Repository navigation
v3.5.0
brew update && brew upgrade agentops · cd ~/.local/share/agentops && git pull --ff-only && ao skills link · checksums · verify provenance
Highlights
AgentOps 3.5 hardens the factory boundary that 3.4 drew. The Gas City
maintainer operations ship in the CLI as the ao gc command family, the
operating doctrine for driving a factory through its coordinator is encoded in
the runtime surfaces (the Mayor authors workflow beads and dispatches; the
operator authors intent, mails the coordinator, reads state, and judges),
plan gains a substrate-neutral manifest mode for multi-behavior handoffs,
and the verdict contract stops punishing honest scope disclosure: every
caveat now has a documented home, and nothing is deleted to earn a PASS.
Upgrade Notes
scripts/gc-maintainer-ops.shis now a thin wrapper; new callers should use
ao gc prepare|check|recover-affinitydirectly.ao initnow appends a marker-delimited ignore block to.gitignore
covering machine-local loop scratch; intents and verdicts stay trackable.
Re-running init is idempotent, and an edited block is respected.- No other manual action required.
At a Glance
| Product Area | Added | Changed | Refactored | Fixed | Deprecated/Removed |
|---|---|---|---|---|---|
| Skills and Workflows | 2 | 2 | 0 | 1 | 0 |
| Eval, Validation, and Release Gates | 0 | 0 | 0 | 2 | 0 |
| CLI and Operator Commands | 2 | 0 | 0 | 2 | 1 |
| Docs and Onboarding | 1 | 1 | 0 | 0 | 0 |
Product Areas
Skills and Workflows
- Added:
planmanifest mode — shape many bounded behaviors as one
caller-owned specification manifest (stable slugs, dependency edges,
per-child acceptance and write scopes, tracker IDsTBD) authoring zero
beads; the executing substrate materializes tracker state - Added:
using-gcdocuments the supervisor's typed run-status API and the
five-verb tending loop (monitor, observe, nudge, redirect, rework), one
owner per verb - Changed: factory operating doctrine — work enters a city through the Mayor,
which authors workflow beads and owns dispatch; directgc slingis a
no-live-Mayor debugging tool; pack-owned session lifecycle belongs to the
reconciler;rpihands factory work to the coordinator and never
dispatches runs itself - Changed: loop skill docs work verbatim in installed trees —
install-agnosticvalidate.pypaths, realmanifestflags, therpi
report shape inlined, self-contained examples - Fixed: the verdict tool no longer pays validators to delete caveats —
declared non-goals, bounded criterion proofs, and residual risks have
documented disclosure homes, and the PASS integrity finding names where
each caveat belongs instead of failing silently
Eval, Validation, and Release Gates
- Fixed:
ao gate checkexplains an unborn HEAD instead of surfacing a raw
git exit-128, and installed skill copies are excluded from user-repo gate
scope with repair hints that no longer reference source-checkout paths - Fixed:
store-verdicterrors name the allowed criteria fields
CLI and Operator Commands
- Added:
ao gccommand family —prepare, read-onlycheck, and
dry-run-by-defaultrecover-affinity— porting the Gas City maintainer
operations into Go per ADR-0016 - Added:
ao initscaffolds an idempotent, marker-delimited.gitignore
block for machine-local loop scratch - Fixed:
ao doctorgives installed users actionable advice without
checkout-only commands - Fixed: the doctor skill-link census is tri-state, so only genuinely
dangling links count as broken - Deprecated:
scripts/gc-maintainer-ops.shbecomes a compatibility wrapper
overao gc
Docs and Onboarding
- Added: the Ponytail whole-repo contraction plan
(docs/plans/2026-07-30-ponytail-whole-repo-contraction.md), the reference
example for plan manifest mode - Changed:
AGENTS.mdstates the factory control-plane and dispatch
boundary for any selected factory
Known Issues
- No release-blocking known issues.
Full changelog
AgentOps 3.5 hardens the factory boundary 3.4 drew. The Gas City maintainer
operations ship in the Go CLI as the ao gc command family, the operating
doctrine for driving a factory through its coordinator is encoded in the
runtime surfaces (the Mayor authors workflow beads and dispatches; the
operator authors intent, mails, reads state, and judges), plan gains a
substrate-neutral manifest mode for multi-behavior handoffs, and the verdict
contract stops punishing honest scope disclosure.
Added
ao gccommand family:prepare, read-onlycheck, and
dry-run-by-defaultrecover-affinityport the Gas City maintainer
operations into the CLI (ADR-0016);scripts/gc-maintainer-ops.shremains
as a thin wrapper.planmanifest mode: shape N bounded behaviors as one caller-owned
specification manifest (stable slugs, dependency edges, per-child
acceptance and write scopes, tracker IDsTBD) authoring zero beads; the
executing substrate materializes tracker state.using-gcdocuments the supervisor's typed run-status API (run detail and
census endpoints) and the five-verb tending loop (monitor, observe, nudge,
redirect, rework) with one owner per verb.ao initscaffolds a marker-delimited.gitignoreblock covering
machine-local loop scratch while leaving intents and verdicts trackable;
idempotent across re-runs.
Changed
- Factory operating doctrine in
using-gcandAGENTS.md: work enters a city
through the Mayor, which authors workflow beads and owns dispatch; direct
gc slingis demoted to a no-live-Mayor debugging tool; the operator lane
is a closed set and pack-owned session lifecycle belongs to the reconciler. rpistates that factory work enters through the factory's coordinator;
RPI hands over intent and never dispatches factory runs itself.
Fixed
- The verdict tool no longer pays validators to delete caveats: declared
non-goals, bounded criterion proofs, and residual risks have documented
disclosure homes; the PASS integrity finding names where each caveat
belongs instead of failing silently;store-verdicterrors name the
allowed criteria fields. - Loop skill docs work verbatim in installed trees: install-agnostic
validate.pypaths inplanandvalidate, realmanifestflags
documented, therpireport shape inlined instead of linking an unshipped
schema, and self-contained examples replace internal digests. ao gate checkexplains an unborn HEAD instead of surfacing a raw git
exit-128; installed skill copies are excluded from user-repo gate scope;
native-check repair hints no longer reference source-checkout paths.ao doctorgives installed users actionable advice without checkout-only
commands, and the skill-link census is tri-state so only genuinely dangling
links count as broken.
Full Changelog: v3.4.0...v3.5.0