v0.32.0

What's Changed

• [delivery-code-review] Update clock browser after task timestamp footer removal by @orbit-agent-01 in #5652
• [auto-task] Website accuracy — validate the oldest orbit-cli.com pages against the current release by @orbit-agent-01 in #5654
• Align explicit source-repair admission with the workspace validation policy by @orbit-agent-01 in #5653
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5655
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5656
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5657
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5659
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5662
• [friction-curation] Carry reconciled worker exit evidence into claim release reasons by @orbit-agent-01 in #5660
• [auto-task] Website accuracy — validate the oldest orbit-cli.com pages against the current release by @orbit-agent-01 in #5663
• [security-review] Update Astro past the CSS injection advisory by @orbit-agent-01 in #5661
• [security-review] Refresh DOMPurify for three new advisories by @orbit-agent-01 in #5664
• Correct getting-started review and merged-task guidance by @orbit-agent-01 in #5669
• Stream run history NDJSON one run per line by @orbit-agent-01 in #5667
• Keep scorecard plain output free of summary prose by @danieljhkim in #5666
• [friction-curation] Route owner-audit scans away from unsupported follower claims by @orbit-agent-01 in #5665
• Move artifact evidence policy out of MCP tool descriptions by @danieljhkim in #5668
• Remove unsupported path advice from search refusals by @danieljhkim in #5671
• Document safe adoption of stale friction-curation body forks by @orbit-agent-01 in #5672
• fix(ci): require Astro-compatible Node 22 patch by @danieljhkim in #5670
• Type PR blocked-check refusals before repair admission by @orbit-agent-01 in #5673
• Align task status help with governed transition rules by @orbit-agent-01 in #5674
• Type durable source-repair publication settling decisions by @orbit-agent-01 in #5675
• Factor the shared candidate-hold preamble in failure preservation by @orbit-agent-01 in #5676
• [code-org] Group generation admission and exclusive waiters by @orbit-agent-01 in #5677
• Reduce adopt_orphans pass latency after the out-of-run PR-repair scan by @danieljhkim in #5682
• Move readiness help internals into the operator reference by @orbit-agent-01 in #5681
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5685
• Explain reserved review- paths in artifact upload guidance by @danieljhkim in #5683
• [code-org] Split store migration ledger and claim mutations by @orbit-agent-01 in #5684
• Bound Settings Hosts health polling to ten requests per cycle by @orbit-agent-01 in #5679
• Type required-validation failure kinds across reconciliation by @orbit-agent-01 in #5686
• Retain safe context for oversized federated MCP lines by @orbit-agent-01 in #5680
• Delete the unused audit sink event-count accessor by @orbit-agent-01 in #5687
• Version GPT-5.6 Sol's documented August price reduction by @orbit-agent-01 in #5688
• Keep public tool guidance independent of Orbit's source checkout by @orbit-agent-01 in #5690
• Type provider PR review decisions as explicit variants by @orbit-agent-01 in #5689
• Have task pilot inspect required registration wiring by @danieljhkim in #5691
• Remove unused crew-purpose helpers from orbit-types by @danieljhkim in #5693
• Remove macos-only host_os from default Muse executor — Muse now runs on Linux by @orbit-agent-01 in #5692
• Website mobile search: bring the light-theme Cancel control above AA contrast by @orbit-agent-01 in #5694
• Align website page titles with the sidebar's established labels by @orbit-agent-01 in #5695
• [code-review] task_complete batch leaves partial completion behind a failed result by @orbit-agent-01 in #5697
• [code-review] Worktree GC: non-string target_run_id silently widens scoped sweep to full sweep by @orbit-agent-01 in #5698
• Use consistent complexity names in dashboard analytics and task details by @orbit-agent-01 in #5700
• [code-review] Dependabot sweep: one repo_view failure aborts the whole snapshot by @orbit-agent-01 in #5699
• [code-review] CI sweep: non-numeric run_id failures silently vanish into false no_current_failure by @orbit-agent-01 in #5702
• [code-review] CI listing fakes ignore the limits production cap-detection relies on by @orbit-agent-01 in #5701
• Accept Muse as a canonical agent family for tool provenance by @orbit-agent-01 in #5703
• [code-review] Dependabot sweep: limit 0 never clamps, so sweep can never report clean by @orbit-agent-01 in #5704
• Share task write response projection below the surfaces by @danieljhkim in #5705
• [code-review] CI snapshot notes bypass redaction applied to every other error channel by @orbit-agent-01 in #5706
• Reassign auto-task explicit crew when its provider hits a usage limit, with a visible task warning by @orbit-agent-01 in #5708
• Make the Linux init Muse availability fixture independent of system launchers by @orbit-agent-01 in #5709
• Delete the unused envelope_log_path legacy hook from orbit-engine by @orbit-agent-01 in #5707
• Delete the unused admission_storage_usage API from orbit-store by @orbit-agent-01 in #5710
• Parse the claim_candidate_carry output once into a typed carry outcome instead of matching carry strings in Core by @orbit-agent-01 in #5711
• [code-review] Operator-cancel test never checks that the cancel reason reaches the owner, despite its name and fixture reason by @orbit-agent-01 in #5712
• [code-review] Claimed-leaf 'steering off never asks the owner' assertion counts only writes, so owner reads while off are invisible by @orbit-agent-01 in #5713
• [code-review] Pipeline gate-handover check does not require the validating step to run under the implement step's condition or in its loop by @danieljhkim in #5714
• [code-review] Task-artifact helper discards the public tool's result, so 'readable through the owner's public tool' is only checked for errors, not content by @danieljhkim in #5715
• [code-review] Native Seatbelt test passes vacuously on hosts that permit nested sandbox profiles by @danieljhkim in #5717
• [code-review] Required-tools pilot test has no positive allowlist control, so an empty pilot tool policy would pass by @orbit-agent-01 in #5718
• Carry Code scanning alert evidence as a typed history decision instead of re-parsing task description markdown by @orbit-agent-01 in #5720
• [code-review] run_tail's only-completion-ran audit invariant is skipped on every error outcome by @danieljhkim in #5719
• Type AutomationError::Deferred reason codes as an enum instead of matching reason strings by @orbit-agent-01 in #5716
• [code-review] Provider PID-reuse cancellation scenario silently passes when identity cannot be probed by @danieljhkim in #5721
• [code-review] CI test fake ignores log scope, byte bound and run id by @orbit-agent-01 in #5722
• [code-review] Mutation-provenance cases 'pending' and 'auto_merge' seed byte-identical provenance to 'admitted' and 'merge' by @orbit-agent-01 in #5723
• [code-review] run_gh errors carry raw unredacted gh stderr past the sweep boundary by @orbit-agent-01 in #5724
• [code-review] Reviewer-tampering refusals assert only is_err, so wrong-reason refusals pass all 25 cases by @orbit-agent-01 in #5725
• [code-review] Reviewer validation persists Git-quoted filenames as task selectors by @orbit-agent-01 in #5726
• [code-review] Worktree-GC report lookup keys only on run_id although one run can produce several reports by @orbit-agent-01 in #5727
• [code-review] CI sweep: uninvestigated in-flight candidates dropped with no retryable error by @orbit-agent-01 in #5728
• [code-review] Pilot hold tests assert on the first recorded admission receipt without binding it to the held task by @orbit-agent-01 in #5729
• [code-review] Permanent/transient prerequisite matrices do not exercise the claimed cross-product by @orbit-agent-01 in #5730
• [code-review] git_push reports reused_current from the fetch URL without publishing to the push URL by @orbit-agent-01 in #5731
• Give the dashboard workspace picker a programmatic label by @danieljhkim in #5732
• [code-review] Advisory 'must not hide a holding item in the same list' is only exercised for surface_warnings by @orbit-agent-01 in #5734
• [code-review] Pilot-mutation replay test accepts two different replay semantics, so a change in replay classification is undetectable by @orbit-agent-01 in #5735
• [code-review] Step-graph drain test injects its timing inputs by raw SQL, bypassing the submission path it claims to exercise as shipped by @orbit-agent-01 in #5736
• [code-review] CI test fake cannot script most query errors, leaving retryable paths unexercised by @orbit-agent-01 in #5733
• Retry transient forge-observation failures in PR completion instead of escalating every blocked leaf by @orbit-agent-01 in #5737
• [code-review] automatic_authentication_failures_are_bounded never reaches the bound it names by @orbit-agent-01 in #5738
• Delete the unused PolicyDecision enum from orbit-types by @orbit-agent-01 in #5739
• Carry the desktop write idempotency receipt as a typed history decision instead of a desktop_request= note prefix by @orbit-agent-01 in #5740
• Config writes by a newer build must not break the deployed binary (review.timing spelling skew) by @orbit-agent-01 in #5741
• [code-review] Log SSE reconnect skips a rotated file's prefix when the replacement is at least as large as the saved cursor by @orbit-agent-01 in #5742
• [code-review] Bound diagnostics trend windows and check previous-date arithmetic by @orbit-agent-01 in #5743
• [code-review] Publish host snapshots and load errors as one coherent view by @orbit-agent-01 in #5745
• Unify the duplicated canonicalize_existing_prefix helper into orbit-common by @orbit-agent-01 in #5744
• Replace source-checkout doc paths in CLI help with resolvable references by @orbit-agent-01 in #5746
• Fetch Muse usage windows from the run_usage allowance into provider-limit readings by @orbit-agent-01 in #5747
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5752
• Give the CLI its own artifact-listing hint in the artifact-not-found error by @orbit-agent-01 in #5748
• [code-review] Resources design doc still calls low complexity Easy after rename by @orbit-agent-01 in #5751
• Bound the search result summary instead of copying the full task description by @orbit-agent-01 in #5749
• Stop repeating the missing-context warning with pre-promotion advice on backlog task writes by @orbit-agent-01 in #5750
• [code-review] Mixed typed and legacy Code scanning evidence splits causes with missing tool GUIDs by @orbit-agent-01 in #5753
• [delivery-code-review] Resolved push URL is rewritten again before publication probing by @orbit-agent-01 in #5754
• Cut pre-test shard delays behind the PR CI budget breach by @orbit-agent-01 in #5755
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5758
• fix: bump ctutils to 0.4.4 for RUSTSEC-2026-0385 by @danieljhkim in #5757
• Add step/window-scoped reads to github.run.logs excerpts by @orbit-agent-01 in #5756
• Preserve runtime output in raw GitHub job step selections by @orbit-agent-01 in #5759
• Redact credential fragments at GitHub log byte-window boundaries by @orbit-agent-01 in #5760
• Byte-window cuts still expose context-defined credential fragments (Bearer/Authorization/api_key) by @orbit-agent-01 in #5761
• Byte-window cuts still expose api_key assignment fragments for non-enumerated spellings (api_key=, x-api-key =) by @orbit-agent-01 in #5762
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5763
• Byte-window cuts still expose camelCase-prefixed ApiKey assignment fragments (serviceApiKey=, myApiKey=) by @orbit-agent-01 in #5764
• Byte-window cuts still expose ApiKey fragments for all-caps API spellings (HTTPAPIKey=, SERVICEAPIKey=) by @orbit-agent-01 in #5765
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5766
• [auto-task] Website accuracy — validate the oldest orbit-cli.com pages against the current release by @orbit-agent-01 in #5767
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5768
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5769
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5770
• [ci-failure-sweep] Fix red CI: CI / Check / Clippy / Test / Run CI guardrails by @orbit-agent-01 in #5772
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5773
• Return a typed reservation outcome from task-lock reserve instead of re-reading its JSON by key by @orbit-agent-01 in #5774
• pr_failure_handoff errors when the worktree step itself failed by @orbit-agent-01 in #5771
• Type pipeline wait statuses and parse wait results once instead of re-reading results[].status strings by @orbit-agent-01 in #5775
• Classify SQLite busy/locked as a typed lock-busy store error instead of re-matching its message text by @orbit-agent-01 in #5776
• Remove the implementers score-against-cost and first-review tier panel by @orbit-agent-01 in #5777
• [qa-sweep] Redact contextual credentials at GitHub log line-window boundaries by @orbit-agent-01 in #5778
• Conflict recovery rejects a host-authenticated CI repair head as stale publication by @orbit-agent-01 in #5779
• Remove the empty grid track left by the implementers panel by @orbit-agent-01 in #5781
• Type OrbitError::RemoteTool codes instead of comparing remote code strings to literals by @orbit-agent-01 in #5780
• Line-window credential masking leaks value on timestamp/column-prefixed GitHub log lines by @orbit-agent-01 in #5782
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5784
• Simplify Analytics › Codebase into hotspots, file and coupling views by @orbit-agent-01 in #5783
• Type the owner-refusal remote codes is_owner_refusal still compares as strings by @orbit-agent-01 in #5785
• Stop holding promotion on a pilot prerequisite already a dependency by @orbit-agent-01 in #5786
• Move the dashboard's Agents page under Analytics by @orbit-agent-01 in #5787
• Pilot promotion can admit a task whose prerequisite edge was not recorded by @orbit-agent-01 in #5790
• Pilots scorecard loses the model and crew of the pilot run by @orbit-agent-01 in #5788
• Scope usage-pressure crew selection by @danieljhkim in #5794
• Task list: line up the crew chip and row action across Review and In progress cards by @orbit-agent-01 in #5789
• Full task show keeps a pilot warning for a finished non-dependency prerequisite by @orbit-agent-01 in #5792
• Triage pilot-held proposed tasks with a hard-tier escalation routine by @orbit-agent-01 in #5793
• docs(rca): log the partial-rollup auto-fix cause behind ORB-17757's block by @danieljhkim in #5796
• Analytics › Reliability › Tools: add a 24h / 7d / 30d window selector by @orbit-agent-01 in #5795
• Task pane: dark header band so the tabs read apart from the header by @orbit-agent-01 in #5797
• Capped head/tail excerpt cut inside a line selection separates introducer from credential value and leaks it by @orbit-agent-01 in #5791
• Agent scorecards overview still places Agents under Observe by @orbit-agent-01 in #5798
• Analytics › Cost: split spend and read-only exploration into tabs under a header band by @orbit-agent-01 in #5799
• Show weekly usage pressure per provider account and crew by @orbit-agent-01 in #5800
• Task pilot holds no-diff sweeps as host_operational by @orbit-agent-01 in #5801
• Capped tail excerpt drops only first orphaned token, leaking credential after multi-token introducer (Authorization: Bearer) by @orbit-agent-01 in #5803
• PR auto-fix admits a repair on the first failed required check while others are still running by @orbit-agent-01 in #5805
• Move blocked-task triage to an event trigger on the escalation job by @orbit-agent-01 in #5804
• Score implementers against fleet rates for the same complexity tier by @orbit-agent-01 in #5806
• CI error signature picks a guard's timing line because "error" matches inside check-error-translation.sh by @orbit-agent-01 in #5802
• Share the run CLI-invocation log projection below CLI, HTTP and MCP by @orbit-agent-01 in #5808
• Incidents: remove the "Last hour only" filter; the window selector covers it by @orbit-agent-01 in #5807
• Cost exploration tab hides loading, error, and aggregate status by @orbit-agent-01 in #5810
• Weight task crew draws by usage pressure, re-drawing at admission by @orbit-agent-01 in #5809
• Dashboard chip duplicates the model scope on seven_day_opus and seven_day_sonnet by @orbit-agent-01 in #5812
• Shrink drain no_diff.rs: shared handoff steps, table rows by @orbit-agent-01 in #5811
• Shrink worktree_resolution.rs: shared repo/home fixture by @orbit-agent-01 in #5814
• Record Grok usage-window readings into the provider-limit store by @orbit-agent-01 in #5813
• Shrink run_observation.rs: shared run-state setup, rows by @orbit-agent-01 in #5816
• Shrink allocation_admission.rs: shared claim setup, rows by @orbit-agent-01 in #5815
• Shrink v2_worktree_lifecycle.rs: shared setup, table rows by @orbit-agent-01 in #5818
• Make HTTP codebase related use the shared query defaults and error shape by @orbit-agent-01 in #5819
• Shrink dispatch_admission.rs: shared drain fixture, rows by @orbit-agent-01 in #5820
• docs(design): scope performance-weighted crew selection by @danieljhkim in #5824
• Share task artifact export below the surfaces so a routed --out writes binary artifacts by @orbit-agent-01 in #5821
• docs: trim CLAUDE.md and remove redundancies by @danieljhkim in #5828
• [dependabot-sweep] Update fast-uri in website/package-lock.json by @orbit-agent-01 in #5823
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5829
• Weigh pull-drain crews by the follower's own usage pressure by @orbit-agent-01 in #5827
• Shrink web codebase.rs tests: shared analytics fixture by @orbit-agent-01 in #5830
• docs: bring root guides into doc-duties with last_validated frontmatter by @danieljhkim in #5834
• docs(design): add a scope track beside the full design-doc track by @danieljhkim in #5832
• Shrink handoff_landing.rs: shared forge setup and assertions by @orbit-agent-01 in #5831
• Record Antigravity (agy) usage-window readings into limit store by @orbit-agent-01 in #5825
• Shrink auto_fix.rs: shared repair setup and refusal asserts by @orbit-agent-01 in #5833
• Move the run-events query below the HTTP and CLI surfaces into one shared operation by @orbit-agent-01 in #5835
• Score implementers per task type within each complexity tier by @orbit-agent-01 in #5836
• Shrink admission.rs: shared pull setup and refusal asserts by @orbit-agent-01 in #5837
• Shrink pr_landing.rs: shared refusal asserts, table rows by @orbit-agent-01 in #5838
• Shrink ci_failure_goldens.rs: shared owner and branch setup by @orbit-agent-01 in #5839
• Operator docs still count eleven seeded auto-tasks and three owner-pinned routines by @orbit-agent-01 in #5822
• Apply usage pressure to activity, review and verifier pool draws by @orbit-agent-01 in #5826
• Rank pilots on pilot warnings too: confirmed warnings, dismissed warnings and missed scope blocks by @orbit-agent-01 in #5841
• Preserve executor launcher prefix arguments in Antigravity quota reads by @orbit-agent-01 in #5840
• docs(design): scope hidden acceptance for unattended delivery by @danieljhkim in #5842
• Hidden acceptance scope misstates surface-hash coverage and delivery-code-review schedule by @orbit-agent-01 in #5845
• Shrink mcp_roundtrip.rs: shared MCP setup, table rows by @orbit-agent-01 in #5846
• Refresh PR-link browser check for shared task action width by @orbit-agent-01 in #5847
• Persist an hourly crew-performance snapshot for draws to read by @orbit-agent-01 in #5844
• Drop the Codex/Claude-only native inspection gate; prove inspection by the observed revision instead by @orbit-agent-01 in #5843
• By-type classification ignores symbol: context-file paths by @orbit-agent-01 in #5848
• Read the crew-performance snapshot in one read transaction by @orbit-agent-01 in #5849
• Make the run-job YAML example usable without Orbit's checkout by @orbit-agent-01 in #5850
• Make uncertain-launch dashboard recovery guidance self-contained by @orbit-agent-01 in #5851
• [auto-task] Website accuracy — validate the oldest orbit-cli.com pages against the current release by @orbit-agent-01 in #5854
• [security-review] Refresh desktop RSA dependencies for crypto-bigint and ctutils timing advisories by @orbit-agent-01 in #5852
• Enforce and harden the inspection proof from ORB-17800 by @orbit-agent-01 in #5853
• Preserve custom Orbit roots in generated MCP client registrations by @orbit-agent-01 in #5856
• Automation relative times can read "60 min" ("in 18 h 60 min") by @orbit-agent-01 in #5857
• Weight crew pool draws by crew performance (absolute or comparative) by @orbit-agent-01 in #5858
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5860
• Settings › System and Hosts lose their column labels at phone width, leaving bare values by @orbit-agent-01 in #5859
• Analytics › Cost model-token label uses the disabled colour and fails WCAG AA (3.74:1) by @orbit-agent-01 in #5861
• Analytics › Agents shows three unlabelled counts for one role (tab 5, panel 11, problems 16) by @orbit-agent-01 in #5862
• Settings › System header runs "Resource throttle" into its config key with no space by @orbit-agent-01 in #5863
• At phone width, a reloaded or linked dashboard view hides its selected sub-view tab off-screen by @orbit-agent-01 in #5864
• Add a shadow mode for crew-performance draws with a share comparison report by @orbit-agent-01 in #5865
• Write the automation consumer generation/byte-fenced checkpoint update once in driver/sqlite/automation by @orbit-agent-01 in #5866
• Share the SQLite timestamp stamp, unsigned clamp and resource-minute row mappers across driver/sqlite stores by @orbit-agent-01 in #5867
• Group provider-limit policy and budget parsing by @orbit-agent-01 in #5868
• Split GitHub log streaming into named concerns by @orbit-agent-01 in #5869
• provider_limit module rustdoc omits budget declarations by @orbit-agent-01 in #5870
• Group source inspection checkout and native tools by @orbit-agent-01 in #5871
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5872
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5873
• [auto-task] Website accuracy — validate the oldest orbit-cli.com pages against the current release by @orbit-agent-01 in #5874
• Check / Clippy / Test PR p90 is 626s, over the 10-minute budget by @orbit-agent-01 in #5875
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5876
• CI error signature picks a passing TAP 'ok N' line as the cause by @orbit-agent-01 in #5877
• orbit.task.artifact.put: clarify examined_paths entry types by @orbit-agent-01 in #5878
• [friction-curation] Host-tunnel single-flight test fails on a designed port retry by @orbit-agent-01 in #5855
• docs: Log the ORB-17852 rescue cause in the failure log by @danieljhkim in #5879
• Dashboard task rows: remove trailing gap after the Approve button and PR link by @orbit-agent-01 in #5880
• CI sweep fails on PR jobs that check out a second helper sha by @orbit-agent-01 in #5881
• Retire the hidden no-op --refresh-defaults flag of orbit workspace init by @orbit-agent-01 in #5882
• Split application adapters and group related job modules by @orbit-agent-01 in #5883
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5885
• Delete four unreferenced public items from orbit-store (compose, friction export, automation_states, SkillCatalog::root) by @orbit-agent-01 in #5884
• Delete never-constructed error variants, an observation variant, a model constant and a redactor constructor from orbit-common by @orbit-agent-01 in #5886
• Point the auto-concurrency macOS tree check at the moved test by @danieljhkim in #5888
• [BLOCKED] Tidy the ORB-17863 module split: imports, visibility, docs by @orbit-agent-01 in #5887
• Stop the sweep skipping state routines that share a target but watch different triggers by @orbit-agent-01 in #5890
• refactor: Extract the orbit-core runtime kernel into orbit-runtime [ORB-17906] by @danieljhkim in #5889
• Reset checkout directory attribution between workflow steps by @orbit-agent-01 in #5891
• Task detail: group Context files by crate, with a flat-path view by @orbit-agent-01 in #5894
• Move bundle-admission decisions out of the deterministic-action adapter by @orbit-agent-01 in #5893
• Have task pilot hold promotion only on hard blockers by @orbit-agent-01 in #5892
• Give the path-resolution helpers one home in orbit_common::fs by @orbit-agent-01 in #5895
• [delivery-code-review] Runtime extraction leaves five CodeQL path barriers bound to removed symbols by @orbit-agent-01 in #5896
• Task detail: History as a readable timeline instead of raw JSON by @danieljhkim in #5897
• Context files flat view overflows the pane and clips contended names by @orbit-agent-01 in #5898
• [code-scanning-sweep] Fix rust/path-injection in crates/orbit-runtime/src/host_resource/usage.rs by @danieljhkim in #5899
• refactor: Make agent activity instructions clearer and shorter by @danieljhkim in #5901
• Break the application-layer dependency cycle inside orbit-core by @orbit-agent-01 in #5900
• Dashboard: move host readings from the top bar to the rail foot by @orbit-agent-01 in #5903
• Add built-in argon crew (Gemini 4 Argon via agy) and seed it into hard_complexity_crews when agy is detected by @danieljhkim in #5902
• [auto-task] Validate the oldest workspace documentation by @orbit-agent-01 in #5904
• Context files Flat paths hard-clips long basenames after overflow repair by @orbit-agent-01 in #5905
• Cut task's upward edges to job, review, distributed, sweep_filing and workspace_auto by @orbit-agent-01 in #5906
• Top bar: provider usage chips open a detail dropdown by @orbit-agent-01 in #5907
• Context files: tighter rows and a generic "By folder" grouping in place of "By crate" by @danieljhkim in #5908
• Route job's drain and pull-settlement up-calls through ports (job → distributed, pull_drain) by @orbit-agent-01 in #5909
• Tasks list: narrow the action column and show "View run" for remote runs by @danieljhkim in #5910
• [delivery-code-review] Pending task quick actions overlap the crew control in the narrowed column by @orbit-agent-01 in #5913
• Dashboard serves stale crews/settings after config.toml edits: cached workspace runtime is never invalidated by config changes by @orbit-agent-01 in #5911
• Cut job's remaining upward edges to admission, automation, review, sweep_filing and workspace_auto by @danieljhkim in #5912
• Provider usage dialog leaves aria-expanded on the hidden chip after a 1900px resize by @danieljhkim in #5915
• [delivery-code-review] Literal root folder loses Context files subheadings by @danieljhkim in #5916
• Reject grouped relative imports in the job drain dependency guard by @orbit-agent-01 in #5914
• [delivery-code-review] Context copy button covers basenames and contention status by @danieljhkim in #5917
• [delivery-code-review] Config refresh rebuilds an embedded dashboard with empty workspace roots by @orbit-agent-01 in #5918
• Provider usage dialog loses keyboard focus when a 1900px resize hides the focused chip by @orbit-agent-01 in #5919
• Grouped relative-import guard drops commented use-trees and flags quoted ones by @danieljhkim in #5920
• Reorganize dashboard Settings into per-topic tabs by @orbit-agent-01 in #5921
• Route task's remaining inherent calls into job through task-owned ports (task → job) by @danieljhkim in #5922
• Cut the remaining upper-layer back edges among review, automation, distributed, admission and workspace_auto [ORB-17939] by @danieljhkim in #5923
• chore: prepare v0.32.0 release [ORB-17913] by @danieljhkim in #5924

Full Changelog: v0.31.0...v0.32.0