Repository navigation
2.11.8
·
530 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
Fixes retention rollback integrity and imported-workflow namespace ownership.
- Provider deletion starts after pruning commits. Failed deletions remain visible and retryable, including after namespace deletion and process restart.
- Namespace deletion and explicit cleanup return207 while provider cleanup remains pending. Inspect
external_payload_cleanup/retention_cleanup; committed pruning remains committed. - Core2.15.12 and canonical ownership guards prevent cross-namespace import, list, activity-poll replay and history-continuation access. Signing keys are rejected in URLs; JSON-body and configured keys remain supported.
The standard bootstrap applies the new pending-deletion table. Include it in database backups/recovery. Custom storage adapters must support replay-safe deletion of an already-absent object and reconstruction from saved policy. See the external-payload contract.
Image/chart publication, installed namespace/import/poll acceptance and installed retention/restart acceptance pass. Immutable image index: sha256:3848d5d5cd1b23bd2881e3fdecea64cc44b72e6fb812e577c2db6d0872d065dd (amd64 and arm64). The broader ingress/recovery work remains tracked in #789.