release: v0.35.3

[Nathan Schram (nathanschram)]

Summary

Prepares v0.35.3 for PyPI publish. Bumps pyproject.toml from 0.35.3rc20 → 0.35.3, dates the CHANGELOG to 2026-05-20, and lands the release-prep doc updates.

Not for master yet — this PR targets dev. After review + merge here, open a separate dev → master PR to gate the PyPI publish (auto-tag + release.yml fire on the master merge).

Milestone state

v0.35.3 milestone: 58 closed, 0 open — ready to tag.

• bug: outbox silently drops directory entries (e.g. guides/) — silent loss of intended deliveries on every session #524 + ENH-PATCH: differentiate approval-pending stalls from genuine hangs in stall warnings + Telegram messaging #526 closed against rc20 commit f7ac60e (PR fix(rc20): #524 outbox + #526 watchdog approval-pending follow-ups #556) covering all 3 completion paths + watchdog detector
• ENH-PATCH: Untether bot dispatches an agent run for slash-command typos like .new (no recognition, full Claude cost incurred) #523, TRIVIAL: cancel.requested fires 3× within 512 ms for a single user cancel (button not disabled after first click or duplicate dispatch) #525, "↩️ Answered:" confirmation truncated to 100 chars after AskUserQuestion text reply (agent receives full text) #528, ENH-PATCH: setup.warning fires per-engine on every config.reload — 5×N noise when host has fewer engines than fleet #532, ENH-PATCH: callback-answer latency escalates 6-10× under rapid-click clusters (220ms baseline → 1.4-2.9s on 2nd/3rd click) #546, ENH-PATCH: agent self-restart pattern after editing untether.toml — hot-reload ignored, drain timeout, outbox message dropped #547, ENH-PATCH: hot-reload success Telegram notification with explicit "no restart needed" framing #548 closed against rc19 (PR 0.35.3rc19 — /monitor campaign issue sweep (10 commits) #555)
• ENH-PATCH: agent self-restart pattern after editing untether.toml — hot-reload ignored, drain timeout, outbox message dropped #547 axis 3 (defensive drain-timeout heuristic) deferred to v0.35.4 as ENH: drain-timeout heuristic for self-restart from active session (follow-up to #547 axis 3) #559

What changed in this PR

File	Change
pyproject.toml	0.35.3rc20 → 0.35.3
uv.lock	regenerated for the version bump
CHANGELOG.md	header (unreleased) → (2026-05-20); new rc20 + rc19 entries (9 fixes); issue-link refs added to rc18/rc19/rc20 parent bullets so validate_release.py passes the stable-bump gate
README.md	+1 feature bullet on hot-reload configuration + env_extra_allow
docs/faq/faq.md	+1 Q/A on outbox file delivery (the hot-reload Q was already present)
docs/how-to/interactive-approval.md	+1 paragraph on the /config → Diff preview toggle

docs/how-to/security.md and docs/how-to/operations.md were audited and confirmed comprehensive (no edits needed — [security] env_extra_allow, SSRF protection, hot-reload coverage all already documented).

Pre-commit validation

• uv run ruff format --check src/ tests/ — 283 files clean
• uv run ruff check src/ tests/ — all checks passed
• uv lock --check — clean
• python3 scripts/validate_release.py — 3 passed, 0 failed (stable version validated)
• FAQ shape: 15 question-shaped H2s (≥7 required per .claude/rules/help-faq.md)
• uv run pytest — not re-run in this branch (no source code changes; rc19 + rc20 both passed the gate at 82.58% coverage)

Test plan (post-merge to dev)

• CI green on TestPyPI publish path (0.35.3 is a stable version; TestPyPI gate fires with skip-existing: true)
• Open dev → master PR
• On master merge: verify auto-tag-on-master.yml creates v0.35.3 tag, release.yml publishes to PyPI via OIDC, GitHub Release page appears
• Write attestation marker: scripts/run-integration-tests.sh 0.35.3 --manual after running the U1-U8 integration tests on @untether_dev_bot
• Run scripts/fleet-rollout.sh 0.35.3 to roll all 4 hosts (lba-1 + nsd + channelo + mac)
• /ping smoke on each host's bot

🤖 Generated with Claude Code

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 1507e5f2-64a1-449a-a3e2-6c208b9b570c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch release/0.35.3

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}