v1.1.0-beta.74e3080a

What's Changed

• fix: address post-1.0 security audit findings by @bojanrajkovic in #201
• fix: harden daemon failure paths — force-stop, gRPC, stall, runner cache by @bojanrajkovic in #203
• fix: collapse the runner-tarball cache to per-cycle owned clones by @bojanrajkovic in #205
• feat(runnyctl): on-demand disk reclaim via runnyctl prune by @bojanrajkovic in #206
• feat(guest): record operator debug sessions as cycle artifacts by @bojanrajkovic in #211
• chore(deps): update commitlint monorepo to v21.1.0 by @renovate[bot] in #212
• chore(deps): update actions/cache action to v6 by @renovate[bot] in #213
• feat(guest): add ssh_hardening: scramble to randomize guest passwords by @bojanrajkovic in #215
• fix(sshx): stop WaitFor's rejection test racing real SSH timing by @bojanrajkovic in #216
• refactor(guest): extract a shared per-OS dispatch helper by @bojanrajkovic in #217
• feat(socket): stamp the authenticated operator uid on injected_keys by @bojanrajkovic in #219
• feat(socket): grant/revoke/list operator accounts at runtime by @bojanrajkovic in #220
• fix(vm): reuse the persisted ECID and attach the tart-guest-agent's console port by @withzombies in #222
• docs(adr): record the observability event seam and OTLP consumer decision by @bojanrajkovic in #235
• feat(home): add opt-in observability.otlp config block by @bojanrajkovic in #236
• feat(cycle): persist the ending classification on the record by @bojanrajkovic in #237
• feat(obs): add the cycle observability event stream and Action wrapper by @bojanrajkovic in #238
• fix(statemachine): stop daemon shutdown from relabeling a decided cycle's ending by @bojanrajkovic in #240
• feat(app): render benign cycle endings distinctly in the timeline by @bojanrajkovic in #239
• feat(statemachine): emit observability events from the record helpers by @bojanrajkovic in #241
• feat(runnyd): add the OTLP telemetry runtime — providers, resource, bounded shutdown by @bojanrajkovic in #242
• feat(telemetry): add the trace emitter by @bojanrajkovic in #243
• feat(statemachine): action events for teardown, rotation, and provision sub-steps by @bojanrajkovic in #244
• feat(telemetry): metrics emitter — cycle instruments and slot gauges by @bojanrajkovic in #245
• feat(images): action events and ensurer-scope pull metrics by @bojanrajkovic in #246
• feat(obs): emit spans for HTTP egress by @bojanrajkovic in #248
• refactor(statemachine): extract the slot's mutex-guarded state into a statusCell by @bojanrajkovic in #259
• refactor(statemachine): hoist runCycle's working state into a per-cycle run struct by @bojanrajkovic in #260
• refactor(statemachine): unify the step bracket and the record/status/event writes by @bojanrajkovic in #261
• refactor(images): collapse parameter lists into Ensurer methods by @bojanrajkovic in #262
• refactor(telemetry): delete the deterministic trace-ID machinery by @bojanrajkovic in #263
• refactor(obs,telemetry): durations on step/job events; stateless metrics consumer by @bojanrajkovic in #264
• feat(obs,images): pull-scoped events from the shared image puller by @bojanrajkovic in #265
• feat(telemetry): fold pull events into traces and metrics; delete images.Metrics by @bojanrajkovic in #266
• refactor(obs): drop the unused Event.Seq / per-scope counter by @bojanrajkovic in #267
• feat(release): add a beta channel formula/cask pair to the tap by @bojanrajkovic in #268
• docs: retire "crash-only" for the concrete guarantees it stood for by @bojanrajkovic in #269
• feat(socket): enforce operator revocation at RPC-start, not just connect() by @bojanrajkovic in #270
• chore(deps): update actions/cache action to v6.1.0 by @renovate[bot] in #271
• feat(socket): log the authenticated operator on lifecycle commands by @bojanrajkovic in #272

New Contributors

• @withzombies made their first contribution in #222

Full Changelog: v1.0.2...v1.1.0-beta.74e3080a