mac v1.3.5

What's Changed

• Add AgentFabric presentation authoring package under docs/presentations by @jordanhubbard in #694
• Publish runtime wheel with releases by @jordanhubbard in #707
• Repair autonomous integration gates by @jordanhubbard in #708
• Stop a slow-but-healthy OpenClaw startup from failing the whole node deploy by @jordanhubbard in #709
• Add mac agentbus traffic/roll-call CLI commands by @jordanhubbard in #710
• Add fleet news board and automation-safe CLI output by @jordanhubbard in #713
• Increase contract test terminal budget by @jordanhubbard in #715
• Add transactional release workflow by @jordanhubbard in #716
• Harden release documentation gates for v1.3.5 by @jordanhubbard in #717
• Clarify HGX interactive login recovery by @jordanhubbard in #718
• Skip decommissioned agents in stale sweep by @jordanhubbard in #719
• Do not drain hub verifier as task work by @jordanhubbard in #720
• Fix rocky OpenClaw stop-wrapper timeout blocking main deployment (task_3b4c5a89f5564119a9f339acfc76d0e9) by @jordanhubbard in #699
• Preserve deploy command timeout overrides by @jordanhubbard in #721
• Teach the self-healing sentinel about abandoned deploy holds and stuck draining by @jordanhubbard in #723
• Break the circular dependency between infrastructure repair and the pipeline it repairs by @jordanhubbard in #725
• Forward MAC_DEPLOY_DAEMON_*_TIMEOUT_SECONDS to phase-1 quiesce, not just phase-2 by @jordanhubbard in #726
• Forward MAC_LAUNCHD_*_TIMEOUT_SECONDS overrides to phase-2 deploy by @jordanhubbard in #727
• Fix mac.env write race that discards the deploy generation, unblocking the release barrier by @jordanhubbard in #728
• Fall back to MAC_FLEET_NAME when resolving fleet-scoped worker credentials by @jordanhubbard in #729
• Forward opencode/pi's static credential files into OpenShell sandboxes by @jordanhubbard in #730
• Forward opencode's model config into the OpenShell sandbox too by @jordanhubbard in #731
• Fix two more sandbox-name-length bugs blocking every coding-agent preflight by @jordanhubbard in #732
• Stop baking a host-absolute task.json path into the executor prompt by @jordanhubbard in #733
• Canary 9: confirm natasha can take a task through the full pipeline (task_2ff14cdf4b7149e0874ad711734af807) by @jordanhubbard in #734
• Canary: confirm bullwinkle can take a task through the full pipeline (task_0edd58ab0d2a4d719d30518dd210244f) by @jordanhubbard in #735
• Canary: confirm rocky can take a task through the full pipeline (task_63f88d67a4424753906ea28db6fcad84) by @jordanhubbard in #736
• Remove agent-name canary checkpoint comments leaking operator identity from README by @jordanhubbard in #739
• Stop advertising a host-absolute repo path to sandboxed agents by @jordanhubbard in #738
• Fix three real bugs blocking OpenShell/OpenClaw onboarding on brand-new fleet nodes by @jordanhubbard in #737
• Wire attestation reconciliation into retain_forward recovery, fixing node/hub key divergence by @jordanhubbard in #741
• Require a real sandbox_id for OpenShell agent_status to report deployed by @jordanhubbard in #742
• OpenShell gateway bootstrap probe races cold image pull on brand-new nodes (breaks phase-1 restore contract on retry) (task_eb10cdb226fa430bb5100add9d37a1f2) by @jordanhubbard in #740
• Root-cause rocky failing to self-claim explicitly-targeted tasks (why-unclaimed also times out intermittently) (task_d7499cb18a904b99b2dfd680d6fda87d) by @jordanhubbard in #745
• Pin OPENSHELL_GATEWAY_ENDPOINT into mac.env so mac-agent is immune to ambient gateway drift by @jordanhubbard in #743
• Root-cause and permanently fix openshell-sandbox glibc/container mismatch (currently patched manually on natasha) (task_33bd332422064517be38e1f9d0fb056f) by @jordanhubbard in #744
• Close diff-coverage gap left by PR #745's targeted-dispatch fix by @jordanhubbard in #746
• Apply ruff format to files touched by recent PRs by @jordanhubbard in #747
• Release v1.3.5 by @jordanhubbard in #748

Full Changelog: v1.3.4...v1.3.5