v2.6.0

v2.6.0 (2026-09-23)

This release is published under the Apache-2.0 License.

Bug Fixes

• Cover keyword patches and pending proposal status (2f3a2b6)

• Detect policy replacement through patch.multiple (4ab848a)

• cable: Preserve media warnings and remove hidden policy sources (fbd9563)

• cable: Report every override one trace lost, not one per position (621ac2e)

• cables: Enforce tag references during deletion (0a748cc)

• cables: Identify lost overrides and preserve blocked media facts (1a59fb0)

• cables: Lock reviewed tag associations (7cf2b72)

• cables: Report blocked override loss (fceb8d8)

• cables: Report overrides lost to self-connections (abeeb30)

• cables: Retain resolved pairs when a segment self-connects (01a3f4e)

• cables: Share reviewed metadata with deletion fingerprint (553af14)

• import: Keep accepted plans out of Job data (e00d05d)

• import: Purge legacy Job plan copies (278b04c)

• proposals: Address review findings (ff78953)

• proposals: Let the plan reopen a field an accepted proposal resolved (7d1a87e)

• trace: Address review findings (4995c36)

• trace: Address second review round (20c294d)

• trace: Align review state and permission tests (c536bfa)

• trace-workspace: Close six defects an adversarial review found (5545bda)

• trace-workspace: Drop the dangling "row" when a trace states no row number (ada3f7c)

• workspace: Close disclosure review gaps (99d6c55)

• workspace: Honor policy row permissions (0f81a28)

• workspace: Let retained overrides clear (db25bdd)

• workspace: Prevent browser history snapshots of trace reviews (f87e678)

• workspace: Protect policy disclosures (1b52a93)

• workspace: Recheck cable disclosures (50f752f)

Chores

• deps: Bump the github-actions group with 3 updates (be721fe)

• deps-dev: Bump build from 1.6.0 to 1.6.1 (2104216)

• deps-dev: Bump ruff from 0.16.6 to 0.16.7 (23603a6)

• deps-dev: Bump vitest from 5.0.0 to 5.0.1 (ef6b2ce)

Code Style

• trace-workspace: Keep a long path readable in the segment panel (a51f8dc)

Documentation

• cables: State that the tag integrity migration blocks tag reads (0642016)

• spec: Drop the CableClass condition from the cross-trace rules (54d8d8f)

• spec: The proposal card states no backend metadata of its own (e624fb9)

Features

• cable: Warn where one verified run states two media families (4963b35)

• trace-workspace: Force one segment to its own Cable policy (43dd7ed)

• trace-workspace: Set a Cable policy without leaving the trace (fbc3a77)

Performance Improvements

• trace: Decide the schema recovery on the version alone (0274ea0)

Refactoring

• proposals: Drop the backend metadata and attempt count from the card (791cd1f)

Testing

• Replace cached-plan parse-count mock with workspace trace identity assertion (f0f1d72)

• cable: Preserve workspace redaction and media findings (b1dfe95)

• cables: Compare decoded strings in disclosure checks (cdf0038)

• cables: Compare reviewed tag names as values (e4e2a07)

• cables: Cover disclosure boundaries (42fd5bb)

• cables: Cover tag removal during replacement (907a6e4)

• cables: Cover tag writer queued behind deletion (bc07a05)

• cables: Guard tag content type identity (fa83f6f)

• cables: Hold reviewed tag names through deletion (2385a5d)

• cables: Keep review tags aligned with deletion fingerprint (1c15c63)

• cables: Keep unaffected override through self-connection (98e345d)

• cables: Reject orphan tags during migration (85cca0b)

• cables: Reject tags on deleted logical cables (6c116d1)

• cables: Retain distinct lost decisions and blocked media facts (9515f07)

• migrations: Verify Cable tag projection round trip (b4c50ee)

• proposals: Pin a candidate limit below the pre-paging candidate count (843c3bc)

• proposals: Prove ceiling rejection causes stale inventory (9127a10)

---

Detailed Changes: v2.5.0...v2.6.0