v0.11.1

Added

• TaskOperatingState: Planner as sole authority for action dispatch — replaces 10 retired shortcuts with structured decision-making.
• Streaming guard chain: Buffer-first + post-stream guard checks with client-side recovery (stream_retry, stream_replace, stream_blocked).
• SemanticClassifier hardening: Typed category constants, per-bank thresholds, TrustLevel (Neural/NGram), AbstainPolicy, ClassificationTrace.
• Platform behavioral contract: User intent sovereignty, voice boundaries, output originality, behavioral self-awareness.
• App installer: roboticus apps install/uninstall/list commands with manifest-driven profile creation, skill/theme/subagent deployment.
• Profile system: roboticus profile create/switch/list/delete for isolated agent configurations.
• GM soak framework: 100-turn soak tests with recommendation engine for FIRMWARE, OS, and context health diagnostics.
• Adaptive retrieval strategy: Decision layer for cache-only, indexed, live discovery, and direct verification modes.
• Post-turn observer dispatch: Subagents can observe conversation turns for background processing.
• Dashboard: Pipeline Traces, Flight Recorder, Delegation Outcomes tabs; theme skinning; skill create/edit with markdown rendering.

Changed

• Semantic intent classification replaces keyword matching across intent registry, guard detection, and specialist workflow routing.
• File decomposition: guard_registry (2399→940), tests (10205→1119), core (2450→submodules), shortcuts (2264→submodules).
• Shortcut retirement: 10 high-damage shortcuts removed; CronTool replaces CronShortcut; AcknowledgementShortcut retained.

Fixed

• SubagentRegistry startup race (WEB-174): atomic start_agent transition eliminates agents stuck in "booting".
• Keystore test flakes: mutex serialization for tests sharing global machine-id file.
• Dashboard blank bubble: provider errors now preserve error state instead of showing empty message.
• Specialist workflow dead code: case mismatch in category lookup (lowercase vs uppercase) fixed via typed constants.
• Infrastructure leaks: guard chain catches subagent name exposure, capability dumps, and narrated delegation.
• Stream finalization: preserves interception notices instead of overwriting with empty content.