Rick Deckard (Blade Runner, 1982, Ridley Scott — from Philip K. Dick's "Do Androids Dream of Electric Sheep?", 1968) — a blade runner whose whole craft is telling a genuinely living person from a replicant that only wears the appearance of one. This release teaches Curia the same distinction: authority now answers solely to the principal who is actually, presently live — never to a woken task that merely carries their lineage.
This release is mostly about one idea: who is really asking. Curia now draws a hard line between you acting in the moment and a background task that merely carries your name.
Authority requires a live you. "Elevated" actions — approving or denying a queued action, changing the autonomy level, altering a contact's tier, role, or permissions, minting a secret-capture link — now run only during a live turn that started from you (or a synchronous delegation inside one). A scheduled job, a heartbeat wake, or any task that simply inherited your lineage can no longer exercise that authority. This closes the self-approval hole: Curia, woken on its own, cannot approve its own pending action. The "live" signal is computed by the dispatcher, can't be forged from an incoming message, and never touches a row that could be replayed later.
It watches its own health. A new /api/health endpoint reports ok, degraded, or down with per-service detail, and only signals a full outage when the database or message bus is actually unreachable. A daily canary checks your model tiers, credentials, and integrations and pings your uptime monitor — all without making billed probe calls.
Scheduling got more careful. The calendar specialist now places tentative HOLD (TBC) blocks on offered slots so the same time isn't promised twice, sweeps them when they expire, and answers scheduling questions over an internal thread before the inbox drafts a reply — proposing real, conflict-checked times instead of guessing. It can also RSVP to formal invites and release the matching hold. Events marked "free" no longer count against your availability.
Inbox and email. The CEO inbox now drains a backlog in steady batches instead of skimming the top and leaving the rest, and outbound email finally renders Markdown — clickable links, autolinks, and tables.
Reliability. Duplicate scheduled sends (the "two daily digests" bug) are fixed, job creation and registry/grant operations are now transactional, Nylas rate limits back off cleanly, and the web browser moved to a stealth-hardened, more human-like driver.
Plus: model-tier fallback, console-task lineage, an activity-log end-of-day recap, and a tightened setup Node-version gate.
Full details in the changelog.
Lineage is not
presence; the schedule may knock
but cannot sign here.