v0.213.0

0.213.0 (2026-10-08)

⚠ BREAKING CHANGES

• for a seat — a key the house enrolled — a verb of a capability built in the house (a plugin under its own src/Plugins/) runs only if a person admitted it with the contract it has today. A seat that ran such verbs by a word typed into its scopes, by a word every seat holds, or by none, is refused until then; nothing is migrated. The refusal says so, identity:seats lists what waits before a seat trips on it, and a person admits from Agent → Decisions (milpa/agent-workspace 0.90 or later) or with identity:admit. The terminal's operator, passkeys, tokens and the operations of packages are judged as before.

Features

• a person admits a scope of a built capability without waiting for a refusal, by the digest of what was read (greenhouse decisions/0597) (#740) (a359982)
• a person takes back one admission, and the ledger keeps who did (greenhouse decisions/0590) (#744) (a793183)
• a verb of a capability built in the house runs for a seat only if a person admitted it (greenhouse decisions/0590) (e209335)
• an agent's work in the domain runs in the house, confined to the state it declares (#737) (9eb598b)
• an edit on what the session itself brought into the house is not asked about (greenhouse decisions/0596) (#745) (f6ecc5e)
• the house closes on a capability it saw declared whole (greenhouse decisions/0595) (#741) (e3079d1)

Bug Fixes

• an example in what a session reads shows the form of the value, never a name (#749) (9196811)
• the admission card says how this house runs a call, not how a house with confinement on would (#747) (9fd59e3)
• the house asks for the agent runtime that records where work ran, and the panel that admits and withdraws (#748) (1de2107)