Agent Control 3.8.1
Agent Control 3.8.1 separates workload locality, provider execution locality, and credential residency while preserving governed route, baton, telemetry, recovery, and ledger identity.
Highlights
- Independently governed Codex account profiles with opaque credential references.
- Physical Account A to sealed baton to Account B continuation and governed fallback qualification.
- Immutable cross-node repository transfer and fixed-purpose Windows execution.
- File-backed OpenRouter credential resolution without exposing resolved paths or provider bodies.
- Repository-review retry and thread identity integrity across restart.
- Complete non-ignored Git mutation containment for the opt-in Spark lane.
- Owner-only foundational state and telemetry files, durable evidence sanitization, and reconciled dashboard telemetry.
Provenance
- Release commit: 4da1d36
- Annotated tag object: 91fa7b34bffd1d71144ab0cd8ceb62491556e575
- Qualified implementation and evidence checkpoint: 93ce5ab
- Reviewed implementation commit: 967181f
- Metadata-only promotion commit: c695263
Qualification
- Exact release commit: 711/711 complete deterministic tests passed.
- Focused remediation set: 90/90 passed.
- Production lifecycle: 9/9 passed.
- State permissions: 3/3 passed.
- TypeScript, bootstrap, dashboard syntax, neutrality, and 32 implementation-status claims passed.
- 115 Markdown files and 452 repository-local links passed.
- Evidence JSON parsing and git diff integrity passed.
- Packed artifact installed successfully; installed package version is 3.8.1 and its CLI entrypoint executed.
- Resolved production dependency audit: 0 known vulnerabilities.
Physical evidence
- Final governed GLM run: run-1c151e3a-19ad-41e5-8f58-3075eb1460c1
- Route: openrouter / z-ai/glm-5.3-flash
- Usage: 847,422 input + 28,628 output = 876,050 total tokens; 23,130 reasoning tokens.
- Calculated cost: USD 0.07071365.
- Both independent verifier gates passed.
- Final review: 0 Critical, 0 High, 1 Medium, 6 Low, 3 Informational.
- Dashboard telemetry was reconciled programmatically. No interactive dashboard video exists or is claimed.
Artifact
- File: agent-control-3.8.1.tgz
- Size: 1,166,295 bytes
- SHA-256: 792ccba24f146a430c262fecd211bd0a0e72d1aa987732a5372bb53f2016b76e
- SHA-512: 6eb9000460e624381ed02f78b502c6d42fca5422a61afc41d229e62ee635bf731a175513927ba4a16d64155551e81b2b505cdb1cfdcfbcaabe9aa0c86ee45b72
- npm integrity: sha512-brkABGDmJDge0C94tQLG1C/KVCKmGvxB0inmLuY1v3MaF1UTknukoW1kFVVR6BsrUFzbHP3PvKq+mqDIbuRbcg==
Accepted limitation
One Medium hardening item remains explicitly deferred: intentionally ignored and .git-internal Spark writes are outside the mutation ledger. Spark remains disabled by default, single-attempt, disposable-worktree-only, and independently verified. This release does not represent that limitation as fixed.
Upgrade
- git fetch --tags
- git checkout v3.8.1
- npm install --no-package-lock --ignore-scripts
- npm run check
This source release performs no live deployment, provider authentication, or service enablement.