v0.11.0 — Realtime voice, session rewind, warm sessions, and Marketing Department

New

• Realtime voice calls use LiveKit Cloud and preserve transcripts and worker tool calls in the session UI.
• Session rewind restores REST and ACP sessions from a selected message.
• Warm sessions keep one session available per project to reduce cold-start latency.
• The Marketing Department template adds campaign, content, lifecycle, growth, and brand agents.
• Connection policies canonicalize connector aliases and enforce the selected shared connection across grant gates.
• KaaB isolation restricts session access, sharing, approvals, model changes, executor grants, connector use, and OpenCode proxy access.
• KaaB spend controls enforce per-end-user limits.
• Secret Delivery Strategy stage 1 adds the schema, policy layer, and shared egress-policy type.
• White-label session scope controls add end-user session filtering, connector binding, scope visibility, and a testing guide.

Improved

• Prompt delivery deduplication releases the claim after a final sandbox-down response. A later retry can recover without duplicating a completed prompt.
• Session transcripts preserve reasoning and tool-step wire order.
• Runtime-generated session titles synchronize with the canonical session and web UI.
• Managed repository provisioning uses deterministic pacing and 13 reusable repositories in the release gate.
• The release gate runs API lanes in parallel and cleans mutable staging fixtures concurrently.

Fixed

• Session sharing preserves permission status during warm-session claim races.
• Sandbox secret injection remains scoped to the active agent.
• Strict model providers receive normalized message history.
• readRepoFile returns 404 for a missing Git path.
• Maintenance mode remains visible during an API outage.
• Worktree shutdown stops the complete process tree.

Operations

• US East 2 shadow deployment, database reconciliation, writer activation, and cutover tooling remain disabled.
• This release does not freeze the EU database or switch production traffic.

What's Changed

• chore(infra): prepare US East 2 production shadow by @markokraemer in #5447
• chore(dev-eks): deploy gateway dev-56954737 [skip ci] by @github-actions[bot] in #5449
• feat(voice): realtime voice channel on LiveKit (replaces the Recall notetaker) by @markokraemer in #5431
• fix(web): open LLM manager actions in modal by @markokraemer in #5448
• fix(web): use canonical SDK voice import by @markokraemer in #5450
• fix(db): restore voice migration order by @markokraemer in #5452
• chore(dev-eks): deploy dev-0a1ed173 [skip ci] by @github-actions[bot] in #5453
• test(migration): verify source refresh on US Auth by @markokraemer in #5454
• fix(migration): scope Node SSL mode to database runner by @markokraemer in #5455
• docs(migration): refresh US shadow evidence by @markokraemer in #5456
• docs(migration): record production autoscaling by @markokraemer in #5457
• Make the white-label ACP reference SDK-only by @markokraemer in #5458
• chore(dev-eks): deploy gateway dev-ceaa7e33 [skip ci] by @github-actions[bot] in #5459
• chore(dev-eks): deploy dev-ceaa7e33 [skip ci] by @github-actions[bot] in #5460
• Keep ACP sessions on the current daemon snapshot by @markokraemer in #5462
• chore(dev-eks): deploy dev-aff406f3 [skip ci] by @github-actions[bot] in #5464
• Fix model provider connection UX by @markokraemer in #5463
• test(migration): gate US shadow authentication by @markokraemer in #5466
• Session chat: narrative transcript by default, full history one click away by @markokraemer in #5451
• fix(sdk): reconcile REST prompts before first event by @markokraemer in #5467
• test(migration): gate US frontend provider redirects by @markokraemer in #5468
• chore(dev-eks): deploy gateway dev-ad56e00c [skip ci] by @github-actions[bot] in #5469
• chore(release): VERSION → 0.10.16 [skip ci] by @github-actions[bot] in #5470
• chore(release): staging VERSION → 0.10.16 [skip ci] by @github-actions[bot] in #5471
• chore(dev-eks): deploy gateway dev-c26942d4 [skip ci] by @github-actions[bot] in #5472
• chore(dev-eks): deploy dev-c26942d4 [skip ci] by @github-actions[bot] in #5473
• chore(dev-eks): deploy dev-92b337bb [skip ci] by @github-actions[bot] in #5474
• feat(projects): keep one warm session ready by @markokraemer in #5475
• chore(dev-eks): deploy dev-dc6d1c0b [skip ci] by @github-actions[bot] in #5476
• fix(sdk): make ACP and REST prompt completion monotonic by @markokraemer in #5477
• chore(dev-eks): deploy dev-480a44dc [skip ci] by @github-actions[bot] in #5478
• docs(sdk): record B23 deployed completion [skip ci] by @markokraemer in #5479
• docs: meet->voice channel rename, workspace enforcement by @agent-kortix in #5482
• content(blog): correct DeepSeek output price $0.30 -> $0.28 by @agent-kortix in #5484
• test(auth): wait for hydrated login form by @markokraemer in #5485
• docs: add ACP runtime status quo handoff by @markokraemer in #5488
• fix(api): stop Sentry-capturing transient Supabase pool exhaustion (BS 721b7efe) by @agent-kortix in #5487
• chore(dev-eks): deploy dev-c9df628d [skip ci] by @github-actions[bot] in #5489
• perf(api): remove turn-stream request amplification by @markokraemer in #5490
• chore(dev-eks): deploy dev-4f46e3aa [skip ci] by @github-actions[bot] in #5492
• chore(dev-eks): deploy gateway dev-47d41d9b [skip ci] by @github-actions[bot] in #5493
• chore(dev-eks): deploy dev-69af18f3 [skip ci] by @github-actions[bot] in #5494
• perf(api): cut sandbox control-plane chatter and ambient-poll latency by @markokraemer in #5491
• chore(dev-eks): deploy dev-704b9c1b [skip ci] by @github-actions[bot] in #5497
• fix(ci): restore starter and voice checks by @markokraemer in #5498
• docs(sdk): record API latency dev proof by @markokraemer in #5495
• fix(prod): harden final US East 2 database cutover by @markokraemer in #5496
• chore(dev-eks): deploy gateway dev-fa525d30 [skip ci] by @github-actions[bot] in #5499
• chore(dev-eks): deploy dev-fa525d30 [skip ci] by @github-actions[bot] in #5501
• fix(web): pass turn run children as data prop by @markokraemer in #5500
• chore(dev-eks): deploy dev-ccdce643 [skip ci] by @github-actions[bot] in #5503
• fix(billing): reconcile lost per-seat compute windows; make request diagnostics visible in CloudWatch by @markokraemer in #5502
• chore(dev-eks): deploy dev-afe54ce9 [skip ci] by @github-actions[bot] in #5505
• fix(maintenance): fail over independently at the edge by @markokraemer in #5504
• chore(dev-eks): deploy gateway dev-b18ceaa5 [skip ci] by @github-actions[bot] in #5507
• release: add independent production maintenance failover by @markokraemer in #5506
• chore(dev-eks): deploy dev-b18ceaa5 [skip ci] by @github-actions[bot] in #5508
• Release v0.10.16 — Independent maintenance failover by @github-actions[bot] in #5509
• chore(dev-eks): deploy dev-1097dce8 [skip ci] by @github-actions[bot] in #5510
• chore(dev-eks): deploy dev-d5bc283d [skip ci] by @github-actions[bot] in #5513
• fix(sdk): restore staging maintenance transport by @markokraemer in #5512
• fix(api): stop billing rotations on workerless pods by @markokraemer in #5515
• chore(dev-eks): deploy dev-efc0036e [skip ci] by @github-actions[bot] in #5516
• chore(dev-eks): deploy dev-e8dc428a [skip ci] by @github-actions[bot] in #5517
• chore(dev-eks): deploy dev-6a1ff05b [skip ci] by @github-actions[bot] in #5518
• fix(use2): clean recovery flow state after smoke by @markokraemer in #5519
• chore(dev-eks): deploy dev-8189da8a [skip ci] by @github-actions[bot] in #5520
• fix(secrets): scope sandbox secret injection to the agent that actually runs by @markokraemer in #5514
• chore(dev-eks): deploy dev-7d0aae0b [skip ci] by @github-actions[bot] in #5521
• docs(secrets): spec network-boundary secret delivery policy by @markokraemer in #5522
• Fix US migration smoke billing cleanup by @markokraemer in #5523
• Release US worker isolation guard to staging by @markokraemer in #5524
• Fix frontend migration smoke Auth flow cleanup by @markokraemer in #5525
• chore(dev-eks): deploy dev-43fd93cd [skip ci] by @github-actions[bot] in #5526
• chore(dev-eks): deploy dev-d7dc3622 [skip ci] by @github-actions[bot] in #5527
• chore(dev-eks): deploy dev-5051d9cb [skip ci] by @github-actions[bot] in #5528
• fix(use2): harden US shadow session readiness by @markokraemer in #5529
• chore(dev-eks): deploy dev-5c0ae97e [skip ci] by @github-actions[bot] in #5530
• test(use2): wait for selected warm agent by @markokraemer in #5531
• chore(dev-eks): deploy dev-8d6a7876 [skip ci] by @github-actions[bot] in #5532
• fix(sdk): preserve project agent selection by @markokraemer in #5533
• chore(dev-eks): deploy dev-ee45f55f [skip ci] by @github-actions[bot] in #5534
• docs(sdk): record US session readiness proof by @markokraemer in #5535
• chore(dev-eks): deploy dev-36432e59 [skip ci] by @github-actions[bot] in #5536
• ops: add US shadow reconciliation workflow by @markokraemer in #5537
• fix(ops): scope Supabase CLI prerequisite by @markokraemer in #5538
• fix(ops): use US shadow reconciliation role by @markokraemer in #5539
• fix(web): break setSessionAgentName React #185 render loop (BS 351da943) by @agent-kortix in #5540
• fix(web): guard marketing-site scrollTo against non-scrollable ref (BS a0000df8) by @agent-kortix in #5542
• fix(scheduler): dispatch cron slots exactly by @markokraemer in #5543
• chore(dev-eks): deploy gateway dev-974c699e [skip ci] by @github-actions[bot] in #5544
• chore(dev-eks): deploy dev-974c699e [skip ci] by @github-actions[bot] in #5545
• fix(scheduler): bound catalog retries after backfill by @markokraemer in #5546
• chore(dev-eks): deploy dev-1cd087aa [skip ci] by @github-actions[bot] in #5547
• release(scheduler): promote exact cron dispatch to staging by @markokraemer in #5548
• docs: trigger scheduler cadence, execution lease interval, voice opt-in, voiceTranscript by @agent-kortix in #5550
• fix(security): scope AgentMail inbox takeover delete + ownership gate (pentest 2026-07-27) by @agent-kortix in #5551
• chore(dev-eks): deploy dev-bf90f44e [skip ci] by @github-actions[bot] in #5553
• fix(security): do not expose DOTENV_PRIVATE_KEY to PR-triggered test jobs (CI-DK) by @agent-kortix in #5552
• feat: multiple connections per connector (team + personal) with a connections list by @Ino-Bagaric in #5556
• feat(web): make team-shared vs private-to-me connections unmistakable by @Ino-Bagaric in #5554
• chore(dev-eks): deploy dev-52dc62cc [skip ci] by @github-actions[bot] in #5557
• feat(kaab): required connectors — run as the user's own connection, gate if unconnected, admin roster by @Ino-Bagaric in #5366
• fix(kaab): make KORTIX_ORIGIN_REF unforgeable + document origin_ref honestly by @Ino-Bagaric in #5558
• chore(dev-eks): deploy dev-64250043 [skip ci] by @github-actions[bot] in #5560
• fix(kaab): require_connectors picks the member's default connection, skips revoked by @Ino-Bagaric in #5559
• chore(dev-eks): deploy dev-e88526c6 [skip ci] by @github-actions[bot] in #5562
• fix(kaab): re-land connectors_personal onto main (#5370 merged into its base branch, not main) by @Ino-Bagaric in #5561
• chore(dev-eks): deploy dev-170b4b14 [skip ci] by @github-actions[bot] in #5563
• fix(seo): stop garbled brand snippet — render KortixLetterField as SVG background-image by @agent-kortix in #5555
• feat(kaab): set connectors_personal from the agent-scope API (with subset pruning) by @Ino-Bagaric in #5564
• chore(dev-eks): deploy dev-f9a5d420 [skip ci] by @github-actions[bot] in #5566
• fix(kaab): agent editor could not save any project using connectors_personal by @Ino-Bagaric in #5565
• chore(dev-eks): deploy dev-55663e3b [skip ci] by @github-actions[bot] in #5568
• feat(web): per-connector 'personal' toggle in the agent editor by @Ino-Bagaric in #5567
• feat(kaab): per-end-user usage metering (origin_ref on usage_events) by @Ino-Bagaric in #5569
• feat(kaab): per-end-user concurrency cap + restore the lost account-active index by @Ino-Bagaric in #5570
• chore(dev-eks): deploy dev-7824a618 [skip ci] by @github-actions[bot] in #5571
• feat(web): per-connection IDs + tabbed connector detail by @Ino-Bagaric in #5572
• fix(permissions): surface project-rule overrides + feat(billing): per-end-user spend by @Ino-Bagaric in #5573
• chore(dev-eks): deploy dev-12da8c76 [skip ci] by @github-actions[bot] in #5575
• fix(web): drop iOS WebView WebKit-bridge messageHandlers noise (BS 5b94212b) by @agent-kortix in #5574
• fix(security): KaaB cross-end-user session access + revoked-secret re-injection by @Ino-Bagaric in #5577
• chore(dev-eks): deploy dev-f4a968f6 [skip ci] by @github-actions[bot] in #5580
• feat(permissions): per-connection tool permissions by @Ino-Bagaric in #5579
• chore(dev-eks): deploy dev-8a344cdb [skip ci] by @github-actions[bot] in #5582
• fix(test): un-dark two suites (0 → 76 tests) + Permissions discoverability by @Ino-Bagaric in #5583
• chore(dev-eks): deploy dev-25051973 [skip ci] by @github-actions[bot] in #5585
• ops: guard final US East 2 cutover by @markokraemer in #5584
• chore(release): merge latest main into staging by @markokraemer in #5588
• feat(api): rename origin_ref → end_user_ref (origin_ref kept as permanent alias) by @Ino-Bagaric in #5586
• fix(voice): keep worker bearer out of room metadata by @markokraemer in #5589
• ops: support candidate tags in US shadow by @markokraemer in #5590
• fix(cli,api): kortix ship pushes through the git proxy, not an unexportable token by @markokraemer in #5591
• chore(dev-eks): deploy dev-96c8d84a [skip ci] by @github-actions[bot] in #5596
• fix: update staging security dependencies by @markokraemer in #5595
• chore(release): reconcile latest main with staging hotfix by @markokraemer in #5593
• feat(api): change a session's model mid-flight by @Ino-Bagaric in #5592
• chore(dev-eks): deploy dev-bd3ae3c1 [skip ci] by @github-actions[bot] in #5597
• fix(test): validate every decorative landing element by @markokraemer in #5601
• fix(test): validate every decorative landing element by @markokraemer in #5602
• fix(sdk): preserve ACP message turn boundaries by @markokraemer in #5603
• fix(migration): reconcile shadow credit ledger rows by @markokraemer in #5604
• feat(whitelabel-demo): Kortix-as-a-Backend support end to end by @Ino-Bagaric in #5599
• fix: never re-queue a create whose failure was already returned to the caller by @Ino-Bagaric in #5606
• fix(migration): preserve replication backlog ownership by @markokraemer in #5607
• fix(migration): reconcile shadow credit ledger rows by @markokraemer in #5605
• chore(release): sync newest main into staging by @markokraemer in #5600
• fix: one canonical connector alias across all three grant gates by @Ino-Bagaric in #5609
• chore(dev-eks): deploy dev-a6b3fd68 [skip ci] by @github-actions[bot] in #5611
• test: prove KaaB session isolation at the list leg by @Ino-Bagaric in #5610
• chore(dev-eks): deploy dev-65c707d4 [skip ci] by @github-actions[bot] in #5613
• feat(whitelabel-demo): pick which shared connection a session runs as by @Ino-Bagaric in #5612
• fix(gateway): normalize malformed message history so strict providers accept it by @markokraemer in #5608
• chore(dev-eks): deploy gateway dev-7b77515d [skip ci] by @github-actions[bot] in #5616
• chore(release): sync latest main into staging by @markokraemer in #5615
• chore(release): sync newest main into staging by @markokraemer in #5617
• chore(dev-eks): deploy dev-7b77515d [skip ci] by @github-actions[bot] in #5618
• chore(release): sync exact current main into staging by @markokraemer in #5620
• feat(sessions): add message-based rewind for REST and ACP by @markokraemer in #5619
• chore(dev-eks): deploy dev-9e90e8ed [skip ci] by @github-actions[bot] in #5621
• chore(release): sync exact latest main into staging by @markokraemer in #5622
• Add Marketing Department project template by @lillyboga in #5578
• chore(dev-eks): deploy gateway dev-e548c6a8 [skip ci] by @github-actions[bot] in #5625
• chore(dev-eks): deploy dev-e548c6a8 [skip ci] by @github-actions[bot] in #5626
• chore(release): sync final latest main into staging by @markokraemer in #5627
• fix(release): harden US cutover readiness by @markokraemer in #5623
• chore(dev-eks): deploy gateway dev-79c208aa [skip ci] by @github-actions[bot] in #5628
• chore(release): include latest production cutover hardening by @markokraemer in #5629
• docs(sdk): record deployed session rewind proof by @markokraemer in #5630
• chore(dev-eks): deploy dev-49dc74f4 [skip ci] by @github-actions[bot] in #5632
• fix(tests): use one Playwright runtime for US smoke by @markokraemer in #5631
• chore(dev-eks): deploy gateway dev-83984378 [skip ci] by @github-actions[bot] in #5634
• chore(dev-eks): deploy dev-83984378 [skip ci] by @github-actions[bot] in #5635
• Fix ACP final idle state and add ?acp override by @markokraemer in #5636
• chore(dev-eks): deploy dev-76b4cb98 [skip ci] by @github-actions[bot] in #5637
• fix(release): pace managed repository provisioning by @markokraemer in #5638
• Heal corrupt git mirror cache entries by @lillyboga in #5641
• chore(dev-eks): deploy dev-256230d1 [skip ci] by @github-actions[bot] in #5642
• fix(release): isolate mutable IAM and session flows by @markokraemer in #5640
• Fix CodeQL secure temporary file gate by @markokraemer in #5644
• chore(dev-eks): deploy dev-022f666d [skip ci] by @github-actions[bot] in #5645
• Release candidate: promote latest main to staging by @markokraemer in #5643
• Fix release pacing unit-test environment by @markokraemer in #5646
• Release candidate: fix release pacing test environment by @markokraemer in #5647
• fix(sessions): sync runtime-generated titles by @markokraemer in #5648
• chore(dev-eks): deploy dev-b8e1e75b [skip ci] by @github-actions[bot] in #5649
• Release candidate: include latest session title synchronization by @markokraemer in #5650
• test(sessions): wait for web readiness in title sync flow by @markokraemer in #5651
• Release candidate: sync test-only session title wait by @markokraemer in #5654
• fix(worktree): stop process trees, not port listeners by @markokraemer in #5653
• fix(api): return 404 for readRepoFile git-show path-not-found (BS a8d20288) by @agent-kortix in #5652
• chore(dev-eks): deploy dev-985b7db0 [skip ci] by @github-actions[bot] in #5655
• chore(release): promote current main to staging by @markokraemer in #5656
• chore(dev-eks): deploy dev-cd5f4513 [skip ci] by @github-actions[bot] in #5659
• chore(release): promote current main to staging by @markokraemer in #5660
• test(ke2e): reuse Git fixtures and split live lanes by @markokraemer in #5658
• chore(release): promote optimized ke2e gate to staging by @markokraemer in #5661
• test(ke2e): honor gateway Retry-After by @markokraemer in #5662
• chore(release): promote Retry-After gate fix to staging by @markokraemer in #5663
• feat(runtime): add ACP CLI harness processes by @markokraemer in #5665
• chore(dev-eks): deploy gateway dev-d87349a9 [skip ci] by @github-actions[bot] in #5666
• chore(dev-eks): deploy dev-d87349a9 [skip ci] by @github-actions[bot] in #5667
• docs: connectors_personal manifest field, changeModel SDK method, auth-type enum, runtimeTransport option by @agent-kortix in #5668
• test(ke2e): bound release gate load by @markokraemer in #5669
• chore(release): promote latest main and bounded ke2e gate by @markokraemer in #5670
• fix(runtime): pin Pi internal dependencies by @markokraemer in #5671
• chore(dev-eks): deploy gateway dev-1b4db8f8 [skip ci] by @github-actions[bot] in #5672
• chore(dev-eks): deploy dev-1b4db8f8 [skip ci] by @github-actions[bot] in #5674
• chore(release): include latest Pi runtime fix in staging by @markokraemer in #5673
• docs: narrow the e2e-preview-proxy failures to a harness question by @Ino-Bagaric in #5614
• fix(runtime): install Pi with npm by @markokraemer in #5675
• chore(dev-eks): deploy gateway dev-5762bcfc [skip ci] by @github-actions[bot] in #5677
• chore(dev-eks): deploy dev-5762bcfc [skip ci] by @github-actions[bot] in #5678
• feat(whitelabel-demo): show what a running session can and cannot change by @Ino-Bagaric in #5676
• chore(dev-eks): deploy gateway dev-dda51b0b [skip ci] by @github-actions[bot] in #5680
• chore(release): final main cutoff for v0.11.0 staging by @markokraemer in #5679
• chore(dev-eks): deploy dev-dda51b0b [skip ci] by @github-actions[bot] in #5681
• docs: the apps/api suite has no CI key — proven, and my earlier fix retracted by @Ino-Bagaric in #5682
• fix(security): session sharing was exempt from the KaaB isolation narrowing by @Ino-Bagaric in #5683
• chore(dev-eks): deploy dev-cb5bb899 [skip ci] by @github-actions[bot] in #5685
• fix(security): bind turn-question to the sandbox token's own session by @Ino-Bagaric in #5686
• chore(dev-eks): deploy dev-8bfb1096 [skip ci] by @github-actions[bot] in #5690
• fix(security): never widen an agent grant on a manifest error; canonicalize the v2 default by @Ino-Bagaric in #5687
• fix(gateway): fail over stalled model streams by @markokraemer in #5689
• chore(dev-eks): deploy gateway dev-9ac237f1 [skip ci] by @github-actions[bot] in #5692
• chore(dev-eks): deploy dev-9ac237f1 [skip ci] by @github-actions[bot] in #5693
• fix(security): redact session content on rows the caller cannot access by @Ino-Bagaric in #5688
• docs: correct the KaaB docs against the code, and document what shipped by @Ino-Bagaric in #5691
• fix(whitelabel-demo): make KaaB refusals reachable, and stop silent sends by @Ino-Bagaric in #5694
• fix(security): an agent must never resolve its own approval by @Ino-Bagaric in #5684
• chore(dev-eks): deploy dev-57e081c0 [skip ci] by @github-actions[bot] in #5696
• chore(release): promote current main to staging by @markokraemer in #5695
• feat(kaab): filter the session list by end_user_ref by @Ino-Bagaric in #5697
• chore(dev-eks): deploy dev-7f51c831 [skip ci] by @github-actions[bot] in #5699
• feat(kaab): re-mint the session token grant on a mid-session agent switch by @Ino-Bagaric in #5698
• chore(dev-eks): deploy dev-fd6fa64b [skip ci] by @github-actions[bot] in #5701
• fix(kaab): revoke a session's executor tokens when its sandbox is gone by @Ino-Bagaric in #5700
• fix(ke2e): reuse managed project on staging by @markokraemer in #5702
• chore(release): promote current main to staging by @markokraemer in #5703
• feat(kaab): per-end-user spend cap by @Ino-Bagaric in #5704
• chore(dev-eks): deploy dev-0f390c6c [skip ci] by @github-actions[bot] in #5706
• docs: verified baseline of secret exposure inside the sandbox by @Ino-Bagaric in #5705
• fix(ke2e): bound stale-user cleanup by @markokraemer in #5707
• chore(release): promote current main to staging by @markokraemer in #5709
• perf(ke2e): query stale users directly by @markokraemer in #5711
• fix(ke2e): require strict TLS for GC database by @markokraemer in #5714
• content(blog): differentiate agi-ready-architecture manifest from introducing-kortix by @agent-kortix in #5712
• chore(release): promote current main to staging by @markokraemer in #5713
• fix(ke2e): preserve claimed warm-session metadata by @markokraemer in #5716
• fix(api): preserve public-share permission status by @markokraemer in #5717
• chore(dev-eks): deploy dev-fe9c7bfe [skip ci] by @github-actions[bot] in #5718
• chore(release): promote current main to staging by @markokraemer in #5719
• feat(secrets): secret delivery strategy — design + pure policy layer by @Ino-Bagaric in #5708
• fix(whitelabel-demo): refuse encoded-slash path traversal in the BFF proxy by @Ino-Bagaric in #5710
• fix(kaab): two critical regressions in my own isolation work by @Ino-Bagaric in #5715
• chore(release): promote latest main to staging by @markokraemer in #5720
• chore(dev-eks): deploy dev-b217ced8 [skip ci] by @github-actions[bot] in #5721
• fix(kaab): gate opencode :4096 on session visibility, not just :8000 by @Ino-Bagaric in #5722
• chore(dev-eks): deploy dev-e5e934f4 [skip ci] by @github-actions[bot] in #5723
• chore(release): promote current main to staging by @markokraemer in #5725
• feat(secrets): SDS stage 1 — schema + policy layer, one shared egress-policy type by @Ino-Bagaric in #5724
• chore(dev-eks): deploy dev-ff0e36fa [skip ci] by @github-actions[bot] in #5726
• fix(sandbox-proxy): release prompt dedupe claim when delivery provably failed by @Ino-Bagaric in #5271
• chore(dev-eks): deploy dev-be05b2ca [skip ci] by @github-actions[bot] in #5727
• feat(whitelabel-demo): session scope controls, connector binding, and a testing guide by @Ino-Bagaric in #5728
• chore(release): freeze v0.11.0 source at 3729edc by @markokraemer in #5730
• chore(release): promote latest main to staging by @markokraemer in #5729
• Release v0.11.0 — Realtime voice, session rewind, warm sessions, and Marketing Department by @github-actions[bot] in #5732

Full Changelog: v0.10.15...v0.11.0