Bloom v0.4.2

Bloom v0.4.2

This release contains signed Bloom triad bundles for Linux x86_64,
Linux aarch64, and macOS aarch64.

Verify the archive checksum signature with the reviewed key at
packaging/triad/release/bloom-release-v1.pub and the namespace
bloom-release-archive-v1.

Changes since v0.4.1

• release: v0.4.2 (#432) (0cd3bcf)
• Restore the private Signer admin directory after macOS reboot (#438) (433a0da)
• Ship NEAR Intents v0.1.5 with upgrade lineage (#430) (30e32f8)
• Fix stale macOS session test and run it in CI (#406) (8a6ae5b)
• Move the skill's Promptfoo evals into evals/skills (#428) (402b028)
• Version the Bloom skill with each release (#431) (b09ef7f)
• Pin Broker release/0.4.1 and Signer master for v0.4.2 (#429) (d166c6f)
• Recover signing retries while retaining uncertain operations (#214) (b168a5d)
• Distribute Bloom with a skill that hands operation to its filesystem (#424) (779ab06)
• Sign MPP session vouchers with the escrow's Voucher type (#426) (98d1cfd)
• Only open MPP sessions against the known Tempo escrow (#425) (ab8b443)
• Recognise a default Petal installed locally from its pinned release (#407) (9212842)
• Require every RPC to pass the blockhash window before retiring a Solana transfer (#396) (b32b01e)
• Honor node priority fees and recover rejected pending EVM transactions (#401) (1cbec4a)
• Never discard or expire a possibly signed EVM transaction (#411) (bbe0c16)
• Ship Enso v0.1.7 with complete upgrade lineage (#402) (62cd4f2)
• Correct Linux dev clock guidance and document local Petal provenance (#413) (d9e0b68)
• Make Linux upgrades forward-only when the candidate migrates state (#403) (be8daf6)
• ci: enable Dependabot updates (#188) (f27ce12)
• Measure how agents use Bloom with disposable Harbor trials (#373) (8e20efd)
• Update wasmtime to 36.0.20 for RUSTSEC-2026-0424 (#412) (a2317a3)
• Fail rejected mounted Petal writes and keep the Petal's reason (#376) (d204bc4)
• Read a committed policy update's status where it lives (#404) (4d2ff2a)
• Scale bare fractional ERC-20 amounts by token decimals (#408) (6b42d98)
• Send a chain's native asset by its own symbol (#390) (978fdb2)
• Keep the failed-entry restage sink from being rendered (#370) (bba5607)
• Keep secrets in request URLs out of Petal HTTP errors (#364) (a3aa05d)
• Report uncertain Petal signing outcomes, and wait for a reusable attempt before replacing it (#329) (80ee652)
• Persist why an outbox entry left the pending queue (#336) (0be1cc8)
• Always observe Broker for policy authority reads (#392) (a94024f)

Components

• Broker: 5a09d5e...76bb7e0
• Signer: c157444...3f880d7

Full diff: eab33bf...0cd3bcf