v0.11.0

0.11.0 (2026-07-14)

Features

• desktop: auto-detect run history as projects + Finder-pick local repos (8e07c6b)
• desktop: sign in with GitHub/GitLab and pick a permitted repo (authenticated clone) (f51a536)
• desktop: sign in with GitHub/GitLab and pick a permitted repo (authenticated clone) (#223) (dae755d)

Bug Fixes

• app: render markdown, add offline state, stop dropping payloads (609a64c)
• close from-scratch gap-report findings (gate surfacing, review markdown, evidence gates, web app, site, infra) (#216) (8bcbf63)
• core: route the annotation leaf through the containment backstop too (af3867e)
• desktop: close the operator-surface gaps (markdown browsing, replies, proof at the gate, archive) (8ee5e6c)
• desktop: match the drift-chip run by (slug, port), not project name (347d0fa)
• engine: close evidence + correctness holes at the checkpoint gates (da2fbf4)
• engine: close the B+D audit residuals (UserGate-at-Spec, drift re-orient cascade + over-broad trigger) (ca674f9)
• engine: land station work onto run-main (the manufactured code never reached the base branch) (#219) (22b7270)
• engine: land station work onto run-main (worktree_is_dirty ignored .darkrun-only dirt) (f2506c7)
• engine: let non-dark runs reach Reflect+Checkpoint; gate checkpoint_decide to a real hold (d80b18a)
• engine: narrow the UserGate-at-Spec hold to the early-stamp race only (6ecc9ee)
• engine: require evidence (or an explicit override) at the human Prove gate (d1e3f1d)
• engine: unify feedback ids, wire annotation-close, retire sessions on reset, re-orient on drift close (4c7401d)
• engine: unwedge non-dark runs (Reflect+Checkpoint), gate checkpoint_decide, unify feedback ids, wire annotation-close, retire sessions on reset, safe drift re-orient (#221) (ec5c83b)
• gate hold + sandbox registry + dev-bundle seal + 3 gap-close bundles (discovery, operator surface, platform edges, vcs extraction) (#218) (17e69c0)
• gates+desktop: hold at every operator gate; sandbox-proof the registry; seal the dev bundle (aeee7a0)
• gate: surface gates to a running app via deep link + engine-follow (40a08c6)
• git: satisfy clippy 1.97 question_mark in the remote_status fixture parser (dbbad70)
• git: satisfy clippy 1.97 question_mark in the remote_status fixture parser (b9b5cc9)
• http: surface a refused gate decision (no false success); read agent-attached proof from disk (479edf9)
• http: surface refused gate decisions (no false success) + read agent-attached proof from disk (#222) (7074e37)
• infra: resolve relay. dial + deploy GitHub App creds (2deaf6f)
• ios: full-bleed app icon (stop iOS double-masking the rounded tile) (#234) (44e8395)
• ios: use a full-bleed app icon so iOS stops double-masking it (5512d65)
• low-severity UX residuals (drift-chip slug collision + escalated count, visible archive errors, non-macOS window guard) (#224) (da670a9)
• merge: unify frontmatter rendering + never-drop guarantee + drop vulnerable quick-xml (c4dc2cd)
• platform: legacy-tree discovery, warm-app deep link, per-run presence, TestFlight idempotency (067805a)
• release+site: unblock the release pipeline, per-route canonicals, honest statusline + verify/bench (9dc7c8b)
• review: render markdown for all review artifacts, not raw source (14b9331)
• security+release: reject path-traversal slugs + escape OAuth callback; unblock release, per-route canonicals, honest statusline/verify/bench (#220) (340c0f6)
• security: reject path-traversal slugs at the route + store; escape the OAuth callback (e5656aa)
• site: make /preview and /review showcases deliver their pitch (2236db8)
• statusline+relay: keep review chips live at the UserGate; point remote access at a host that exists (0e7263f)
• the low-severity UX residuals from the bundle audits (3f43e9a)
• ui: move CSS doc comment onto its const (empty-line-after-doc lint) (82d135c)