v3.0.0-alpha.14

Changelog

• 0cd4ff4 docs(EN-1543): document the canonical v3.0 HTTP QueryFilter surface (#1621)
• a618d7d docs(EN-1565): update preload documentation after the Coverage refactor (#1648)
• e32cf0f docs(agents): document node-local config boundary (#1710)
• dee568b docs(agents): route AI context by subsystem (#1699)
• 3055d1a docs(agents): standardize AI code review contract (#1714)
• d02eacc feat(EN-1458): detect reverse-map orphans for removed indexed metadata fields (#1649)
• d9bd018 feat(EN-1541)!: make QueryFilter the sole HTTP selector for volume aggregation (#1613)
• 92b85b9 feat(release): build ledgerctl for Windows (#1644)
• 574749b fix(EN-1379): surface coverage misses instead of wrapping them as storage faults (#1647)
• 5e4868f fix(EN-1506): classify every Apply request variant explicitly (#1642)
• 5e60101 fix(EN-1508): align gRPC ListLogs scope with HTTP on ledger:LedgerRead (#1630)
• c35ae99 fix(EN-1515): repair signing-projection restore, boot decode, and admission validation (#1667)
• 09cc3bd fix(EN-1522): gate DeleteLedger cascade and fail loudly on post-handler inconsistencies (#1638)
• 8b24ee5 fix(EN-1536): enforce typed audit failures and fatal post-Preload scope invariant (#1637)
• 92937dd fix(EN-1553): require TLS when --auth-enabled (#1605)
• a931282 fix(EN-1557): classify numscript admission failures by state provenance (#1622)
• e430164 fix(EN-1558): keep technical execution data out of audit hashes (#1616)
• 9657b09 fix(EN-1564): avoid backfill for indexes declared on an empty ledger (#1609)
• d7ff7b4 fix(EN-1597): honor absolute SeekGE/SeekLE reposition-after-exhaustion in read-store iterators (#1635)
• bb0297c fix(EN-1622): serialize transactions/chapters/log responses through their MarshalJSON (#1700)
• 3962883 fix(EN-1748): cross-store read consistency — aligned acquisition + versioned metadata event keys (#1678)
• ee6cb02 fix(EN-1780): green the full-tag e2e suite and gate it in CI (#1708)
• ce1cf39 fix(EN-1784): allocate e2e node ports and fail startup on bind errors (#1722)
• f22cc72 fix(EN-1784): migrate remaining business tests to leased ports (#1740)
• 15cf0cd fix(antithesis): catalogue every assertion properly (literal messages + runtime-registered block properties) (#1665)
• 487371e fix(backup): backfill archival-purged ranges from cold storage in incremental backups (#1673)
• f5dc9ef fix(check): report a read index ahead of the verified range instead of skipping (#1686)
• e63f413 fix(check): seed replay with baseline transaction states under archiving (#1636)
• bdb976c fix(http): enforce exact-one typed log response in unitary handlers (EN-1537) (#1639)
• c3ddbad fix(indexbuilder): clear LedgerLog volume-annotation lists on cursor reuse (#1655)
• 934bbe0 fix(indexbuilder): scope the generic backfill replay to the task's ledger (#1671)
• 2c6cb1f fix(monitoring): repair ledger dashboard queries (#1728)
• f0e2023 fix(query): read archived transactions from cold storage in GetTransaction (#1623)
• ee6f2fb fix(query,admission): read archived logs from cold storage across replay / ListLogs / prepared-query paths (#1633)
• 19702e9 fix(revert): keep original postings out of the audit-bound order (#1614)
• d73fec7 fix(state): purge stranded pre-transient volume rows at zero balance (#1645)
• f1c1c2f fix: make trusted AI loop tools executable (#1738)
• 4974c4c fix: require local validation before AI approval (#1732)
• 1d8a493 perf(antithesis): immutable fingerprinted oracle state — ~19x model-driver throughput (#1657)
• ab36444 refactor(EN-1513)!: remove persisted MirrorCursor, resume from the audited applied boundary (#1643)
• 73639f1 refactor(EN-1551): remove dead proto fields, drop all reserved, realign tags (#1672)
• 04c8f9e refactor(EN-1551): remove never-populated PreviewRestoreResponse fields (#1670)
• 97a488a test(EN-1772): assert the AuditFailure message derivation for every Describable (#1690)
• 9b67ba3 test(EN-1775): pin every REST route to its required scope (#1691)
• 6a696bb test(antithesis): model-driver idempotency replay + conflict coverage (#1650)
• 796e1ca test(antithesis): negative-space read probes for the model driver (#1656)