aterm v0.145.0

2026-10-27 · 956 changes since v0.144.0

Features

abrew: plain cask uninstall runs trash/rmdir stanza directives (r144)
abrew: info HEAD/Options/Analytics, cask Requirements/Languages/Caveats, DeprecateDisable messages (r145)
abrew: home opens homepages, info --github, brew unavailable errors (r146)
abrew: brew resolution/not-installed errors across commands (r147)
abrew: install unknown-name search flow (r148)
abrew: brew Invalid-usage errors, command aliases, unknown-command text (r149)
abrew: info --installed, brew disk-usage math, link/list forms (r150)
abrew: tap-aware search and tap-info --json/--installed (r151)
add vault foundation and notary provisioning
converge the default ALab fleet
abrew: info --verbose (keg details, binaries, full analytics, bottle sizes) (r152)
abrew: assembled formula caveats + local-bottle info parity (r153)
abrew: brew-identical help under the brew reroute (r155)
abrew: terminal styling — brew colors, status glyphs, ls columns (r156)
release: ship pin-verifier --from-release, bound to the signed appcast
rewind: carry transient engine state, policy, schemes, and cell_px across pane checks (ATERM-KI-1026-2)

Fixes

harness: retain account controls through restart admission
accounts: check shared authority under the account writer
accounts: recheck recovery evidence under each writer
accounts: require vendor login files at recovery publication
accounts: bind Kimi recovery checkpoints to their region
accounts: retain the writer through renewal snapshot handoff
accounts: recheck staged credentials at publication
supervise: a tape answers a word-carrying wait by the bare wait it recorded
route fleet publish and sync
terminate fleet command reports
preserve fleet leave and settings behavior
abrew: quiet SIGPIPE, sibling keg rows in info, scheme ordering (r154)
windows: wire JobsReader and process_path on Win32; escape Agy history.jsonl workspace paths (ATERM-KI-1023-3)
tests, docs: escape Path JSON fixtures for Windows; retire closed ATERM-KI-1023-2
trail: keep the hand at a generic boundary in an agent's composer
abrew: brew two-line upgrade message, more tty headings (r157)
agent, verify, lab, uds: close adversarial review gaps and verify linux regressions
agent, verify, lab: preserve literal '+' in RFC 3986 callback queries, BSD chmod operands, and compile-failure accounting
abrew: outdated verbose on a terminal, search name styling (r158)
services: fseventsd memory is early detection plus one-press repair; no prevention exists
services: hold the watch's lock on Windows too
abrew: keep tty unit tests PTY-independent and drop duplicate ==> in upgrade pinned header
abrew: bold doctor preamble, ohai cleanup summary (r160)
cache: keep uncertain lock scans from authorizing target removal
abrew: global switches, leading -v rotation, desc styling (r161)
abrew: bundled short switches expand like OptionParser (r162)
atpkg: refuse an index that breaks the publisher's pin and repo rules
atpkg: hold a repo switch to every target cell, and never rewind the succession record
release: pin-verifier --from-release honours the channel's floor and the client chain
abrew: deps --graph opens GraphvizOnline natively (r164)
abrew: kind-switch conflicts are brew usage errors; flagged pin/unpin (r165)
abrew: named list --pinned, remaining list conflicts (r166)
harness, uds: harden foreign_db, sqlite_read, asleep, and codex OAuth edge cases
abrew: link/unlink kind switches and cask resolution shapes (r167)
tests: no wall-clock budget on a wait that must happen; two load races fixed in product
trail: typing in Claude's vim INSERT again lights the trail
gui: boundary-guard handoff error compiles off-unix
abrew: log kind switches, cask-aware install records (r168)
abrew: list/search both-kind-switch semantics match brew (r169)
abrew: cat shows core source without its bottle block (r171)
abrew: formula install narration in brew 7's order (r172)
clt_shim: non-Unix exec arm avoids the disallowed std::process::Command
clt_shim: gate the gui Path import to Unix (win cells clean)
abrew: install confirmation prompt, ask mode default (r173)
abrew: upgrade narration phases and prompt (r174)

Performance

effects: eliminate Cell memos, precompute droplet bands, and share luminance tables (Batches 271-274)
effects: eliminate status/report allocations and inline momentum/baker helpers

Tests

creation: the refusing fake server owns its answers without to_vec
distinguish lock admission from diagnostic paths
handoff: v0.144.0's producer fixtures, written by its own cut
the Linux lane runs aterm, aterm-agent and shell-integration tests as Linux behaves
accounts: isolate renewal generation changes
hang detectors that wait on progress, a qos read of a parked worker, scratches that always go
accounts: verify shared checkpoint failure recovery
supervise: the usage-wall and account-rotation walks hold the resume to the cleared line
aterm: the live weekly-wall resumes submit the cleared line
cache: retain an obsolete target with a directory at a cargo-lock pathname
kitty: the footer seat law also judges a mode row with no job, and the cat never sits on the words
hold what the wall-clock budgets stood for, and the busy detach's other end
a wait for what must happen is a hang detector, not a latency budget
keep what …'s waits discriminated, with no latency budget
the waits left out of the hang-detector sweep are deterministic now

Docs

say what is true of the wgpu-oracle lane after GW6
ORACLE-ADAPTER's comments say what holds the untwinned frames
the needle's frames at the effect lane's real intervals, pinned by a test
the owed relaunch in the changelog and the upgrade help
record the second real switch run; date the runs by the Mac's clock

Other

aterm-lab: windows uia records what a UIA client sees of aterm-gui
aterm-a11y: the UIA provider is hand-written COM on aterm-win32
stats: dedicated Network lens, immediate hot load bloom, and wake coalescing
aterm-secrets: alab_role is Unix-only, as the server module it reads
aterm-spec-macros: an anchor's record goes in its fn's body
aterm-secrets: Retired::names and three cli tests are Unix-only
stats, secrets, changelog: thermal core ramp in lens/sill, win ALAB_VAULT fix, and release notes
abrew: commands mirrors brew's inventory; tap-info speaks brew (r133)
init: repositories by default without init.toml or gh; aterm init on Linux (INIT-7, INIT-9)
init review: a clone the read-back cannot verify stays missing; at most four staging dirs; Linux help (INIT-7, INIT-9)
init on Linux: an unreachable vault host is no vault here at once, not macOS's question (INIT-9)
init review: the Repositories label says your own repositories; Linux comments (INIT-7, INIT-9)
Fence quota observations to their captured account policy
cells(win): fix Windows proc-macro anchor placement and Unix-only secrets cfg gates
abrew: doctor speaks brew findings; cleanup prunes broken links (r134)
atpkg: abrew doctor asks the platform layer whether a prefix dir is writable
aterm-effects: the shared evaluator judges each pair once; the grid search runs on threads
WIP: unfinished fixer work, cut off by an API overload (not reviewed)
aterm-gui: an open completion list packs only as tight as the file needs
aterm-effects: the memo's own test holds a threaded judgment to a fresh serial one
aterm-gui: the editor layout spec row says how an open list packs
aterm-effects: the memo's test holds a replaced scenario to a fresh judgment too
abrew: search gains brew's MissingFormula and regex footnotes (r135)
abrew: info --json matches brew's API-mode to_hash (r136)
Bind transcript and tap usage to captured account sources
Include the account directory in usage writer failures
Settings rows: a choice's default mark never moves its row
Settings rows: the line a row keeps for its state says Default at rest
Settings status: a press's status is weighed wherever the dock rule would put it
Settings rows: a stacked row's second line comes after its control
Settings: Tab reads a status over the list where it stands
Settings rows: a stacked row's second line comes before its Reset's line
Settings rows: a row split across stops keeps its Reset's line after its words
Settings rows: where a row's state goes is weighed by every value it offers
Settings: a press on the list's last screen, or on a split segment, holds its place
Bind transcript quota reads to the captured process
Keep the drawing-delay fixture within one process lifetime
Use a match guard for brew placeholder strings
Vault join: a Mac waiting on a vault at a path names the approve that works
init: a join that fails after saving the vault still installs the subscriber
init: only a save of the chosen vault counts as the failed join's
harness: a submodule checkout that only lags its record is no uncommitted work
harness upgrade help: name what a quiet move can still type
abrew: collapse placeholder guard into match (lint)
Normalize observations with the snapshot's kernel image reader
Format the process observation regressions
Keep a quota fixture's process start fixed as its clock advances
sysprobe, vitals-host, effects, atpkg: hostile-review edge fixes and win cell
cells(win): gate Unix-only vault approve_command test in aterm-secrets
Secrets server: the ALab role builds off unix and needs a follower Mac
service: the launchd-only helpers build only where install_launchd does
sim B05: the simulated broker retains and cuts its log by astream's own planner
sim B05: the worlds cut their broker's log by astream's planner, and the bridge reads a record back before it publishes again past a cut
aterm-link B05: a pin keeps the head it was made at, so a retry never takes a sender's earlier post of the same words for its own
aterm-link B05: the sim's broker reads a told reader's fetch as astream's does
aterm-link B05: a read back that hits a subject's floor reads again told, so a held record is found
aterm-link B05: the worlds draw an older build's open; astream keeps the newest stamp
aterm-link B05: a move before an auto mirror's hello drops the pinned batch on disk
aterm-link B05 review: heads out of every strict text form, claims, the fork, the mirror's drop and wait
vendor/astream bf2e951: B05 landed in astream; the sim follows astream's broker times and stats; the review's controls find their seeds
abrew: uses learns brew's tag filters and expand cache (r137)
supervise: test a live upgrade moving a continued job at its turn end
Bind account decisions and move completion to observed processes
Keep synthetic account snapshots consistent with their environments
Format account process observation regressions
Verify account refusals preserve durable images
B12: tell a session what retention gave up under the bridge's own reads of its lane
B12: tests, negative controls and docs for the scoped give-up
B12: trustfmt the new tests, and the two lints tippy named (a manual Option::map, a cloned slice)
B12 review: keep a session's lane give-up apart from the node's
B12 review: the deadline sweep does tell a session with no seen watermark
sim: scope a told link gap as aterm does, so a lane's give-up covers only its session
harness: a lagging submodule is one at a commit its repository recorded before
Vault creation: a first version the vault refuses retires the attempt
Vault transport: only macOS reads no route to a LAN host as its gate
Vault creation: a refusal after an unheard attempt keeps the creation
Waive UsageSource's case-selection actions so spec_xref_closure passes
abrew: deps rebuilt on the shared expander (r138)
abrew: linkage skips weak-loaded dylibs like brew (r139)
aterm-link: the held-back take's test reads its instant and wait as of before the take
effects, vitals: close coalesced space+word/margin-box wrap gaps and strip history invariants
spec anchors: the proc macros record inside the fn body, so a trait impl method takes one
aterm-gui: waiver carriers go before the test module
aterm-gui: four more waiver carriers go before the test module
prism-glass P0.8: pin GPU parity for a ramp row whose ends differ in opacity
Retain delayed account completions until durable publication
cursor trail looks8: letters, clears, rails and the widened gallery
cursor trail looks8 K9: the in-row rail is laid whole under a held row
cursor trail looks8 K9: the in-row rail is a foot rail, parted round descenders
aterm-lab trail-gallery: a split's frames are judged on the caret's pane
cursor trail looks8: the letter under the caret reads; a clear counts from home
aterm-effects: trails and companions, looks8 round 2's must-fix items
aterm-effects: the paper crown changes only its olive hues; a test for the train's olive
aterm-effects: the cat reads an Enter from its echo, springs off the wall at once, perches only off the caret's row
aterm-effects: a cat over the line's last letters at the Enter watches from the line
aterm-effects: the paper Return's stick steps from gold to green at a hard edge
aterm-agent: a release build has Store::bounded_by, which the host's roster read calls
aterm-effects: the letter guard keeps Classic's paper face to the letter bar
aterm-effects: the dark landing ring passes under the letters
aterm-effects: the dark ring's rim runs on under the letters at a fifth of its light
aterm-effects: name the window box the companion's slice keep-out note takes
kitty pet: the burst never lays the cat on its letters (looks8 round 3, K1)
kitty pet: the first keys read the letter map; the burst replay runs to the landing
cursor glow: the dark landing ring shows as a ring or not at all (looks8 round 3)
cursor glow: dark Comet shows its nucleus and dust, dark Water its drops (looks8 round 3, K4)
kitty pet: the first keys' spring leads without looking back or flying back (looks8 round 3, K1)
settings preview: a mote of the submitted line's dust is no sweep along the prompt's row
kitty pet: a short pane's wrap bound waits on the line's top (looks8 round 3, K1 split)
companion_off_letters: the survey reads the split's burst too
trail looks8: fix the round-3 review's findings
trail looks8: the move-up companion keeps off NORMAL; dark Comet's dust stays whole at the grid's edge
verify: keep managed test and stage pools within their CPU grant
ai: the usage tap's --settings keeps a relaunched Claude Code's level
ai: --resume's value is optional, and a relaunch's allow flag names no level
Record rotation initiation before restart and share durable completion
prism-glass P0.7: light hosts, every trail law family also reads on light
abrew: fetch bottle manifests; quiet curl off-tty (r140)
Resume Codex after clean shutdown removes its writer lock
abrew: deps --include-requirements; cask deps are requirements (r141)
aterm-gpu: hold every arm's frames to a record of wgpu's
aterm-verify, aterm-lab: gpu-oracle holds the frame record; no --wgpu-oracle
aterm-gpu: delete wgpu, its oracle and the facades only it held
aterm-lab: the Windows copy prunes the folders its removals empty
aterm-verify: run gpu-oracle on the test run's build
aterm-gpu: record wgpu's video take, EDR, blit and crown frames before it goes
stats lens & trail sound: fix link bit-rate units, trace rule collisions, compact totals, and sample-rate DC filter
stats_lens & rainbow_kitty_v2: format edition 2024 and pass SEED to TrailSynth::new
trail_sound: set DC_BLOCK_HZ to 40 Hz to preserve ramp-settling time constant
permissions: one walk through macOS's grants; doctor and init hand theirs to it (PERM-2, PERM-3)
permission walk: hand debugger access to System State's step, never the row's press door
permissions walk: build off macOS (Linux and Windows cells)
permission walk review: the start reads its markers last and once, holds back a Not now, waits out another gesture; clients check the walk names their pages
permission walk: the debugger only while System State's step is to come, named or not; the design doc says what the review changed
permission walk: a list reading that comes back after its page turned ticks no other page
Fence account rotation writes with their observed policy
Record account policy verification results
prism-glass P0.10: the owner's relayout shape and tall cohorts, pinned at HEAD
prism-glass P0.12: the trail-dark-composer and trail-light-composer perf lanes
prism-glass P0.12: record the trail composer lanes' baselines from main
Bound Apple provisioning helper commands
harness: a lagging submodule is one this checkout's HEAD recorded as it moved
aterm-window: delete the opt-in rwh_06 handles; raw-window-handle leaves the lock
F5/C7 (ROBUST-1, ROBUST-2): the journal holds its pause under the free floor, and only a landed write notes records journaled
F5/C13 (ROBUST-3): a session log cursor can name its log (base=), and one naming another log resets
F5 review (C7, C13): a take marks its records journaled and a failed write gives them back without the lock; an uncarried adoption takes its base from the allocator
F5 review: format the uncarried adoption's epoch pin (targo verify fmt --fix)
fleet: one resolver names a peer's word across the book and its copy, for every verb
fleet allow drive: every refusal comes from what the grant reads under the book's lock
aterm ctl --host await task: a peer that stops answering is asked until the timeout, and named
fleet: a word names every peer fleet peers lists, a hand entry elsewhere among them
fleet allow drive: a read made under what the lock finds moved is made again
aterm ctl --host await task: a peer silent past the baseline is asked again too, and a wait with no timeout ends
Keep deferred account work in its originating context
prism-glass P0.13: lab trail-census, the layer-by-layer census of a trail frame
Spec anchors: the proc macros and the macro_rules! attributes take the same items and book the same records
abrew: native zap and uninstall --zap for file-only stanzas (r142)
fabric endpoint: the log clock is astream-wire's LogIdentity, not a string (B21)
fab-log-lineage: a session between was= and the clock keeps below f too (B21 review)
fabric test: the between-case label fits one formatted line
prism-glass P0.3: state-word seams and the arm report (debug only)
harness: bind account replies to their observed move
harness: fence session attribution by the observed local process
prism-glass P0.11: re-ground the marks evidence and the §10.3 dark pin list
kitty: the cat leaves the margin when the line has wrapped, never on a guess
kitty: the margin is taken by the hand's writing, not only its rhythm
aterm-effects SPECS: the margin's rules after r23 K6
kitty: a hop the writing's wrap overtakes comes down on its seat
kitty: the margin's rest seat holds two rows under and reaches two over
aterm-effects SPECS: looks8's early leave went with the leap ahead
atpkg: a zap stanza's parent is checked by the platform's writability probe
Let the cursor kitty cross words in front of them one leg in three
Show nag mode's mascot on the menu-bar button, crazier per need
Deal a front pass only while nothing is being written
Show active descendants of quiet agent calls
Validate generations before crediting descendant activity
harness upgrade status: a phase-less document is no unreadable record
Waive AccountResponse's and AccountSessionAttribution's staged environment so spec_xref_closure passes
aterm-release: the publisher fence reads its boot through astream-sys
Cargo.lock: aterm-release depends on astream-sys directly
aterm-release: trustfmt the boot round-trip test
aterm-release: a fence naming its boot by id is fence-format 3 (B24 review)
boot ids: aterm-agent, aterm-caffeine and aterm-link write them with astream's boot_id_text
aterm-release: the format test reads the fence this binary writes, not a constant
Settings lists: no screen draws nothing; a stop taller than the room is stepped through
Themes: the chooser's frame gives way, and its toolbar scrolls away where no rung fits a row
Settings Messages: entries fit the least windows, or are held a part at a time
Settings: a choice glossed in parentheses shows its value alone where the gloss does not fit
Settings: the toolbar a short window's list leads with spans the window, as it does pinned
Themes: the open Community section keeps its name over its rows in narrow windows
Settings status: a press's status never sheds the chrome or stands over the page
Settings lists: the least-window sweep keeps a named record per control; a tall entry's stops end by <
Settings Messages: where no day's heading can stand over an entry, each entry's time says its day
Themes: a filter listed with the rows is one stop of the list for the arrows and page keys
Settings Messages: the wheel and the page keys step through the keyboard's entry
Settings lists: a control taller than the room starts its group bare, its caption on the landing before
Settings: a choice whose words would stand taller than its list takes its short words
Settings lists: no step through a tall stop shows only a sliver more
Settings status: a dock takes its height over the toolbar it stands in, the icon toolbar too
Settings Messages: each entry's time takes the fewest words that hold its line
Settings Messages: no part of an entry taller than the room is a sliver
Bind account move receipts to the full captured process context
Waive AccountProcessContext's case selection so spec_xref_closure passes
autopilot: Cruise never parks (owner ruling 2026-10-26)
Commit account fallback only for the current local context
Make account return model environment steps explicit
Claude Code's permission pill reads yolo or nag mode
fabric bench: the ask scenario, what agents and people wait on (B11)
fabric README and bench doc: what the ask scenario runs and what its numbers mean (B11)
fabric bench ask: a task reply is awaited as the note it is delivered as; the idle leg's census per post with its flushes
fabric bench ask: the asked and deadline tables read at every leg's start
fabric bench ask: the person leg without and with its pager; the grace and tables read from aterm-link (B11 review)
fabric ledger + README: the ask set re-taken with the pager split out, -185..-192 (B11 review)
Guard local account bookkeeping with its captured authentication context
System State: look for the ALab vault per reason; an absent vault never holds Repositories; a code join waits 0 s (SECR-5, SECR-6)
System State: the ALab watch's focus and network wakes look only when they can show something new; a Mac with no token waits for the vault's (SECR-5/6 review)
aterm-effects: OldPath::ALL only where its test seam is built
status item: a test reads every nag stage as an icon for the bar
ship provision: release.engine-reach lists the engine's addresses for aterm
Preserve current account advice through stale results and busy retries
aterm-vitals: the multi-scale spec reads newest first, now at x = 0
stats deck planner: the % column between the well and the strip, header mirrored
stats deck painter: now at the left, the fine band slides right time-true
stats deck words: newest first, now at the left, in every word that said the right
stats deck header: the beat ring clears "now", the line clears the well
stats deck live edge: Full glides a slot from the reading, evenly; no frame draws nothing new
stats deck docs: record the 2 pt slide as a ruling; FOLD_SLOT_S is no lever
stats lens: the Cells legend's one line reads from live now
stats deck: stop cutting one-second cells nothing draws
stats live docs: what a glide frame carries, exactly
stats deck: every % draws its scope bar, under the figure where no column fits
stats deck: every scope shows its own ink in the bar under the %
stats deck: the bar under the % shows every scope above zero, equal shares too
stats deck: the bar under the % keeps its gap below the digits at 1x
stats lens: How to read says the line under each % is the bar
stats plan: Rows::under says the painter may draw its line shorter
aterm-gpu: hold the frame record's arm to its CPU twins on any adapter
aterm-verify: gpu-oracle runs the twin test and names its verdict
aterm-gpu: the frame record's half-float destination is no dead code on GL
effects: replace iterator and try_from overhead in aos_momentum, cursor_glow, and pet_world
aterm-link: an inbox commit rides the bridge's next write (critic item B08)
aterm-link: wrap B08's three doc lines past the 100-column measure
aterm-link: hold the inbox commit only while one is due, and not across bus items (B08 review)
aterm-link: IDLE_ACK_GRACE's doc names the held inbox commit it also bounds (B08)
Make a new secrets vault open: its admin's subscriber lets in every machine that asks
Build password-admission tests on a password vault now that create opens one
Say how the finished vault admits after create, and close the review's gaps
stats gauge: cut the lit arc, its glow and the print on a fixed lattice
stats deck: the dial's needle rides its own critically damped spring
stats deck: needle frames in the live gallery, and a bench of what a live frame costs
stats deck: satisfy tippy's is_multiple_of in the needle test, and say the needle's cost exactly
stats deck: a window never draws the needle back where it stood
measure spin: the pet row bounds the dial's needle lane too
stats dial: the glow is stacked arcs, so it neither beads nor pops in
tray raster: an arc skips the pixels off its annulus before its angle
deck_frame_cost: time a cool needle under a soaked bezel and with the lens open
tray raster: an arc visits only its rows' runs beside the ring's hole
tray raster: clip both of an arc's row runs to the region
stats deck: App::deck_live and Needle::frame_at are the tests' own
aterm-effects: the letter guard follows what moved and weighs a cell for less
aterm-effects: a test holds the guard mask's near-dim reuse to a fresh reading
aterm-effects: format the near-dim reuse test
abrew: the writable-directory reads use the platform's one
Fence snapshot publication by captured state and account generation
aterm-effects: promote const fn helpers and inline char-slice tone classification and loop paths (batch 254)
aterm-effects: inline hot loops, eliminate temp Vecs, and promote const fns (Batches 255-256)
measure spin: the pet row bounds the dial's needle at 20 frames, as measured at the desk
verify: a dev run's lint checks one cross cell per other OS the change builds in
init: another account's Rust docs are read from that account's own folders
fleet: on Linux a stopped aterm is named as stopped
amacs: the command prompt leaves the document where it was scrolled
aterm-gui: Settings and native pages fit Linux's faces; tests hold each platform's metrics
atpkg: abrew's writable-parent test builds on Windows again
aterm-gui: the stats deck's unix-only test helpers are unix-only
aterm-effects: promote letter_guard and caret_letter helpers to const fn and inline hot loops
aterm-effects: promote night_ground and state_words helpers to const fn and eliminate night_palette allocation
verify, shell-integration: detach piped test shells from /dev/tty and scope ENOSPC attribution
aterm-effects: eliminate state_words heap allocations and inline Option combinators
aterm-effects: promote hue-path helpers, dark_mark, StarCall, glow_ramps, and ink_ledger helpers to const fn
fleet: a peer word gets one answer from every verb, copy of the issuer's book or none
ctl: an await leg ctl's --timeout cuts unserved ends as unanswered (75)
net: a drive's deadline hang-up reads as that deadline, never as the peer's cut
fleet: a word naming the issuer is read over its book afresh, old copy or none
net: the watchdog's fired is built only where its one caller is
F6/C10 (LOOP-5, LOOP-4): a post the bridge retires is logged with the reason its client was told
F6/C6 (PRIV-3): the brief tier test feeds raw bodies through the real ingest, and the text brief's mark line has its own test
F6 lander (LOOP-5 review): aterm's own retirements are pinned by=aterm, and help post's reasons are read from its quoted replies
Bind account restarts to selected process and target identity
Stage simulated account exits after restart admission
aterm-effects: promote letter_guard helpers to const fn and hoist ramp mask-cut channel setup
lab mac nux: an init that exits nonzero names the rows it left open
tray_raster: a ring rasters only its band, and a clear ink nothing
tray_raster: format the ring test's clear-ink assertion
Rewind R1 review fixes: export scrub, the write grant, split characters, restore paint
Serialize verifier stages that open desktop windows
Stop a fresh approver showing Macs an open vault let go as asking to join
Begin the code-only seed once per approver record, not at each start
Seed from keys newly named code-only, and name a let-go key on every vault
Exempt only a Mac shown at the version just before, and bound the record by the vault's size
stats deck: the live now box takes the strip's own inks, never the accent's
Nag mode's mascot: the unhinged scold from every kitchen and review
lab mac nux: a --check run's planned rows are the ones it left open
fabric bench: each latency round trip waits for its inbox commit itself
fabric bench: hold each commit to the head read before the next post, and poll the head, not the log lock
fabric bench docs: a next-record check cannot fail on a carried commit, the pin, and the head gate's tier
aterm-effects: promote hot-path closures across emitters and utilities to const fn
aterm-effects: promote bed, momentum, harness_card, console_life, and stardust helpers to const fn
Refuse shallow history when numbering publications
aterm-effects: promote probe, scroll, letter_guard, witness, and spec helpers to const fn
rustup: one finder, the TOOLS row; verify provision places a pinned copy, never the keg
rustup, closed: SPECS rows, the acceptance record, design §8 and S9, CONTRIBUTING, CHANGELOG
rustup row: installs never self-update into CARGO_HOME; PATH skips non-executables
rustup, closed: the review's measurements, and docs that say what the row does
aterm-vz: V5, the helper's lifetime as a model bound to the code; the helper holds its connections
vz V5: the review's fixes (a finished bake's seal, Connect only once Ready, the hard stop's timeout, the late wrong hello, every detector bound)
harness: read ps's terminal as a device number, not a devname(3) scan
spare FIFO: the release's wake is close-on-fork, so a fork cannot hold the shell from its end
harness host tests: the ring count owns its conversation; the gate waits for the run
handoff test: the stopped candidate is stopped by the test, not by its own script
deflake: hand back a resumed job's death no edge saw; read fabric status as one moment
deflake review: a hang detector that a spin trips, missed edges judged by their rule, ps's tdev
linux lane: the Orca rows have Mutter's frames client on the registry before aterm-gui starts
linux lane: the Orca rows' frames wait comes before Orca too, and the primer is shown closed
atpkg-publish: a pack declares the smallest window that holds its tar
atpkg-publish: pin the fitted window under 2^27; two docs name the fitted frame
install_sh tests: Scratch::path allows dead code off macOS (linux-arm cell warning)
verify: admit an absent first-run records directory
Prepare commit-aware fabric benchmark census
prism-glass P0.4: the dump's rig, a headless App at an injected clock
prism-glass P0.4: the dump, aterm-gui's trail_dump example (H)
aterm-effects: promote cat_glyphs_codegen and aos_momentum helpers to const fn and while loops
Mark a key let go from a closed vault as let go, never as code only
acaffiene: keep the Mac awake in every aterm build
aterm-release: ship trust run takes --reason, as trust judge does
aterm-release: aterm-phase's Trust floor 810/4577 -> 1186/6472, aterm-agent-names' first 2/10
aterm-release: a re-base onto a prover with no ceiling is not withheld for its floor's
aterm-release: aterm-dbus's Trust floor re-based onto …, 141/422 -> 136/535
doctor and init wait for the install pass; launch sets stale leftovers aside (DOC-5)
DOC-5 review: wait for the pass only when a repair needs the store; launch repairs leave the store lock free
control: await idle|seq|gone|agent take autopilot=<word> (slice 10a, server)
Land's instruction waits no back-off (v6 §14.10, slice 10a: policy and model)
supervise: a switch of the Autopilot word wakes the loop at rest, and Land's instruction waits no back-off (v6 §14.10, slice 10a)
supervise: the word edge asks no read of its own (slice 10a, integration)
supervise: a switch made while the agent works is seen at its point (slice 10a)
F7/C12 (BUS-1): aterm fabric status reads the in lanes told, so an ask retention holds below their oldest is listed overdue
F7/C12 review (BUS-1): status judges a held ask only on the verdicts the bus keeps, so an answered ask whose answer retention gave up is not listed overdue
aterm-containment: keep Seatbelt scratch HOME outside /tmp and $TMPDIR
harness: an owed relaunch line is held only by keys typed after aterm's own end
harness host: a restart carry held by keys is tried again once they let go
harness upgrade: a conversation someone else resumed closes as theirs, never adopted
aterm-models-harness: an end aterm made is relaunched or adopted
harness: the owed relaunch line waits on its end's own gate; review fixes
harness: owed relaunch lines keep their stop's grace in every lane and follow a moved shell
Format the owed-relaunch tests as verify fmt --fix leaves them
harness: a moved shell whose line cannot take a cd waits for it, never ends the relaunch
Reserve cold verifier disk from the current measured footprint
Give mirror fixture I/O the standard hang bound
Keep mirror fixture formatting at the crate edition
fabric_bench: compare the arms' broker options by reference
upgrade_status test: the word's time is bounded by the call, not by five seconds
Require retained PNG frames in the Linux proof
disk ask: read the disk worker's rise from its claim's free figure
holders: a debug build's disk scans can read only its lab jail's processes
lab disk-ask: --scenario worker runs aterm's disk worker end to end
lab disk-ask: wait for a tab's whole rm before reading its target/
lab disk-ask: a borrowed slice in the stub test, as tippy asks
aterm-agent: decline a disk worker's unprovable read with its real reason, and have it run pwd first
lab disk-ask: prove the worker writes its own snapshot, the verb's root fence, an exact rise and one worker
aterm-agent: a refusal holding exactly the decline's text is the decline's, whatever its words
aterm-agent: decline a disk worker's verb drawn on two rows with that reason and a one-row remedy
lab disk-ask: the worker frees the outside paths whole (declined, two rows), then under ~ on one row
aterm-effects: promote emit/bed/aos_momentum helpers to const fn and remove per-frame allocations
Recheck Commons repair policy after opening the control session
Recognize the measured Codex 13764 session logs
harness versions: one line per harness, 0.4 for all six, a release gate and ship harness-bump
top rule: lay the harness from the rule's right end, label it "alab <cli> harness"
harness switch: the capsule sprite (Quiet glass, gem knob) under the top rule's words
top rule: a ⬆️ for a newer Claude Code build, pressed for the tab menu's Upgrade Now
mode row: Claude's jobs alone at column 0, yolo on the bottom rule's lights
bottom rule: no words for a value it does not know, and no upgrade note
bottom rule: the account shows its email's name alone at rest (J1)
bottom rule: the plan is off the rule at rest (J2)
bottom rule: Σ shows the runtime alone, its tokens in the hover (J3)
specs and changelog: the harness at the top rule's right end, the quiet rules
top rule: name Claude's top-effort tag by the primer's key, not its word
top rule: TopCli::from_timeline, TopUp::target_core, for the census and lint
top rule: rename TopCli's constructor itself to from_timeline
upgrade view: set_writer only where the ⬆️'s tests build (unix)
aterm-effects: add const asin_f32 and remove remaining libm calls and hot-path closures (batch 267)
Verify offline shared renewal against real root authority
lab: give each Codex proof model its own usage window
spare: a verification's escape-scan window ends at its listing (RECHECK-2)
Require creation receipts before driving Lima resources
Guard the owned guest cleanup operand
Exercise guest cleanup with a symlinked ownership marker
Refuse linked guest roots and markers explicitly
Durably publish Lima ownership receipts through the selected API
aterm-link F3: a read of one offset refused below its filter's oldest is read again told, never as no rows
aterm-link F3: a fetch of a record held below its lane's oldest answers the record, the told dial judged as the read, SPECS rows
aterm-link sim: two stale witnesses moved to seed 14 (stale on main too)
aterm-link F3 review: the told read is its own connection's, never the link's; lane reads below the oldest read told
aterm-link F3 review: the attach peeks the queue after its drain; the TellNoGap witness moved to seed 230
aterm-link F3 review: no peek after the attach's drain; the held read back's attach drops once, as above the oldest
muse weekly: read it from the host's usage refresh, no card needed
muse account: its own login in the account menu, never Claude's pool
cruise: done checks rotate concrete audit missions, never repeat
muse footer: model, effort and folder start off, not repeated
muse facts: exhaustive program matches and format
secrets: close the review's gaps in the ghost fix
secrets: a revoked Mac stays out when its old password comes back
aterm-effects: promote switch, card, comet, pet, and kitty helpers to const fn and hypot_f32/atan2_f32
Fence contested mailbox labels throughout discovery and lookup
prism-glass P0.5: lab trail-diff, the dark proof's differential (H)
Apply mailbox conflict context to explicit overrides
stats deck: the meters other than the dial say plain facts
review fixes: a band's row walk with slack and no overflow; a pwd remedy that cannot loop
tray_raster: the past-any-column test passes its one prim by slice::from_ref, as tippy asks
aterm-effects: replace hot-path closure helpers in streak, flash, tricks, glow, and ribbon
Define read-only network and service observation projection
Observe shared account and secrets availability off the UI thread
Render native Network State cells below System Resources
Retain local authenticated network observations and bounded unverified presence
Only redraw visible network projections on observer updates
Show shared service observation age and revision in network details
Enable Network State Copy before resource sampling starts
Bound opaque presence and distinguish fresh authentication from repair success
Connect native Network State to background peer and service observations
Require active observation before painting a peer reachable
Expire stalled network observations before drawing current presence
Keep repair independent of observation storage and expose a read-only handle
Read network observations through the immutable observer interface
Keep passive account observation out of catalog enrollment
Scope observer preservation regression to application storage
Measure peer freshness from authentication rather than repair completion
Exercise private unfinished catalog storage in observer regression
Match Network State typography and label spacing to resource rows
Mark peer history unavailable when no observer can restore it
Report a missing retained network projection as a completed unavailable read
Use saturating contact time and keep observation helpers before tests
Reserve the complete deck in layout fixtures and cover network lens cycling
Extend keyboard and accessibility expectations to network cells
Test network state distinctions without pinning explanatory prose
System State: the page's 250 ms tick wakes the loop only while a run walks (SCR-3 fallback, §5.6)
Add read-only account progress projection contract
Observe attributed sign-in workers and retry clocks without running policy
Show observed account recovery progress in Claude composer facts
Distinguish busy login observation without blocking the GUI
Test account recovery notes independently of auto-rotation policy
Document busy observation and simplify route test input
Keep every footer fact clickable beside account recovery status
Keep limit recognition explicit and bound compact recovery labels
Keep recovery evidence when harness controls exhaust rule space
Exercise recovery visibility with crowded harness controls
Prioritize alternate sign-in findings over routine exclusions
Keep healthy account inventory compact without pending recovery wording
Keep the watching stage available in account details
Publish process-bound account recovery observations to the Claude footer
Add opt-in App capture gallery for account recovery fixtures
Attest snapshot process identity before publishing its birth
Keep recovery observations current across identity and policy changes
Display absolute account recovery event times instead of frozen countdowns
Label automatic account selection as permission rather than activity
Keep projected recovery wording consistent with observed work
Skip recovery reads when the captured process cannot be attested
Keep account observation exhaustive across agent variants
Expose pending human sign-in steps in account progress
Use the public account CLI type for sign-in instructions
Centralize opt-in file flush refusal policy
Guard file-flush opt-in against invalid stage opens
Cover portable storage-full file flush failures
Import the file-flush policy into its unit controls
supervise: a resume past a system message types one line (slice 12a, WIP)
supervise: blind tries of a limit's resume say it may have cleared (slice 12a, WIP tests)
supervise: a resume past a usage limit is one line (slice 12a)
lab: forever --mode switch and Land at once, judged (slice 10a's acceptance)
lab: test the switch mode's chains and the at-once fold
aterm-uds: lift PrivateLock, open_private_rw and read_owned_into; BookLock wraps PrivateLock (agh M2 WP0a, plan §4.3.1-§4.3.4)
amacs-protocol: move edit.rs and uri.rs out of amacs; aterm-ctl links no editor engine (agh M2 WP0a, plan §4.2, §4.3.5)
aterm-models-agh: AghEnsureOnce and AghGitGrant with their tier-0 suites (agh M2 WP0a, plan §4.4)
aterm-uds, amacs-protocol: WP0a review fixes (agh M2 WP0a, plan §4.3)
aterm-uds: private files made exactly 0600 under any umask; WP0a review round 2 (agh M2 WP0a, plan §4.3)
agh: the frozen M2 signatures, stubs and liveness root (agh M2 WP0b, plan §4.5, §4.6.0–§4.6.18)
census, models, astream README: agh M2's spawn rows, closure roots and journal row (agh M2 WP0b, plan §4.1 items 8–9, §4.9.2)
agh M2 WP0b: review fixes (journal why redacted, need keys refused, intent ids by step)
agh: restore main's one-line with_router doc; plan notes main's split private_file import
aos: fold trace checks and segment judgements without retaining frame quads
fabric bench: the attach world's backlog (B09), every session's refill watermark trailing the head
aterm-link: an attach refills its sessions in one read of the node's inbox (B09)
fabric ledger + README (B09): the attach backlog before the lever, the lever, and A B B A after it, -210..-217
aterm-link: the attach's shared refill hands its sessions on when it carries more than it saves, and reads a lane below the inbox's oldest only up to it (B09 review)
fabric ledger + README (B09 review): the fixed lever A' C C A', -221..-224, and the section's corrections
aterm-link (B09): the below-the-oldest lane read is a sim rule now; the bound counts the page
aterm-effects: promote search/geometry helpers to const fn and inline hot-loop closures (batch 270)
Keep a transcript limit visible while account advice is still idle
Describe an unprocessed transcript limit as waiting for advice
rainbow kitty: a drag over a path keeps the composer's trail lit
Resolve mailbox source precedence before deriving credential aliases
Account for repair policy fixture selectors in source closure
Format final waiting-state copy and record verification
Show retained network and service observations as absolute UTC times
Retain agent Off transitions until a matching host pass
aterm-win32-oracle: fetch when the frozen resolution fails, not when no source is unpacked
muse footer: an unrelated facts entry is not a mask choice
db repair policy: waive the three environment actions
db repair policy: drop duplicate environment waivers
secrets: every vault member joins Commons by default
fleet: an init's or join's wait counts only its own node's proof as served
fleet: ERR halted and a bound node's join refusal name the node whole
fleet: a loose word for an unread issuer is refused before any count
fleet: a cut await, a rotated issuer's denial and a short code say true figures
fleet: a cut await names a longer --timeout's wait only where it ends the wait
fleet: a held listen place says the aterm's own fleet= word
fleet: a member's peers rm tells its unread issuer only under the fleet it read
Keep explicitly addressed mailbox secrets scoped to their email
Expire service access observations independently of network reachability
Keep visible network details polling while the terminal is idle
Invalidate resource strip cache when service freshness changes
Stop network view wakes while its window is occluded
init: wait for macOS's local-network answer only on the transport's LocalNetworkPending
aterm-libc-oracle: fetch the locked graph once when the cache lost it
Verify healthy table convergence beside a damaged replica
prism-glass P0.6: the trail-diff script corpus (H)
agh: adopt the vault's tokens with no agh.toml, and let agents provision
aterm-models-agh: AghRouteWall holds the wall over vault adoption's rows
agh: vault adoption review fixes (one-shot learn, vault = true, dropped slots, own record lock)
agh: vault adoption review round two (one-login fail-closed, pinned tokens, plain auth add dev)
agh: vault adoption review round three (crossed files, damaged record, migration, remedies)
Start service observation independently of the network runtime
setup: a ledger that resumes once and parks, kept keys, staging sweep (RUN-1)
setup: gate Kept::applied behind cfg(test) (read only by the model/record tests)
Honor required details on the approved provider identity
Rewind R3: canonical checkpoint and config encoding, and the pane as an Aos task (aterm-aos-pane)
Rewind R3 (WIP): the GUI records replies, configs and witness digests, and rewind check replays each chain as the pane task
Rewind R3: encode main's DECSC resized flag, SPECS, KI, the design's as-built entry, and tests of the check line and framing
Rewind R3: the corpus's faithful rate in the as-built entry, a reply-reach check in the live test, and lint fixes
Cargo.lock: aterm-aos-pane at the workspace's 0.145.0
aterm-libc-oracle: a fetch that fails stops the run with its own reason
muse usage: fetch off the footer resolver thread
Expose scoped directory flush faults for durability controls
Report directory flush failures after updater transactions land
aterm-effects: hoist pet_world span buffers, share luminance tables, and promote const/inline helpers
Retain saved machine observations when network runtime startup fails
Do not attest a current observer from a saved incarnation
verify: a run whose checkout moved mid-run could not run
verify: read the moved-checkout HEAD before the selection, and test the wiring
accounts: the vault's sheet outranks aterm's own ~/.secrets copy, judged by the vault's record
kitty: a hide behind the host's words is never dealt, and a turned-back play is given up
kitty: a walk the console turns back hops the chrome, and the law of the legs clears legit walking
aterm-effects: fast-path empty live motes in note_lane_birth and single-quad additive peak
font, render: apply OpenType GPOS positioning and stack layered COLR emoji
Use the admitted account trigger for recovery eligibility
Stats deck: the axis in blocks of 1 s, 10 s, 1 min, 10 min and 1 h, with six hours of history
Stats deck tests: the raster slide and the glide bound on the owner's 1 s boxes
SPECS: the live edge's clock states the glide bound on 1 s boxes as the owner's axis draws them
Read account menu choices off the GUI thread with owner-fenced completions
Publish the account menu before dispatching its first read
Inject held readers explicitly and surface unavailable completion delivery
Discard account read completion after its window is removed
Classify account menu completions as window UI wakes
Preserve keyboard menu selection while account choices load
muse usage: complete a partial mint from the last read
Preserve newer Codex credentials during token refresh
Report landed fleet edits and best effort journal flush failures
Check fleet edit state without pinning its prose
Collapse account completion guards for the lint check
aterm-durable: file flushes' refusal through astream-sys, and a failing arm on the seam
aterm-update: each record's, the swap's and the boot sentinel's folder flush has a policy
atpkg: a refused file flush is read by astream-sys, Darwin's ENOTSUP included
atpkg: each store step's folder flush has a policy; a reinstall's swap waits for its unmark
aterm fabric on/off: a [fabric] edit in effect is ok beside a WARNING, not FAILED
aterm fleet: a [fleet] edit in effect is said, with its unflushed folder, and the verb finishes
aterm-gui: the crash and session-log journals' folder flushes have a policy
aterm-update: linux.rs's required folder flush through aterm_durable::durable_dir
aterm-update: durable::finish is the macOS records' alone
aterm-update-core: a failed arm takes its record back; the seam injects the platform's own errors
oracles: review fixes for the fetch-on-miss commits
setup page: hold the walk's wake off the typing path (§5.6)
aterm-effects: cache bed high-pass filter, add fast-path guards, and inline hot helpers (Batches 283-284)
Format completion guards and clarify native fixture wait
Manage a macOS service that holds the Mac's memory: read it, name it, restart fseventsd
Keep aterm's build and test churn out of fseventsd: .ubd folders by construction
Fix what the quiet TMPDIR broke in verify's test stage
Service memory: carry an episode across a relaunch, gate agents' restart, follow the shim's cache root
control_listener: count a rebind before its fresh accept thread can serve
aterm-effects: inline hot-path emitters, guard empty spark retention, and hoist wake color state (Batches 285-286)
aterm-core: seal the Kitty medium resolver and the notification callbacks behind capability tokens (P4)
Keep Codex workspace and login identity stable across refresh
Strengthen refresh ownership retention tests and satisfy lint
Record refresh identity verification and format its test
harness switch: words alone on the rule, no capsule
harness switch: format (verify fmt --fix)
harness switch: review fixes (screen-reader hint, changelog hover, High Contrast ink)
Publish local network identity only after current custody verification
init(scope): ALab signal is only an In membership; every Mac syncs the base plan (SYNC-1 parts 1-2)
init(types, gui): Subject::Sync(SyncKind) stub riding Secrets (SYNC-1 part 6a)
init(secrets): one discovery record, keyed by the gateway, not the subnet (SYNC-1 part 3)
init(access): collapse the grant-forget into a let-chain (clippy)
init(scope): fix probe_vault doc — it still linked the removed vault_here_now
aterm-secrets: remove reserved-name files an older build wrote
aterm-agent: fleet sync keeps the person's grant and fleet
aterm-agent, aterm-secrets: review fixes for fleet sync and reserved-file take-back
Respect saved Codex OAuth authority during refresh
Stop package mutations when required directory ordering fails
Judge directory failure controls by structured outcomes
Replace Brew help script with an offline Trust generator
lab mac nux: prove round 9's init in single guests — setup-driven waits, a dialog census, in-guest latency, and the fault rows
aterm-lab: include Network State headroom in stats Deck check and settle prompt before AT-SPI walks
prism-glass P0.9: the host unreachability pin through the real frame path
aterm-link F4: the sim asks with deadlines and follows topics; three bridge bugs it found
aterm-link F4: twelve controls; a wide search's four more bugs in the hand-off and the deadline table
aterm-link F4: the ask's deadline draw as a plain if (tippy obfuscated_if_else)
aterm-link F4 review: a held ask's retry arms no settled deadline; only its own answer waits
aterm-link F4 review: the topic law's own correction pinned; the controls on the merged tree
aterm-effects: fast-path up_ring SDF/raster, hoist bed luminance table, and inline hot helpers (batch 287)
Distinguish account proposals from deleted and unresolved shared records
Bind native Codex logins to fresh ownership and coherent claims
atpkg: make the Trust toolchain usable far sooner at first launch
Return the credential snapshot published by Codex refresh
Preserve rotated Codex credentials when a merged record grows
muse usage: a mid-flight forget keeps the landed mint
codex refresh publication: name selectors where closure collects them
messages tests: the words-move bound knows midnight
codex refresh identity: name its selector where closure collects it
codex refresh authority: name its selector where closure collects it
codex login publication: name its selector where closure collects it
F8-1 (LOOP-6 follow mode, ruling 2026-10-26(a)): aterm link notify --on need[:<word>] wakes a program when a session's folded need rises
F8-2 (LOOP-6 tail half, ruling 2026-10-26(a)): aterm fabric tail --json prints one object per record for a program
F8-3 (F2 leftover): the bridge builds every link mirror line from MirrorState and a closed MirrorReason
F8-4 (F2 leftover): fabric post re= and fabric tail --from read a bus offset with the shared parse_bus_offset
F8-5 (F4 leftover, ruling (3)): aterm fabric --help lists the brief's JSON keys from the one declaration session_json writes
F8-2 review: aterm fabric --help says where tail --json's gap line comes from in plain words
F8-1 review (LOOP-6, ruling 2026-10-26(a)): notify --on need judges only a seeded fold, pages a session's exit once in either order, and judges a held record before a reconnect warms
Kitty media: an adopted spare's taint resolver goes unless the setting allows the real one
Kitty media: a contained spare installs no taint resolver either
DEC 2048: a report the program provokes passes the reply gates
aterm-effects: eliminate AdmissionRecord::line allocations and inline seam, baker, and state_words helpers
Link Codex refresh-result coverage into the whole-source model check
Explain shared-vault blockers through the existing guarded readiness read
Box successful vault observations without changing legacy return types
Rewind R4 (default still off): one writer, spares that record, a memory pool, Forget
Rewind R4: a recording's queue holds at most its budget in bytes, and the pool counts it
Stats deck: the hot dial steams on the beat's frames
aterm-effects: precompute GridProposer/SETS_V1 bytes and avoid codegen/aos_momentum allocations
harness: the log wait carries the session's word, so a mid-turn switch is seen at once
aterm-gui: reflow take_autopilot's doc to the file's width
gui: account progress wakes the window when it moves, not once a second
lab: a tasked chain's mark is its record's first read
agent: CodexRefreshPublication's waivers stand beside its anchor, not in a test module
lab: END wants no Land hold on same-land, whose person lifts it
Serialize fseventsd restart transactions per account
aterm-uds: fix Linux /proc/net/route and /proc/net/arp gateway parsing and enable unit test across hosts
DEC 2048 test: show the report a policy drops was held, not sent
accounts: Grok Build reads the vault sheet's x column
accounts: pin that a note's x names no vendor; x beside grok is ambiguous
aterm-restore: plant the look-alike tail into a region the real writer built
keeper boot recovery: metrics reads its HELLO and admission, a seam plants the worst case
verify perf: the measured lanes' bench build is one module, bench_build
restore bench: a crashed window's tabs back, end to end, for N sessions
verify perf restore-e2e: the restore bench as a measured lane
plant: say what a refused plant left behind
restore bench: read the load through aterm_uds::spawnfd, not std's Command
aterm-restore: build plant in every profile, so resync_walk builds under cargo's bench profile
restore lane: keep the seam's own work off B's clocks, read placement and imports on B's own clock, probe the fence every 2 ms, and refuse a round whose arm did not take
verify perf restore-e2e: say what the lane reads now, not the look-alike tail as the worst case
docs/measured/restore: what the lane reads now, and what the ablation could not see
rewind: carry live transient state across replay keyframes (ATERM-KI-1024-4)
Separate Codex credential file capacity from individual OAuth responses
stats deck: back to the original colour scheme
stats deck: the scope ledger replaces the this Mac / aterm / Tab blocks
stats deck: the ledger's lint fixes
stats deck: the time series takes the row, one reading at the bar's end
stats deck: verify's fmt and lint findings on the merged tree
Stats deck: the strip keeps its share, the bar takes the rest, one reading where it fits
Stats deck: the Network run keeps its maximum where the peak word does not fit
atpkg: release the arrival on a fetch panic in the stage-as-it-arrives pass
Refuse conflicting account-sheet rows before pool sync
aterm-core: the response cap's test drives a writer no rate limit meters
aterm-effects: pre-size aos_momentum Enc/Vec buffers and inline helpers
Console host: one alternate-screen leave in flight, not one per screen
Resolve bare Muse and agy launches on the supervised PATH
Rewind R1 review fixes (worker), WIP: live keyframes are instants with their slice's command bit; empty slices and dropped sync instants
Rewind R1 review fixes (worker): whole-cell search, cancellable searches, chunked judge, warm across chains
Rewind R1 review fixes (worker): rewind status says whether the view's thread is busy, and the tests a mutant run showed weak
Rewind R1 review fixes (worker): the warm carries on from a pass that stopped short of its fork
aterm-effects: pre-size MLP/tone buffers, avoid diag_line/corpus Vec allocs, inline helpers
P1: measure launchd's user-domain verbs from inside the profile; name the residual
aterm-grid: a resize keeps the cursor's next write, so no printed glyph is lost
aterm-grid: next_write's tables report every case that goes wrong, not the first
Resize keeps the next write: aterm-core tests, SPECS and CHANGELOG
vt_oracle: width resizes join the differential VT oracle
aterm-grid: an edge wrap keeps the cursor on the row of the glyph it follows
Lint: placed() folds its two same-valued arms, Row::is_empty for a zero length, and a Case alias for the resize table
vt_oracle: the subset check sees what a resize keeps out
aterm-grid: a rewrap carries the cursor's cell, so its next write opens a row rather than taking the next line's
Resize: a saved slot past a full row opens a row of its own; restore paint and Terminal tests pin the next write
vt_oracle: the fold clamps a cut-off cursor as aterm does; reach counts only width changes; the slot exclusion says what differs
SPECS and CHANGELOG: the next write keeps its offset in its line; a saved slot past a full row gets a row
aterm-core: name the narrowing case tuple (tippy type_complexity)
aterm-update: first_launch install posture plan + setup eligibility (RUN-3 §6.8)
aterm-gui: boundary guard + bounded update handoff wait; gate setup to Installed (RUN-3 §6.7/§6.8)
Align Muse and Codex tool subcommands with current CLIs
Refuse terminal relaunch for Claude --desktop launches
Require original session membership in restore readings
Keep the existing keeper-copy witness control without duplicates
Require observed restore experiments and refuse overflowing damage
Keep outcome controls without mirroring counter initialization
aterm-release: a blank --reason is refused, and one that lowers nothing is said
aterm-release: aterm-dbus's memory row needs 2.3 GiB, its measured peak
aterm-release: 22 Trust floors re-based from … onto …
aterm-release: 14 more Trust floors re-based from … onto …
aterm-release: 7 heavier Trust floors re-based from … onto …
aterm-release: aterm-effects, atpkg and aterm-verify's Trust floors onto …
aterm-release: aterm-font's Trust cost row from its … run
containment,uds: read TCC.db Developer Tools list natively in memory
kitty: the glass the footer blanks is the pet's free ground, and the cat rests by the words
spec closure: link every anchored crate, and name a test-only anchor at census
census closure-anchor: read a cfg_attr predicate as census reads cfg, and name binaries
census closure-anchor: hold the finding to naming its machine, not to its wording
aterm-link mailbox (C01): an inbox item waits behind events at most INBOX_WAIT_MAX, and records queued together take one turn
Carry inbox fairness budget across refilled snapshot turns
Retain the actual readback successor seed and remove its search probe
Replay the observed readback witness in its exact plain world
Format the retained simulation witness with its crate edition
Rewind R4 as built: the rows on release builds; the default stays off (ATERM-KI-1027-1)
Add raw PTY echo to the private resize fixture
Combine equivalent next-write cursor placement conditions
Use the row emptiness query in resize reach accounting
Name the next-write test case tuple
Add ordinary cursor cutoff controls beside the matching fold
Qualify resize corollaries for deliberate cursor positions and clipping
Carry attached Muse short-option values on relaunch
F9-1 (F1 lead (a), privacy): a nameless program word never promotes an argument
F9-2 (F5 leftover): the seamless take's note_handoff call has a test of its own
F9-4 (F9 review, MEASURE): the shells' expanded 633;E for a history designator is a test
F9-5 (F9 review, privacy): a word is an assignment only where its reader takes it for one
F9-6 (F9 review): the note_handoff test carries three epochs, the highest in the middle
aterm-machines: sync.rs, the converge pass after an update (C4)
aterm init --converge: the converge pass's runner and live ports (C5)
sync: review fixes for the converge pass's base record, accounts writer and checks
fabric_world: the journal test waits for the segment the writer coalesces
fleet: one helper decides which grant admits a node, so allow drive --all lets members drive
fleet: fleet-off has one lifecycle under the lock, and §5 documents sync, publish and fleet-off
fleet: a leave names each Mac its hold read could not check
fleet: a peers header and a join quote the fleet= word aterm ctl status shows now
fleet: an ambiguity refusal names each peer by its whole node id
fleet: survey --host never dials a node id no book binds, and an answered row says the issuer was silent
fleet: a grant from an unconfirmed copy of the issuer's book says so
fleet: a drive refusal names the dialled Mac's copy only where it holds one
fleet: peers rm says when the running aterm lifts the holds of the node it undrives
fleet: sync's writes go under the write rule, and §5 says what main's sync builds
fleet: an open drive is cut once the keyring binds its node no more, under "*" too
fleet: peers rm names every node it leaves driving this Mac no more
fleet: a leave that cannot write fleet-off where a join could removes nothing
fleet: a test pins the whole node ids of the hand-entry ambiguity refusal
fleet: a cut drive's client names this Mac taken out of the driven Mac's books
aterm-conformance: the idle Rewind row judges what recording adds, not the app
aterm-conformance: the idle Rewind row holds a recording-by-default bundle to the 25 MB target
Console host: one leave client per session at a time; docs say what was measured
Carry attached Claude short-option values on relaunch
aterm-sysprobe: the socket-count test holds a floor of its own sockets instead of a before/after difference
Parse bundled Claude short options on relaunch
Rewind R1 review fixes: effects pause, export, live and past, band rows
keeper link: the worker reads the keeper's answers as they arrive (K1)
keeper link: a quiet seam, and the live lane's K1 check that a recovered window is served once its keeper answers
headless: the restore pass runs at the first park, so a plain headless instance places every session it recovers
Retry interrupted keeper wake writes and require original recovered sessions
keeper link, live lane: trustfmt
Qualify quiet keeper recovery coverage and historical readings
aterm-effects: eliminate Ribbon overflow obligation and inline rainbow_kitty helpers for Trust verification
lab trail-keys: real Claude Code guards the composer's trail custody
temporal: record post-seed host mutations on the replay and aos-pane spine
aterm-link mailbox (C01): an inbox turn takes up to 64, as many as an event run
aterm-link SPECS (C01): mailbox-priority-order names the turn cap the code has, 64
init: git-and-friends shim before the Command Line Tools (design §6.3, RUN-4)
init: clt_shim compiles on Windows and drops a redundant closure (RUN-4 review)
aterm-link mailbox (C01 review): only a taken event starts the inbox turn budget again
prism-glass P0 fix: trail-diff's closure holds the rig and its frame reads; held frames compare state
prism-glass P0 fix: a press on the cat is stamped at its own instant
prism-glass P0 fix: H: the dump's press on the cat changes it, and a paced run dumps the same words
prism-glass P0 fix: a headless window can present live onto the scripted surface
prism-glass P0 fix: whole test samples of GlowConfig and SoundEvent
prism-glass P0 fix: H: the dump draws through the live present
prism-glass P0 fix: the capture seam and the scripted outcome leave the dump's build clean
prism-glass P0 fix: H: the dump hashes named words of every effect stream, both deadlines and its cues
prism-glass P0 fix: the light-fork pin holds a tab's and a pane's caret fill to its dark twin
prism-glass P0 fix: the corpus test says what it checks: each pass has a run
prism-glass P0 fix: the live-present seam names its glass and builds in every test build
prism-glass P0 fix: H: the rig names its pet record
prism-glass P0 fix: H: the frame reads' test reads the pet's and the word latch's deadlines
lab trail-keys: every boundary proven, every key judged alone, exit 3 when it cannot run
lab trail-keys: Escape and Ctrl-C interrupting a streaming turn
harness,gui: fix non-Claude pool_advice attribution, wall point, and Codex thread sample
aterm-link: hold astream's fixtures of the broker aterm runs to aterm's own (C06)
aterm-census: export-includes, an exported file compiles in only what the export carries
aterm-link: astream_fixture_tests is an integration test the export withholds with its files
Skip Codex many-values in TUI and resume reads
font: legacy kern, AAT kerx+ankr, fallback mark positioning, and CGJ/ZWNJ skipping
aterm-aos-pane: carry split DECRQSS and XTGETTCAP queries across slices
aterm-grid, aterm-core: five wide-glyph fixes the differential VT oracle found
vt_oracle: East Asian wide glyphs join the differential VT oracle
vt_oracle: italic, blink, concealed and crossed-out join the differential VT oracle
vt_oracle: 24-bit colour joins the differential VT oracle
aterm-grid: DCH's straddling-lead test reads rb > src_start (tippy int_plus_one)
aterm-grid: a wide glyph unpaired at a DECSLRM margin drops its marks
vt_oracle: follow astream main's wide-cell model, and compare every code point's width
ai: resolve pooled CLI serving login across facts, state, and review
abrew: brew 7 reinstall narration
gui, docs: align harness.accounts and multi-cli pool notes with shipped behavior
converge: start the pass from the subscriber, the window and the Secrets stage (C6)
converge: renew a broker on a replaced build with fabric on's broker step (C7)
converge: sync.peers joins the open ALab vault from the window's pass (C8)
converge: review fixes for the triggers, the broker renewal and sync.peers (C6-C8)
Claude Code sessions report their usage; disk hogs say when they were last built
Expose worker scheduling observations beside idle performance cores
Read target scheduling flags and reject unmeasured CPU intervals
Keep why trends pending when core counters do not advance
Select the CPU subject in held-counter why control
Report native CPU hardware evidence and preserve bounded anomaly diagnostics
Preserve CPU sample ordering and validate adopted parent ages
Make CPU diagnostic reports self-contained and state exact underuse thresholds
Fix native loader boundary and preserve historical CPU diagnostics
Teach native SDK prototype controls the C int spelling
Declare and validate native online processor records
Exercise held CPU counters through the live model in rendering controls
Keep the held-counter recovery control on the CPU subject
Observe adopted job CPU after the existing progress phase
Collect bounded CPU policy diagnostics through native authorization
Use checked fixed-size frequency table chunks
Mutate diagnostic negative controls through the JSON object API
Complete CPU policy routing and drain failed collectors safely
Compare persisted CPU policy reports as JSON objects
paint: bound the tall and underline bodies' reach above the typed row
supervise: WaitKind::Outage, the kind of an outage wall's wait (slice 12b interface)
supervise: WaitKind::Outage names its outage (Outage: words, status word)
supervise: RULE_OUTAGE_RESUME, the outage wait's resume (slice 12b interface)
supervise: an outage wall is waited out, never typed into (slice 12b policy)
models: SupervisorOutageWait replaces SupervisorNetworkWall (slice 12b)
supervise_conformance_outage_wait: the wait's minutes need no conversion
supervise: an outage's resume keeps a person's exchange theirs, seeds Land and resumes a cut measured down (slice 12b review)
models: SupervisorOutageWait's word law has content; the conformance walk holds the words
harness: an outage wait is a quiet waiting: on the tab's state line (slice 12b, window)
harness: say WorkerIdle::waiting's no-wait arm as a match, which trustfmt keeps on its lines
harness: drop the outage-wait App test's assertion that nothing could fail
harness: state_line's doc names the stop between the outage wait and the need
lab forever: outage-land and outage-cruise, an overload judged as a silent wait (12b)
scn: c3-wall waits for the outage's one resume at its first rung
lab outage: tries timed from their own wall, an overload's resume blind, the state line read
slice 12b: the lab's ladder and line are the policy's own; changelog and the land run's record
lab outage: three-eighths rungs past the take window; a hold judged only in the outage and on the resume's answer
lab outage: a try's wall is the outage's first reading or the wait past the act's take window
slice 12b: the books carry a wall read while the route was measured down
slice 12b: a person's own turn of work ends an outage's ladder
slice 12b: Land's instruction typed under a resume's rule begins Land's hold
SPECS (aterm-agent): the outage tests as they are named now
prism-glass P0 fix: H: the pet's state words name its held stands, kept reactions and poses
prism-glass P0 fix: H: stardust's state words name the aurora's veil
prism-glass P0 fix: H: Sparkle Words' state words name its reservations, witness, trick flash and births
Shim the whole Command Line Tools stub set
Frame CPU policy replies with the shared JSON protocol
Accept sys caller metadata and fix CPU diagnostic sudo arguments
abrew: brew 7 cask download-queue narration
Keep native processor readers clean under tippy
Observe askpass ticket cancellation while awaiting the sheet
Initialize resource test snapshots without reassignment
Resolve remaining resource and authorization lint findings
Use the byte-string form in the collector pipe control
Respect provider realms during additive account sync
Strengthen provider-realm conformance after design review
Record final model composition and format its incoming GUI change
abrew: brew 7 cask uninstall narration
vitals_host: gate cpu_policy_generation to macOS, where it is read
measure paint: the companion plane is drawn by its own job, after the shell started it
measure paint: a plane miss alone reads the whole screen, and the plane outlives the take
measure paint: the scanner sees the first keys' spring, and a Pet row needs the pet on every frame

Source release. SHA256SUMS is a per-file manifest of the released tree, with a detached Ed25519 signature (SHA256SUMS.sig) by a machine key named in the attached master-signed roster (aterm-machines.toml + .sig). Verification chain and key inventory: SIGNING.md in the publication engine; the roster pin is committed in aterm crates/aterm-update-core/src/pins.rs.

Navigation Menu

Repository navigation

aterm v0.145.0

Choose a tag to compare

Sorry, something went wrong.

Sorry, something went wrong.

Uh oh!

No results found

aterm v0.145.0

Features

Fixes

Performance

Tests

Docs

Other

Uh oh!