2026.9.19

Fixed

  • Workspace singleton files (settings.json, schema, session-state, checkpoints) are lock-free read-modify-write — parallel pm config set demonstrably loses updates item pm-bgcu
  • The close-time blocker-clear warning names one deleted ordering edge out of N, so silent multi-blocker data loss is indistinguishable from single-blocker clearing item pm-scbr0s
  • Declare and enforce shared default bounds across graph queries item pm-mfy1ux
  • Isolate published MCP verification from the caller global skill catalog item pm-prmt1y
  • The --profile timer reports a fraction of real invocation latency and is documented nowhere, so every latency judgement built on it is calibrated against the wrong number item pm-ag9nka
  • Count successful provenance resolutions so historical health advisories can clear item pm-4f1l7f
  • Isolated release acceptance inherits npm allow-scripts through npm run item pm-64qsbl
  • macOS registry acceptance rejects empty optional flags under Bash nounset item pm-q4avk2
  • Windows transport-floor contract test batches 78 fixtures under one deadline item pm-lgyaw8

Other

  • Fail repository tests on undeclared MCP options including reporter overrides item pm-v0s2rm
  • Reconcile provenance delivery metadata with reviewed implementation item pm-senomv
  • Refresh Node declarations to 26.6.1 for SDK and process timing validation item pm-8p629e

2026.9.18

Fixed

  • Allow canonical JSON/TOON encoding on mutations item pm-1rta7z
  • Omit redundant read receipts when canonical output flags do not compact results item pm-g8oh0f
  • Keep the largest list prefix that fits the output budget item pm-15yuly
  • Reject ambiguous event durations with explicit minute and month units item pm-jkjt
  • Packed telemetry acceptance must await completion across delivery batches item pm-07m41m
  • GH-1264: enforce next ready-queue token budgets and disclose omitted recommendations item pm-v53h9j
  • Reject malformed linked-test JSON paths instead of silently normalizing assertions item pm-czr31p

Security

  • Reject inherited array elements in linked-test assertions item pm-1skc
  • Read linked-test JSON assertions without invoking accessors item pm-xxrq
  • Prevent prototype traversal in nested settings reads and writes item pm-3kk6
  • Share secret and private-context detection between mutation preflight and repository scanning item pm-wwooxx

Other

  • Serialize the complete build pipeline so overlapping validation cannot consume partially rewritten dist artifacts item pm-cxc4jc
  • Released-artifact acceptance: the exact published tarball is installed clean and driven through a scripted agent session before the release is advertised item pm-ygli86
  • Verify explicit calendar duration in package-first dogfood item pm-d9bg0i
  • ADR: Require explicit minute and month units for event durations item pm-j1vw3a
  • Context judgment corpus: small, real-shaped, scale, and returning-agent continuity scenarios for pm context/next item pm-lixy
  • Refresh Sentry 10.75 and CLI 3.8 with Unicorn 75 compatibility proof item pm-1wypwu

2026.9.17

Fixed

  • Keep merge driver launchers usable after runtime upgrades item pm-rcjyft

2026.9.16

Fixed

  • Preserve oversized standard item reads with a brief projection and explicit omission receipts item pm-8eclqf

Other

  • As an agent on a minutes-old scratch project, pm init, quick-capture create, and next are near-zero ceremony and token-cheap at three-item scale item pm-z436

2026.9.15

Fixed

  • Preserve telemetry identity and runtime acceptance across Node and npm versions item pm-7msh7k
  • Automatically bound high-frequency read-only telemetry volume item pm-um3teu
  • Prevent stale cleanup from reclaiming a lock during owner metadata initialization item pm-v2pg4f

Other

2026.9.14

Changed

  • Update marked to 18.0.13 for documentation parser fixes item pm-t9qgf1
  • Refresh Node types 26.5.1, YAML 2.9.1, and fast-check 4.10.0 item pm-7ej0mh

Fixed

  • Preserve telemetry events across concurrent queue rewrites item pm-utxk3h
  • Honor revoked telemetry consent across capture and identity initialization item pm-yjq2x0
  • Explain rejected telemetry source-context overrides without leaking raw values item pm-bw8lsb
  • Destination census rows cite terminal consolidation owners for five live commands, so the grammar gate certifies consolidations no open item will deliver item pm-3ig9b6
  • Package-declared internal commands leak into default runtime contracts item pm-34xisz
  • Allow non-colliding extension leaves beneath core command groups item pm-bwkmp4
  • Compact default list receipts and avoid repeated recovery argument echoes item pm-4f86c4
  • Canonicalize unknown-command recovery with replacement flags item pm-zsic8h

Other

  • Give assurance a declared noun placement and history-author-acknowledge a history leaf: the two live commands whose consolidation owners closed without moving them item pm-djyvbk

2026.9.13

Fixed

  • Suppress inferred test telemetry before identity creation and export item pm-745epp
  • Honor DO_NOT_TRACK across telemetry capture flush and diagnostics item pm-ikgitf
  • Expose privacy-bounded agent harness and CI telemetry dimensions item pm-nnn9nf
  • Published-package verification gives up before npm metadata propagates: two consecutive scheduled cuts were recorded as failed and re-run by hand while the artifact was already live item pm-wzmbvn

Deprecated

  • Permanent hot-path aliases print the migration hint reserved for deprecated spellings on every human-readable call, so the project's own skills cost an extra stderr line per invocation item pm-crd6bf

Other

  • Expose explicit paired sampling for core-only telemetry reads item pm-wrdctq
  • Consolidate item annotation facets: comments/notes/learnings/files/docs/deps/append/test become one facet grammar (old spellings aliased) item pm-yql1
  • Hide runtime completion helper entrypoints from the default agent-facing command surface item pm-szdc
  • Hide internal test-runs-worker from default help/contracts and route it under the test execution plumbing item pm-lp4j

2026.9.12

Changed

  • Verify complete merge documents across branch permutations and merge directions item pm-1tns7o

Fixed

  • Two items created independently on two branches with the same id merge into one document carrying two create entries, and storage integrity only notices when the types differ item pm-qx95lz
  • Isolate merge reconciliation receipt discovery from unrelated invocation workspaces item pm-q5grv5
  • The immutable history op vocabulary is ungoverned: 71 op literals across five naming conventions, with the same operation spelled two ways in one file, are written permanently with no enum, no contract, and no gate item pm-0elqjj
  • Read surfaces give no tombstone signal for a deleted id: pm get returns a bare not-found, so an agent cannot tell never-existed from deleted-and-recoverable item pm-nb4zwz
  • CI assurance receipts must explicitly request complete evidence beyond interactive output ceilings item pm-yrio0m
  • GH-1231: Expose non-vacuous lifecycle completeness evidence item pm-khd2fd
  • GH-1232: Normalize policy authoring ids with actionable mismatch recovery item pm-ycv2cz
  • GH-1233: Make strict ownership recovery executable for annotation writes item pm-nrkjik

Other

  • Streamline agent triage and schema command discovery item pm-gdi7
  • Compact compound lifecycle receipts without losing SDK results item pm-r1f9f1

2026.9.11

Added

  • Portable integrity attestation: compare recorded history with independently retained proof bundles item pm-3z0k

Fixed

  • The history integrity chain hard-codes SHA-256 with no algorithm identifier, so the proof it produces has no migration path across the decades it claims to cover item pm-bbk8we
  • Optional undefined result fields silently drop telemetry completion events item pm-rqaqfp
  • GH-1229: preserve bounded HTTP process-tree cleanup when POSIX liveness returns EPERM item pm-qn9zxu

Other

  • Refresh jscpd 5.2 and MCP Apps 2 development contracts item pm-qs5iiq
  • Register advanced retrieval as a search facet item pm-wfskfn
  • Consolidate duplicate governance under item operations item pm-fmy9ih
  • Declare item copy and workspace merge command destinations item pm-m6g87m
  • Refresh Sentry 10.74 with history attestation consumer verification item pm-2us1yv

2026.9.10

Changed

  • Fold bulk and destructive lifecycle variants into their base nouns: update-many into update, close-many into close, delete/restore placement per ADR item pm-ik19

Fixed

  • Isolate CodSpeed dependency setup from unrelated Chrome APT index failures item pm-zvy31w

Other

  • Fold lifecycle sugar start-task/pause-task/close-task into claim/release/close flags (hidden aliases) item pm-eq4x
  • Native pm ops stats, health, validate, gc, telemetry, eval and test-all with compatible root commands item pm-6apl
  • Native pm context next and pm context focus with permanent navigation aliases item pm-kcs4
  • Native pm ops normalize, pm ops reindex and pm history events with compatibility aliases item pm-3i9q8g