The public repo carried maintainer process that is not contributor-facing
contract: perishable lane state, the release queue, the issue-triage
standard, dated audits and state matrices, per-release completion ledgers,
QA evidence, and design specs. All of it moves to the private
`codewhale-ops` repo, which already holds this class of document.
Moved: docs/ops/CURRENT.md, RELEASE_QUEUE.md, AGENT_READY_ISSUES.md,
MODEL_PROVIDER_AUDIT.md, CONSTITUTIONAL_KERNEL_AUDIT.md, the dated
TUI_DOG_008 state matrix, TUI_METAMORPHOSIS.md,
RECURSIVE_SELF_IMPROVEMENT.md, TTC_DESIGN.md, and the docs/releases/,
docs/evidence/, and docs/superpowers/ trees.
Two were moved and put back. `PREVIEW_REQUEST.md` is cited from
request_manifest.rs, client.rs, and engine/preview.rs, and
`RUNTIME_SIMPLIFICATION_DESIGN.md` is listed in
docs/public-surface-facts.json, which the web vocabulary tests pin. Those
are load-bearing references, not planning notes.
Every surviving link was repointed rather than left dangling: AGENTS.md,
crates/tui/AGENTS.md, CONTRIBUTING.md, docs/ISSUE_TRIAGE.md,
docs/CATALOG_REFRESH.md, docs/AGENT_RUNTIME.md. `npm run check:docs`
passes.
Also re-baselines the source-structure budget for the [Unreleased] work
merged this session (673375 -> 676325 aggregate, 17596 -> 17631 max
module, 175 -> 176 large modules) and declares plugins/agent_plugin.rs as
an allowed thousand-line module. Unrelated to the doc move; the gate simply
had not been re-run since Agent Plugins landed.
Replace stale integration-lane identity with the landed main candidate, record the final runtime/web CI and dogfood receipts, and make the remaining human gates explicit.
media-manifest.ts declares the one real-session slot and its budgets;
session-media.tsx renders it. The single entry ships as `pending`: no poster,
no video, no captions, no GIF, and no files under web/public/media/. The
component renders a visible "Recording pending release candidate" panel
instead of any placeholder, staged, or recycled footage, and the test suite
enforces that a pending entry stays asset-free on disk and in the manifest.
The reduced-motion contract is structural rather than a media query patch:
preload="none", no autoplay attribute anywhere, static poster default, GIF
offered only as a link.
docs/releases/v0.9.2-media-plan.md documents the post-dogfood recording
procedure. It publishes nothing and authorizes nothing; flipping an entry to
`published` still requires the complete asset set and the enforceable checks.
Harvested from the #3413 web-maturity lane.
Advance the candidate ledger through all four final-head Claude findings and record the Lane, Zen routing, protocol, clippy, format, and diff receipts.
Advance the living candidate identity and replace the prior flake disposition with the isolated 9,299-test pass plus the hosted TypeScript follow-up evidence.
Refresh the living v0.9.2 ledger with the bumped candidate identity, three focused repair commits, and the exact local verification evidence that precedes the hosted rerun.
Full workspace suite completed with all three failures dispositioned;
exact CI clippy and rustdoc pass; version bumped at 0faa44a74; release
binaries built and dogfood-installed globally at 0.9.2 (0faa44a74b).
Candidate identity advanced to 462858207 (+changelog sync). Adds the
2026-07-27 final-candidate gate table (non-cargo gates all PASS; full
workspace suite running with its receipt slot explicitly open) and the
per-merge focused receipts for every integrated stream.
Twelve lane audits are now dispositioned: five superseded/duplicate
(request-manifest, mode-hooks minus one hunk, workflow-live,
terminal-matrix, plus workflow-live's honest #4754 scope note), three
truth-critical unique-value lanes under active harvest (provider-truth
billing receipts, #4411 auto-scope, tool-inspectability provenance),
and the harvest wave for fleet/Router, command-parity, constitution,
localization, web-maturity, #4707 matrix, and the Kimi K3 user-report
fix. #3758's row gains the cell-by-cell record reference and harness
detail from the terminal-matrix lane.
Correct stale release-helper paths and the workflow-lint invocation from live CI, then record exact combined-head receipts for clippy, helper contracts, version/OHOS, localization, docs, and contributor credit without hiding diagnostic-only warnings.
Advance the living v0.9.2 candidate ledger to the independently approved Consultant and bounded tool-inspection implementations, including current-head focused receipts and explicit human-only UNRUN observations.
Advance the living v0.9.2 candidate ledger to the exact head where formatting, diff checks, and the CI clippy command pass, while recording focused test counts without inflating the zero-match filter.
Advance the v0.9.2 candidate receipt to the independently approved hooks implementation and preserve the Windows and physical-terminal checks as explicitly unrun.
Advance the living candidate identity and replace open request-preview, base-prompt provenance, and structural-copy rows with exact landed commits and current-head focused test receipts. Preserve the model-callable structural-copy boundary as explicitly outside the human-only slice.
Update the v0.9.2 ledger with the complete green hosted-check matrix and mergeability receipt for contributor PR #4467 while keeping the hosted merge distinct from the locally integrated code.
Record the live candidate identity, exact CI commands, approval rails, issue dispositions, product decisions, integrated receipts, and unresolved release blockers in one maintained source of truth.
Capture the reviewed FR016 boundary transplant and its local web verification.\n\nNo deployment or publication is authorized by this receipt.
Signed-off-by: Hunter B <hmbown@gmail.com>
Record the parent-performed high-impact audit and its focused test evidence.\n\nKeep the six-worker #4713 deep-scan gate explicitly open.
Signed-off-by: Hunter B <hmbown@gmail.com>
Record the actual #4713 deep-scan preflight result alongside the refreshed local dependency audit evidence. This documents an unresolved capacity requirement without claiming a smaller scan closed the release gate.
Signed-off-by: Hunter B <hmbown@gmail.com>
Add the exact d242dd85 runtime source, release-build, dogfood, smoke, non-TTY, and Cursor-terminal acceptance receipts to the additive v0.9.1 ledger. Keep the Terminal.app human acceptance and protected-main/hosted CI gates visibly open.
Signed-off-by: Hunter B <hmbown@gmail.com>
Add the exact local finish/fix runtime source, provider-free validation receipts, dependency disposition, and explicit remote stop line to the v0.9.1 completion ledger.
The packet remains additive: it does not claim protected-main landing, hosted CI at the final head, or publication.
Signed-off-by: Hunter B <hmbown@gmail.com>
Bind the canonical PTY image, public browser captures, facts, and completion ledger to 4d197626 after the Full Access/global-skill follow-up. Preserve the no-publish and no-deploy stop line.
Signed-off-by: Hunter B <hmbown@gmail.com>
Bind the public facts, canonical real-PTY image, and English/Chinese browser captures to the exact fa46105a source candidate. Record the local completion ledger and truthful reduced-motion contract without implying a push, deployment, publication, or release.
Signed-off-by: Hunter B <hmbown@gmail.com>
Credit the cached-denial community fix, document the final Workflow runtime guarantees, and refresh the candidate ledger and deferred PR decisions from the July 16 live audit.
Document the final denial and Fleet restart guarantees, synchronize the crate changelog, and record exact community pull-request ancestry in the release-candidate ledger.
Integrate the underwater TUI, message-first Operate, Fleet and Workflow reliability, expanded model/provider catalog, exact custom-route restoration, docs-first site, localization, packaging, and release metadata for the v0.9.0 candidate.
Harden endpoint-bound credential provenance, approval and goal UX, Fleet attempt fencing and crash recovery, large-workspace mention discovery, Kimi budgeting, and release asset/version gates. Include the stopship Fleet and Workflow fixtures used by release dogfood.
Verified with workspace fmt/check/clippy/tests on Rust 1.88, release-script and npm suites, 18-crate publish dry run, production web build, Docker build check, secret scan, dependency audit, and protected-state hash validation.
Document the complete model and pricing expansion, correct the now-landed in-process Fleet route behavior, and record that every former v0.8.68 milestone item belongs to v0.9.0. Regenerate the embedded TUI changelog.
Promote the expanded underwater release from the 0.8.68 candidate number to 0.9.0 across Cargo, npm, generated facts, changelogs, current docs, and the authoritative release ledger.\n\nDocument the final runtime, Operate, Fleet, motion, Inkling, community, and deferred-work cutlines without rewriting historical fixtures. Version and release-helper checks pass.
Record that LeoLin990405's diagnosis and initial bounded-walk approach materially shaped the safer off-thread large-tree mention fix. Keep the original PR open until this receipt and the implementation are verified on main.
Harvested from PR #4367 by @LeoLin990405
Co-authored-by: LeoLin990405 <101193087+LeoLin990405@users.noreply.github.com>
Signed-off-by: Hunter B <hmbown@gmail.com>
Record the final publication gates, current issue and PR accounting, distribution fixes, contributor credit, and preview-only Termux boundary before integrating the last stopship patches.
Move the final integration fixes into the dated release section, refresh the candidate ledger and crate inventory, and generate explicit community credits in the GitHub release body. Add a regression test for contributor-heading extraction.