v0.1.36

What's Changed

• feat(fs): read-side accessors for the read_dir burn by @zackees in #511
• feat(ipc): bounded async flush, shutdown and split halves (#433) by @zackees in #512
• feat(dylint): deny client calls to unbounded kernal-api waits (#433) by @zackees in #513
• feat(dylint): deny kernal-api lock guards held across .await (#433) by @zackees in #514
• feat(broker_v2): deprecate unbounded connect_published (#433) by @zackees in #515
• feat(fs): deprecate unbounded advisory file locks (#433) by @zackees in #517
• feat(process): deprecate unbounded child waits (#433) by @zackees in #518
• feat(async_engine): deprecate unbounded Mutex/RwLock acquisition (#433) by @zackees in #519
• feat(async_engine): deprecate unbounded acquire, send and join_next (#433) by @zackees in #520
• feat(ipc): deprecate unbounded IPC stream waits (#433) by @zackees in #521
• feat(async_engine,process): deprecate unbounded recv and output capture (#433) by @zackees in #522
• feat(dylint): deny blocking kernal-api calls in async bodies (#433) by @zackees in #523
• feat(process): deprecate ProcessPostExitDrain::WaitForEof (#433) by @zackees in #524
• feat(terminal): deprecate optional-timeout terminal input wait (#433) by @zackees in #525
• feat(dylint): deny unbounded awaits of kernal-api futures (#433) by @zackees in #526
• feat(async_engine): deprecate unbounded Runtime::run (#433) by @zackees in #528
• ci: adopt RUST-033 full lint lane in the local gate (#516) by @zackees in #527
• feat(async_engine): name the holder of a kernal-api Mutex (#433) by @zackees in #529
• fix(fs): drop needless borrows in the path/tree accessor test by @zackees in #509
• chore(dylint): migrate lint libraries to Dylint 6.2.0 / nightly-2026-08-15 by @zackees in #530

Full Changelog: v0.1.35...v0.1.36

v0.1.35

What's Changed

• feat(fs): path, tree and link accessors for kernal-api clients by @zackees in #506
• feat(fs): accept AsRef on the mutation accessors, like std::fs does by @zackees in #508
• chore(release): 0.1.35 (carries #506 fs accessors) by @zackees in #507

Full Changelog: v0.1.34...v0.1.35

v0.1.34

What's Changed

• feat(fs): plain file mutation accessors for kernal-api clients by @zackees in #498
• chore(ci): adopt ci.yml 54cec7ad (GATE-003 shadow default) by @zackees in #500
• ci(gate): follow the GATE-003 shadow default instead of enforce by @zackees in #502
• chore(release): 0.1.34 by @zackees in #501
• chore(release): carry 0.1.34 in pyproject, Python package and docs by @zackees in #505

Full Changelog: v0.1.33...v0.1.34

v0.1.33

What's Changed

• fix(fs): inspect running Windows executables without write access by @zackees in #489
• Add held-file extended ACL inspection by @zackees in #496
• chore: prepare kernal-api 0.1.33 by @zackees in #497

Full Changelog: v0.1.32...v0.1.33

v0.1.32

What's Changed

• fix: unpin soldr (install the latest) by @zackees in #431
• feat(http-client): opt-in rustls TLS backend (#427) by @zackees in #432
• ci: bosn run-record id, forge-ci ci-lint pin, yanked inout, host_processes flake by @zackees in #430
• fix(local-gate): report a failed command's stderr and exit code (#420) by @zackees in #435
• ci: trigger on merge_group and end each queue run with the cache janitor (GEN-022) by @zackees in #437
• ci: pin ci-lint to forge-ci/ci.yml main for merge_group plans by @zackees in #444
• feat(broker-v2): facade-owned broker v2 daemon lifecycle; release 0.1.32 by @zackees in #434
• fix(crash): an all-threads-dropped capture is no sample (#418) by @zackees in #442
• ci: main pushes no longer cancel each other (CACHE-016) by @zackees in #445
• docs(agents): adopt the fleet's narrowed design-principles directives (forge-ci/ci.yml#163) by @zackees in #438
• ci: consume the GEN-021 reuse decision (skip validation steps on a verified main push) by @zackees in #441
• fix(ci): run Dylint lint-library tests from their crate dirs (RUST-016) by @zackees in #443
• fix(local-gate): accept the moved repository under either name (#436) by @zackees in #446
• test(source_policy): reject libc wrappers newer than glibc 2.17 (#395) by @zackees in #447
• fix(ci): clear mechanical ci-lint findings (forge-ci/ci.yml#95) by @zackees in #439
• fix(sync_spawn): wait no longer holds the child lock while blocked (#433) by @zackees in #448
• feat(webview): monitor and work-area query for widget placement (#393) by @zackees in #449
• fix(ci): bound the background webview apt install and keep its log on stall by @zackees in #450
• docs(433): categorized lock/wait/process inventory by @zackees in #451
• fix(process): bounded runs require a deadline (#433) by @zackees in #452
• fix(async_engine): blocking_send requires a timeout (#433) by @zackees in #453
• feat(fs): bounded advisory file locks (#433) by @zackees in #454
• feat(async_engine): bounded semaphore acquisition (#433) by @zackees in #456
• feat(async_engine): bounded channel send and receive (#433) by @zackees in #457
• ci: burn down ci-lint precheck findings (ci.yml#95) by @zackees in #455
• feat(async_engine): bounded Mutex and RwLock acquisition (#433) by @zackees in #461
• feat(async_engine): bounded owned RwLock guards (#433) by @zackees in #462
• ci: port tracked shell/PowerShell scripts to Python (GEN-005, 1/3) by @zackees in #458
• feat(async_engine): bounded unbounded/broadcast receive (#433) by @zackees in #463
• ci: move multi-line workflow run: steps into ci/*.py (GEN-005, 2/3) by @zackees in #459
• ci: add the fast job (Ruff + Pylint) (GEN-004, 3/3) by @zackees in #460
• ci: make ci-lint precheck --live gating; bump ci-lint to 254e16d (forge-ci/ci.yml#95) by @zackees in #464
• ci: GEN-022 step 5 -- push-only cache writers for linux and Dylint (forge-ci/ci.yml#432) by @zackees in #465
• ci: GEN-022 step 6 -- main pushes stop revalidating (forge-ci/ci.yml#432) by @zackees in #466
• feat(async_engine): bounded oneshot receive (#433) by @zackees in #467
• feat(process): bounded PlatformChild wait (#433) by @zackees in #468
• fix(ci): cap and retry each background webview apt install attempt by @zackees in #469
• feat(async_engine): bounded Notify waits (#433) by @zackees in #470
• feat(async_engine): bounded task joins (#433) by @zackees in #471
• feat(async_engine): bounded pair join (#433) by @zackees in #472
• feat(async_engine): bounded Runtime::run (#433) by @zackees in #473
• fix(ci): retry only the webview apt download, from the primary mirror by @zackees in #474
• fix(ci): rename the download step so it no longer shadows download() by @zackees in #475
• feat(process): bounded DaemonChild/SpawnedChild wait (#433) by @zackees in #476
• feat(process): time-bounded PlatformChild output capture (#433) by @zackees in #477
• feat(terminal): bounded terminal input wait (#433) by @zackees in #478
• feat(async_engine): bounded blocking lock guards (#433) by @zackees in #479
• docs(wait-inventory): record existing bounded child and webview waits (#433) by @zackees in #480
• fix(ci): give the offline webview install the remaining apt budget by @zackees in #481
• docs(wait-inventory): audit IPC and broker waits (#433) by @zackees in #482
• feat(ipc): bounded Stream connect (#433) by @zackees in #483
• feat(broker_v2): connect deadline also bounds the dial (#433) by @zackees in #484
• feat(broker_client): BackendConnection read timeout (#433) by @zackees in #485
• feat(ipc): bounded AsyncStream connect, read and write (#433) by @zackees in #486
• feat(ipc): Stream send timeout (#433) by @zackees in #487
• Derive facade and platform errors with thiserror by @zackees in #488
• Update running-process substrate to 4.10.20 by @zackees in #490
• Stabilize profiling release tests and feature gating by @zackees in #493

Full Changelog: v0.1.31...v0.1.32

v0.1.31

What's Changed

• release: prepare kernal-api 0.1.31 (zip =9.0.3) by @zackees in #429

Full Changelog: v0.1.30...v0.1.31

v0.1.30

What's Changed

• fix(fs): recognize the Windows deny ACE in write seals by @zackees in #426
• chore(deps): mimalloc-pprof =1.1.0 (explicit pprof) and release 0.1.30 by @zackees in #428

Full Changelog: v0.1.29...v0.1.30

v0.1.29

What's Changed

• Trust attested minimal PR workflow replays by @zackees in #417
• ci: skip linux and dylints on a verified byte-identical merge (GEN-021) by @zackees in #419
• ci(cache): bound the Dylint families with evict = "lru" (CACHE-029) by @zackees in #421
• ci(cache): declare ancestor promotion for dylint and dylint-out (#335) by @zackees in #422
• feat(fs): seal files against in-place writes without the READONLY attribute by @zackees in #423
• release: prepare kernal-api 0.1.29 by @zackees in #424
• fix(fs): carry the observed DACL in the seal read-back error and fix the test's ACE layout by @zackees in #425

Full Changelog: v0.1.28...v0.1.29

v0.1.28

What's Changed

• feat(http): native SSE id and event fields by @zackees in #411
• release: prepare kernal-api 0.1.28 by @zackees in #412
• fix: report profiler ring full on final capture by @zackees in #413
• test: remove load-sensitive profiler timing bound by @zackees in #414
• Require source-bound minimal Linux and Dylint replay proof by @zackees in #415
• Retire old-lock Dylint outputs under cache budget pressure by @zackees in #416

Full Changelog: v0.1.27...v0.1.28

v0.1.27

What's Changed

• Run a source-bound minimal Linux gate through bosn and act2 by @zackees in #399
• ci: add source-bound shadow proofs for Linux and Dylint by @zackees in #400
• ci: preserve local Dylint cache saves under bosn act2 by @zackees in #401
• ci: validate checksum freshness for cached nightly Dylint by @zackees in #402
• ci: ratchet Rust and Python function complexity by @zackees in #404
• Add Linux system-tray facade and prepare 0.1.27 by @zackees in #405
• fix(release): align standalone consumers with SDK version by @zackees in #406
• test: validate Python version against the current Rust release by @zackees in #407
• test(profile): isolate the ring timing fixture from parallel tests by @zackees in #409

Full Changelog: v0.1.26...v0.1.27