v0.3.7

0.3.7 (2026-08-16)

Features

• console: tracked lane-receipt validator wired into CI preflight (W1.0 pilot) (#770) (d29be0d)
• db: 0218 employee_leave_balances schema (hee2 PR-1) (#783) (97a45cf)
• hr: L5-HR UUID attributes + ReassignOrgUnit→hr.transfer (console-y0n) (#761) (681540d)
• identity: role-set compare, no-op replay conflict, deactivated-region 409 (#776) (de8fc64)
• p4: retarget Employment owner to the canonical adapter (#775) (86c35b1)
• peas: employment port routing (#781) (fb9ae31)
• wave-3 admit — 7sx L5-ORG + xxp L5-JOB (#756) (9e29b62)
• wave4: ADR-0030 §7 backend — aggregate path + OpenAPI generator (#755) (84655ce)

Bug Fixes

• bound release proof head polling (#787) (0e7cfc0)
• cursor: ban cross-agent git process/lock races (#757) (111e65a)
• employment: freeze gate + append-only backdating on the port (rte/r25) (#780) (6a7b27b)
• gates: decouple G004 policy contract prose (#771) (dea1f91)
• gates: prototype-chain lookup census (console-g14a) (#762) (ae699da)
• hardening: fail closed on source/./timeout argv0 wrappers of real executors (#778) (f0f8c1d)
• hr: B-EMP-A employment containment (31e/2kd/0hf) (#779) (0da6c2f)
• hr: clear exit_date on reactivation (console-90h) (#766) (b2acd80)
• hr: route employee-row creation through the Employment port (u6ih part-1) (#782) (7fc04e3)
• identity: gate replace_user_branches on actor BranchScope (console-o498) (#759) (5770c04)
• logistics: POD corpus from enforced scheme (console-5yn) (#767) (4417bb3)
• orgchange: refuse CreateBranch/RenameBranch under deactivated region (console-k6wm) (#763) (950b3b1)
• payroll: refuse changed provenance on PayRun conflict; recheck drain period gate (#777) (f9a88ed)
• residual admit — kwm §60 pin, cvh UI sight (+clippy), gc9z LifecycleError, 0lj branch-removal (#754) (e07fffd)