Skip to content

v0.35.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 18 Oct 08:21
v0.35.0
df73165
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

0.35.0 (2026-10-18)

⚠ BREAKING CHANGES

  • runtime: carry a typed refusal class on Refuse (#681)
  • policy: [aliases] table with host namespace aliases (#666)

Live policy revisions and upgrades

Policy changes reach following trajectory families at their next decision. Snapshot families keep their opening policy. Publishing a revision retires pending offers and approvals; the agent must propose the call again.

  • SQLite upgrades supported existing databases in place to schema 9 and retains their trajectories. An older runtime that lacks schema 9 support refuses the database. Preserve the database and use a compatible runtime; an image rollback does not downgrade it.
  • The kagent runtime chart uses one replica, the Recreate strategy and the existing PVC. An upgrade restarts the runtime; stored trajectory families resume after startup. Pause policy and battery changes until the replacement is ready.
  • PostgreSQL hosts must install the deployment and policy-revision tables before starting new runtime instances. During a rolling upgrade, freeze policy saves, Git-sync pulls, battery changes, aliases and credential changes until every serving pod is updated. Unchanged inputs publish nothing.
  • Peer labels written by old pods use trust ordinals. Keep trust-rank order and names unchanged until old-format held or embedded messages expire.
  • After the roll, resume changes and verify that a publish advances the head, an existing following family uses it, and snapshot families keep their opening policy. Verify that no policy-moved retry storm or unexpected 503/409 responses follow.
  • An image rollback does not undo published revisions. An older version can refuse a following family that already advanced beyond its opening revision. Freeze edits during mixed-version operation and preserve the additive schema and stored trajectories.

Features

  • annotators: one label guide for every annotator (#644) (5f3f6b9)
  • engine: a void return declaration for marked spawns (#665) (679bf7c)
  • engine: support live policy revisions and pinned snapshots (675ffa4)
  • eventlog: encrypt embedded PostgreSQL trajectory content (#658) (2b8f242)
  • opencode: add guided first-run setup (#645) (3fa2958)
  • opencode: install AppenCode without a source checkout (#656) (4f5a4b9)
  • opencode: support Cloudflare, Notion, and GitHub batteries (#661) (6759a45)
  • policy: [aliases] table with host namespace aliases (#666) (cd3c4a9)
  • replay: appa/do_something checks what the trajectory allows without naming a tool (#670) (9d63a7d)
  • runtime: attribute archestra consults to their trajectory (#664) (3024eba)
  • runtime: carry a typed refusal class on Refuse (#681) (88a41d0)
  • runtime: open a host's replay deployment under its adapter (#673) (6ca466f)
  • runtime: opt-in session principal on the hook wire for kagent (#654) (a4d88ca)
  • runtime: point blocked agents at yell from every block (#659) (5b55395)

Bug Fixes

  • bench: count block records only; log what a fork returns to its parent (#642) (275b443)
  • engine: keep file labels through output sanitizers; refuse forged approvals and fork kinds (#668) (bcf66ee)
  • engine: recognize the policy identity an earlier engine recorded (#655) (dd2f4de)
  • engine: release at the default stage when staged derivations block; withhold failure bodies past a bound sanitizer (#675) (04d7a2e)
  • huggingface: resolve cached tokens on Windows (#572) (0f49da4)
  • kagent: despell whole spellings glued to following text (#569) (5d228b0)
  • kagent: ship the empty host-members roster the GitHub battery's multi-user target names (#679) (45d922b)
  • opencode: wait for MCP discovery before protected prompts (#660) (f395bcb)
  • runtime: forward a signal that arrives before Claude Code's pid is known (#678) (a6af88a)
  • runtime: say what a narrowing does to recipient checks and returns (#646) (5c12f5c)
  • verify marketplace digests against one committed snapshot (#657) (375c638)

Performance Improvements

  • engine: scan only unspent approvals (#682) (6329042)
  • engine: share projection state and cache trajectory labels (#671) (804dd5c)

Dependencies

  • bump actions/download-artifact from 8.0.1 to 8.0.2 (#649) (75df281)
  • bump actions/upload-artifact from 7.0.1 to 7.0.2 (#648) (7d67411)
  • bump helm/kind-action from 1.15.0 to 1.15.1 (#650) (870be8e)
  • bump jsonschema from 0.57.0 to 0.58.6 (#600) (95a24f8)
  • corp-systems: bump rmcp to 3.x, dropping vulnerable 1.8.0 (#651) (3df7d35)
  • upgrade lockfiles for security alerts (#653) (4e6b66f)

Code Refactoring

  • engine: split admission, decisions, and tests by concern (#669) (139bb20)
Assets 15
Loading