v3.0.0-alpha.17

Changelog

• 23b4f49 audit: add process boundary recovery campaign (#1833)
• ae5346f audit: add test reachability enforcement campaign (#1832)
• cad987d chore(deps): bump go-libs to v5.7.2 (#1798)
• f29cb04 chore(tooling): remove audit campaign orchestration (#1872)
• 4bb374a docs(agents): route deep audits through native workflow (#1831)
• 174eec9 feat(EN-1501): enforce the query-checkpoint limit in the FSM (stacked on #1750) (#1767)
• 16ede24 feat(EN-1827): replicated cluster policy (PR1) (#1750)
• 1f70170 feat(tooling): add atomic finding claims (#1858)
• d99d7f3 feat(tooling): add audit campaign inspection (#1855)
• 1feade5 fix(EN-1288): require an explicit selector on executable numscript references (#1698)
• 6e2023c fix(EN-1724): bind declared metadata types to index versions (#1829)
• 2dd21c0 fix(EN-1874): make Raft scale-down postcondition-driven (#1794)
• c313999 fix(EN-1888): persist a chapter's audit anchor with the close (#1823)
• d140339 fix(EN-1901): normalize degenerate query range bounds to the empty match (#1826)
• f36913a fix(EN-1904): stop the index-registry preload serving stale absence (#1830)
• 0240fc7 fix(admission): exempt leader-internal system proposals from signature enforcement (#1774)
• 46b21f6 fix(backup): rebuild the index registry from CreateIndex/DropIndex logs (#1769)
• 0bf7dec fix(bloom): replay deferred population after follower sync (#1807)
• 09f6d3c fix(chapters): archive chapters oldest-first (#1683)
• c0a3db3 fix(check): bind the checker baseline to the archived boundary (#1854)
• 8dd6053 fix(events): add app and version to v3 events (#1843)
• f151d7c fix(grpc): stop fabricating clean pages from canceled forwarded streams (#1809)
• ea50970 fix(indexes): wait causally after recreate (#1824)
• 8c21705 fix(logs): switch console encoder to zap-prettyconsole (#1822)
• 004be98 fix(operator): configure ledgerctl in cluster pods (#1784)
• d594624 fix(test): isolate audit assertions from chapter sealing (#1860)
• 6d76d60 fix(test): isolate nested AI tooling fixtures (#1870)
• 9136f7f fix(wal): preserve the running leader's retained terms (#1852)
• 14fadc9 fix: align reviewer isolation tests with provisioned HOME
• f227e9b fix: allow regular base-pinned review adapters (#1810)
• b327aea fix: enforce AI PR worktree binding
• ea295ef fix: enforce Bloom Stop ownership boundary
• a898acf fix: enforce adoption publication policy parity (#1848)
• 20fb4a4 fix: keep active fuzz inventory synchronized (#1840)
• c709722 fix: make archival residency the same on every path, and check it (#1850)
• f246c57 fix: revalidate target at publication boundaries (#1849)
• deaa0a5 fix: route snapshot fetcher and gRPC auth logs through the app logger (#1806)
• a96db81 fix: separate review target from trusted tool head (#1853)
• bee8193 perf(ci): split E2E packages across runners (#1819)
• 9be8b7a perf(indexer): skip reverse-map reads for new transactions (#1857)
• fa47912 perf(tooling): adopt cooperative fast local validation (#1871)
• 0d5cd3f perf(tooling): reuse exact same-run validation (#1866)
• 1d23f2d perf(tooling): use resident root guard for PR triage (#1859)
• ac968bc refactor(indexes): drop the dead BuildStatus from the registry row (EN-1858) (#1766)
• d387aab refactor(tooling): remove recovery and precondition layers (#1874)
• 0e85ea1 refactor(tooling): simplify native audit publication (#1873)
• b573adf test(e2e): promote checker baseline before restore check (#1863)
• ff3a105 test(e2e): prove Raft snapshot restoration (#1818)
• d7fa652 test(e2e): require validated ledger snapshot reads (#1816)
• 913badc test(state): protect primary double-entry guard (#1814)
• 1d13a0e test(state): verify cache restart mirror bidirectionally (#1815)
• 8623aa7 test: isolate Schemathesis from host disk occupancy (#1811)