v3.6.0

What's Changed

• changelog: link the request-log entry to its ticket by @samgbafa in #691
• Add allowSubDelegation to share generation by @samgbafa in #687
• ci: require a ticket line in new changesets by @samgbafa in #692
• web-sdk: default credential discovery to witness; typed CREDENTIAL_DISCOVERY_FAILED by @samgbafa in #690
• replica: import only the services the workers use by @samgbafa in #694
• feat(mcp): isolate public ChatGPT personal-record surface by @rsvistel in #653
• replica: a size ratchet for the replica worker by @samgbafa in #695
• ci: size-policy scripts are not replica code by @samgbafa in #696
• Report SQL and DuckDB request-too-large separately from response-too-large by @samgbafa in #693
• feat(credentials): headless email-proof credential acquisition by @samgbafa in #679
• feat(courier): credential acquire and show by @samgbafa in #680
• ci: check that every web-sdk export target exists after the build by @samgbafa in #699
• test(size): derive newest root row and worker ceilings from ledger by @samgbafa in #700
• node-sdk: decrypt grants follow the standard grant expiry by @samgbafa in #707
• MCP connect: report connected only after a positive check by @samgbafa in #652
• ci: hold time, serde, serde_json and iri-string out of cargo dependabot updates by @samgbafa in #711
• Refuse a manifest permission that carries a limit before requesting approval by @samgbafa in #703
• Run storage-full CLI test in conformance by @samgbafa in #655
• feat(courier): credential output, lifetimes and verifiable stored record by @samgbafa in #704
• ci: allow the pinned dev OS image after an integrity check by @samgbafa in #709
• TC-1793: empty web-sdk test baseline so replica step fails on any failure by @samgbafa in #701
• Refuse manifest permissions that carry a limit by @samgbafa in #702
• docs: stable release checklist with a consumers step by @samgbafa in #658

Full Changelog: v3.5.0...v3.6.0