Changelog

0.2.1 (2026-09-12)

Features

• compass-agent: emit decoded traceparent on the SessionInjection observation (RIG-2894) (#1132) (2392c9a)
• compass-agent: re-attach the turn’s trigger traceparent on outbound posts (RIG-2894) (#1139) (1dfcbfc)
• envelope: AES-256-GCM seam for user-secret values (RIG-3655 T1) (#1111) (d58e256)
• secrets: add the DB-backed StoreResolver (RIG-3655 T3) (#1138) (902feca)
• server: resolve the at-rest master key at boot (RIG-3655 T4) (#1146) (5c00a05)
• store: scope and encrypt user secrets at rest (RIG-3655 T2) (#1118) (c34e417)

Bug Fixes

• release: put the pinned pkg-config on PATH for the app bundle (RIG-3731) (#1171) (3692236)

0.2.0 (2026-09-12)

⚠ BREAKING CHANGES

• ui: migrate apps/ui to Solid 2 (RIG-2202) (#548)

Features

• agent: forge state-transition tools (RIG-3331) (#1019) (2b512df)
• app-bundle: add compass-app-bundle project that builds the release tarball (#431) (cb3be7e)
• app-bundle: re-scope the bundle to carry embedded’s sidecars (RIG-3200) (#863) (d524f02)
• app: make the darwin podman-machine check real and provisioning-aware (RIG-3202) (#1034) (e65ada1)
• ci: lint SQL migrations with squawk + sqruff (RIG-3031) (#764) (5f3c256)
• cli: add operator message-post and agent-status nouns (RIG-2662, RIG-2663) (#585) (a11e167)
• comms: deliver ask answers as messages on the durable rail (RIG-2257) (#600) (4228ee7)
• comms: OpenDM handler + AsAccount adapter + relay dispatch + spawn auto-open (RIG-2964) (#757) (afcce53)
• comms: org-management agent tools — comms adapters, hub dispatch, spawn role/persona (RIG-2673) (#630) (bca111c)
• comms: peer-DM T0 name-addressing cutover — agents address channels+topics by name (RIG-2956) (#730) (c8ee830)
• compass-agent: activate loop OpenTelemetry in cli.ts main() (RIG-2508 T1) (#648) (837687c)
• compass-agent: add board_set_issue_state native tool (RIG-3191) (#842) (5b80961)
• compass-agent: add comms_open_dm + comms_dm peer-DM tools (RIG-2966) (#749) (7d896c4)
• compass-agent: add effect dep + Bun runtime smoke (RIG-2424 T1) (#465) (0ee510a)
• compass-agent: add the forge tool surface (T1+T2) (RIG-2672) (#603) (ea0a9d8)
• compass-agent: agents_tree native tool — indented agent tree with live presence (RIG-2678) (#1062) (332a733)
• compass-agent: consolidate transport ManagedRuntime ownership (RIG-2424 T5) (#475) (b1e2ce1)
• compass-agent: decode traceparent off the wire control (RIG-2871) (#957) (3823c2d)
• compass-agent: meter the inbound control source + span its connections (O3) (#540) (c3fc01d)
• compass-agent: migrate control-source reconnect pump to Effect (RIG-2424 T4) (#474) (4961ce7)
• compass-agent: migrate frame-sink durable lane to Effect (RIG-2424 T2) (#467) (1084c42)
• compass-agent: migrate off the vendored oh-my-pi subtree onto @oh-my-pi/* 18.0.11 (RIG-2407) (#924) (a64f003)
• compass-agent: migrate publish spine to Effect (RIG-2424 T3) (#471) (69581b1)
• compass-agent: require role/persona on agents_spawn_peer and render handles only (RIG-2726) (#762) (0393d52)
• compass-agent: scaffold transport OTel layer + containment test (O1a) (#515) (e121084)
• compass-agent: SessionInjection op-kind observation on the steer/deliver seam (RIG-2486) (#496) (d567033)
• compass-agent: span the outbound transport send + drain (O4) (#542) (9eb8d67)
• compass-agent: surface error/abort content as SessionError trace frames (RIG-2616 T2) (#850) (3839fb9)
• compass-agent: surface swallowed models.yml errors at boot; fail closed on unresolvable pinned model (RIG-2654) (#697) (b4447d5)
• compass-agent: thread TurnTracer through the three injection shapes (RIG-2508 T2) (#693) (8b60afd)
• compass-agent: trace-continuity bridge module (RIG-2508 T1) (#688) (e20c1eb)
• compass-agent: validate spawn role against the closed Manager taxonomy (RIG-3074) (#810) (655b056)
• compass-agent: wire OTLP exporters behind the transport OTel gate (O1b) (#520) (03f26d0)
• compass-app: darwin build path via build-tag restructure (RIG-2753, T2) (#640) (eb2240f)
• compass-app: flip GTK3->GTK4 + webkitgtk-6.0 core (T2-T5) (RIG-2819) (#682) (4c958ca)
• compass-app: revive embedded dual-mode + supervisor pipeline (RIG-3197, RIG-3198) (#844) (6a22bf9)
• compass-stack: add preflight checks + self-host docs (RIG-2761) (#669) (ae0a9ce)
• compass-ui: add the embedded boot arm to the shell-mode fork (RIG-3199) (#861) (3bdeac8)
• compass: compass-guestd real PID-1 init (RIG-2589) (#552) (93b4a63)
• compass: handle-address request inputs — schema, proto flip, resolver, comms edge (RIG-2880) (#698) (0a22bab)
• compass: microVM V2a boot harness + KVM-gated boot spike (RIG-2591) (#574) (d73ae7e)
• compass: pack bootable erofs guest image + module initramfs (RIG-2590) (#559) (06866a6)
• compass: seed GuestControl proto + host vsock dialer (RIG-2588) (#547) (6fffd5c)
• config: admit prompts/<role>/SYSTEM.md + expose Prompts info bucket (RIG-3075) (#808) (a9b889f)
• config: profile registry — admit profiles/<name>/profile.yml at all three doors (RIG-2968) (#813) (ec3fe59)
• config: role prompts, concepts doc, and skill labels for the Manager taxonomy (RIG-3076, RIG-3077, RIG-3078) (#802) (ac68cd4)
• delivery: factor routeMentionsFor + add scanMissedMentions (RIG-2600) (#549) (5872e73)
• delivery: offline-mention record+wake arms + owed-mention start sweep (RIG-1641 T2) (#499) (c9ad908)
• delivery: propagate trace context through delivery dispatch (RIG-2892) (#739) (aa025b0)
• delivery: reap held-deliver entries on Runner re-enroll (RIG-1612) (#463) (2a5843f)
• delivery: wire recovery scan at both recovery points + live-path mark (RIG-2601) (#551) (32f4aa6)
• design-ledger: add Retired row status for scrapped-without-successor decisions (#522) (6f38814)
• devenv: add microVM VMM userspace toolset to dev shell (#502) (cf5d3e6)
• devenv: de-pin 3 agent-image devenv-fork sites onto the tool (RIG-2812) (#815) (44e5034)
• devenv: move root devenv source onto the RigelBuild fork (RIG-2814) (#816) (66ce611)
• devenv: relax Linux guards for macOS-native postgres/server/UI/cert/mint (SEA-2003) (#346) (00a8d06)
• e2e: AwaitControlDispatch fixture primitive over SubscribeAgentSession (RIG-2487) (#504) (29f1f59)
• fabric: add NATS EventFabric + RunnerFabric seams (RIG-3107) (#877) (909a02b)
• fabric: add tenant-wildcard comms subscribe (RIG-3107) (#903) (6371320)
• fabric: add the RoutingFabric seam for binding-cache invalidation (RIG-3108) (#955) (c953baa)
• flake: repo-root flake.nix packaging + nixpkgs-pin parity gate (RIG-2757, T6) (#642) (1b3f52f)
• forge: agent turn-end notification arm + forge ack (RIG-2732) (#678) (0ee2f6b)
• forge: carry the owner-qualified actor handle on the wire (RIG-3326) (#1020) (1f187d9)
• forge: container-scope subscriptions, notification kinds, forge ack frame (RIG-2732) (#674) (7a8ddae)
• forge: forge state-transition wire arms and provider methods (RIG-3331) (#1017) (d689ca4)
• forge: GitHub App installation-token source (RIG-2732) (#679) (31de779)
• forge: ListUpdatedIssues updated-order conditional walk (RIG-2883 T2) (#709) (2e3245c)
• forge: notify router + snapshot apply (RIG-2732) (#676) (c5c6862)
• forge: reconcile sweep + conditional reads (RIG-2732) (#677) (0518386)
• forge: surface rate-limit retry hint on the forge error channel (RIG-2255) (#750) (2426dd2)
• forge: webhook ingress + event normalize (RIG-2732) (#675) (082a28c)
• forge: wire agent forge subscribe/unsubscribe — store writer + DL-053 GC (RIG-2732) (#631) (f7c414a)
• guest_control: grow GuestControl with the V2b exec surface (RIG-2493) (#696) (d97d8bc)
• guest-image: microVM guest kernel + rootfs derivations and moon build gate (#507) (1b968b8)
• guestd: arm nft_script as guest root before the exec gate (V3 W1) (#754) (43b98d0)
• guestd: forward /run/compass/agent.sock to the host gateway over vsock (#817) (193f78d)
• guestd: replace the Health-only stub with the V2b in-guest supervisor (RIG-2493) (#701) (d86412d)
• ingest: board reconciler startup sweep + slow ticker + watermark (RIG-2883) (#708) (b769389)
• ingest: board webhook arm — fan-out sink + hydrating ingest queue (RIG-2883) (#706) (d9227fc)
• keyboard: four G-leader sequence rows + display/aria hardening (RIG-2708) (#613) (c7105ce)
• keyboard: leader-sequence runtime in the keymap dispatcher (RIG-2709) (#616) (29c4a7f)
• keyboard: sequence-grammar chord helpers for leader chords (RIG-2707) (#612) (90f01bf)
• linearagent: Linear Agent Session webhook types + API client (RIG-2717 T1/T2) (#637) (3217854)
• linearagent: Linear Agent Session webhook types + API client (RIG-2717 T1/T2) (#638) (574025c)
• linearagent: responder routing + async dispatcher (RIG-2717 T4/T6) (#646) (077d08f)
• lint: enable depguard + gomodguard_v2 with an active import fence (RIG-3033) (#763) (4593022)
• lint: stricter Biome rules + GritQL fixed-sleep ban (RIG-3032) (#769) (0af33ac)
• microvm: host-written per-session pidfiles with PID-reuse defense (RIG-2498) (#974) (19c3c95)
• microvmtest: add untagged microVM test gate package (#503) (6840479)
• microvm: virtio-fs mount-ns isolation + volume-quota verification (RIG-2497) (#912) (0e05a9a)
• notify: resolve a check_suite head SHA to its PR number (RIG-2869) (#950) (088d13a)
• otel: add go/internal/otel bootstrap package (RIG-2888) (#699) (108f174)
• otel: emit runner client spans (RIG-2890) (#714) (20fa1c0)
• otel: emit server-side spans + traceresponse header (RIG-2889) (#713) (bd97337)
• otel: link a reply’s trace back to its trigger (RIG-3499) (#1041) (e2b919e)
• otel: stamp the PostHog session id onto backend spans (J1 inbound half) (#996) (6966925)
• prompts: activate the issue/PR-tool references in the role block-0 prompts (RIG-1734) (#849) (b937e25)
• proto: add SessionError to the compass.v1 session-trace contract (RIG-2616 T1) (#846) (ad7bff4)
• proto: add SessionInjection + trigger_traceparent trace fields (RIG-2891) (#700) (9e3f2db)
• proto: add traceparent to SteerControl/DeliverControl for trace continuity (RIG-2508) (#694) (c484235)
• proto: OpenDM RPC + gateway arm; GROUP_DM retirement; DM/convert fields (RIG-2962) (#738) (7eddb90)
• proto: org-management comms + spawn arms for agent gateway (RIG-2673) (#628) (dd4f291)
• release: attach the Linux client bundle to the semver Release (RIG-2752) (#761) (6c61631)
• release: build the macOS .app/.dmg client bundle on a macos-14 lane (RIG-2754) (#784) (3acedd7)
• release: release-gated asset + image jobs, port release-notes tool (RIG-2915) (#742) (7188de6)
• release: release-please config + unified release.yml (RIG-2914) (#741) (5219558)
• release: version.txt base for bundle, required-image release posture, unified-lane docs (RIG-2916) (#743) (867159a)
• renovate: auto-bump DefaultPostgresImage digest within postgres:18 (RIG-2774) (#673) (86c1bd7)
• renovate: auto-refresh pinned Nix FOD hashes on dep bump (RIG-2727) (#626) (99ecc40)
• renovate: couple go bump to go-overlay refresh (RIG-3100) (#841) (e327cbd)
• renovate: migrate compass off Dependabot to self-hosted Renovate (RIG-2432) (#477) (e3d8161)
• renovate: re-land postgres-stack customManager (RIG-2774) (#772) (5371d81)
• renovate: track the agent-image nixpkgs channel pin (RIG-3365) (#1046) (a209d94)
• renovate: track the RigelBuild/devenv fork in both devenv locks (RIG-2815) (#865) (40398f7)
• renovate: verify the agent-image FOD through its own builder (RIG-3365) (#1047) (c82f6ae)
• runner: backend-gated startup preflight (RIG-3147) (#843) (0773a48)
• runnerhub: bounded per-router send queue for non-blocking dispatch (RIG-2688) (#604) (05d88e7)
• runnerhub: demote the binding maps to a cache over session_bindings (RIG-3108) (#1095) (28e8d53)
• runner: microVM boot canary startup preflight (RIG-3148) (#847) (1646e0c)
• runner: serve the AgentGateway over a per-session vsock path on microVM (#818) (5fbf3e2)
• runtime: add the AppleContainerCLI backend and its SelectBackend case (RIG-3354) (#1070) (15bee87)
• runtime: deliver egress policy to the guest; skip host arm on self-arming backends (V3 W2) (#755) (73a28b7)
• runtime: fill MicroVMRuntime lifecycle methods (RIG-2493) (#719) (6a2c05c)
• runtime: freeze ContainerRuntime.Resize + ResourceLimits at S1 (#454) (64e1583)
• runtime: host GuestExec layer + portable exit-signal error type (RIG-2493) (#702) (27c9411)
• runtime: microVM backend seam + config-driven selection (RIG-2491) (#491) (8fb58e0)
• runtime: microVM static preflight + shared hostcheck core (RIG-3146) (#835) (7e23d19)
• secrets: add ListServerSecrets + the compass server-secret CLI noun (#1059) (39cf54b)
• secrets: admin-gated SetServerSecret/DeleteServerSecret over the server registry (#962) (2de6479)
• server: assemble the GitHub agent-notification lane (RIG-2732 T7) (#735) (e3f764b)
• server: forge state-transition arms and actor memo (RIG-3331) (#1018) (c028d02)
• server: mount the Linear webhook ingress /webhooks/linear (RIG-2732 T7) (#744) (4f539b0)
• server: offline-agent wake seam + system-authorized resume (RIG-1641 T3) (#497) (b924399)
• server: per-deployment public URL + deep-link builder (RIG-2717 T5) (#639) (5d01d87)
• server: re-point the forge boot consumers at the server resolver (#988) (f227491)
• server: retire the forge poll driver, mount the App-only board webhook lane (RIG-2883 T5) (#724) (55bcefa)
• server: seed the tree root as role “supervisor” (RIG-3079) (#834) (bf216c2)
• server: wire the Linear agent-notification lane data sink (RIG-2732 T7) (#751) (8e68875)
• stack: bundle Plane-B fan-in OTel Collector as a supervised child (RIG-2825) (#672) (faf2bc1)
• stack: container-backed postgres + –database-external opt-out (RIG-2759, T8) (#652) (fcae4f0)
• stack: pgid-record v2 kind-tagged union for container teardown (RIG-2760, T8a) (#644) (78da0f1)
• stack: pin stock postgres:18 container image by digest (RIG-2758, T7) (#641) (4d1ebe4)
• stack: read the process identity token via sysctl on darwin (RIG-3548) (#1033) (735ec26)
• stack: supervise a bundled NATS broker as a stack container (RIG-3107) (#878) (d3488ff)
• store,server: model registry store + operator write RPC + fail-closed config lint (RIG-3122) (#853) (010188b)
• store: add mentions_routed_at marker column + scan surface (RIG-2599) (#546) (6338f82)
• store: add the durable session_bindings table and its store methods (RIG-3108) (#990) (983e620)
• store: admit SubjectService token principal (enum half) (RIG-2863) (#911) (71522ff)
• store: migrate accounts + agent_tree to sqlc (T2) (#790) (2d9db7c)
• store: migrate channels + channel_pins + coordination to sqlc (T3) (#792) (be9c371)
• store: migrate messages + topics + delivery to sqlc (T4) (#795) (ff5bfab)
• store: owed_mentions durable backstop + AckDelivery clear (RIG-1641 T1) (#494) (6835515)
• store: recency-guard write-path threading for forge_updated_at (RIG-2883) (#710) (96199ce)
• store: reserved DM group + upsert + create-guard + convert-on-add (RIG-2963) (#746) (0df3c57)
• store: RLS enforcement + per-transaction tenant scoping (RIG-3106) (#830) (6d4acdb)
• store: scaffold sqlc + arm the inline-SQL ban gate (T1) (#780) (a84f2d2)
• store: server_secrets registry, physically separate from user secrets (#960) (bad69ff)
• store: tenant schema + identity plumbing (RIG-2861 T1) (#715) (a17625b)
• store: watermark persistence + enabled-repo enumeration (RIG-2883 T4) (#705) (95421e2)
• toolchain: add devenv-cli source resolver tool (RIG-2546) (#666) (46fe144)
• toolchain: re-land devenv-cli source resolver tool (RIG-2546 T1) (#771) (990644e)
• tools: compass-app-dev local build+launch loop for the native client (RIG-3103) (#819) (0426dc4)
• tools: mint the live-oracle Linear token with app:assignable (RIG-3299) (#1021) (19d10ee)
• ui: adopt CoachTip across command-backed chrome + register sidebar toggles (RIG-2704) (#618) (f9cd5bd)
• ui: adopt frozen 1-bit pixel-art state-dot glyphs (RIG-2118) (#862) (eb5ef7a)
• ui: Bridge 2-D roving-tabindex keyboard grid + empty-board (RIG-2130) (#472) (16e0d09)
• ui: Cmd/Ctrl+K command palette + point-of-use shortcut chips (RIG-2483) (#529) (dc07f46)
• ui: CoachTip coaching tooltip component (RIG-2703) (#615) (ba93b66)
• ui: embed posthog-js behind an off-by-default analytics flag (#689) (797cd71)
• ui: emit the PostHog session id on outbound requests (RIG-2874) (#1055) (76c85da)
• ui: export a composeBoot seam so the analytics/clients boot order is testable (RIG-2874) (#1096) (7c3129b)
• ui: install the keyboard spine at the App root (RIG-2456) (#489) (94a8331)
• ui: migrate apps/ui to Solid 2 (RIG-2202) (#548) (fb234f3)
• ui: re-theme demo fixtures to a Manager-named example tree (RIG-2346) (#444) (5c42d52)
• ui: scope-aware tier-3 command dispatch (RIG-2529) (#519) (f406cfe)
• ui: searchable ? keyboard-shortcuts overlay (RIG-2482) (#526) (2cc992a)
• ui: stamp the server trace id onto captured product events (RIG-2874) (#938) (98b6ce9)
• vfs: session persistent-volume lifecycle API + local-dir backend (RIG-3278) (#898) (747b403)

Bug Fixes

• agent: idle @-mention steer starts a turn via prompt(), not continue() (#514) (e0e8973)
• agent: terse the reply-in-channel cue — why lives in SYSTEM.md, not per batch (RIG-2664) (#583) (693bfe5)
• app-bundle: stage postgres share + lib so the bundled cluster can initdb (#448) (a2667a2)
• biome: scope type-aware nursery rules off compass-agent transport (RIG-3051) (#789) (944d095)
• build: stamp version.txt semver on the nix + devenv build paths (RIG-3346) (#939) (87f3f79)
• ci: always run design-ledger-gate on PRs (RIG-3441) (#942) (446bb16)
• ci: generate sqlc drift check out-of-tree (RIG-3591) (#1063) (d1f08e8)
• ci: make the darwin DMG edge leak-proof (RIG-3335) (#1074) (8d26d72)
• ci: skip the CI rollup on a cancelled run so superseded commits are not false-red (#506) (48d4a7c)
• ci: stop body edits cancelling the base-re-point guard (RIG-3372) (#1060) (970c8df)
• ci: switch moon to native file hashing to end the main full-sweep git race (RIG-2585) (#555) (c7fe3f9)
• ci: union the PR affected closure with the task-level one (RIG-3381) (#935) (ff04f85)
• comms: guard nil derefs to clear nilaway T3 lane (#775) (f2a7e12)
• comms: resolve agent-caller owner in CreateAgent (RIG-1644) (#443) (a87cb70)
• compass-agent: derive LITELLM_MCP_URL from the delivered base URL (RIG-2674) (#587) (47d46e0)
• compass-agent: emit the export-surface dts probe under node_modules to end the main-CI git race (#541) (121c021)
• compass-agent: event-gate the (g) probe tests instead of a wall-clock budget (RIG-3455) (#970) (375377a)
• compass-agent: give the config-passthrough afterEach cleanup a real timeout (RIG-3609) (#1064) (0246794)
• compass-agent: isolate transport gauge tests from the shared metric registry (RIG-2656) (#712) (101c3f3)
• compass-agent: recover a deliver stranded against an untracked startup stream (RIG-2644) (#572) (4fbbfee)
• compass-app: reap the gtk4 e2e WebKit children before exit (RIG-2526) (#1113) (5b88ea9)
• compass-app: repoint default agent image to the live rigelbuild GHCR owner (#455) (c25ce94)
• deps: update typescript dependencies (#591) (01d7d20)
• design-ledger: resolve DL-298/DL-299 cross-lane id collisions on main (#737) (3572ea6)
• design: de-collide duplicate ledger id DL-239, renumber the RIG-2490 row to DL-240 (RIG-2619) (#554) (1e8c0ab)
• design: renumber colliding ledger ids DL-319/DL-320 to DL-322/DL-323 (#851) (fab4a67)
• design: renumber colliding ledger ids DL-327..330 to DL-334..337 (RIG-3107) (#927) (c374bb9)
• devenv: build the operator CLI so the box never serves a stale binary (RIG-3342) (#925) (a971c6c)
• devenv: single-source the dogfood runner-id so mint and runner never drift (RIG-2660) (#582) (4e78a49)
• docs: clear the dangling docs/designs/platform citations (RIG-2655) (#1075) (67e7eff)
• eng-docs: bump astro to v7 with lockstep starlight/check (RIG-2585 sec, closes #564) (#570) (b5f92c3)
• flake: ship the UI dist with #compass-app (RIG-3474) (#1011) (9d0a00f)
• forge: make the live-Linear oracle deterministic + gate it on the forge surface (RIG-2909) (#721) (5cb9397)
• forge: treat Linear’s duplicate state as closed (RIG-3590) (#1069) (9361001)
• go: repoint a stale sealedsecurity store import to RigelBuild (RIG-1893) (#479) (d0b05a9)
• guest-image: stage /sbin/modprobe so in-guest egress arm autoloads netfilter (RIG-3028) (#759) (e01a20a)
• ingest: key notify snapshot comments by stable id, not URL (RIG-2732) (#768) (5e6bc9b)
• inline-sql-gate: exempt tool CLI from noConsole in its nested biome config (#787) (b758bbd)
• microvm: force ExecStream receive-side down on ctx cancel (#770) (381b241)
• nilaway: clear guestd + events nil-panic findings (#779) (38cb17f)
• preflight: provision the darwin machine before probing podman (RIG-3563) (#1057) (edf9daf)
• release: read the release-please App Client ID from an Actions variable (RIG-2995) (#985) (11076ea)
• renovate: build devenv CLI from root lock, not deleted forks/devenv (RIG-2406) (#518) (26e524a)
• renovate: lockstep flake.nix nixpkgs rev on devenv-nixpkgs bump (RIG-3099) (#814) (a69b610)
• renovate: mirror flake.nix Go vendorHash + cap wails/v3 below 3.1 (RIG-2852) (#681) (589675a)
• renovate: read the App Client ID from the client-id input (RIG-2995) (#1039) (1661a07)
• renovate: refresh the FOD hash on devenv-nixpkgs channel bumps (RIG-3296) (#897) (1b21603)
• runner/gateway: un-park SteerControl so @mention steers reach the agent (#476) (25794b6)
• runner: guard microVM launcher Pdeathsig behind a linux build tag (RIG-3213) (#848) (17111cc)
• runner: guard nil derefs to clear nilaway T1 lane (#773) (8f23b54)
• runnerhub: bound the send1 deliverRefusals registry (RIG-1610) (#483) (a4ab0c7)
• runnerhub: guard proto-getter nil oneofs for nilaway (T2) (#774) (ed9c493)
• runtime: guard nilaway findings in runtime + microvm lanes (T5) (#777) (db628cc)
• runtime: nil-guard launchFunc result so nilaway proves vm non-nil (RIG-1534) (#799) (c4a7070)
• secrets: guarantee the secretspec CLI as an install-time dependency (RIG-3437) (#1043) (2db7e4e)
• server: guard nilaway proto-getter and spawn-memo derefs (#778) (d8acd3e)
• server: send leading registration-ack on SubscribeAgentSession (RIG-3044) (#785) (9d675bb)
• server: skip redundant ConfigVersion signal on idempotent re-Put (RIG-1657) (#432) (31073d7)
• server: wire the config-bundle store into the runner door so agents receive config (#537) (992f3b5)
• store: back the keyspace partition with a DB CHECK and prove the grants (#961) (349d5d2)
• store: descend through non-string-keyed nodes in models.yml credential denylist (RIG-3116) (#826) (f584880)
• store: guard nilaway reachable-nil findings in store lane (#776) (8095c1e)
• test: stop the fake runner sending before closing its request half (RIG-3606) (#1065) (a253a82)
• toolchain: build the Go analysis battery with the go1.27 toolchain (RIG-3303) (#904) (ab56c27)
• tools: point orion-ref-gate’s failure hint at an in-repo doc (RIG-3344) (#930) (a125326)
• ui: correct a stale boot-order comment in the analytics test (RIG-2874) (#1081) (46a1208)
• ui: render the visual gate in the typefaces the tokens name (RIG-2154) (#1061) (12df1dc)
• ui: trim the boot comments after the composeBoot extraction (RIG-2874) (#1104) (ca6cbbf)

Performance Improvements

• ui: highlight settled code on the leading edge, debounce only streaming ticks (RIG-1422) (#575) (beaaca4)