v2.33.0

2.33.0 (2026-09-10)

Added

• egress: pause the call for the operator instead of losing it (SEP-2322) (6d76b63)

v2.32.0

2.32.0 (2026-09-10)

Added

• gates: the denial files the ask — a producer for gate requests (d4028e4)

Changed

• cli: dispatch subcommands from a table, not a fall-through ladder (b8e0068)

v2.31.1

2.31.1 (2026-09-10)

Fixed

• cli: sign-net-task returns instead of booting the server (72797fa)
• gates: keep the refusal wording the existing contract asserts (5d27f4f)
• blockers: the attestation check reads the artifact the gate reads (ebfe0b3)

v2.31.0

2.31.0 (2026-09-09)

Added

• seat: the Binder gets a persona, so its signed manifest resolves (6fa5716)

v2.30.1

2.30.1 (2026-09-09)

Added

• orient: say what the seat is blocked on, at entry (64a4829)

Fixed

• orient: name the live egress lanes, and whose reachability this is (4ce7caf)

v2.30.0

2.30.0 (2026-09-09)

Added

• gates: a request may name a permission, not only a lease (063318f)
• gates: a blocked caller can ask, and the ask is a row (e42ea43)

Fixed

• paths: refuse an implicit fallback to a retired home (eab2cf8)

v2.29.0

2.29.0 (2026-09-09)

Added

• env: derive store root, pg db and fleet roster from the box (d3b02ab)

v2.28.1

2.28.1 (2026-09-09)

Fixed

• personas: make the heimdallr row match the manifest already signed for it (6c8288a)

v2.28.0

2.28.0 (2026-09-09)

Added

• personas: add heimdallr to the persona bundle and specialist registry (8f4b73a)

v2.27.0

2.27.0 (2026-09-07)

Added

• paths: resolve constitutional and secrets from charter and vault env. (06f101d)