v1.6.85

• test(backlog-add): three assertions that let their bug through now catch it
• backlog: lookup passes hook git variables to the archiver (deferred from the part-1 review)
• test(findings ledger): the spec's git runs without inherited GIT_* variables
• test(backlog-add): the real-archiver tests drop inherited GIT_* variables
• backlog: deferred findings of the backlog-noise-bar part-1 aggregate review
• backlog-add: no credential-shaped literal in the DSN comment or its test name; one ±3 wording
• test(findings ledger): two patch notes in a row — the later one is the one the fold keeps
• test(backlog-add e2e): scrub every exported ZUVO_* and GIT_* variable, not a list of known ones
• backlog-add: a DSN with an empty user or a capitalised scheme is refused; a short secret line has an anchor
• test(backlog-lookup): the real-archiver contract covers the OPEN … ALSO ARCHIVED line
• test(backlog-add): the specs no longer read the developer's global git ignore file
• test(backlog-add): spell the U+2028 row as an escape, not an invisible literal
• backlog protocol: a secret's anchor still meets the 8-character minimum; the example's source is quoted
• test(backlog-add): the privacy check pins an open umask; the e2e regression count is anchored
• backlog-add: an infinite ZUVO_GH_TIMEOUT falls back to the bound; comments say what the code does
• backlog-add: bump checks what it writes as render does; a DSN's password is refused in any field
• backlog protocol: anchor a hardcoded secret by its name; do not retry an exit 1 that already filed the entry
• backlog-add: diff from the newest merge-base, so a stale local default does not promote upstream lines
• backlog-add: refuse vendor-tagged API keys, every GitHub token kind and JWTs as secret-like values
• backlog-add: review fixes — a bad ledger line, unwritable argv and git failures no longer pass as data
• test(plan): close the gaps the second test audit left (types, cache, routing table)
• test(plan): raise test quality to A (backlog-add specs, contract, e2e)
• test(backlog-add): the smoke checks state, not only exit codes, and runs the real installer
• backlog-add: end-to-end smoke over tracked, ignored and worktree layouts
• backlog-add: date the entry by the local day, as the archiver dates its sections
• backlog protocol: findings go through backlog-add; only BUG/SEC/DATA reach the backlog, the rest is kept as data
• backlog-add: one locked write path for backlog.md and the findings ledger
• findings ledger: a FIFO with a segment's name no longer hangs the fold
• findings ledger: append-only segments beside the backlog, folded on read with named defects
• backlog-add: findings must still hold in the work tree; entries carry [pr:N] or [branch:name]
• backlog-add: rendered entries are proven visible to the parser; lookup failures never read as absent
• backlog-add: admission bars send only BUG/SEC/DATA to the backlog, everything else to the ledger
• pipeline gate: findings ledger segments are data, not production files
• backlog: two drive-by bugs the backlog-noise-bar planning hit (default-branch env precedence, lookup --json)
• plan: backlog noise bar part 1 — backlog-add single write path and the findings ledger
• docs(knowledge): one reading per regex piece; git prints the main checkout's real path
• fix: review of the S-66 leftovers — linear-time claim scan, true HOME check
• backlog: drive-by id-template wording NIT from the review of 428db35..9af86d4
• fix: round 3 — any -v/-V among command's options is a lookup; HOME as written or resolved
• drive-by: table rows get a descriptive id and keep evidence + confidence
• fix: round 2 of the leftovers review — command without -v counts, a quoted mention never does
• fix(verify-review-claims): a quoted env value before the command no longer hides it
• fix(verify-review-claims): a wrapper's operand may be a variable or .5s, and a continuation may precede the command
• fix: review of the S-66 leftovers — escape the BOM, no default write, command -v is a lookup
• drive-by: one source rule for new entries and bumps; usage read from the header block
• drive-by: entries keep a findable source, and --help no longer logs a receipt
• docs(backlog): close the S-66 leftovers — home-prefix, main guard, verify-review-claims timeout
• refactor(backlog-consolidate): the run is main(), the home check a path test
• fix(verify-review-claims): an invocation behind timeout/nice/nohup is still an invocation
• docs(knowledge): the symlink gotcha's createdAt is its commit time, not a guessed future one
• docs(knowledge): the symlink gotcha's two skip conditions read as either-or; updatedAt bumped
• docs(knowledge): the symlink gotcha names the guard that also catches a linked directory
• docs(backlog): verify-review-claims misses adversarial-review behind a timeout prefix
• docs(knowledge): a worktree state file can be a symlink to the canonical one
• fix(backlog-consolidate): no worktree note is lost or duplicated; a symlink, a stub or a failed lookup cannot corrupt main
• feat(bill): closed defect classes, reviewed-line counts, precision by lane and by agreement
• feat(review-escapes): trace each fixed bug to the commit that introduced it, and say whether a review saw it
• fix(bill): flock tick lock, state checked before paying, a bad defect no longer discards a paid answer
• fix(backlog-consolidate): a literal lookup answers by any output, not an exact string match
• fix(backlog-consolidate): look a path up literally and exactly; the report survives odd names
• refactor(bill): modules beside the launcher, one ledger reader, install guard
• test(hooks): runlog-includes-auto unsets the ZUVO_INCLUDES_FILE a Claude session exports
• fix(backlog-consolidate): no heading is dropped, and the tracked check cannot be misread
• docs(backlog): S-66 review left one finding outside its fence — line-granular entry bodies
• fix(backlog-consolidate): merge new headings, fail closed on a git lookup, read linked IDs
• fix(backlog-consolidate): keep every worktree edit, let git own tracked copies, round-trip bytes
• fix(backlog-consolidate): match entries by ID and never write a git-tracked main copy (S-66)
• feat(review): shared modules for the review learning loop — ledger reader, class vocabulary, hermetic Claude call, production filter
• plan: escapes default ref is develop's upstream; the classify proof counts pairs