Skip to content

v3.5.0

Choose a tag to compare

@github-actions github-actions released this 31 Jul 14:35
· 210 commits to main since this release

brew update && brew upgrade agentops · cd ~/.local/share/agentops && git pull --ff-only && ao skills link · checksums · verify provenance


Highlights

AgentOps 3.5 hardens the factory boundary that 3.4 drew. The Gas City
maintainer operations ship in the CLI as the ao gc command family, the
operating doctrine for driving a factory through its coordinator is encoded in
the runtime surfaces (the Mayor authors workflow beads and dispatches; the
operator authors intent, mails the coordinator, reads state, and judges),
plan gains a substrate-neutral manifest mode for multi-behavior handoffs,
and the verdict contract stops punishing honest scope disclosure: every
caveat now has a documented home, and nothing is deleted to earn a PASS.

Upgrade Notes

  • scripts/gc-maintainer-ops.sh is now a thin wrapper; new callers should use
    ao gc prepare|check|recover-affinity directly.
  • ao init now appends a marker-delimited ignore block to .gitignore
    covering machine-local loop scratch; intents and verdicts stay trackable.
    Re-running init is idempotent, and an edited block is respected.
  • No other manual action required.

At a Glance

Product Area Added Changed Refactored Fixed Deprecated/Removed
Skills and Workflows 2 2 0 1 0
Eval, Validation, and Release Gates 0 0 0 2 0
CLI and Operator Commands 2 0 0 2 1
Docs and Onboarding 1 1 0 0 0

Product Areas

Skills and Workflows

  • Added: plan manifest mode — shape many bounded behaviors as one
    caller-owned specification manifest (stable slugs, dependency edges,
    per-child acceptance and write scopes, tracker IDs TBD) authoring zero
    beads; the executing substrate materializes tracker state
  • Added: using-gc documents the supervisor's typed run-status API and the
    five-verb tending loop (monitor, observe, nudge, redirect, rework), one
    owner per verb
  • Changed: factory operating doctrine — work enters a city through the Mayor,
    which authors workflow beads and owns dispatch; direct gc sling is a
    no-live-Mayor debugging tool; pack-owned session lifecycle belongs to the
    reconciler; rpi hands factory work to the coordinator and never
    dispatches runs itself
  • Changed: loop skill docs work verbatim in installed trees —
    install-agnostic validate.py paths, real manifest flags, the rpi
    report shape inlined, self-contained examples
  • Fixed: the verdict tool no longer pays validators to delete caveats —
    declared non-goals, bounded criterion proofs, and residual risks have
    documented disclosure homes, and the PASS integrity finding names where
    each caveat belongs instead of failing silently

Eval, Validation, and Release Gates

  • Fixed: ao gate check explains an unborn HEAD instead of surfacing a raw
    git exit-128, and installed skill copies are excluded from user-repo gate
    scope with repair hints that no longer reference source-checkout paths
  • Fixed: store-verdict errors name the allowed criteria fields

CLI and Operator Commands

  • Added: ao gc command family — prepare, read-only check, and
    dry-run-by-default recover-affinity — porting the Gas City maintainer
    operations into Go per ADR-0016
  • Added: ao init scaffolds an idempotent, marker-delimited .gitignore
    block for machine-local loop scratch
  • Fixed: ao doctor gives installed users actionable advice without
    checkout-only commands
  • Fixed: the doctor skill-link census is tri-state, so only genuinely
    dangling links count as broken
  • Deprecated: scripts/gc-maintainer-ops.sh becomes a compatibility wrapper
    over ao gc

Docs and Onboarding

  • Added: the Ponytail whole-repo contraction plan
    (docs/plans/2026-07-30-ponytail-whole-repo-contraction.md), the reference
    example for plan manifest mode
  • Changed: AGENTS.md states the factory control-plane and dispatch
    boundary for any selected factory

Known Issues

  • No release-blocking known issues.

Full changelog


Full changelog

AgentOps 3.5 hardens the factory boundary 3.4 drew. The Gas City maintainer
operations ship in the Go CLI as the ao gc command family, the operating
doctrine for driving a factory through its coordinator is encoded in the
runtime surfaces (the Mayor authors workflow beads and dispatches; the
operator authors intent, mails, reads state, and judges), plan gains a
substrate-neutral manifest mode for multi-behavior handoffs, and the verdict
contract stops punishing honest scope disclosure.

Added

  • ao gc command family: prepare, read-only check, and
    dry-run-by-default recover-affinity port the Gas City maintainer
    operations into the CLI (ADR-0016); scripts/gc-maintainer-ops.sh remains
    as a thin wrapper.
  • plan manifest mode: shape N bounded behaviors as one caller-owned
    specification manifest (stable slugs, dependency edges, per-child
    acceptance and write scopes, tracker IDs TBD) authoring zero beads; the
    executing substrate materializes tracker state.
  • using-gc documents the supervisor's typed run-status API (run detail and
    census endpoints) and the five-verb tending loop (monitor, observe, nudge,
    redirect, rework) with one owner per verb.
  • ao init scaffolds a marker-delimited .gitignore block covering
    machine-local loop scratch while leaving intents and verdicts trackable;
    idempotent across re-runs.

Changed

  • Factory operating doctrine in using-gc and AGENTS.md: work enters a city
    through the Mayor, which authors workflow beads and owns dispatch; direct
    gc sling is demoted to a no-live-Mayor debugging tool; the operator lane
    is a closed set and pack-owned session lifecycle belongs to the reconciler.
  • rpi states that factory work enters through the factory's coordinator;
    RPI hands over intent and never dispatches factory runs itself.

Fixed

  • The verdict tool no longer pays validators to delete caveats: declared
    non-goals, bounded criterion proofs, and residual risks have documented
    disclosure homes; the PASS integrity finding names where each caveat
    belongs instead of failing silently; store-verdict errors name the
    allowed criteria fields.
  • Loop skill docs work verbatim in installed trees: install-agnostic
    validate.py paths in plan and validate, real manifest flags
    documented, the rpi report shape inlined instead of linking an unshipped
    schema, and self-contained examples replace internal digests.
  • ao gate check explains an unborn HEAD instead of surfacing a raw git
    exit-128; installed skill copies are excluded from user-repo gate scope;
    native-check repair hints no longer reference source-checkout paths.
  • ao doctor gives installed users actionable advice without checkout-only
    commands, and the skill-link census is tri-state so only genuinely dangling
    links count as broken.

Full Changelog: v3.4.0...v3.5.0