v2.53.0

2.53.0 (2026-10-28)

Features

• pages: record keeper pages before sending; agent-run pages list|show (keeper pages only) (#599) (f09ad15)
• reminders: provider-neutral reminders, default off (Pushover via keeper; calendar adapter fake only) (#600) (3edf79e)

Bug Fixes

• rescue: name an interrupted bootstrap instead of NotProven (#598) (cdb6979)

v2.52.0

2.52.0 (2026-10-28)

Features

• keeper: default-off hw-ssh credential grants lease the shared key (D-89) (#590) (1fded9a)
• portal: show measured conversation usage (Unit B m2, default off) (#591) (80b060b)

v2.51.0

2.51.0 (2026-10-28)

Features

• agentd: measure registered interactive conversation usage (inert) (#584) (6b5feab)
• broker: default-off agent attestation for grants a policy names (D-88) (#586) (b10f70b)
• usage: store measured interactive conversation usage (backend, Unit B m1) (#588) (78a5337)

Bug Fixes

• agentrun: attest guidance uses --no-wait; CLI test; comment (#589) (c578c93)

v2.50.0

2.50.0 (2026-10-27)

Features

• operator: default-off portal launch route for constrained sessions (#580) (f11d29b)
• portal: default-off launch form backed by the operator launch route (#582) (896466b)

v2.49.0

2.49.0 (2026-10-27)

Features

• portal: open a selected agent's Remote Control session from the portal (#578) (bb11f4a)

v2.48.0

2.48.0 (2026-10-27)

Features

• operator: pilot agent image for one exactly selected session (default off) (#576) (8b854b9)

v2.47.0

2.47.0 (2026-10-27)

Features

• portal: add default-off session messaging and history (#574) (0e56c52)

v2.46.0

2.46.0 (2026-10-27)

Features

• portal: authorize by Authentik group membership, not a pinned subject (#559) (b98247c)
• portal: drop the recovery witness and admission fence (#560) (4139a72)
• portal: projects, working filters, task results and usage monitoring (#568) (0134c30)
• portal: show session activity and usage in the approved Agents design (#557) (af402e5)

Bug Fixes

• portal: land the bare origin on sign-in and drop the green status color (#561) (0effa8b)
• portal: load real OpenProject tasks, drop stub chrome, trust the CNPG CA key (#564) (684d530)

Coordination CLI (also included)

• agent-run inbox send|list|read|ack exposes the existing durable inbox API (#569). Sending requires an existing authorized Session, explicit project and recipient UID, a stable key, and bounded UTF-8 stdin. Reads do not acknowledge automatically; an API read ACK is not proof of TUI or human consumption.
• The CLI is published in the v2.46.0 agent image. Publication does not install it into existing sessions, activate permissions, or roll out images.

v2.45.0

2.45.0 (2026-10-26)

Features

• add private on-demand usage export (#552) (7e56810)
• add usage consolidation report projector (#551) (44383f6)
• delivery: invoke the pinned haynes-ops guard for source-only PRs (#546) (84991e9)
• portal: add fenced PostgreSQL sessions and current authorization (#529) (d4d21ef)
• portal: assemble the internal read-only runtime (#541) (fa8b1e2)
• portal: fence sessions on their actual PostgreSQL connection (#531) (0b14da9)
• portal: make Attention readable on a phone (#528) (190a815)
• portal: serve session summaries and project work packages (#545) (8d655b2)
• providerallowance: add the Story189 source contract (#543) (edfd9c3)
• trials: check synthetic stopped handoffs offline (#532) (2854dbe)

Bug Fixes

• agentd: publish the TTY fixture receipt only when complete (#544) (2da71e8)
• agentd: retain own-SA kubeconfig at zero grants (#555) (25763f5)
• allow terminal outcomes of optional advisory duplicates (#554) (7976b1a)
• delivery: isolate pinned guard execution (#549) (44d9c27)
• deps: update module github.com/go-jose/go-jose/v4 to v4.1.6 (#535) (e279fe4)
• deps: update module golang.org/x/time to v0.16.0 (#537) (480e0cd)
• portal: bind work packages to canonical TaskClaim keys (#542) (5b39ebb)
• portal: enforce page and JSON reader contracts (#550) (3221ca7)

v2.44.0

2.44.0 (2026-10-23)

Features

• portal: add fixture-backed Go read boundary and mobile preview (#526) (cb28f25)
• portal: add source-only OIDC sessions and fail-closed assembly (#527) (8b19240)
• portal: record security contract and add offline Attention preview (#525) (597e2cb)
• workflow: add an offline coordinator handoff checker (#524) (259484b)

Bug Fixes

• deps: update module github.com/google/cel-go to v0.32.0 (#522) (380a759)