v2026.10.13

Added

• Sync merges keep sticky notes one-way: converted or archived never returns to active (provenance: T12942)
• Sync merges never move a shipped release back to an earlier status (provenance: T12943)
• Wire the llmtxt Loro CRDT merge into the docs update write path — section merge engine, head projection under docs.head.max-hlc, append-only DAG versions (provenance: T13355)
• ct-lean levels off/lite/full/ultra: cleo lean level, the lean.level config key and CLEO_LEAN_LEVEL (provenance: T13663)

Fixed

• docs fetch and view heal a doc whose bytes predate the blob store on first read, instead of failing until docs doctor --repair runs (provenance: T13705)
• cleo docs update detects a stale declared base — append edits three-way merge, non-mergeable edits record a named section conflict, an unresolvable base is refused (T13674) (provenance: T13674, T13684, T13688)
• A migration's data backfill is never emitted, and the row-meta content hash follows it under the new sync-set version (journal B, migration half) (provenance: T12775)
• twin collapse marks the synced twin it wrote suspect (withSuspectAccounting gets its first production caller) (provenance: T12775)
• A vault restore takes the row-identity markers and the sync-schema ledger from the snapshot, so a restored store rewrites its timestamps and seals (provenance: T13107, T13108)
• ct-lean 1.0.1 names privacy in its never-cut list and fixes small in-scope risks instead of only reporting them (provenance: T13424)
• cleo research link and update no longer replace a manifest entry's title, topics, findings and links (provenance: T13678)
• cleo run no longer flags sequential short workers as hung, reports a signal while queued, and records a signal the runner forwarded (provenance: T13679, T13680, T13681)
• cleo complete and cleo cancel no longer delete a task worktree that other worktrees symlink into, or that holds the only copy of the task's evidence (provenance: T13696, T13700, T13701)

Also in this release (listed by hand)

Merged since v2026.10.12 and reviewed, with green PR CI. These have no release-note changeset, or their tasks were still open at planning time:

• T13325, T13656 #2213 #2220: cleo nexus analyze keeps its heap bounded on large projects. Parse results spool to disk, and graph publication streams in batches.
• T13673 #2224: after a merge, a targeted test-run: recorded on a later main commit that covers the change stands in, whatever the merge's own CI concluded.
• T13662, T13655 #2223 #2215: carry scope is the task's own commits plus its declared files.
• T13641, T13647 #2207 #2209: cleo done never falls back to a whole test suite.
• T13652 #2214: release-readiness timing.
• T13585 #2218: proof of concurrent docs updates (T13675, T13685, T13688, T13689).
• T12908 #2227: replica registry lock.
• T12880 #2221: token store refusal.
• T13638 #2219: migrated legacy doc versions get uids that are stable across devices.
• T13360, T13361, T13362 #2201 #2208 #2210: legacy docs migration and read retirement.
• T13356 #2211: leases wiring.
• T12945 #2187: docs lifecycle in the sync merge rules.
• T13363 #2195 #2212: council metrics and sections.
• T13677 #2225: review follow-ups.
• T13706 #2245: a failed self-heal write never fails a docs read.