v0.91.7

🌟 Release Highlights

This release introduces a native Agy engine, expands the Git-backed work queue, and improves model-routing visibility and security checks.

⚠️ Breaking Changes

• Gemini engine deprecated in favor of the experimental Agy engine (#66941). Plan to migrate Gemini workflows to Agy.

✨ What's New

• Native Go Agy engine with scoped dry-run dangerous-feature checks (#66998), plus smoke conformance and MCP tool allowlist fixes (#67007, #67003).
• Work queue upgrades: priority-aware engine conformance dispatch (#67222), scoped GitHub Issues mirrors (#67025), simpler storage configuration (#66985), and privacy-preserving debug logging (#66943).
• Declarative NVX runtime support, fail-closed by default (#66990).
• Better model visibility: AWF-routed model and effort reported across outputs (#66963), sub-agent failures, resolved models and per-agent spend (#66961), and corrected attribution for endpoint overrides (#67013).
• Isolated agents now use AWF-local gateways (#66957) and engine-compatible endpoints for routed models (#66956).
• Repository statistics infographic skill, reusable and verified (#67015).
• Firewall bumped to gh-aw-firewall v0.28.50 (#67035).

🐛 Bug Fixes & Improvements

• Secret references are now detected in all AWF environment sources (#67017).
• Fixed unnecessary writable-file preparation during secret redaction (#66995).
• SEC-005 repository authorization conformance fixed for Claim adapters (#67132).
• Safe-output handler error codes standardized (#67131).
• Shared-workflow validation errors are now deterministic (#67060).
• Absent work-queue branch handled during dispatcher activation (#67104).
• AgentRx optimizer input bounded to avoid prompt exhaustion (#67133).
• Actions caching disabled for setup-uv in agent jobs (#67022).
• Local zizmor and poutine scanners used when compatible (#66918).

📚 Documentation

• Docs restore a 620px reading measure (#67167); landing-page slides split into focused sections (#66988).
• Streamlined measuring-impact page (#67075) and self-healing doc fixes (#67028).

Generated by 🚀 Release · copilot · auto · 15.1 AIC · ⊞ 11.7K

---

What's Changed

• docs: explain native work queues and a checklist alternative by @pelikhan in #66965
• Add privacy-preserving work queue runtime debug logging by @pelikhan in #66943
• Make the slideshow navigation bar nearly invisible when idle by @pelikhan with @Copilot in #66986
• Use engine-compatible endpoints for routed models by @SivaKesava1 with @Copilot in #66956
• Split dense landing-page slides into focused sections by @pelikhan with @Copilot in #66988
• Scope work queue stress runs and shorten PR profiles by @pelikhan with @Copilot in #66991
• Use compatible local zizmor and poutine scanners when available by @pelikhan with @Copilot in #66918
• Remove work-queue storage configuration by @pelikhan in #66985
• Isolate dry-run telemetry and make agents own security preflight by @pelikhan in #66954
• Use AWF-local gateways for isolated agents by @SivaKesava1 with @Copilot in #66957
• Report AWF-routed model and effort across workflow outputs by @SivaKesava1 with @Copilot in #66963
• Fix unnecessary writable-file preparation during secret redaction by @pelikhan in #66995
• Implement native Go Agy engine and scope dry-run dangerous-feature checks by @pelikhan in #66998
• Fix Agy smoke native MCP tool allowlist by @pelikhan in #67003
• fix: remove wasted engine import assignment by @pelikhan in #67014
• Add fail-closed declarative NVX runtime support by @lpcox with @Copilot in #66990
• Dim slideshow toolbar when idle by @pelikhan with @Copilot in #67011
• Add reusable, verified repository statistics infographic skill by @pelikhan in #67015
• Fix Agy smoke conformance transports and completion evidence by @pelikhan in #67007
• [docs] Self-healing documentation fixes from issue analysis - 2026-10-08 by @github-actions[bot] in #67028
• Deprecate Gemini engine in favor of experimental Agy by @pelikhan in #66941
• Report sub-agent failures, resolved models, and per-agent spend by @SivaKesava1 with @Copilot in #66961
• Disable Actions caching for setup-uv in agent jobs by @SivaKesava1 with @Copilot in #67022
• Make shared-workflow validation errors deterministic by @pelikhan with @Copilot in #67060
• Clarify expression hash input for CodeQL review by @pelikhan with @Copilot in #67057
• Replace manual environment restoration with t.Setenv in CLI tests by @pelikhan with @Copilot in #67058
• Use t.Chdir in CLI tests by @pelikhan with @Copilot in #67059
• Seed ESLint factory work and allow experimental dry-run notices by @pelikhan in #67023
• [docs] docs: unbloat measuring-impact.md by @github-actions[bot] in #67075
• Detect secret references in all AWF environment sources by @SivaKesava1 with @Copilot in #67017
• Bump gh-aw-firewall to v0.28.50 by @lpcox with @Copilot in #67035
• [log] Add debug logging to log parser engine resolution and persisted-log reconstruction by @github-actions[bot] in #67098
• Add scoped GitHub Issues mirrors for the Git-backed work queue by @pelikhan in #67025
• Handle an absent work-queue branch during dispatcher activation by @pelikhan with @Copilot in #67104
• Correct model-routing attribution for endpoint overrides by @SivaKesava1 with @Copilot in #67013
• Bound AgentRx optimizer input to avoid prompt exhaustion by @pelikhan with @Copilot in #67133
• Fix SEC-005 repository authorization conformance for Claim adapters by @pelikhan with @Copilot in #67132
• docs: restore a 620px reading measure and guard it by @MaggieAppleton in #67167
• [yamllint-fixer] fix: indent sequence items under custom-job strategy/runs-on/services fields by @github-actions[bot] in #67091
• [instructions] Sync instruction files with release v0.89.21 (agy engine, model-routing fields) by @github-actions[bot] in #67162
• [spec-enforcer] Enforce specifications for jsonutil, linters by @github-actions[bot] in #67181
• Standardize safe-output handler error codes by @pelikhan with @Copilot in #67131

Full Changelog: v0.91.6...v0.91.7