Skip to content

Agent Control 3.8.1

Choose a tag to compare

@lozknowles lozknowles released this 04 Sep 10:47
· 166 commits to main since this release

Agent Control 3.8.1 separates workload locality, provider execution locality, and credential residency while preserving governed route, baton, telemetry, recovery, and ledger identity.

Highlights

  • Independently governed Codex account profiles with opaque credential references.
  • Physical Account A to sealed baton to Account B continuation and governed fallback qualification.
  • Immutable cross-node repository transfer and fixed-purpose Windows execution.
  • File-backed OpenRouter credential resolution without exposing resolved paths or provider bodies.
  • Repository-review retry and thread identity integrity across restart.
  • Complete non-ignored Git mutation containment for the opt-in Spark lane.
  • Owner-only foundational state and telemetry files, durable evidence sanitization, and reconciled dashboard telemetry.

Provenance

  • Release commit: 4da1d36
  • Annotated tag object: 91fa7b34bffd1d71144ab0cd8ceb62491556e575
  • Qualified implementation and evidence checkpoint: 93ce5ab
  • Reviewed implementation commit: 967181f
  • Metadata-only promotion commit: c695263

Qualification

  • Exact release commit: 711/711 complete deterministic tests passed.
  • Focused remediation set: 90/90 passed.
  • Production lifecycle: 9/9 passed.
  • State permissions: 3/3 passed.
  • TypeScript, bootstrap, dashboard syntax, neutrality, and 32 implementation-status claims passed.
  • 115 Markdown files and 452 repository-local links passed.
  • Evidence JSON parsing and git diff integrity passed.
  • Packed artifact installed successfully; installed package version is 3.8.1 and its CLI entrypoint executed.
  • Resolved production dependency audit: 0 known vulnerabilities.

Physical evidence

  • Final governed GLM run: run-1c151e3a-19ad-41e5-8f58-3075eb1460c1
  • Route: openrouter / z-ai/glm-5.3-flash
  • Usage: 847,422 input + 28,628 output = 876,050 total tokens; 23,130 reasoning tokens.
  • Calculated cost: USD 0.07071365.
  • Both independent verifier gates passed.
  • Final review: 0 Critical, 0 High, 1 Medium, 6 Low, 3 Informational.
  • Dashboard telemetry was reconciled programmatically. No interactive dashboard video exists or is claimed.

Artifact

  • File: agent-control-3.8.1.tgz
  • Size: 1,166,295 bytes
  • SHA-256: 792ccba24f146a430c262fecd211bd0a0e72d1aa987732a5372bb53f2016b76e
  • SHA-512: 6eb9000460e624381ed02f78b502c6d42fca5422a61afc41d229e62ee635bf731a175513927ba4a16d64155551e81b2b505cdb1cfdcfbcaabe9aa0c86ee45b72
  • npm integrity: sha512-brkABGDmJDge0C94tQLG1C/KVCKmGvxB0inmLuY1v3MaF1UTknukoW1kFVVR6BsrUFzbHP3PvKq+mqDIbuRbcg==

Accepted limitation
One Medium hardening item remains explicitly deferred: intentionally ignored and .git-internal Spark writes are outside the mutation ledger. Spark remains disabled by default, single-attempt, disposable-worktree-only, and independently verified. This release does not represent that limitation as fixed.

Upgrade

  1. git fetch --tags
  2. git checkout v3.8.1
  3. npm install --no-package-lock --ignore-scripts
  4. npm run check

This source release performs no live deployment, provider authentication, or service enablement.