Worktree Controller 1.32.13

• Reuse the existing lock-scoped unrelated completion allocation filter in terminal
  no-change cleanup checks. Preserve full relevant-document validation and re-read changed
  files, including in-place changes with restored mtime. Retain no receipt verdict or
  cross-lock cache; keep owner, HEAD, record CAS, lifecycle and preservation gates unchanged.
• Cover the public small-source preservation plan and cross-consumer scope reuse. An
  isolated eight-receipt fixture reduces unrelated document reads from 64 to 16 while
  retaining both authority observations. First-read, tree verification and retirement
  costs remain separate. Keep CLI contract 61, capability versions and storage layout 5.

Source commit: 4663e8f559e76fc31e1aeef73a294cbd633e6740.

Worktree Controller 1.32.12

• Add repository_lock_admission_version 1. Cooperating readers and writers enter through
  the existing metadata directory before taking repo.lock; an admitted writer prevents
  later readers from continually bypassing it. Nested shared reads in the same thread remain
  safe. Keep repo.lock as the metadata mutation authority and retain CLI 61 / storage 5.
• Keep typed-cleanup history readable even with a queued writer. Mark active cleanup using
  a flock on the existing cleanup-actions directory only after its shared repository lock is
  held. Kernel locks release on process exit; interrupted operations retain their existing
  journal recovery requirements.
  Older runtimes retain exclusion but do not participate in the new admission ordering or marker.
• During one held flock, reuse only the unchanged allocation scope of unrelated completion
  documents. Recheck FD-bound inode/ancestor identities, including ctime, and decode changed
  files again. Relevant receipts, byte hashes, action chains and preservation trees are always
  fully verified. Retain no receipt verdict or scope mapping after the flock ends.
• This prevents a reproduced reader-bypass pattern and reduces repeated unrelated receipt
  decoding; it does not promise strict FIFO, fixed wait times or faster payload verification.

Source commit: 4033e781c3645e002e83a24012fdf0611ab1d6ba.

Worktree Controller 1.32.11

• Recover an already removed, RELEASED-recorded feature/audit release when its own retained
  METADATA_WRITTEN acquire journal would otherwise require the not-yet-written release receipt.
  Require the original release plan, exact allocation/path/branch/base lineage, acquired and
  released history, +1 record CAS, retained HEAD and absent checkout/binding/writer lease.
  Preserve the acquire journal; only the completed immutable release receipt makes it terminal.
• Keep other transactions, ambiguous predecessors, request/owner/intent drift, changed history,
  retained refs and incomplete release phases blocked. Keep the original guarded release CLI,
  CLI contract 61, capability versions and storage layout 5.

Source commit: 3cb0a332d025d3c45fc6eb8c39c0a68d7ddac3ed.

Worktree Controller 1.32.10

• Keep closed lifecycle history available during typed resource cleanup. Hold the existing
  repository lock shared to exclude metadata writers and serialize cleanup on the existing
  transactions directory. Preserve every owner/CAS, preservation, hardlink, runtime, action,
  journal and completion check, including interruption and repeated-call refusals.
• Keep doctor filesystem/journal diagnostics coherent and refuse activation while the cleanup
  gate is held, including its preflight and post-scan boundaries. Introduce no new persistent
  path, query cache, public command, capability or storage schema; retain CLI 61 / storage 5.
• Document that missing historical release plans require trusted original evidence; existing
  publication reconciliation and interrupted-release replay cannot synthesize that evidence.

Source commit: d3f43af7ed18ceccea35dd7db13c3b62e28f65d5.

Worktree Controller 1.32.9

• Avoid full Git worktree inventory for exact release-receipt queries and other lifecycle
  selectors with no matching live checkout binding. Retain canonical Git identity, the shared
  repository lock, full metadata validation and all immutable evidence/conflict checks.
• Keep live projections on the existing inventory path. Preserve query output, CLI contract 61,
  capability versions and storage layout 5; introduce no cache, service or storage format.
• Correct the history-handover fixture's read-only check to allow filesystem access-time updates
  while retaining symlink identity, target, ownership, size and nanosecond modification/change checks.

Source commit: 6fdcd7a3ad0e1d2693702cd260b36bbd9e321b11.

Worktree Controller 1.32.8

• Place shared bounded, FD-bound evidence document reads in cleanup_evidence, updating
  preservation, recovery and migration consumers. Retain raw-byte hashes, file and ancestor
  identity checks, size limits and refusal codes; remove four private cross-module imports.
• Separate ordinary installed upgrade acceptance from the two historical restoration cases,
  requiring declared staging provenance and matching CLI/capability prerequisites before running.
• Preserve staged source bindings in disposable fixtures and cover wrong-source and identity-drift
  refusal. Keep every selected case mandatory; record unrequested cohorts without counting passes.
• Test/document decision-aware consumers. Keep CLI contract 61, capability versions and
  storage layout 5 unchanged.
• Scope the installed exit/rescan fixture's process enumeration to its real child so unrelated
  protected host processes cannot decide the result. Retain real procfs and refusal checks.

Source commit: 03ef54cd965aaba3d06a842663209713d7bdb668.

Worktree Controller 1.32.7

• Hold one shared repository lock through doctor snapshot diagnostics and refresh Git inventory
  after acquiring it. Guarded release/refresh cannot invalidate a checkout while its semantic
  or transaction evidence is being read.
• Cover a real concurrent guarded release, mutation before lock acquisition, and genuinely
  missing commits through both API and CLI, retaining commit/ref evidence and refusal codes.
• Update the maintenance baseline after the 1.32.6 delivery and keep CLI contract 61,
  capability versions and storage layout 5 unchanged.

Source commit: 7605c2c46b7b2d5d880caaf98297b14ef72edb87.

Worktree Controller 1.32.6

• Report uncertain runtime visibility as RUNTIME_SCAN_UNCERTAIN, separately from positive
  RUNTIME_OCCUPIED evidence. Both retain runtime bindings and execution reservations.
• Isolate parent-side procfs in the command-exit regression, retaining real command/lease
  execution. Verify repeated refusal, public CLI exit codes, later ordinary reconciliation,
  idempotency and preservation of commits, untracked files and generated output without retries.
• Share allocation-to-integration-intent lookup in semantics, retaining lifecycle aliases
  and identity checks. Reduce private cross-module imports from 78 to 76.
• Keep CLI contract 61, capability versions and storage layout 5 unchanged.

Source commit: 7e6f0286b91a28abff986ca4b854e867e2551799.

Worktree Controller 1.32.5

• Poll successful publication writes through one shared five-minute visibility budget.
  Revalidate cached GitHub/PyPI metadata, preserve exact bundle recovery and stop immediately
  on command failures, identity drift, unknown assets or checksum mismatches.
• Move pure integration scope hashing and overlap queries into semantics; retain lifecycle
  aliases and reduce private cross-module imports from 80 to 78 without changing scope rules.
• Keep CLI contract 61, capability versions and storage layout 5 unchanged.

Source commit: 81268a5d7813a878022b44b536d34298007fd989.

Worktree Controller 1.32.4

• Share pure release-intent selection and renewal-backoff queries in release_intents;
  retain lifecycle clocks, locks, mutations, aliases and history. Reduce private cross-module
  imports from 82 to 80 without changing release or recovery behavior.
• Keep publication lease-reconciliation queries in the existing shared semantics module,
  preserving terminal-cleanup proof checks and the private-import regression gate.
• Correct the consumer inventory, document existing WC/GF public boundaries and record the
  staged maintenance roadmap. Existing session and recovery commands remain supported.
• Keep CLI contract 61, capability versions and storage layout 5 unchanged.

Source commit: dd2cdb3627e7046e7c5c0795ff59e183218e1fc8.