Changed
- Verify complete merge documents across branch permutations and merge directions item pm-1tns7o
Fixed
- Two items created independently on two branches with the same id merge into one document carrying two create entries, and storage integrity only notices when the types differ item pm-qx95lz
- Isolate merge reconciliation receipt discovery from unrelated invocation workspaces item pm-q5grv5
- The immutable history op vocabulary is ungoverned: 71 op literals across five naming conventions, with the same operation spelled two ways in one file, are written permanently with no enum, no contract, and no gate item pm-0elqjj
- Read surfaces give no tombstone signal for a deleted id: pm get returns a bare not-found, so an agent cannot tell never-existed from deleted-and-recoverable item pm-nb4zwz
- CI assurance receipts must explicitly request complete evidence beyond interactive output ceilings item pm-yrio0m
- GH-1231: Expose non-vacuous lifecycle completeness evidence item pm-khd2fd
- GH-1232: Normalize policy authoring ids with actionable mismatch recovery item pm-ycv2cz
- GH-1233: Make strict ownership recovery executable for annotation writes item pm-nrkjik
Other
- Streamline agent triage and schema command discovery item pm-gdi7
- Compact compound lifecycle receipts without losing SDK results item pm-r1f9f1
Added
- Portable integrity attestation: compare recorded history with independently retained proof bundles item pm-3z0k
Fixed
- The history integrity chain hard-codes SHA-256 with no algorithm identifier, so the proof it produces has no migration path across the decades it claims to cover item pm-bbk8we
- Optional undefined result fields silently drop telemetry completion events item pm-rqaqfp
- GH-1229: preserve bounded HTTP process-tree cleanup when POSIX liveness returns EPERM item pm-qn9zxu
Other
- Refresh Sentry 10.74 with history attestation consumer verification item pm-2us1yv
- Refresh jscpd 5.2 and MCP Apps 2 development contracts item pm-qs5iiq
- Register advanced retrieval as a search facet item pm-wfskfn
- Consolidate duplicate governance under item operations item pm-fmy9ih
- Declare item copy and workspace merge command destinations item pm-m6g87m
Changed
- Fold bulk and destructive lifecycle variants into their base nouns: update-many into update, close-many into close, delete/restore placement per ADR item pm-ik19
Fixed
- Isolate CodSpeed dependency setup from unrelated Chrome APT index failures item pm-zvy31w
Other
- Fold lifecycle sugar start-task/pause-task/close-task into claim/release/close flags (hidden aliases) item pm-eq4x
- Native pm ops stats, health, validate, gc, telemetry, eval and test-all with compatible root commands item pm-6apl
- Native pm context next and pm context focus with permanent navigation aliases item pm-kcs4
- Native pm ops normalize, pm ops reindex and pm history events with compatibility aliases item pm-3i9q8g
Added
- Lifecycle field-completeness contract: each item type declares the fields required at each status transition, machine-checked by pm validate item pm-htbetn
- Declarative policy engine: item-level transition, approval, and authorship rules declared as data and enforced consistently at the SDK layer item pm-mj42og
Fixed
- Explain binding token budgets beside read-output alias migration hints item pm-8kzfc4
- Preserve dependency kind constraints in rendered enum errors item pm-lk0qhn
- pm search defaults to keyword on a workspace whose vector index is complete, so the shipped Ollama semantic default never reaches the default query path item pm-n8a6e7
Security
- GHSA-crvj-82cr-hjcx: Hono: Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials item pm-vnv467
- GHSA-g6gw-c38x-mqfc: Hono: Unbounded dot-notation nesting in
parseBody() can cause memory exhaustion item pm-gxt0mx - GHSA-gqvv-2mrq-wpjv: Hono: Incomplete fix for CVE-2026-39408:
toSSG() still writes files outside the output directory item pm-rc8708
Added
- Derived scheduling: propagate milestone deadlines backward through the ordering graph so every gating item carries a latest-start date instead of only six dates existing in the whole plan item pm-d2wfig
Changed
- Unify history maintenance with one verified SDK snapshot and rewrite pipeline item pm-34w8za
Fixed
- GH-1218: expose local package copy scope and packed-install alternatives item pm-5bsofk
- GH-1219: report truthful package update coverage for skipped and failed checks item pm-gf5zw8
- Claim ownership response repeats full metadata despite the compact mutation contract item pm-eqdo85
- Reject repository-local test scratch roots before sandbox fixtures can mutate the real Git workspace item pm-bukwmy
- GH-1214: Bound complete item reads and isolate Git newline fixtures on Windows item pm-hrhfgi
- GH-1216: Preserve diagnostic identity and sanitize short and bounded error text item pm-m4uyyj
- GH-1215: Preserve original source maps through aliased build roots item pm-zk67yf
- Grouping by a set-valued field groups by the whole set: pm aggregate --group-by tags returns 2,022 tag-tuple rows for 2,467 items, so the governance question the command exists to answer cannot be asked item pm-398z0u
- The graph completeness audit scopes every coverage metric to active nodes, so it certifies a saturated graph while 1,796 of 2,079 nodes are unmeasured item pm-6olc95
Other
- MCP 2026-07-28 per-request log level is neither read nor negatively controlled, and the conformance matrix has no row for it item pm-pd7nh0
- Backfill terminal resolution evidence without placeholder metadata item pm-e9zh
- Consolidate history commands: history-redact/history-repair/history-compact/activity/restore under pm history subcommands item pm-tqel
- Compact unbundled runtime JavaScript while preserving SDK declarations and Sentry source maps item pm-fx0rcb
- Adopt PR 1212 release and secret-scanner action pins with matching workflow contracts item pm-shpocu
Fixed
- Release preparation omits the calendar date and fails post-tag main CI item pm-071wg4
Fixed
- GH-1207: Make advisory health checks and strict verdict authority explicit item pm-fkohe8
- The tracker's recurrence edges and the CI recurrence policy are two ledgers with no join, so 59 of the 75 items in a recorded recurrence lineage produce no gate anywhere item pm-7c27ep
- Refresh review acknowledgements when bot feedback changes item pm-8we38i
- pm health --check-only, the diagnostic AGENTS.md routes agents to, reduces nothing: it costs 33k tokens where --summary states the same verdict in 142 item pm-du93sr
- GH-1203: Offer actionable acceptance-evidence backfill after a warning close item pm-ub1ott
- GH-1202: Classify abandoned merge receipts without losing durable provenance item pm-466m0j
- GH-1200: Preview exact receipt proof before merge reconciliation item pm-ao0bu9
- GH-1206: Verify legacy receipt redactions across hash encodings item pm-v66zir
- GH-1205: Declare root-only versus inherited extension flag reservation scope item pm-2h8t6y
- GH-1201: Recover invalid pending receipt evidence across release upgrades item pm-2xtv84
- The linked-file staleness check has no holder-lifecycle partition, so 1,220 links on closed holders warn forever while its worklist truncation hides the actionable subset behind a path count reported as a row count item pm-zw9188
- 2026.8.1 regression: governance dedupe audit rejects the restored all-lifecycle status sentinel item pm-449do9
- Normalize local parent shorthand consistently with dependency identifiers item pm-olcoon
- Every pm next and pm context read writes one usage-ledger row per open item under a single global lock, and the compaction trigger is a byte threshold that a count-based retention can never satisfy item pm-bab3gb
- Reading one item by its primary key scans the whole workspace: pm get is O(corpus) and the projection flags bound the output but not the work item pm-ydshl9
- Telemetry worker permanently retries JSONB-incompatible Unicode events item pm-xlb6aw
- Telemetry worker: no Postgres reconnect — ingestion stalls with events stuck in RabbitMQ after postgres restart item pm-rj3w
- Metadata index rebuilds and mutations repeatedly scan an unindexed FTS identity column item pm-gtw5zh
- Read sessions emit invalid continuation identities from workspace activity rows item pm-s8ybl9
- Scale fixtures silently omit unregistered Story items from metadata reads item pm-fx80w2
- Releases from the default branch are supported with analyzer evidence item pm-u1baah
Other
- Cross-process reproducibility gate: prove CLI and MCP deterministic runs are byte-identical and fail on ambient time leaks item pm-vklr99
- The docs gate enforces link resolution but not doc reachability, so orphaned docs pass CI and the advertised docs map silently drifts item pm-s4y3z4
- docs-skills-gate: validate anchor fragments in relative links item pm-esbt
Fixed
- Tag-push Release must regenerate the exact-tag changelog before immutable publication item pm-e63v1x
- pm next recommends outcome-milestone gates as actionable work, and summary.containers counts a bucket the envelope never emits item pm-08mt4k
- Windows published-release verifier test can preempt its own readiness and cleanup contract item pm-euqm7x
- Commander usage refusals omit token_accounting even when --token-accounting is parsed item pm-bfa1ob
- flag-invocation-parity only iterates declared flags, so 21 runtime options across 8 core commands have no flag contract item pm-2bqgs7
- pm release leaves the item in_progress with no owner: offer --status open (or hint) so released work does not linger as phantom WIP item pm-ugld
- GH-1169: the unknown-command hint routes to the 15-command root help that hides the target, and test is the only singular collection verb item pm-u4t9gp
- pm context summary counts are denominated in the returned slice, so the canonical orient cold-start reports 4 open items in a 291-item backlog item pm-79gv6q
- GH-1171: restore parses the on-disk item before consulting history, so a zero-byte or corrupted item file with an intact stream cannot be rebuilt item pm-96fsma
- history-compact renumbers version identifiers, so pm get --at N and pm restore N address a different recorded state after compaction with exit 0 and no signal item pm-m0yjtg
- A deleted item's id is immediately re-mintable, so one immutable history stream can hold two unrelated items and every integrity check still reports verified item pm-e3gn0z
- Point-in-time reconstruction crashes with an unstructured runtime error when a history stream opens without a baseline entry, so the restore-any-version guarantee fails with no diagnosable condition item pm-qw1uw6
- Agent skills instruct flags and spellings the runtime refuses, and no guide topic routes the evidence or automation families item pm-4957pz
- Sentry-injected release artifacts exceed the CI package budget because pre- and post-injection packlists share one ceiling item pm-llbnua
- GH-1190: Windows nightly can publish the event index after an unlocked fallback append item pm-a7207g
Other
- Upgrade Greptile review tooling to 3.5.0 with compatible dependency evidence item pm-o3mczz
- Point-in-time reconstruction gate: prove every item at every recorded version replays exactly from its history stream alone item pm-wlqxg3
- Refresh compatible jscpd 5.1.2 and reconcile the 2026-09-04 dependency census item pm-gredf1
Added
- Verdict contract: one declared vocabulary of reproducible predicates over recorded state, composable into a score, with reward shaping explicitly refused item pm-e1vkee
Fixed
- Windows published-release verifier test can preempt its own readiness and cleanup contract item pm-euqm7x
- Packed npx smoke timeout rejects valid slow dependency reification item pm-8eebb6
- GH-1186: unrecoverable legacy merge-receipt references block strict health with diagnostic-only remediation item pm-cf4t42
- GH-1185: hash-only merge receipts make discarded scalar values unreachable to the reviewing agent item pm-mg13iz
- GH-1184: scalar merge conflict ordering ignores recency and requested preference item pm-7wzb6d
- Acceptance criteria are documented as merging like tags but are stored as one delimiter-joined scalar, so concurrent criteria additions from different branches are silently discarded item pm-inn5y5
- GH-1183: Windows nightly event-index lock acquisition and fallback publication are nondeterministic item pm-fqlocp
- GH-1177: Claude session provenance path is derived from invocation cwd instead of the session-start workspace item pm-l7m7k5
- GH-1179: legacy merge-receipt shape is misclassified as a gate-failing missing history reference with no remedy item pm-wn3ee5
- Re-anchoring overwrites the original hash pair, so the immutability proof for every pre-merge entry is destroyed by the operation that repairs the chain item pm-aka8m7
Security
- GH-1178: history hashes exclude record author and agent provenance, so attribution can be rewritten without detection item pm-javbsq
Fixed
- Context recency is computed from updated_at, so every governance write the project mandates erases the freshness signal it ranks on item pm-07pt16
- A read whose result was omitted for budget still records those items as served and included, so the usage-affinity signal learns from context the agent never received item pm-wv47pf
- Shape-qualified scale baselines drifted from current CLI/SDK output contracts and supported runtime item pm-r8yytk
Security
- OSSF Scorecard alert \#29: qs denial-of-service advisories in the MCP Apps development dependency tree item pm-mlpn91
Other
- Refresh compatible 2026-09-01 jscpd 5.1.1 tooling item pm-ur4swu
- Refresh Sentry 10.73 and TypeScript-ESLint 8.69 with exact coverage item pm-92tp12
