v0.26.0

Changelog

• 5154bb7 ci: gate releases on same-sha quality
• b211077 ci: gate supported api against release tag
• 9acbf75 ci: make sdk release gates evidence-bearing
• 30ee5f0 docs: reaccept agent sdk candidate implementation
• 43d89bc docs: record agent sdk stabilization acceptance
• 920f90f docs: record v0.25.0 agent sdk acceptance gaps
• 50ef2a2 docs: reject agent sdk candidate readiness
• f5cce30 feat: add control-owned dynamic watchdog
• a87efcc feat: complete acp lifecycle semantics
• 93e7ca6 feat: enforce production session leases
• c5ed4da feat: validate assembled execution requirements
• 3149f87 fix: align recovered tool canonical status
• bbdaf21 fix: bind compound retries to mutation digests
• 0137349 fix: bind plan transactions to full state
• 9dc683a fix: bound noncooperative guardrails
• c781f08 fix: classify committed file lease outcomes
• 5c44119 fix: close post-30ee5f02 acceptance interleavings
• 895d52a fix: collapse control/runtime durability structure and continue saga
• 879e58f fix: converge acp coordination semantics
• 57a2de1 fix: declare async command execution requirements
• 1cf73e5 fix: fence runtime writes with session leases
• cf4f125 fix: harden agent sdk coordination and recovery
• d2a8ee1 fix: keep trace sinks off execution paths
• 3e3f040 fix: make compound session retries idempotent
• d5e1fb3 fix: make durable runtime identities restart-safe
• 89c9dee fix: make event source audit only
• bd2c313 fix: make source audit-only in sdk policy
• a5fe612 fix: make spawn compensation restart-safe
• 5bb93fb fix: make subagent spawn a recoverable saga
• 2fd67d3 fix: migrate raw session events before decoding
• aa63499 fix: place control operations behind runtime fencing
• 5580431 fix: preserve acp permission semantics
• 55a4a58 fix: preserve lease fencing during cancellation
• aa906e0 fix: preserve runtime capabilities through control decorators
• 401827d fix: protect compaction with source revision CAS
• eecb2e3 fix: recover approval resolution after request cancel
• de62da5 fix: recover unknown tool outcomes into model context
• 6bf88c6 fix: replace wall-clock watchdog with generation-tail loop probe
• 1589c0b fix: require isolated proxy consumer evidence
• 42e1fd8 fix: retain late completion hook errors
• e85b803 fix: roll subagent spawn saga forward durably
• 19c4b18 fix: scope provider tool identities per invocation
• f6c114c fix: wake approvals after committed resolution
• 2c63168 refactor(agent-sdk): enhance tool result handling with artifact support and improved truncation
• b3bac0e refactor(guardian): extract guardian prompt and improve approval flow
• 78f9242 refactor: centralize built-in tool identity with new agent-sdk/tool/identity package
• 9dcdb4f refactor: make subagent control sources neutral
• 582c49e refactor: narrow resume to live run attach
• 7d258a3 refactor: run system agents through core runtime
• c49bc1a test: prove supported tagged sdk consumption