12.6.0

New

• Verify shows project checks, security scans and independent reviews in six lanes, with evidence for each agreed outcome.
• Built-in scans check for secrets, vulnerable dependencies, unsafe GitHub workflows and risky JavaScript, TypeScript and Python code.
• Second opinion has Off and Automatic settings. Automatic uses a reviewer from another model provider for risky Plans and changes.
• Show me around starts with a compact tour, offers a Full tour, and follows the current Home, build and Review screens.

Fixed

• Start the build keeps the agent, lead model, effort, helper model, files and workspace choices visible. Returning from model defaults preserves the draft.
• Codex planning works through npm installations. Running commands no longer leave a stale permission-wait notice.
• Review keeps PR creation available when verification records are missing. Document links and genuine questions stay usable.
• Conversation navigation respects explicit turn jumps and Jump to latest while loading earlier messages.
• Narrow screenshot comparisons keep their labels and controls readable. Accepted unverified outcomes no longer count as passed checks.

Upgrading

• Setup installs the pinned security tools; uninstall removes their managed state on Windows too. Unsupported tools and unread files are reported as not checked. Dependency advisory lookups use osv.dev unless Local is selected in Settings.
• Existing Second opinion settings use Off or Automatic; enabled reviews select the compatible reviewer automatically.