Code

ci: add main CI checks staging-release promotion

ci(reborn): flip integration-tier coverage report from informational to ratchet

CI: job-level `if` skips block Railway deploys (Wait for CI)

ironclaw_reborn_identity: login seam (OAuth route → WebuiUserDirectory → resolver) is tested only with fakes on both sides

ironclaw_reborn_identity: adopt_migrated_identity never writes StoredUser and reverses the index/identity write order

ironclaw_reborn_identity: bind() has no OAuth-surface guard (defense-in-depth)

ironclaw_reborn_identity: cross-process divergent-email logins can split a principal

feat(webui): responsive provider list — mobile dropdown, desktop unchanged

reborn: retry path is unreachable for local-dev synthetic capabilities — reused input_ref fails staging check, collapsing retry contract into terminal driver_unavailable

reborn: memory prompt-context injection is unwired — ProductionMemoryPromptContextService never composed, memory_snippets always empty

CI red on main after engine-v2 removal: Docker Build missing prompts COPY + Clippy Windows unused import

Can't connect Slack from chat

chore: release

Daily ironclaw failure taxonomy — 2026-07-03

reborn: force_compact_on_next_iteration is a dead letter — ActiveTaskPreservingCompactionStrategy never reads the overflow flag

reborn: skill trust ceiling (attenuate_tools) never ported — Installed skills do not narrow the tool surface

feat(reborn): Slack personal OAuth + move credentials to UI setup

feat(reborn): stable OAuth auth-relay callback so every PR preview can test Google SSO

Vision model hallucinates image contents and accepts false user corrections

Approval notifications disappear instead of remaining in notification history

Automation posts intermediate progress message to Slack instead of final result

Daily ironclaw failure taxonomy — 2026-07-02

feat(multi-agent): recursive multi-agent runtime with real LLM, explicit parallelism, and polished CLI

feat(reborn): admin UI for tenant-shared tool credentials (#5459 part 1b)

WASM credential provider re-derives injection eligibility from manifest instead of consulting authorizer's Decision.obligations

[QA] Slack bot redirects to WebUI instead of delivering result

Daily ironclaw failure taxonomy — 2026-07-01

ci(reborn): unify Reborn crate-family allowlist across reborn-tests.yml and reborn-coverage-summary.sh

[QA] Reborn runs fail with "could not start agent runtime" / "runner lease expired" under turn-state CAS contention + model latency

Resource CAS writes serialize behind single AsyncStorageWorker — make ResourceGovernorStore async