Changed
- Verify complete merge documents across branch permutations and merge directions Eintrag pm-1tns7o
Fixed
- Two items created independently on two branches with the same id merge into one document carrying two create entries, and storage integrity only notices when the types differ Eintrag pm-qx95lz
- Isolate merge reconciliation receipt discovery from unrelated invocation workspaces Eintrag pm-q5grv5
- The immutable history op vocabulary is ungoverned: 71 op literals across five naming conventions, with the same operation spelled two ways in one file, are written permanently with no enum, no contract, and no gate Eintrag pm-0elqjj
- Read surfaces give no tombstone signal for a deleted id: pm get returns a bare not-found, so an agent cannot tell never-existed from deleted-and-recoverable Eintrag pm-nb4zwz
- CI assurance receipts must explicitly request complete evidence beyond interactive output ceilings Eintrag pm-yrio0m
- GH-1231: Expose non-vacuous lifecycle completeness evidence Eintrag pm-khd2fd
- GH-1232: Normalize policy authoring ids with actionable mismatch recovery Eintrag pm-ycv2cz
- GH-1233: Make strict ownership recovery executable for annotation writes Eintrag pm-nrkjik
Added
- Portable integrity attestation: compare recorded history with independently retained proof bundles Eintrag pm-3z0k
Fixed
- The history integrity chain hard-codes SHA-256 with no algorithm identifier, so the proof it produces has no migration path across the decades it claims to cover Eintrag pm-bbk8we
- Optional undefined result fields silently drop telemetry completion events Eintrag pm-rqaqfp
- GH-1229: preserve bounded HTTP process-tree cleanup when POSIX liveness returns EPERM Eintrag pm-qn9zxu
Changed
- Fold bulk and destructive lifecycle variants into their base nouns: update-many into update, close-many into close, delete/restore placement per ADR Eintrag pm-ik19
Fixed
- Isolate CodSpeed dependency setup from unrelated Chrome APT index failures Eintrag pm-zvy31w
Other
- Fold lifecycle sugar start-task/pause-task/close-task into claim/release/close flags (hidden aliases) Eintrag pm-eq4x
- Native pm ops stats, health, validate, gc, telemetry, eval and test-all with compatible root commands Eintrag pm-6apl
- Native pm context next and pm context focus with permanent navigation aliases Eintrag pm-kcs4
- Native pm ops normalize, pm ops reindex and pm history events with compatibility aliases Eintrag pm-3i9q8g
Added
- Lifecycle field-completeness contract: each item type declares the fields required at each status transition, machine-checked by pm validate Eintrag pm-htbetn
- Declarative policy engine: item-level transition, approval, and authorship rules declared as data and enforced consistently at the SDK layer Eintrag pm-mj42og
Fixed
- Explain binding token budgets beside read-output alias migration hints Eintrag pm-8kzfc4
- Preserve dependency kind constraints in rendered enum errors Eintrag pm-lk0qhn
- pm search defaults to keyword on a workspace whose vector index is complete, so the shipped Ollama semantic default never reaches the default query path Eintrag pm-n8a6e7
Security
- GHSA-crvj-82cr-hjcx: Hono: Query parser reads parameters after the URL fragment, causing cache-key and proxy interpretation differentials Eintrag pm-vnv467
- GHSA-g6gw-c38x-mqfc: Hono: Unbounded dot-notation nesting in
parseBody() can cause memory exhaustion Eintrag pm-gxt0mx - GHSA-gqvv-2mrq-wpjv: Hono: Incomplete fix for CVE-2026-39408:
toSSG() still writes files outside the output directory Eintrag pm-rc8708
Added
- Derived scheduling: propagate milestone deadlines backward through the ordering graph so every gating item carries a latest-start date instead of only six dates existing in the whole plan Eintrag pm-d2wfig
Changed
- Unify history maintenance with one verified SDK snapshot and rewrite pipeline Eintrag pm-34w8za
Fixed
- GH-1218: expose local package copy scope and packed-install alternatives Eintrag pm-5bsofk
- GH-1219: report truthful package update coverage for skipped and failed checks Eintrag pm-gf5zw8
- Claim ownership response repeats full metadata despite the compact mutation contract Eintrag pm-eqdo85
- Reject repository-local test scratch roots before sandbox fixtures can mutate the real Git workspace Eintrag pm-bukwmy
- GH-1214: Bound complete item reads and isolate Git newline fixtures on Windows Eintrag pm-hrhfgi
- GH-1216: Preserve diagnostic identity and sanitize short and bounded error text Eintrag pm-m4uyyj
- GH-1215: Preserve original source maps through aliased build roots Eintrag pm-zk67yf
- Grouping by a set-valued field groups by the whole set: pm aggregate --group-by tags returns 2,022 tag-tuple rows for 2,467 items, so the governance question the command exists to answer cannot be asked Eintrag pm-398z0u
- The graph completeness audit scopes every coverage metric to active nodes, so it certifies a saturated graph while 1,796 of 2,079 nodes are unmeasured Eintrag pm-6olc95
Other
- MCP 2026-07-28 per-request log level is neither read nor negatively controlled, and the conformance matrix has no row for it Eintrag pm-pd7nh0
- Backfill terminal resolution evidence without placeholder metadata Eintrag pm-e9zh
- Consolidate history commands: history-redact/history-repair/history-compact/activity/restore under pm history subcommands Eintrag pm-tqel
- Compact unbundled runtime JavaScript while preserving SDK declarations and Sentry source maps Eintrag pm-fx0rcb
- Adopt PR 1212 release and secret-scanner action pins with matching workflow contracts Eintrag pm-shpocu
Fixed
- Release preparation omits the calendar date and fails post-tag main CI Eintrag pm-071wg4
Fixed
- GH-1207: Make advisory health checks and strict verdict authority explicit Eintrag pm-fkohe8
- The tracker's recurrence edges and the CI recurrence policy are two ledgers with no join, so 59 of the 75 items in a recorded recurrence lineage produce no gate anywhere Eintrag pm-7c27ep
- Refresh review acknowledgements when bot feedback changes Eintrag pm-8we38i
- pm health --check-only, the diagnostic AGENTS.md routes agents to, reduces nothing: it costs 33k tokens where --summary states the same verdict in 142 Eintrag pm-du93sr
- GH-1203: Offer actionable acceptance-evidence backfill after a warning close Eintrag pm-ub1ott
- GH-1202: Classify abandoned merge receipts without losing durable provenance Eintrag pm-466m0j
- GH-1200: Preview exact receipt proof before merge reconciliation Eintrag pm-ao0bu9
- GH-1206: Verify legacy receipt redactions across hash encodings Eintrag pm-v66zir
- GH-1205: Declare root-only versus inherited extension flag reservation scope Eintrag pm-2h8t6y
- GH-1201: Recover invalid pending receipt evidence across release upgrades Eintrag pm-2xtv84
- The linked-file staleness check has no holder-lifecycle partition, so 1,220 links on closed holders warn forever while its worklist truncation hides the actionable subset behind a path count reported as a row count Eintrag pm-zw9188
- 2026.8.1 regression: governance dedupe audit rejects the restored all-lifecycle status sentinel Eintrag pm-449do9
- Normalize local parent shorthand consistently with dependency identifiers Eintrag pm-olcoon
- Every pm next and pm context read writes one usage-ledger row per open item under a single global lock, and the compaction trigger is a byte threshold that a count-based retention can never satisfy Eintrag pm-bab3gb
- Reading one item by its primary key scans the whole workspace: pm get is O(corpus) and the projection flags bound the output but not the work Eintrag pm-ydshl9
- Telemetry worker permanently retries JSONB-incompatible Unicode events Eintrag pm-xlb6aw
- Telemetry worker: no Postgres reconnect — ingestion stalls with events stuck in RabbitMQ after postgres restart Eintrag pm-rj3w
- Metadata index rebuilds and mutations repeatedly scan an unindexed FTS identity column Eintrag pm-gtw5zh
- Read sessions emit invalid continuation identities from workspace activity rows Eintrag pm-s8ybl9
- Scale fixtures silently omit unregistered Story items from metadata reads Eintrag pm-fx80w2
- Releases from the default branch are supported with analyzer evidence Eintrag pm-u1baah
Other
- Cross-process reproducibility gate: prove CLI and MCP deterministic runs are byte-identical and fail on ambient time leaks Eintrag pm-vklr99
- The docs gate enforces link resolution but not doc reachability, so orphaned docs pass CI and the advertised docs map silently drifts Eintrag pm-s4y3z4
- docs-skills-gate: validate anchor fragments in relative links Eintrag pm-esbt
Fixed
- Tag-push Release must regenerate the exact-tag changelog before immutable publication Eintrag pm-e63v1x
- pm next recommends outcome-milestone gates as actionable work, and summary.containers counts a bucket the envelope never emits Eintrag pm-08mt4k
- Windows published-release verifier test can preempt its own readiness and cleanup contract Eintrag pm-euqm7x
- Commander usage refusals omit token_accounting even when --token-accounting is parsed Eintrag pm-bfa1ob
- flag-invocation-parity only iterates declared flags, so 21 runtime options across 8 core commands have no flag contract Eintrag pm-2bqgs7
- pm release leaves the item in_progress with no owner: offer --status open (or hint) so released work does not linger as phantom WIP Eintrag pm-ugld
- GH-1169: the unknown-command hint routes to the 15-command root help that hides the target, and test is the only singular collection verb Eintrag pm-u4t9gp
- pm context summary counts are denominated in the returned slice, so the canonical orient cold-start reports 4 open items in a 291-item backlog Eintrag pm-79gv6q
- GH-1171: restore parses the on-disk item before consulting history, so a zero-byte or corrupted item file with an intact stream cannot be rebuilt Eintrag pm-96fsma
- history-compact renumbers version identifiers, so pm get --at N and pm restore N address a different recorded state after compaction with exit 0 and no signal Eintrag pm-m0yjtg
- A deleted item's id is immediately re-mintable, so one immutable history stream can hold two unrelated items and every integrity check still reports verified Eintrag pm-e3gn0z
- Point-in-time reconstruction crashes with an unstructured runtime error when a history stream opens without a baseline entry, so the restore-any-version guarantee fails with no diagnosable condition Eintrag pm-qw1uw6
- Agent skills instruct flags and spellings the runtime refuses, and no guide topic routes the evidence or automation families Eintrag pm-4957pz
- Sentry-injected release artifacts exceed the CI package budget because pre- and post-injection packlists share one ceiling Eintrag pm-llbnua
- GH-1190: Windows nightly can publish the event index after an unlocked fallback append Eintrag pm-a7207g
Other
- Upgrade Greptile review tooling to 3.5.0 with compatible dependency evidence Eintrag pm-o3mczz
- Point-in-time reconstruction gate: prove every item at every recorded version replays exactly from its history stream alone Eintrag pm-wlqxg3
- Refresh compatible jscpd 5.1.2 and reconcile the 2026-09-04 dependency census Eintrag pm-gredf1
Added
- Verdict contract: one declared vocabulary of reproducible predicates over recorded state, composable into a score, with reward shaping explicitly refused Eintrag pm-e1vkee
Fixed
- Windows published-release verifier test can preempt its own readiness and cleanup contract Eintrag pm-euqm7x
- Packed npx smoke timeout rejects valid slow dependency reification Eintrag pm-8eebb6
- GH-1186: unrecoverable legacy merge-receipt references block strict health with diagnostic-only remediation Eintrag pm-cf4t42
- GH-1185: hash-only merge receipts make discarded scalar values unreachable to the reviewing agent Eintrag pm-mg13iz
- GH-1184: scalar merge conflict ordering ignores recency and requested preference Eintrag pm-7wzb6d
- Acceptance criteria are documented as merging like tags but are stored as one delimiter-joined scalar, so concurrent criteria additions from different branches are silently discarded Eintrag pm-inn5y5
- GH-1183: Windows nightly event-index lock acquisition and fallback publication are nondeterministic Eintrag pm-fqlocp
- GH-1177: Claude session provenance path is derived from invocation cwd instead of the session-start workspace Eintrag pm-l7m7k5
- GH-1179: legacy merge-receipt shape is misclassified as a gate-failing missing history reference with no remedy Eintrag pm-wn3ee5
- Re-anchoring overwrites the original hash pair, so the immutability proof for every pre-merge entry is destroyed by the operation that repairs the chain Eintrag pm-aka8m7
Security
- GH-1178: history hashes exclude record author and agent provenance, so attribution can be rewritten without detection Eintrag pm-javbsq
Fixed
- Context recency is computed from updated_at, so every governance write the project mandates erases the freshness signal it ranks on Eintrag pm-07pt16
- A read whose result was omitted for budget still records those items as served and included, so the usage-affinity signal learns from context the agent never received Eintrag pm-wv47pf
- Shape-qualified scale baselines drifted from current CLI/SDK output contracts and supported runtime Eintrag pm-r8yytk
Security
- OSSF Scorecard alert \#29: qs denial-of-service advisories in the MCP Apps development dependency tree Eintrag pm-mlpn91
