Added
- Lifecycle field-completeness contract: each item type declares the fields required at each status transition, machine-checked by pm validate item pm-htbetn
- Declarative policy engine: item-level transition, approval, and authorship rules declared as data and enforced consistently at the SDK layer item pm-mj42og
Fixed
- Explain binding token budgets beside read-output alias migration hints item pm-8kzfc4
- Preserve dependency kind constraints in rendered enum errors item pm-lk0qhn
- pm search defaults to keyword on a workspace whose vector index is complete, so the shipped Ollama semantic default never reaches the default query path item pm-n8a6e7
Security
- GHSA-crvj-82cr-hjcx: Hono: Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials item pm-vnv467
- GHSA-g6gw-c38x-mqfc: Hono: Unbounded dot-notation nesting in
parseBody() can cause memory exhaustion item pm-gxt0mx - GHSA-gqvv-2mrq-wpjv: Hono: Incomplete fix for CVE-2026-39408:
toSSG() still writes files outside the output directory item pm-rc8708
Added
- Derived scheduling: propagate milestone deadlines backward through the ordering graph so every gating item carries a latest-start date instead of only six dates existing in the whole plan item pm-d2wfig
Changed
- Unify history maintenance with one verified SDK snapshot and rewrite pipeline item pm-34w8za
Fixed
- GH-1218: expose local package copy scope and packed-install alternatives item pm-5bsofk
- GH-1219: report truthful package update coverage for skipped and failed checks item pm-gf5zw8
- Claim ownership response repeats full metadata despite the compact mutation contract item pm-eqdo85
- Reject repository-local test scratch roots before sandbox fixtures can mutate the real Git workspace item pm-bukwmy
- GH-1214: Bound complete item reads and isolate Git newline fixtures on Windows item pm-hrhfgi
- GH-1216: Preserve diagnostic identity and sanitize short and bounded error text item pm-m4uyyj
- GH-1215: Preserve original source maps through aliased build roots item pm-zk67yf
- Grouping by a set-valued field groups by the whole set: pm aggregate --group-by tags returns 2,022 tag-tuple rows for 2,467 items, so the governance question the command exists to answer cannot be asked item pm-398z0u
- The graph completeness audit scopes every coverage metric to active nodes, so it certifies a saturated graph while 1,796 of 2,079 nodes are unmeasured item pm-6olc95
Other
- MCP 2026-07-28 per-request log level is neither read nor negatively controlled, and the conformance matrix has no row for it item pm-pd7nh0
- Backfill terminal resolution evidence without placeholder metadata item pm-e9zh
- Consolidate history commands: history-redact/history-repair/history-compact/activity/restore under pm history subcommands item pm-tqel
- Compact unbundled runtime JavaScript while preserving SDK declarations and Sentry source maps item pm-fx0rcb
- Adopt PR 1212 release and secret-scanner action pins with matching workflow contracts item pm-shpocu
Fixed
- Release preparation omits the calendar date and fails post-tag main CI item pm-071wg4
Fixed
- GH-1207: Make advisory health checks and strict verdict authority explicit item pm-fkohe8
- The tracker's recurrence edges and the CI recurrence policy are two ledgers with no join, so 59 of the 75 items in a recorded recurrence lineage produce no gate anywhere item pm-7c27ep
- Refresh review acknowledgements when bot feedback changes item pm-8we38i
- pm health --check-only, the diagnostic AGENTS.md routes agents to, reduces nothing: it costs 33k tokens where --summary states the same verdict in 142 item pm-du93sr
- GH-1203: Offer actionable acceptance-evidence backfill after a warning close item pm-ub1ott
- GH-1202: Classify abandoned merge receipts without losing durable provenance item pm-466m0j
- GH-1200: Preview exact receipt proof before merge reconciliation item pm-ao0bu9
- GH-1206: Verify legacy receipt redactions across hash encodings item pm-v66zir
- GH-1205: Declare root-only versus inherited extension flag reservation scope item pm-2h8t6y
- GH-1201: Recover invalid pending receipt evidence across release upgrades item pm-2xtv84
- The linked-file staleness check has no holder-lifecycle partition, so 1,220 links on closed holders warn forever while its worklist truncation hides the actionable subset behind a path count reported as a row count item pm-zw9188
- 2026.8.1 regression: governance dedupe audit rejects the restored all-lifecycle status sentinel item pm-449do9
- Normalize local parent shorthand consistently with dependency identifiers item pm-olcoon
- Every pm next and pm context read writes one usage-ledger row per open item under a single global lock, and the compaction trigger is a byte threshold that a count-based retention can never satisfy item pm-bab3gb
- Reading one item by its primary key scans the whole workspace: pm get is O(corpus) and the projection flags bound the output but not the work item pm-ydshl9
- Telemetry worker permanently retries JSONB-incompatible Unicode events item pm-xlb6aw
- Telemetry worker: no Postgres reconnect — ingestion stalls with events stuck in RabbitMQ after postgres restart item pm-rj3w
- Metadata index rebuilds and mutations repeatedly scan an unindexed FTS identity column item pm-gtw5zh
- Read sessions emit invalid continuation identities from workspace activity rows item pm-s8ybl9
- Scale fixtures silently omit unregistered Story items from metadata reads item pm-fx80w2
Other
- Cross-process reproducibility gate: prove CLI and MCP deterministic runs are byte-identical and fail on ambient time leaks item pm-vklr99
- The docs gate enforces link resolution but not doc reachability, so orphaned docs pass CI and the advertised docs map silently drifts item pm-s4y3z4
- docs-skills-gate: validate anchor fragments in relative links item pm-esbt
Fixed
- Tag-push Release must regenerate the exact-tag changelog before immutable publication item pm-e63v1x
- pm next recommends outcome-milestone gates as actionable work, and summary.containers counts a bucket the envelope never emits item pm-08mt4k
- Windows published-release verifier test can preempt its own readiness and cleanup contract item pm-euqm7x
- Commander usage refusals omit token_accounting even when --token-accounting is parsed item pm-bfa1ob
- flag-invocation-parity only iterates declared flags, so 21 runtime options across 8 core commands have no flag contract item pm-2bqgs7
- pm release leaves the item in_progress with no owner: offer --status open (or hint) so released work does not linger as phantom WIP item pm-ugld
- GH-1169: the unknown-command hint routes to the 15-command root help that hides the target, and test is the only singular collection verb item pm-u4t9gp
- pm context summary counts are denominated in the returned slice, so the canonical orient cold-start reports 4 open items in a 291-item backlog item pm-79gv6q
- GH-1171: restore parses the on-disk item before consulting history, so a zero-byte or corrupted item file with an intact stream cannot be rebuilt item pm-96fsma
- history-compact renumbers version identifiers, so pm get --at N and pm restore N address a different recorded state after compaction with exit 0 and no signal item pm-m0yjtg
- A deleted item's id is immediately re-mintable, so one immutable history stream can hold two unrelated items and every integrity check still reports verified item pm-e3gn0z
- Point-in-time reconstruction crashes with an unstructured runtime error when a history stream opens without a baseline entry, so the restore-any-version guarantee fails with no diagnosable condition item pm-qw1uw6
- Agent skills instruct flags and spellings the runtime refuses, and no guide topic routes the evidence or automation families item pm-4957pz
- Sentry-injected release artifacts exceed the CI package budget because pre- and post-injection packlists share one ceiling item pm-llbnua
- GH-1190: Windows nightly can publish the event index after an unlocked fallback append item pm-a7207g
Other
- Upgrade Greptile review tooling to 3.5.0 with compatible dependency evidence item pm-o3mczz
- Point-in-time reconstruction gate: prove every item at every recorded version replays exactly from its history stream alone item pm-wlqxg3
- Refresh compatible jscpd 5.1.2 and reconcile the 2026-09-04 dependency census item pm-gredf1
Added
- Verdict contract: one declared vocabulary of reproducible predicates over recorded state, composable into a score, with reward shaping explicitly refused item pm-e1vkee
Fixed
- Packed npx smoke timeout rejects valid slow dependency reification item pm-8eebb6
- GH-1186: unrecoverable legacy merge-receipt references block strict health with diagnostic-only remediation item pm-cf4t42
- GH-1185: hash-only merge receipts make discarded scalar values unreachable to the reviewing agent item pm-mg13iz
- GH-1184: scalar merge conflict ordering ignores recency and requested preference item pm-7wzb6d
- Acceptance criteria are documented as merging like tags but are stored as one delimiter-joined scalar, so concurrent criteria additions from different branches are silently discarded item pm-inn5y5
- GH-1183: Windows nightly event-index lock acquisition and fallback publication are nondeterministic item pm-fqlocp
- GH-1177: Claude session provenance path is derived from invocation cwd instead of the session-start workspace item pm-l7m7k5
- GH-1179: legacy merge-receipt shape is misclassified as a gate-failing missing history reference with no remedy item pm-wn3ee5
- Re-anchoring overwrites the original hash pair, so the immutability proof for every pre-merge entry is destroyed by the operation that repairs the chain item pm-aka8m7
Security
- GH-1178: history hashes exclude record author and agent provenance, so attribution can be rewritten without detection item pm-javbsq
Fixed
- A read whose result was omitted for budget still records those items as served and included, so the usage-affinity signal learns from context the agent never received item pm-wv47pf
- Shape-qualified scale baselines drifted from current CLI/SDK output contracts and supported runtime item pm-r8yytk
- Context recency is computed from updated_at, so every governance write the project mandates erases the freshness signal it ranks on item pm-07pt16
Security
- OSSF Scorecard alert \#29: qs denial-of-service advisories in the MCP Apps development dependency tree item pm-mlpn91
Other
- Refresh compatible 2026-09-01 jscpd 5.1.1 tooling item pm-ur4swu
- Refresh Sentry 10.73 and TypeScript-ESLint 8.69 with exact coverage item pm-92tp12
Fixed
- GH-1174: Windows Node 24 receipt traversal negative control must fail closed portably item pm-r97901
Security
- GH-1173: make merge-receipt evidence diagnostics source-stable and record-addressable item pm-dn8rwl
Added
- GH-796: duplicate recurrence now reopens the canonical terminal item instead of creating a second item item pm-83cz0o
- Progressive MCP discovery and canonical tool results: reveal the minimum relevant catalog and deliver one unambiguous model-facing output contract item pm-3g3f8z
Fixed
- The two-call agent cold start proposed as canonical costs more tokens than the four-call protocol it replaces, and no gate measures either item pm-jjqyzd
- GH-1166: root help hides the --all discovery option that reveals the full command surface item pm-7f9zkh
- GH-1104: health must not certify pending lossless merge receipts as reconciled item pm-baksix
- GH-1135: item_hash_version 2 still masks writer hash divergence as corruption item pm-2qahia
Security
- Refresh compatible GitHub Actions and tsx tooling dependencies item pm-k47gdd
Other
- Document the measured canonical agent cold-start across docs and generated guidance item pm-ka6d
- Close-time completeness signal for structured resolution fields (resolution/expected/actual) — config-gated warn or require item pm-wenq
Added
- Workspace position read: one bounded answer to where this workspace stands in the branch-and-merge workflow and what to run next, replacing a protocol the agent must remember item pm-bq0ii8
Fixed
- Custom statuses registered without a lifecycle role are silently orphaned from every work-selection surface item pm-0mhspz
- GH-1158: Windows Node 24 nightly receipt fixture derives a root-relative expectation from a drive-qualified path item pm-46hpx8
- GH-1154: linked-test sandbox guard is command-shape inconsistent and undocumented item pm-s8cth5
- The local preflight token-budget gate is red on a workstation and green in hosted CI for the same commit again, because the earlier remediation closed the one ambient channel that had bitten instead of closing the fixture's environment item pm-4o7tlx
- The bounded legacy MCP compatibility set stops one revision short of the spec's own legacy boundary, so every current host is refused at initialize and the dual-era guarantee is unmet item pm-edywqn
Deprecated
- The project's own agent-facing documentation and skills instruct deprecated command spellings, so the alias-usage signal that decides when a spelling can be retired is manufactured by the instructions rather than observed from callers item pm-q2n4vd