling for aterm-gui memory rows after re-measure
gui(claude card): the card's glass is ground the cursor pet keeps off
effects(kitty pet): a pet moved off a protected stand rests on clean ground
effects(pet world): host exclusions read as per-row column spans
aterm-wasm: the CPU replay records Copy All's new spoken name
atpkg abrew: an entry's identity is its device, inode and file type
lab linux: the guest has PowerShell 7, and x86_64 execs run tests one at a time
verify: a selection holding a web module runs wasm-smoke with its tests
aterm-gui: Linux's lib tests pass, and two Linux Settings cuts are fixed
Fix forward main's reds the merge brought: core checkpoints, a Linux dead fn, a focus test
aterm-gui: a stranded focus inside a Settings list resumes where it stood
aterm-gui harness: a tab's newer lost word replaces its earlier one in one step
aterm live tests: a refused connection that Linux resets reads as the close
aterm-gui: main's Top-card segment wrap stands; this branch's is dropped
aterm-gui: the About tagline is judged at the column the hero drew
aterm-wasm: the CPU replay records the cursor effects' new frames
aterm-gpu: page_bloom_strength is built where a bloom pass calls it
aterm-gui: main's stranded-focus fix stands alone; the branch's guard goes
aterm live tests: main's hung_up already reads Linux's reset as the close
aterm-gui harness: lose() forgets a word that took the tab mid-call
verify: a selection holding aterm-wasm-abi runs wasm-smoke as well
lab linux: pwsh unpacks beside its install, so the rename is one step
Fix forward main's cross-cell reds: the Windows reader, card-engine dead code
verify wasm: node drivers end by exitCode; process.exit() hung the replay
atpkg: the world-writable-ancestor test runs on Linux against /tmp
aterm-gui: main's own Windows Proc arm stands; an unread field is unix's
aterm-gui: Windows test targets build without warnings again
aterm-gui: two more test-target warnings off macOS, from main's newest
aterm-gui watchdog: current and park_modal are macOS's now that tests own a watch
cast: the header names the geometry in force at the first retained event
cast: the cast reply serializes off the recorder lock, into one buffer
cast: one asciicast codec in aterm-control writes cast and reads it back
replay: cast frames and temporal replay on the engine cast drift folds on
core: Terminal::replay_fork copies an engine that continues as it does
cast drift: variants fold from a fork of the faithful replay at the anchor
replay fork: review fixes for Terminal::replay_fork and the anchor fork
temporal: replay stays reachable in long sessions, and status says where it starts
core: checkpoint_continuing_bounded projects a live engine with its history bounded
temporal: replays fold off the recorder lock, and dropped input is a break a live keyframe closes
temporal: a break waits out a sequence its keyframe would swallow, and a gone writer gets no keyframe projected
temporal: a hold queues its slice as a range of the reader's one batch copy, which the cast tap reuses
temporal: the real reader's test holds every unchanged tap burst to the slices that share it
cast: a snapshot shares the recording's sealed chunks, and each event is charged what holding it costs
cast: the reader records each burst itself, and cast drift waits for the recording instead of sleeping
cast: a deep unseal gives its deque slots back once resealed, so the slot bound holds for every insertion
codec: base64 appends into a caller's buffer, and the image byte reply uses it instead of its own encoder
temporal: the reader test's burst partition lets its element type be inferred
codec: base64's encoder lengths are bounded where the verifier can see it
window/controls/open: the GUI targets are one keyword list, and a retired name is a parse result
window/controls/open: review fixes for the one GUI target keyword list
update: update status folds the updater's last installed-bundle observation; no lock spans codesign
update: an installed-bundle observation is fresh from when it is recorded, not when its probe began
control lanes: a new wait lane is spawned with no lock held; a lane that cannot start gives back its own wait
control bind: startup and handoff binds share one retry policy; a handoff successor wakes at its predecessor's exit
control bind: review fixes for the handoff successor's exit wait; a live predecessor's stand-down is tested
control help: bare help, help --full and help --json are built once per process
control lanes: a connection reads through one buffer for its life; a request switches its socket's mode twice, not six times
control lanes: review fixes for the one read buffer; a parked connection keeps at most READ_BUFFER, and the handshake's mode reset is tested
control: an idle authenticated read waits on socket readiness on every unix, not only macOS
hangup: one peer probe tells idle, readable, half-closed and gone apart; a parked operator next sees a client that closed behind a queued request
update: update status and update apply report the reducer's staged activation; no control lane probes the installed bundle
update: review fixes for the reducer's staged activation on update status; its two choices are tested where they are made
metrics: a histogram's count is the sum of its buckets, read once
echo_rtt: sort a copy of the window, not the window under its lock
metrics: label tables are declared once (label_enum!)
metrics: count wakes by variant without a lock or a payload format
metrics: reset cannot change what the loop arms; the healer and the typing hint move out
metrics: one clock read per present; the window owns its gap, the UI thread its slow episode
metrics: a present's input booking is pinned through record_present_at; witness tests serialize
metrics: a reset never reaches the strain engine; the turn census owns its histograms
metrics: the strain sample is the oldest key's or none, pinned with a controller key first
metrics: one emitter per form drives both the text and the JSON sink
metrics: the verb's routing of each form is tested; a text pair key escapes its separators
metrics: typed window ledgers replace the loose statics; reset is generated and Snapshot is gone
metrics: the coverage check pokes each part of a composite instrument alone; a refused key's count is pinned
metrics: the startup ledger is a module of its own; a write-once fact is derived once
metrics: the GPU probe is read whole or not at all, so a kept split is never torn
privacy: status reads the Full Disk Access cache and never dispatches a probe
privacy: consent wakes repaint only the Security view whose block changed
privacy: the [privacy] policy is published on ConsentState and its protected roots resolve once per config
privacy: await consent reads off the event loop and wakes on consent publications
privacy: await consent notices an exit on every platform, and no probe starts under a gate a reload closed
privacy: the report takes one main-thread hop and waits on slot publications off the event loop
privacy: no census or Developer Tools probe starts under a section a reload turned off, and the report asks the SPI before its wait
privacy: the report resolves the responsibility SPI once for all its sessions
privacy: the four probe slots are one SlotCell with one kind-tagged wake, and no slot answer is keyed on the identity
privacy: a read that claims a refresh as a retirement meets its lock serves nothing and moves the claim to the new epoch
privacy: a config reload or a returned cold exec stops or starts the tccd observer it changes, and the park reads the running mode
privacy: a slot read's answer-and-ticket pair has one name, so the gui crate lints clean
privacy: the [privacy] master switch turns the Full observer off too, the EPERM path's tab mark and banner included
privacy: a restarted tccd stream announces nothing the stopped one was correlating
privacy: the tccd observer wakes the loop once per drain and judges prompts only when the queue, the roster or the 3 s threshold moves
privacy: the tccd verdict gate's tests fail when a pass runs before the threshold crossing
privacy: a stop ends the tccd stream at any point and signals its child only while unreaped, and the lookup watchdog waits on the reap
privacy: the consent model, the report and the signing identity leave control_privacy.rs, which keeps the two verbs
privacy: a test that changes [privacy] republishes the mirror the off-loop readers read, and the status test leans on no probe interval
capture: every route layers its chrome in one order, and the terminal present paints the one host visual policy
capture: every pixel capture enters one door, and a deferred one re-enters it
capture: every capture is bound by one barrier, and the binding copies no model
metrics: a present a capture forced books its latency as tainted
metrics: capture_presents counts the samples a still capture's barrier forced
capture: image and the snapshot resolve their source once and finish in one rerender
capture: tests pin a recording still's retained visuals and the windowed recording barrier
capture: window is one body on macOS and Windows, parameterized by the platform photograph
render: one placement law places a frame in its surface, for both presents, dims and the capture crop
gpu: a presented snapshot keeps the swapchain copyable for 2 s, and says when its copy is verbatim
capture: a windowed image is the destination its own present submitted, cut to the frame
capture: a translucent window's image is a rerender on every platform
png: the encoder streams rows into IDAT chunks and holds no copy of the image
capture: encode jobs carry the pixels their producer made, and the permit charges the encode's peak
png, capture: the encoder's pending output is one reservation it never outgrows; a capture is charged the allocation it holds
capture: the main thread takes a present's destination as mapped; the encode worker converts, cuts and fingerprints it
capture: window stitches on the encode worker; the AppKit chrome is copied as its bitmap holds it
capture: admission reserves the payload a capture carries; the AppKit chrome copy is tested on real reps
gpu: a capture's sRGB transfers are table reads, byte for byte the powf they replace
capture: image, window and a video recording are counted main-thread hops; the image queue is gone
video: a frame's fp hashes every pixel and delta counts changed 8x8 tiles; keys analysis needs no time order
turn: a block-mode submit is verified by the shell's started-command counter, read in one hold per press
turn: review fixes for the started-command verdict — a C that moves no content verifies, and a restore keeps the C's its blocks prove
aterm-core: a content batch renders only the visible rows an armed row watcher can read
aterm-observe: Rows_e is [] when no scanning range meets the grid, as observe_at passes
ring verbs: history, timeline and exits format their page after the ring's lock is released
turn: the submit-verification rows name their control's type, so tippy passes on aterm-gui
session log: log and brief copy the ring's shared records under the timeline lock, a count bump each
session log: brief all scans each session's window once, for its floor and its share
wire: rows are shown through one collapse-and-trim primitive, and blocktext frames its reply after the terminal is released
bidi: text order=display reads a row the renderer leaves in logical order in one text pass, before gathering any reordering input
bidi: text order=display orders a row's written cells as the frame does, through the walk the pointer read uses
search: a history line read only to its first MiB is counted as a line not searched to its end
search: find reads its rows through the engine's one search-row reader, so a viewport scrolled back joins the soft wraps the live screen has
aterm-release/trust: re-measure aterm-search's row after the cut-short line count (195 / 584)
search: every check compares one SearchKey, and search names a frame that moved under it moving
search: the query layer (soft-wrap join, physical re-expression, point selection, narrowing) is aterm-core code
aterm-core/SPECS: search-query-layer quantifies over the stacks its own calls left, not any NarrowStack
search: the terminal owns one index slot, planned and finished in one hold each and built off its lock
search: a refresh's boundary walks run in its first chunk's hold, so a plan's hold walks only the anchor's run
search: find and search run through the terminal's index slot, and the GUI keeps no index of its own
search: no terminal hold frees an index, and a point step answers a hit as it answers a build
integration: aterm-core SPECS.md tallies count every spec and test row it lists
screen: the styled frame is the live screen in every field; a viewport scroll is not a change
screen: a Kitty placeholder's image stays in the live frame while the viewport is scrolled back
subscribe: a watch carries its session's context, seeded under one engine guard
subscribe: a closed tab's master closes under a live subscription
subscribe: each push stream asks one frame key its own question; a frame change at an unchanged seq pushes cells
subscribe: a batch that changes no frame pushes no cells, and every-frame never re-sends an identical body
screen: each session's text and styled frame are built once per change and served to every reader
subscribe: a watch reads its content at most once per 16 ms of wakes, and the last change of a flood still lands
subscribe: a session's watchers live on the session, and the write that changes what they read wakes them
subscribe: an exit's own ring ends a parked wait, a post arms its debt before it rings, and the operator observer is paced
subscribe: a wake reads only the watches whose session rang, and a pass asks the roster journal before it probes for a close
subscribe: a content watch's backstop is timed per watch, and a prune that frees a slot runs the next membership pass
subscribe: a push stream's hang-up is a wake, and an idle events subscription makes no pass
subscribe: review fixes for a push stream's hang-up is a wake
subscribe: a host's own write rings the screen readers as its hold ends, and an idle content subscription makes no pass
subscribe: review fixes for a host's own write rings the screen readers as its hold ends
census: term_write is laid out as the formatter writes it
control: one park for every blocking verb, and a slice with no wake asks only after the caller
control: review fixes for one park for every blocking verb: a fabric wait parked with nothing owed looks again within STALE_AFTER
subscribe: a push frame is written from its segments, one vectored write per producer, and its T stamp is the instant it was read
subscribe: review fixes for one vectored write per producer: the gather raises no SIGPIPE, Windows gathers, and a T may step back
screen: the styled gather and cell read each cell once off one held row, and a complex cell's text is appended without an allocation
screen: an inline image is base64-encoded once while it stays on screen, and each image is written straight into the frame
screen: review fixes for the image payload memo and the one-held-row gather: a batch never evicts an entry it found already kept, and cell_grapheme has no row-sweep twin
control: subscription lanes grow on demand up to a share of the descriptor limit, not a fixed four
verb table: sub-forms are row data; framing_of and the artifact ACK project from it
control: authority, lanes, --json and help read each request's form off the verb table
control specs: update's owner-only rule is stated again, and the front-drive row names scope_holds_need
control: a request line is parsed once by one shared grammar, and its selector resolved once
control: the subscribe handler serves the request its lane parsed, and a sid is lower-case hex
control: one router serves each verb class once; owner verbs need no terminal and @<sid> panes aims
control: @<sid> subscribe's usage is one line, and owner_aim alone decides which owner verbs need a terminal
control: a driven write records its licence fence on the session, and each window applies it before it arms or judges a licence
control: the licence fence's frame tests press through the real input seam and pin the switch's own close
verb table: each verb's input class is a column, and every input gate reads its flag there
control: every input request passes one admission in one order, and its route is chosen once
control: review fixes for the one input admission: a frame test pins the lease before the gate, and the specs and help name C6b's shapes
control: a forward reaches the instance hosting a session with that instance's own token, its connect is the only liveness look, and its relay borrows both streams
aterm ctl: a request naming @<sid> dials the instance hosting that session, and a graph entry's socket is dialled only by the connect that carries the request
aterm ctl: review fixes for dialling a session's host: a host that took the request is the call's, even when cast drift reconnects
supervise transport: RelayCtl keeps one connection per instance, and a request naming a session goes to that session's host
control: an artifact's handoff rides its connection's outbox, and the parker awaits its acknowledgement
control: artifact captures admit against two budgets of their own, and a quarantined path capture no longer refuses --bytes
verb table: the frozen pre-table copies leave, and the table's own tests pin every sub-form
control host: the SessionHost trait carries no input sink or placements, and GuiHost resolves a selector through the dispatcher's lookup
control specs: image-reply-encoding takes the budget prepare_image_target admits against
integration: the metrics routing test reaches the JSON form through the dispatch's json_ask
integration: the reply-fidelity test module carries no doc for the removed connect_and_relay
integration: the forward-handshake model names the code it binds to
integration: the verb table reads a form past the App lane's unread=ok
integration: the glance and need-publish instruments publish what they keep
integration: our tests read main's search header, clears, grammar and writers
integration: docs name the merged provision and task wake
integration: no replay fork past a resize whose hand-back stands
integration: the replay-fork test states where a fork must be refused
integration: the session log's entry cost counts the shared record
integration: a lifted timeline hold is drained on the next liveness pass
integration: a close wakes its watchers once its closed log is linked
integration: line's ERR unreadable has its test and spec statements again
integration: privacy spec rows cite the tests main kept
integration: grammar rows state the merged selector and leading options
integration: comments name only tests and mechanisms that exist
integration: the consent wake doc names the wake census
integration: aterm-gui and the libraries it reaches lint clean under tippy
integration: Slots::used builds only beside its callers; the cleanup queue test pins its limit
integration: App-verb docs name every aimed verb and the window-surface drives
control: edit and await edit post their requests as counted main-thread hops
integration: dispatch rows and docs name the merged tombstones, escalations and routing
session log: the owed wake's doc names the watchers it rings and where
control: a write handed to the ordered writer waits in the one park
control: a request's own words are told before the unread-input gate
control: an over-cap screen read reuses its snapshot and gathers again only for pictures
subscribe: an events watch's reads are paced under an output flood
integration: SPECS rows cite the merged park, beat, startup split and replay fork
control verbs: the input-class, framing and selector rows state the merged table
trust: aterm-search's floor follows the merged tree (171/520)
supervise: the relay-connection row names the preferred token's one retry
integration: search-note, hangup and fabric-record docs state the merged code
integration: a replay fork continues its source's restore lineage, not one of its own
integration: restore conformance holds the screen to the live engine and the lineage bit to its rule
integration: a deferred shed replacement's retry is checked against its own try, not a later clock read
integration: the bench-support build compiles its capture path again
integration: crash-restore's visible() drops the lineage bit through the seam
metrics: a stale fx sample can no longer lower the base a reset takes
SPECS: m-reset-window states the fx sample Metrics::reset takes first
SPECS: devtool-list-probe-gate states the list probe main's … rebuilt
integration: the keeper live tests connect to a recovered instance once its recovery-count fence lifts
control: the recovery-count gate is named first in the gate order and among the retryable errors
Tests keep a directory of exec'd copies until each copy showed it ran
Abrew: help text catches up with rounds 33-39
aterm-lab meta-keys: measure German and French as well as U.S., rows derived from each layout
aterm-lab sys::tis: build an Owned only for a non-null reference
crash_restore test: a clear makes the worker due at once, not at exactly now
ATERM-KI-1015-9: Meta mode types what a layout reaches only with Option; the layouts lane puts each layout back
aterm-lab: the bookkeeping fns take input_sources::Pref; is_multiple_of (tippy)
Retire unsent keeper lifecycles and fence waited admission
Declare the keeper receipt fixture scratch dependency
handoff fixtures: every carried field and variant is held strictly; closes ATERM-KI-1015-2
Abrew: known delegated brew verbs are not "unknown commands"
control tests: the feed-bin routed helper is unix's, as every test that calls it
gpu: the GL arm answers no virtual snapshot size
effects: the harness card on fx layers, held to its quad oracle (card engine B3)
Migrate the harness card to retained layers with bounded art admission
gui: the harness card host on fx layers (card engine B3)
gui, bench: card seed= pins the card's constellation; the effects bench drives fx layers
gpu: the harness card's layers are byte-exact on the GPU (card engine B3)
Expose card layer observations only to sibling fixtures
Bound pet exclusion span search over public geometry

Truncated to fit GitHub's release-body limit — the complete note is release-notes/v0.108.0.md in this release's source tree.

Source release. SHA256SUMS is a per-file manifest of the released tree, with a detached Ed25519 signature (SHA256SUMS.sig) by a machine key named in the attached master-signed roster (aterm-machines.toml + .sig). Verification chain and key inventory: SIGNING.md in the publication engine; the roster pin is committed in aterm crates/aterm-update-core/src/pins.rs.

Navigation Menu

Repository navigation

aterm v0.108.0

Choose a tag to compare

Sorry, something went wrong.

Sorry, something went wrong.

Uh oh!

No results found

aterm v0.108.0

Features

Fixes

Security

Tests

Docs

Other

Uh oh!