v1.0.9-pre.1

Added

• Fan-out, judge and fixer emitters take --operator-focus-file, a typed, bounded, digest-pinned operator focus rendered as an "Operator focus" section (#2635)
• The gate fix loop is one state machine with a sanctioned exit from every state, registered in the conformance harness and State atlas; later-slice transitions are known gaps (#2787)
• Configure Codex worker and pre-push reviewer model/effort through role and tier settings with gate resolve-role --role (#2914)
• A gate findings log that fails integrity can be quarantined with quarantine-gate-findings-log.mjs, which unblocks the next round without deleting evidence (#2969)
• The keyed fan-in ledger and the gate findings log carry a seal; an out-of-band write fails the next read with gate_artifact_out_of_band_write (#2971)

Changed

• merge-pr and the CI gate-evidence check accept a cap-fixed PR from a cap-round marker plus resolved round threads; cap-fixed hardening lands (#2462)
• After the draft_gate cap round's fixer pass lands the PR goes ready and round N+1 is refused (#2462)
• Gate coordination records a base-merge verdict carry in a PR comment, and merge-pr and gate-evidence accept it after recomputation, so a base-only merge needs no new gate round (#2752)
• Test runs now refuse to start when a worktree resolves its core package from another checkout, and the inline-interpreter hook also blocks bun -e and bun stdin scripts (#2941)
• The release runbook defines the recurring post-release audit, memory and prose cleanup steps and the combined release retro (#2941)
• Pi model tiers moved off the rate-limited Fast snapshot to the non-Fast V4.1-Flash-1017 snapshot, then split across two rate-limit buckets (#2975)
• Pi tiers split over two rate-limit buckets: bulk roles take the floating V4.1-Flash alias, review, judge, refiner, gate angles and the pre-PR reviewer stay on V4.1-Flash-1017 (#2978)
• Gate light mode caps weighted logic LOC and non-doc file count, so small fixes with a test and doc note stay inline (#2982)
• Lightweight startup eligibility uses the shared light-mode cap (weighted logic LOC, non-doc files, config-source floor) (#2985)
• Lightweight startup counts both endpoints of a rename in the changed-file list (#2985)
• Lightweight startup fails closed with size_outcome_unavailable on a missing or failed size capture, a block size outcome or a failed changed-file read (#2985)
• A --base-only gate dispatch run resolves size_outcome_unavailable (#2985)

Fixed

• A Copilot review with findings no longer counts as converged below the round cap before the Copilot gate passes; the loop re-requests Copilot on the fix head (#2445)
• Carry complete fixer checkpoints to descendants and close authenticated no-commit or foreign-head pre-push sequences; bind THREAD delta records to the committed candidate (#2787)
• Authenticate empty-range delta exits and canonical handback heads, close sequences after baseline amendments, and align no-commit and THREAD instructions (#2787)
• A retro checkpoint cannot be recorded complete without a record that names the merge commit, and the CLI wrapper reports oversized child output instead of truncating it (#2887)
• Restore the repository's Codex worker and review tier mappings, guarded by live configuration structure checks (#2914)
• The inline-interpreter hook refuses sudo/xargs/timeout wrapped heredocs, $(...) and backtick substitutions, and python3 -Ic flag clusters (#2943)
• The inline-interpreter hook fails closed on nested heredocs and decodes ANSI-C $'...' quoted option values (#2943)
• A non-empty CODEX_THREAD_ID (without OMPCODE=1) requires the Codex trailer instead of the Claude trailers, including without CLAUDECODE (#2980)