v9.1.0

[9.1.0] - 2026-09-27

/flow-auto can show bounded Jev recovery advice when TypeSafe is configured.

• With TYPESAFE_API_KEY, /flow-auto defaults to shadow advice, limited to six
  attempts and $0.02. Without the key, recovery advice stays off. Pass
  --recovery=off to opt out of a configured run.
• Shadow advice cannot authorize edits or other mutations. Delegated recovery
  remains unavailable because no qualified recovery profile is installed.
• Flow now reports a Jev model mismatch and a refused delegated request in the
  terminal. Truncated validation output can use a matching bounded host output
  file to retain complete validation evidence.
• Session v5 schema, validation and reviewer gates, and continuation routing are
  unchanged. The OpenCode host used by the release checks is pinned to 1.18.31.
• This release uses a GPT-6 Sol-only qualification profile. Its evidence makes
  no cross-provider reliability claim. Later releases retain the two-provider gate.

Upgrade with opencode plugin opencode-plugin-flow@9.1.0 --global --force.

Qualification evidence

Sealed bundle: sha256:86bbc934222c2715d315521ff5041edc718eba6492ff679db50a6d494fc1bd6d
Report: flow-v2-2026-09-27T00-21-03-088Z
Artifact: sha256:0b7f7a66bf1910b5d0da3a235f891d532b4aa352a2dbd25e398325c18e051b24
Canary: sha256:f4b729e4e1d66a2badbdc9f34c6bedbc044e59bd9dd62a254e27f8e14611e461
Verified attempts: 38/38 scored, 38 scheduled.

Provider	Passed	Scored	Scheduled
openai	38	38	38