v2026.10.10

Added

• CleoDocs schema re-key — conduit history tables FK the immutable doc uid (no cascade delete), version DAG identity, per-version per-section approvals, derived contributors, slug aliases, max-HLC head projection, local-only section CRDT states. (provenance: T13354)
• Decisions-vs-ADRs methodology — decision_adr_links syncing link table with natural (decision_id, adr_slug) identity, one-way revoke tombstones, and two-way surfacing (docs fetch shows linked D#### decisions; decision.find shows linked ADR slugs). (provenance: T13359)
• cleo docs triage: batch Jev (System One) keep/update/supersede/archive verdicts over draft docs via the new docs.triage decide site (shadow mode, proposals only, --record persists proposed D#### decisions) (provenance: T13446)
• Normal commands in a linked project start a detached cloud sync at most once per window, with no daemon (provenance: T13553)

Fixed

• The piggyback auto-sync never spawns under a test runner or CI (provenance: T13553)
• release plan refuses a stable release that opens the hooks-v1 gate by source without the promotion (provenance: T13555)
• cleo docs doctor apply envelope reports post-repair state, provenance backfill chains a wikilinks rebuild, and dangling detection excludes archived rows plus re-points blob rows with live content (provenance: T13560, T13561, T13562)
• cleo docs update --content - reads stdin instead of storing '-' (provenance: T13564)
• A typed gate's input snapshot recognises bun's subcommands: bun test a.ts b.ts captures both files, not ./test (provenance: T13566)
• Typed gates run in a git worktree CLEO did not provision; cleo worktree adopt seeds and verifies its project-info.json (provenance: T13568)
• docs triage --record links each proposed decision to its doc (provenance: T13575)
• A canary install writes a schema-valid project-info.json and gets update notices (provenance: T13581)
• Project registration no longer times out while the global store first opens (provenance: T13590)
• docs triage --record's doc link always has both graph nodes (provenance: T13600)
• cleo cloud status says when CI or a test runner suppresses background auto-sync (provenance: T13602)
• No automatic cloud sync runs under CI or a test runner, from any trigger (provenance: T13606)
• A scoped testsPassed now carries after a fast-forward or direct landing (provenance: T13608)

Also in this release (listed by hand)

These merged since v2026.10.9 and ship in this release. Their main-CI evidence was still queued in GitHub's runner backlog when the plan was cut, so they're listed here with their PRs rather than through the plan:

• Evidence and completion
  • cleo complete gives typed-gate revalidation its own budget, runs it once per task, and names a timeout instead of E_INTERNAL "Shared operation deadline reached" (T13613, #2174)
  • Typed process gates (cleo verify --run) admit through the machine memory ledger like cleo run (T13573, #2147)
  • qa-run receipts of one kind cover a change together (T13580, #2153)
  • Test-run freshness reads the HEAD reflog of the worktree that holds the report (T13579, #2154)
  • pr:/ci: evidence accepts a merged PR whose own check is stale-red when its merge commit's required checks are green (T13611, #2175)
  • A test-run or qa-run receipt is not stale when a checkout or merge rewrote an input with identical bytes (T13567, #2138)
  • A busy-database error is recognised on a wrapped cause, so the write is retried (T13615, #2177)
  • Typed-gate input capture parses bun's other subcommands, -c and --cwd (T13574, #2145)
• Resources and runs
  • Waiter notices and doctor tool-locks name the pressure-narrowed memory budget (T13572, #2151)
  • An admitted cleo run that overstays or hangs is reported, never killed (T13563, #2139); a paused run is never reported overdue (T13570, #2152)
• Hooks and git
  • CLEO's commit-msg and pre-push hooks accept the exact initial: cleo init commit, so a fresh project can push (T13577, #2143)
  • The hooks-v1 release gate is documented (T13559, #2136). Hooks-v1 stays OFF in this stable release; it's in canary pilot.
• Sync (still unreleased: sync push/pull flags remain off)
  • Global credentials sync with their secrets sealed on the home stream (T13467, #2100)
  • Rollback and cross-filesystem-move rebinds retire the old replica (T13337, #2010)
  • Piggyback auto-sync throttles per project and logs a failed start (T13556, #2164)
• Docs and other
  • cleo docs link-decision / unlink-decision (T13598, #2170)
  • Spawn re-checks compare against the recorded lease grant (T13514, #2094)
  • doctor reports MCP fan-out per-session presence and orphans (T13437, #2049)
• Everything from the 2026.10.10-canary.1 and canary.2 sections below.