Code

Node ignores the on-chain ChainEntry.quorum: a single RPC provider can decide a foreign-tx verdict

Align mock attestation expiry with Dstack (contract-owned expiry / submit-store split)

health-check: discover the probe transaction dynamically instead of pinning one

perf(webui): add immutable caching for content-hashed JS and CSS

Notion tool fails to install in IronClaw

IronHub: agent reaches for an unsigned catalog URL when discovery disappoints

perf optimization: skip peer height approval verification when the height cannot trigger sync

Third-party skills still trip the prompt content denylist on 1.0.0: "API key" in a description kills every run (follow-up to #5169 / #5258)

NetworkTargetPattern: neither host-pattern validator is enforced at the type level

Agent deployment fails with sysbox-mgr connection refused

Prove delivery guards, per-automation target isolation, and final-result selection end to end

Migrate Slack to canonical messaging operations and retire compatibility aliases

Release-gate Telegram pairing, delivery, attachments, and commands

Release-gate native and mem0 provider conformance, storage parity, and migration readiness

Cut over extension lifecycle callers to normalized state and define legacy retirement

Standardize agent-facing outbound messaging tool names and operation contracts

Thread a provider-supplied Retry-After onto the capability failure channel

Restart during pending Codex device authorization blocks WebUI and hides recovery code

[QA] provider_id="gemini" 400s on every tool call — builtin tool schemas ship empty "type" to functionDeclarations

Daily ironclaw failure taxonomy — 2026-07-28

refactor(contract): drop fail_attestation_submission now that the deposit is gone

Hosted-MCP: discovered tool catalogs are published per extension id, not per installation — cross-user metadata exposure on multi-principal servers

Document Gmail terminal-based setup steps in Extensions > Registry UI

Gmail OAuth popup disappears instantly when setting up via WebUI Extensions > Registry

IronHub CLI: route actions through ToolDispatcher::dispatch()

IronHub: move the catalog endpoint from env var to composition-owned config

IronHub: add a key-rotation path for the catalog manifest verify key

Bundle an agent.market marketplace extension (hosted MCP, env-configurable server URL)

Hosted MCP providers cannot attribute tools/call to a caller turn (retry dedup, conversation scoping)

Profile menu shows non-functional "IronClaw" item, no way to view account details