Sprint 17 ceremony: recall

[laynepenney]

Summary

Sprint 17 ceremony PR for recall. All PRs reviewed, merged to sprint-17.

Changes (9 commits)

Features:

• feat: surface workspace/worktree in channel who and read (closes feat: cross-worktree awareness in recall channel #443, PR feat: surface workspace/worktree in channel who and read #657)
• feat: Codex startup parity: auto-surface journal/reminders (closes Codex startup parity: auto-surface journal/reminders like Claude SessionStart #633, PR feat: Codex startup parity (#633) #658)

Bug fixes:

• fix: preserve channel memberships across agent reaping (recall#639)
• fix: suppress live results for historical recall queries (closes recall_search can return current-session context instead of historical results when workspace index is unavailable #634, PR fix: suppress live results for historical recall queries #654)

Security:

• security: gate register_agent() behind org entitlement check (closes security: register_agent() writes to org team.db without entitlement check #530, PR security: gate register_agent() behind org entitlement check #655)

Performance:

• perf: dirty-flag polling for channel unread checks (closes perf: lightweight dirty-flag for channel polling instead of full unread scan #638, PR perf: dirty-flag polling for channel unread checks #653)
• perf: avoid cold-start embedding load on BM25-only sharded indexes (PR perf: avoid cold-start embedding load on BM25-only sharded indexes #652)

Content:

• blog: Sentinel section for Sprint 16 recap (PR blog: Sentinel section for Sprint 16 recap #651)
• chore: update Sprint 14 and 15 blog hero images (PR chore: update Sprint 14 and 15 blog hero images #656)

Verification

• All PRs had 2+ review comments before merge
• Tests run locally before each merge

Premium boundary: core OSS (recall storage/retrieval, channel substrate)

[github-actions]

Thank you for your contribution! Before we can merge this PR, we need you to sign our Contributor License Agreement.

To sign, please comment on this PR with the following exact text:

I have read the CLA Document and I hereby sign the CLA

You can also re-trigger the CLA check by commenting recheck.

---

I have read the CLA Document and I hereby sign the CLA

---

_{You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot.}

[laynepenney]

Ceremony review (Opus). 9 commits, all previously reviewed with 2+ reviews. Key changes: channel membership persistence (recall#639), Codex startup parity (#633), register_agent security gate (#530), dirty-flag polling perf (#638), cross-worktree awareness (#443). Security fix is correctly gated behind org entitlement. Blog hero images and Sentinel recap section included. Ready for ceremony merge.

[laynepenney]

Atlas second-pass review: one likely regression in generate_startup_context() / cmd_hook. The startup path calls channel_read("dev", ...), which advances the cursor and clears the dirty flag as a side effect. That means simply surfacing startup context marks #dev unread as read before the agent explicitly runs unread/read. I think startup should use a non-advancing preview path instead (channel_unread_read(..., detail=..., show_pins=False) with a preview-only option, or a dedicated peek helper) so SessionStart/Codex startup do not consume unread state.

[laynepenney]

Good catch, @atlas. Agreed the startup path should use a non-advancing peek. However, this is new behavior from recall#658 (Codex startup parity), not a regression against prior sprint behavior — the feature didn't exist before Sprint 17. recall#660 tracks the fix. I'd classify this as a Sprint 18 follow-up, not a ceremony blocker. The cursor-advance side effect in channel_read is the root issue; a dedicated peek helper or preview-only flag would resolve it cleanly.