v1.3.1

Release Notes

Summary

• version: 1.3.1
• release date: 2026-07-15
• release owner: publisher (ATM release execution)

This release lands Phase AE (installed-copy packaging, docs/help surfacing,
publisher freshness gate) and Phase AF (host-wide singleton closure,
observability/release gates, native send input-integrity hardening), plus a
1.3.1 cross-host smoke-test validation sprint and a Homebrew tap
platform-asset mapping fix.

Included Changes

Phase AF — reliability hardening (PR #539 integrate/phase-AF → develop)

• Close the host-wide singleton bypass that blocked the 1.3.0 release
  (Sprint AF.1).
• Add observability and release-gate hardening: structured tracing fields,
  request-ID sentinel-collision fix, release-preflight freshness checks
  (Sprint AF.2).
• Harden native atm send input-integrity handling (Sprint AF.3).
• Remove the workflow-sidecar (superseded by daemon-native dispatch,
  reclassified from Sprint AF.4 to Sprint AD.36).

Phase AE — installed-copy packaging & docs (PR #530 integrate/phase-AE → develop)

• Ship an installed-copy packaging path and publisher freshness gate
  (Sprints AE.1, AE.8).
• Land hooks/nudge template corpus and mailbox/diagnostics corpus expansion
  (Sprints AE.3, AE.4).
• Surface CLI help content and verify the installed user-doc graph
  end-to-end (Sprints AE.6, AE.7, AE.9).

1.3.1 cross-host smoke-test validation (PR #540)

• Independently re-run and verify the full macOS and Windows smoke suites
  against the 1.3.1 candidate (fast/normal/thorough/shared-host/graft-
  same-host lanes) with evidence SHAs verified as real ancestors of the
  reviewed commit.
• Formally document the true cross-host (Windows↔macOS simultaneous)
  coverage gap as deferred (AB-SMOKE-001–010, still pending) rather than
  silently glossing over it.

Homebrew formula fix (PR #529, issue #522)

• Fix the update-homebrew formula generator's platform-asset mapping bug
  that caused all three platform url/sha256 blocks to point at the same
  aarch64-apple-darwin asset.
• Backfill the 1.3.0 and 1.2.3 tap formulas with corrected per-platform
  assets using the fixed generator.

Other fixes carried into this release

• winget token wiring fix (PR #532).
• Preflight documentation pass (PR #531).
• atm send/SendMessage-to-atm-send audit and correction (PR #534).

Operator / User Impact

• No breaking CLI changes. atm continues to operate as documented in 1.3.0.
• Installations using the daemon/plugin host benefit from the host-wide
  singleton fix (prevents duplicate daemon instances race-starting on a
  single host) and observability improvements.
• Homebrew tap users on 1.3.0/1.2.3 who hit a platform-asset mismatch
  (wrong sha256/url for non-macOS-arm64 platforms) get corrected formulas
  as part of this release's tap backfill.
• True cross-host (Windows↔macOS simultaneous) messaging remains
  same-host-validated only; the cross-host matrix is tracked as pending,
  not yet executed.

Packaging / Distribution Notes

• crates.io: publish in dependency order per the release manifest (9
  publishable crates): atm-storage → agent-team-mail-core →
  atm-storage-rusqlite → atm-daemon-client → atm-runtime →
  atm-daemon-bootstrap → atm-daemon → atm-graft → agent-team-mail.
• GitHub Releases: tag v1.3.1 cut from main via the Release workflow.
• Homebrew: regenerate agent-team-mail.rb and atm.rb at 1.3.1 with the
  fixed generator; backfill 1.3.0 and 1.2.3 formulas with corrected
  per-platform url/sha256.
• winget: token wiring fix included (PR #532); manifest publish follows
  standard release workflow.

Known Issues / Waivers

• True cross-host (Windows↔macOS simultaneous) smoke coverage
  (AB-SMOKE-001–010) remains PENDING; only same-host validation was run
  for this release.

Follow-Up

• Execute the frozen cross-host smoke matrix
  (docs/plans/phase-AB/cross-host-smoke-checklist.md) in a future
  release window.
• File the non-blocking flaky-test hardening follow-up for
  mailbox_locking.rs:606-621 (tracked, not yet filed as of this release).

---

Full Changelog: v1.3.0...v1.3.1