v0.3.15

0.3.15 (2026-09-13)

Features

• replace run/bind/close with start, resume, answer and stop; add an Attention section to status (#119) (d82b16d)
• architect gates and G10 nested-invocation refusal (#133) (ce3bddb)
• land approved PRs from the lead session's landing sweep (#116) (64cb28b)
• lease-based claim recovery and a fenced lead lease (#117) (5539406)
• refuse a worker's push to the primary branch and every force push (#123) (1113e16)
• role-session claim environment (#131) (e90da82)
• runtime scripts to Bun, close-out gate in orc_run_status, drop python3 and jq (#121) (4adb0cb)
• shipped settings overlay, orc_doctor, errors-only prose gate, hardened workflows (#120) (9674a82)
• verify binds, report run health, close runs, and reap each child once (#104) (1b3409f)

Bug Fixes

• bind claims the host truncated and say so when it cannot (#101) (e76abbc)
• bind core agent models for marketplace installs; modelRoles.reviewer is required (#127) (64df1c1)
• close the deferred hardening rows (marker scope, program case, rule scan bounds, path spelling) (#122) (4d202e7)
• close-run walks every level, pin a database before it exists, and document the run bootstrap (#108) (9ade497)
• cut per-call bd reads, name bd failures, close two G5 gaps (#103) (f70d98a)
• every bd write carries the seat's actor and the run's store, and leases renew on the clock (#126) (b517471)
• gates refuse on evidence only; G5 governs capacity, decomposition scope, lead and merged-stderr claims (#110) (cbbcb8b)
• keep the beads store in one lock domain during a run (#112) (5daf88f)
• lead session plans only, slash commands follow the run scope, store origin on the marker, one doctor row per model role (#125) (6e70f19)
• ledger records every bd write and its store, model mismatch warns instead of bricking the worker (#107) (3e81ac1)
• match TTSR rules against the streamed tool JSON (#98) (4083c02)
• one carrier per fact, a nine-verb grammar, and no formulas (#111) (8546d0b)
• orchestrate: read capped claim reports, list lapsed leases only when held, sweep .beads/backup (#136) (8287c0b)
• orchestrate: stamp pushed_sha and release claims in the fenced exit write; read a wisp's parent as a linked node (#137) (626cc0c)
• plugin cache hygiene (#128) (199c5a7)
• read redirections, groups and compound commands the way the shell does (#99) (7019786)
• redirect isolated copies to the run's beads database and drop the pin (#114) (68a1e22)
• refuse a second claim per turn, gate implementer spawns, and drop G7 (#109) (a2d7f65)
• refuse opaque scopes, unlanded closes, governance rewrites from roles, and zero-work reports (#124) (4d49892)
• run-scope the refusing gates, admit the terminal comment after release, recognise the real reclaim (#102) (ac6b8ed)
• see the bd command behind env flags and refuse a helper that edits its sandbox (#106) (4d5bf83)
• the plugin is dormant outside a run scope (#115) (07e0199)
• tools: correct bot-review-probe classification, run-status tree shape and filters, and conflict-probe CI exits (#100) (cf9f64c)

Performance Improvements

• store-token read cache, batched bd reads, in-process settings (#113) (dd90531)