v1.61.0

1.61.0 - 2026-08-24

Added

• add the wasm-pack arch correction and audit (#811) (#870)
• record and guard the org-wide grant model (#751) (#853)
• run the scaffold as a repository in the gate (#777) (#877)
• report classic branch protection as drift (#761) (#874)
• select the delivered aqua registry (#811) (#882)
• stage the committed arch correction (#854) (#885)
• correct the committed architecture (#854) (#898)
• refuse a [workspace.package] key nobody inherits (#863) (#890)
• report a repo's own rulesets as drift (#876) (#897)
• move to stele v0.20.0 and jsonx epoch 7 (#901)
• compile the declared MSRV at its pinned rustc (#820) (#865)
• compile the pgrx crate the gate never saw (#813) (#900)

Fixed

• guard canon-only legs on identity, red on inputs (#738) (#855)
• scrub git's environment from the pgrx harness (#857) (#869)
• read installability from the release path's record (#871)
• let the canon track its own delivered rust configs (#856)
• guard canon-only lints on identity and file shape (#858) (#879)
• resolve a repo's own top-level message fields (#725) (#873)
• catch a gate measuring another belt (#867) (#878)
• declare the contents grant the tag job spends (#883)
• update monumental-archive/signer to 32fa844 (#888)
• refuse a nested mise run inside a task body (#764) (#866)
• resume from HEAD's tag, not from the plan's (#864) (#889)
• key the evidence by the digests consumers pull (#887)
• name the endpoint and grant on a failed read (#862) (#895)
• guard every fixer on what it rewrites (#860) (#893)
• hold the squash body to the commit canon (#880) (#886)
• map each ts extension to the js one tsc resolves (#868) (#894)
• lock file maintenance (#902)
• relock five tools onto their musl assets (#899) (#903)

Testing

• table-test the release scripts' decisions (#772) (#881)