v0.5.58 — Harden Trinity Degradation and Provider Currency

Deployed: merge 3019f5c4889d8334063d4a2d9243e87d96fc93a8 (PR #324) · Cloud Build be6ed621 · live 2026-08-07T20:35:03Z

What changed

• A provider failure no longer destroys the whole validation. When one AI provider rate-limits, truncates, times out or rejects a key, that stage degrades and is named — with its provider and model — while the stages that succeeded are preserved. The result is explicitly marked incomplete for human review; it can never present as complete.
• Typed failure reporting. PROVIDER_RATE_LIMITED, PROVIDER_OUTPUT_TRUNCATED, PROVIDER_TIMEOUT and auth failures each carry an accurate retryable flag and a recovery hint specific to the actual failure — replacing a generic error that previously suggested changing a setting the caller had never used.
• The founder summary can no longer contradict its own analysis. It previously could state "no major ethical or legal concerns" while listing an ethical concern. Fixed on the ethics surface and on the security surface, which had the identical fault.
• Incomplete runs are never written to shared history.
• Provider logs are sanitized — failure events carry an exception type, never a response body, key, or provider account metadata.
• BYOK model catalogues now carry a currency contract across all six providers: a retired-model gate and a 90-day verification ceiling. This fixes a live defect where the Cerebras default pointed at a decommissioned model and failed for anyone who selected it.

Verification

• 1,186 tests passed / 14 skipped; all 9 remote checks green
• Independent security review at the exact commit, including fault injection across rate-limit, truncation, authentication and simultaneous all-stage failure
• Post-deploy smoke: 31 passed / 0 failed across public truth, legal surfaces, anonymous containment, live inference, and the typed-failure contract
• A genuine unplanned provider failure occurred during the post-deploy smoke and was handled exactly as designed: one stage degraded and was withheld, the other two returned real analysis, and the result was marked incomplete rather than collapsing

Not claimed

No legal-compliance certification. The coordination tools remain disabled following an earlier security incident, which is contained but not closed; questions of statutory notification remain with qualified counsel on a separate track.