lanes 0.2.1

• Route MiniMax M3.1 Flash, Nemotron 3 Ultra 550B, Laguna S 2.1 and Nemotron 3.5 Super VL through OpenRouter’s free tier (:free, $0), with rate-limit and prompt-logging guidance.
• Default Codex review to gpt-6.1-sol/xhigh; retain model overrides, medium/high/xhigh effort and a configurable 3600-second acceptance-check timeout.
• Restrict scope-check ignores to exact untracked node_modules links/directories; preserve tracked and descendant dirty paths. Make repository/smoke tests independent of global Git identity.
• Add managed-link worktree metadata, sandbox payload collection and refusal-first cleanup with exact container labels, safe branch deletion and logged completion. Integration prints the cleanup command.
• Replace global command-pattern process sweeps with recorded relay-job identities, PID-reuse/ancestor protection and mocked safety regressions.

Merged PR #2.

Validation: 169 checks/tests passed, including identity-free test fixtures and the new worktree safety regressions; independent review and secret scanning passed.

lanes 0.2.0

Independent review for every lane, review-gated integration enforced in code, and hardened relays.

• New lane/integrate.sh, the only merge path: it refuses lane work without a CLEAN review.md for the exact lane head, re-runs the scope check, merges with --no-ff, aborts on conflict (exit 3), and logs each merge. Review-gating moves from instruction to code.
• Trivial work skips review, decided by the script (--classify): prose files only (.md, .mdx, .txt, .rst, .adoc), at most 40 changed lines, no deletes or renames, no agent-instruction (AGENTS.md, CLAUDE.md, SKILL.md, …), control (.claude/, .github/, …) or legal files. The scope check still applies.
• Reviewers save their verdict to $S/lanes/<lane>/review.md; codex-review does this automatically.
• The orchestrator no longer reviews lane work. Every lane completion goes to an independent reviewer: the new lane-reviewer agent (Opus 5.5, medium) in Claude Code, or codex-review with gpt-5.6-terra (new default, medium) in Codex. The orchestrator integrates only a CLEAN verdict whose REVISION equals the lane HEAD and sends FIX findings back to the same lane.
• New lane/scope-check.sh replaces the prose-only reconciliation check (out-of-scope paths, uncommitted work, file hashes); the reviewer runs it, and codex-review <base> <owned.txt> runs it automatically.
• codex-review runs the lane's checks.sh outside Codex's read-only sandbox (which has no writable temp dir, so pytest crashed and every Codex review returned FIX) and passes the result to the reviewer. scope-check.sh ignores untracked .serena/ state that tooling creates when it opens a worktree.
• REVIEW_RULES.md defines one revision-bound verdict block (TASK/REVISION/REVIEWER/SCOPE/CHECKS/FINDINGS/VERDICT) for both reviewers.
• model-relay refuses to run outside a linked worktree or next to .env files (DeepSeek/GLM secret exposure was prose-only).
• New bin/relay-spawn replaces setsid + timeout, which stock macOS lacks; relay and Codex jobs previously hung forever there.
• relay-guard blocks newlines and redirects smuggled into the cd segment.
• Pre-push scan: first push of a new branch falls back to the main branch's merge base; a missing base exits 2, not the leak code 1.
• Integration uses git merge --no-ff; conflicts abort and loop back; failed checks revert with -m 1; re-tier after two failed reviews; git cherry proves a branch is integrated before branch -D.
• Test containers carry --label lanes.lane=<lane>; pause and the watchdog remove only labelled containers instead of any *-pg postgres container.
• Portable sha256sum/stat/uppercase/mapfile replacements; SKILL.md links CODEX.md, which now names the push gate.
• Add tests/run.sh regression checks.
• Add lane/secret-scan.sh (gitleaks over the pushed range) as the required pre-push gate; install.sh --check reports gitleaks.
• Turn the per-task flow into a checklist with loop-backs for failed reconciliation, review, and post-integration checks.
• Define safe worktree and branch removal (no --force; branch -d before -D).
• Write the session-detail archive to $S/sessions/ before compaction, since session-detail only prints in Claude Code.

🤖 Generated with Claude Code

https://claude.ai/code/session_01BgxB2ghMCQiGoBFZbVM6GZ