Repository navigation
Releases: ma-za-kpe/stood
Releases · ma-za-kpe/stood
Release list
v0.15.1
v0.15.0
0.15.0 (2026-10-14)
Features
- c5: improve issue intake and add Render deploy button (aa4bd11)
- issues: add triage status labels (476d4c2)
- issues: require duplicate checks (bf92656)
- issues: require proposed feature behavior (0763cf2)
- render: add safe community deploy button (5644857)
Fixes
Documentation
v0.14.2
v0.14.1
v0.14.0
v0.13.0
v0.12.2
v0.12.1
v0.12.0
0.12.0 (2026-10-12)
Features
- api: rate limits on the signed platform API (T-0330) (d3ef57d)
- api: rate limits, live contract, API portal, typed errors on every route (#77, T-0156) (ff8a552)
- api: serve the platform API contract at /v1/openapi.json (T-0331) (23f5e6b)
- docs: the APIMatic developer portal, published with the website at /stood/api/ (T-0332) (49806ca)
Fixes
- api: a reserved payment reaches PayPal within one pass, not an hour later (T-0349) (dadc45a)
- api: a waiting settlement logs why, as a fixed reason code (T-0345) (7749d4f)
- api: GitHub reads fall back to the read token when the App key is unset (#77) (529b175)
- api: read PayPal's real order shapes so looked-up captures and voids resolve (6f3ac61)
- api: read PayPal's real order shapes, so looked-up captures and voids resolve (T-0347) (a693ed7)
- api: reserved payments reach PayPal at once; stood-api on Starter; void lesson (98c643f)
- api: the live run resumes after packages and retries one refused read (T-0346) (e036093)
- api: waiting settlements log why; the live run resumes after packages (54cb8dc)
- ci: tell checkouts' databases apart by compose folder, not project name (771df5d)
- yard-api: a deletion fence between planning and intake erasure (T-0351) (44ef9d3)
- yard-api: complete reserved submissions and drafts against the current version (T-0350) (589f4f8)
- yard-api: erase the planner's thread for every intake version (T-0338) (89b5c3d)
- yard-api: fifth audit: erasure, secret deadline, recovery, preview and notice lifecycles, job overlap (d46a217)
- yard-api: lease notice keys and mark them delivered only after the send (T-0342) (80e1cc2)
- yard-api: payouts recover PayPal's real duplicate answer; settlement on after the release review (af60015)
- yard-api: refuse secrets past their handover deletion deadline (T-0339) (aeb2fba)
- yard-api: reserve preview deploys before Render; sweep incomplete and untracked ones (T-0341) (78f5be7)
- yard-api: resumable preview cleanup and an atomic global preview cap (T-0352, T-0353) (bae7b84)
- yard-api: run hosted jobs without overlap; schedule secret purge and recovery (T-0339, T-0340, T-0343) (1e663f3)
- yard-api: sixth audit: stale recovery, deletion fence, resumable cleanup, atomic preview cap (7b55254)
- yard: recover a duplicate payout from where PayPal really puts the link; live payout check (T-0335) (3822562)
Documentation
- an uncaptured PayPal order has no captures list, confirmed live (T-0347) (af7ef16)
- fifth audit fixes in TASKS and SETUP (T-0338 to T-0343) (0c2b56b)
- PayPal Payouts guide from the live run; payouts on in the sandbox (T-0336) (9c352ac)
- record the production release review; settlement waits only for the owner's switch (T-0337) (ef3db43)
- settlement is on in production since 2026-10-11 (T-0337) (16df3d4)
- sixth audit fixes in TASKS and SETUP (T-0350 to T-0353) (b675c26)
- the live end-to-end run, completed and confirmed in PayPal (T-0296) (cd577e9)
- the live end-to-end run, completed and confirmed in PayPal (T-0296) (4c45414)
- what has to be true before real money; the README says what is live now (T-0334) (28178da)
v0.11.0
0.11.0 (2026-10-11)
Features
- api: only the judge's decisions can pay a code milestone (T-0306) (dca4c70)
- api: the reconciler reads GitHub with the Yard App's short-lived tokens (T-0311) (6921efa)
- evidence storage, OpenAPI 3.1 contract and APIMatic SDK, tighter secret checks (C4 #77) (#121) (b76257d)
- foreman: acceptance tests are data the Foreman writes and Yard renders, never model-written code (T-0318) (1915a93)
- foreman: acceptance tests drive the builder's program only through stood-harness (T-0308) (bcd3df8)
- ops: read-only review of every decision the old runner recorded (T-0307) (c255df7)
- ops: recover a funding stuck in CREATING from a PayPal order id (T-0310) (9fa0a36)
- plan to blueprint with Stood baselines, usage release, intake deletion and expiry (C4 #77) (#125) (d71bae6)
- runner: frozen tests run in the judge's own process, apart from the builder's code (T-0305) (02ec8fd)
- yard: builder payouts on PayPal's contract, funding recovery and operations (#77) (d5ef629)
- yard: builder payouts, per-job ledger, 48-hour holdback and disputes (T-0313, T-0314) (b0593f6)
- yard: the buyer pays Yard's fee on top of each milestone, in the same hold (T-0312) (6f6e8bd)
- yard: Yard's PayPal merchant is the payee of every allowance (T-0297) (5f858c0)
Fixes
- api: a code decision settles only the tranche's latest package (T-0302) (710603d)
- api: a GitHub outage leaves the package retryable, never decided (T-0315) (ba9ff7f)
- api: claim each run, back off waiting ones, run the untried first (T-0301) (65e7673)
- api: count only an explicit WAIT as waiting; reaching approval is progress (T-0300) (efa16d5)
- api: count waiting fundings as waiting, not advanced (T-0300) (e85ddf6)
- api: every waiting run names the step it stopped at (T-0299) (910724f)
- api: fair queues past any number of jobs backing off (T-0321) (150a4f4)
- api: repository downloads are capped while streaming; long archive paths are kept exactly (T-0327) (d710dd7)
- api: run leases are owned by a token, renewed while working, bounded by a deadline (T-0320) (bf446c6)
- api: worker counters count state changes; a refused funding is a failure (T-0319) (ea6ec76)
- ops,yard: recovery cannot write to PayPal; settled reviews stay monitored; 401 reads refresh; failed checks are reported (T-0326) (49fab15)
- ops: funding recovery only reads; it refuses any state the normal flow would act on (T-0323) (20e3225)
- PayPal holds that hung live, hosted package submission, the live end-to-end tool (C4 #77) (#127) (862773f)
- runner: a file passes only when every test in it ran and passed; a broken suite is never a red baseline (T-0316, T-0317) (5a7c42d)
- runner: harden the code runner from the external audit (#77) (ed3feb6)
- runner: pass only on real test results, lock the workspace read-only, wait on install outages (T-0298) (649c132)
- runner: run tests as nobody with every capability dropped; qualify the audit's attacks live (T-0304) (2d3672d)
- runner: the run deadline aborts the run and stops the VM; a VM that will not stop is reported (T-0328) (05580ec)
- yard: no payout dead ends: resend window, owner actions, full reconciliation, logged issues (T-0325) (801e4af)
- yard: payouts follow PayPal's contract: recover duplicates, retry what is retryable (T-0324) (27c7948)
- yard: the blueprint editor edits acceptance cases, and plans keep them (T-0318) (bb6c0cd)
Documentation
- ADR-0026 amendment on what a PASS proves; settlement off in production; tasks T-0298 to T-0304 (4813be0)
- fifth audit (T-0327, T-0328) in TASKS (d7ca491)
- operations batch (funding recovery, GitHub App reads, fee line); Yard's own PayPal app for Payouts (ADR-0027) (34b9415)
- second audit (T-0315 to T-0322): judge outcomes, case format, ADR-0026 note, guide (117d694)
- the judge (owner decision), Vercel Sandbox guide, release review; tasks T-0305 to T-0309 (03d6262)
- third audit (T-0323 to T-0325): payouts on PayPal's contract, owner actions (6b47279)
Refactoring
- runner: call the image hash what it is, a label hash, from the image the runner boots (T-0303) (22e5e12)