v3.5.1

What's new

Bug Fixes

Protected workflows could fail closed after a successful foreground task delegation. Child receipts were being compared against the parent session's salt and boot-time revisions, so stale intermediate receipts aborted the entire rollup, and explicit operation requirements declared after skill activation weren't preserved across recovery. This release validates foreign child lineage and reconstructs receipt identities with the child session salt, preflights receipt batches before minting so stale mutable revisions are skipped while foreign workspaces stay fail-closed, and re-attests current child evidence against the parent's live pre-task state without exposing a classifier bypass to model tools. Explicit starts can now monotonically extend pristine auto-started units — including resource scopes — with replay-safe recovery, and exactly-once rollup behavior is preserved across duplicate callbacks and host restarts. Test coverage was hardened to use semantic integration checks in place of model-wording-sensitive and raw marker-count assertions (#719).

Build System

The pinned OpenCode dev dependency was bumped twice this cycle, first to v1.18.7 (#712) and then to v1.18.8 (#717), keeping the local dev toolchain current with upstream fixes.

Documentation

Ownership and trust boundaries for the pi-subagents persona export were documented, covering manifest, lock, and hash checks; transactional mutation safety with rollback and canonical path containment; and runtime verification via the pinned @tintinweb/pi-subagents@0.14.3 integration tests (#711).

Also in this release

• deps: Bumped fro-bot/agent to v0.96.0 (#721).
• deps: Bumped github/codeql-action to v4.37.4 (#713).
• dev: Bumped @biomejs/biome to v2.5.6 (#720).

Compare

v3.5.0...v3.5.1