v0.93.1

🌟 Release Highlights

v0.93.1 focuses on engine reliability, MCP trust configuration, and audit tooling, plus many CI and workflow stability fixes.

✨ What's New

• Per-server custom CA trust for HTTP MCP servers — connect to MCP servers behind private PKI without weakening global trust (#71229). Learn more
• BM25 audit search — unified-session audit now supports search with automatic evidence grouping (#70998). Learn more
• Outcome evaluation moved into logs — the separate outcomes command is removed (#71218).
• Detection gates enforced for custom workflow jobs (#70997) and hosted threat detection is isolated (#71244).
• Work-queue diagnostics included in health reports (#70965).
• MCP Gateway bumped to v0.4.37 (#71219).

🐛 Bug Fixes & Improvements

• Codex stages native TOML sub-agents with resolved models and fails closed before startup (#70945); Copilot SDK refuses silent model substitution (#70943).
• Model-routing allowed-models now expands aliases (#70942); Claude detection model aliases resolve before CLI launch (#70861).
• Pi main/sub-agent requests are attributed with x-awf-caller (#71043).
• CLI proxy and MCP gateway containers honor runner proxy settings (#70347).
• Scalar allowed-repos normalized in GitHub guard policies (#70346); trusted-bot policy compilation covered and documented (#70343).
• Footer AIC costs show as rounded-up estimates (#71193).
• Dry-run telemetry disabled via documented opt-outs (#71032).
• Fixed Ollama CPU warm-up, Aider command replay, reviewer checkout after branch deletion, and unavailable prompt job output detection.

📚 Documentation

Daily documentation, glossary, and instruction syncs, plus an unbloated audit reference.

Generated by 🚀 Release · copilot · auto · ~13 AIC · ⊞ 12.4K

---

What's Changed

• Preserve failed Claim delivery diagnostics for investigation by @pelikhan in #70971
• Copilot SDK: observe the main-session model and refuse silent substitution by @SivaKesava1 with @Copilot in #70943
• Stabilize smoke-copilot-sub-agents: mandatory delegation, experiment-independent contract checks by @SivaKesava1 with @Copilot in #70944
• Codex: stage native TOML sub-agents with resolved models and fail closed before startup by @SivaKesava1 with @Copilot in #70945
• feat(cli): include work-queue diagnostics in health reports by @pelikhan in #70965
• build(deps): apply docs updates available in 1ES by @pelikhan in #70996
• fix: bound daily AIC quota recovery and snapshot discovery by @pelikhan in #70968
• [docs] docs: unbloat reference/audit.md by @github-actions[bot] in #70991
• Update CLI and scanner pins with 1ES-compatible Claude by @pelikhan in #70999
• Add unified-session BM25 audit search with automatic evidence grouping by @pelikhan in #70998
• fix: detect and rewrite unavailable prompt job outputs by @pelikhan in #70973
• Fix authority-scoped work queue Issue mirror synchronization by @pelikhan in #70992
• Resolve Claude detection model aliases before CLI launch by @pelikhan with @Copilot in #70861
• Expand aliases in engine.model-routing.allowed-models by @SivaKesava1 with @Copilot in #70942
• Disable dry-run telemetry using documented environment opt-outs by @pelikhan with @Copilot in #71032
• Enforce detection gates for custom workflow jobs by @pelikhan in #70997
• [docs] Update documentation for features from 2026-10-22 by @github-actions[bot] in #71114
• [ci-coach] Fix modernize embedlit lint failures in pkg/cli by @github-actions[bot] in #71146
• [docs] Update glossary - daily scan by @github-actions[bot] in #71108
• [instructions] Sync instruction files with release v0.92.0 by @github-actions[bot] in #71091
• Fix Contribution Check tool-denial aborts with prefetched PR evidence by @pelikhan in #71162
• Fix Super Linter analysis and runtime failure recovery by @pelikhan in #71169
• fix: precompute Daily File Diet source metrics by @pelikhan in #71161
• Improve work queue failure diagnostics by @pelikhan in #71163
• [dead-code] chore: remove dead functions — 3 functions removed by @github-actions[bot] in #71155
• Normalize scalar allowed-repos in GitHub guard policies by @pelikhan with @Copilot in #70346
• fix: filter expired approval runs from health failure candidates by @pelikhan in #71164
• [blog] Agent of the Day – 2026-10-22 by @github-actions[bot] in #71154
• Attribute Pi main/sub-agent requests with x-awf-caller and preserve caller metadata by @SivaKesava1 with @Copilot in #71043
• build(deps): consolidate 1ES-supported Dependabot npm updates by @pelikhan in #71195
• fix: repair CI documentation contracts and regression fixtures by @pelikhan in #71194
• Show footer AIC costs as rounded-up estimates by @pelikhan in #71193
• build(deps-dev): bump @playwright/test from 1.64.0 to 1.64.1 in /docs by @dependabot[bot] in #70493
• build(deps): bump starlight-changelogs from 0.7.0 to 0.7.1 in /docs by @dependabot[bot] in #70489
• fix(ci): preserve explicit embedded struct literals by @pelikhan in #71209
• Fix Aider command replay and daily Go workflow completion by @pelikhan in #71211
• Fix reviewer checkout after merged PR branch deletion by @pelikhan in #71210
• build(deps): bump the pip group across 1 directory with 2 updates by @dependabot[bot] in #70876
• [actions-aw-linter] Fix workflow_run positive branch cancellation detection by @github-actions[bot] in #71189
• build(deps): bump dompurify from 3.4.16 to 3.4.17 in /docs in the npm_and_yarn group across 1 directory by @dependabot[bot] in #71216
• build(deps): bump geo-optimizer-skill from 4.18.3 to 4.19.4 in /.github/workflows by @dependabot[bot] in #70485
• Honor runner proxy settings in CLI proxy and MCP gateway containers by @pelikhan with @Copilot in #70347
• Bump MCPG to v0.4.37 by @lpcox with @Copilot in #71219
• Support per-server custom CA trust for HTTP MCP servers by @pelikhan in #71229
• Unify debugging bootstraps and verify instruction routing by @pelikhan in #71223
• Move outcome evaluation into logs and remove outcomes command by @pelikhan in #71218
• Cover trusted-bot policy compilation and document platform bot support by @pelikhan with @Copilot in #70343
• Fix CI instruction drift and registry-dependent negative tests by @pelikhan in #71241
• Fix code quality reviewer finalization sequencing by @pelikhan in #71242
• Fix Ollama CPU warm-up and isolate hosted threat detection by @pelikhan in #71244

Full Changelog: v0.93.0...v0.93.1