v0.11.3
Theme: Complete the Operating Picture
The agent can perceive everything, act everywhere, and explain every decision.
Added
- Matrix E2EE (Olm/Megolm): vodozemac-based encryption for Matrix adapter — device key lifecycle, Olm session establishment, Megolm group encrypt/decrypt, to-device key exchange, JSON-file key persistence.
- Windows AppContainer sandboxing: Job Object confinement for script execution — memory limits, kill-on-close, process count caps with graceful degradation.
- Cognitive scaffold architecture principle (ARCHITECTURE.md §4): durable context injection, structured self-knowledge, continuity preservation, learning from failure, referenceability.
- Topic segmentation: Embedding-free topic detection at message storage, topic-aware context assembly (current-topic full, off-topic summarized),
topic_tagcolumn onsession_messages. - Context compaction: Deduplication, compression, budget enforcement between retrieval and context assembly — 25% L0 budget cap for memory.
- Ambient recency injection: Last 2 hours of episodic memories injected into every turn regardless of query similarity.
- SVG pipeline flow graph: Interactive flow visualization with connected nodes, directional arrows, click-to-inspect floating popovers. Full pipeline trace from input_validation through guard_chain.
- Guard stage in pipeline traces: Guard outcomes visible in flow visualization with per-guard annotations.
- TASK_DEFERRAL + FALSE_COMPLETION semantic banks: 10 exemplars each for detecting narrated-future-action and unverified completion claims.
- EXECUTION intent exemplars expanded: Task-management verbs (close out, implement, carry out, handle, process, complete).
- DELEGATION intent exemplars expanded: Indirect delegation patterns (implement recommendations using agents, direct agents to carry out plan).
- Delegation workflow Report step: Mandatory step 6 — orchestrator must present delegation results to user since subagents run in isolated sessions.
- FIRMWARE.toml rules migration:
roboticus updateauto-migrates[[rules]]array to[rules]table format. - Generic channel poll loop: Single
channel_poll_loopreplaces 4 near-identical platform loops. - Database indexes:
tasks(status),cron_jobs(enabled, next_run_at),transactions(created_at DESC). sandbox_requiredconfig flag: Abort script execution if OS-level sandboxing unavailable.#[instrument]on pipeline functions: Automatic span tracing onrun_pipeline,agent_message_stream,process_channel_message.- CORS layer:
tower-httpCorsLayer on the API router. - CSP Google Fonts:
fonts.googleapis.com+fonts.gstatic.comin Content-Security-Policy. - God file splits:
main.rs3408→1454,run.rs3113→2432,update.rs3058→973,transform.rs2876→289.
Fixed
- Dashboard JS syntax error: Orphaned
renderWalletinefficiency.js+ duplicate IIFE close inwebsocket.js— killed all dashboard interactivity since 2.27 decomposition. - InternalJargonGuard: Migrated from 11-string word list to NARRATED_DELEGATION semantic classifier (threshold 0.8). Subagent leak check respects user prompt context.
- TaskDeferralGuard: Migrated from "let me"/"I'll" word list to TASK_DEFERRAL semantic bank.
- ExecutionTruthGuard: Uses FALSE_COMPLETION score, not bare intent trigger. Recommendations no longer treated as false delegation claims.
- ModelIdentityTruth:
||→&&— stops replacing 1,649-char responses that have ≤3 lines. Redacts model name in substantive responses instead of replacing entire content. - Deterministic fallback: Preserves user's topic snippet instead of generic "did not meet quality standards."
- Tool retry loop: Surfaces actual tool error instead of "same tool call kept repeating."
- Behavioral contract §1.5: Latest user message takes priority over stale plans.
- Cron/subagent session isolation: Dedicated sessions per invocation prevent pollution of user conversations.
- Cron query optimization:
WHERE enabled=1pushed to SQL; uses new index. - Delivery queue in-flight recovery: Stale in-flight items auto-recovered after 5 minutes.
- CapacityTracker bounded: Hard cap at 10,000 events per vector.
- Wallet HTTP timeout: 30s + 5s connect_timeout (was unbounded).
- Matrix crypto file permissions: 0o600 on
crypto_state.json. - FIRMWARE.toml schema: Accepts both
[[rules]]array and[rules]table formats. - Codex CLI plugin: Removed invalid
--non-interactiveflag, fail-fast error handling. - Channel health recovery: Removed stale recompute override in
channel_status(). - Theme dedup: Reversed retain order so catalog overrides built-in.
- prune_old_backups dedup: Moved to
roboticus-core, imported inroboticus-api. - Rate-limit headers:
.unwrap()→.expect("numeric header value"). - Embedding/classifier log levels: DEBUG → TRACE for per-request embedding and centroid computation.
- Streaming guard dedup:
GuardContext::for_streaming()replaces triplicated construction. - Discord intents: Magic numbers replaced with named constants.
- Intent classification: "close out those 23 revenue tasks" now correctly matches EXECUTION.