Code

Configure all tools, channels, and extensions from AI chat as an Admin

Telegram voice notes and stickers fail the entire update parse (InvalidExternalRef)

Design System — Phase 2: DESIGN.md governance & guidelines

[QA] WASM guest diagnostics can expose detectable secrets through runtime, model causes, and tracing

Model budget enforcement is not wired in production — daily USD caps unenforced since #6174

fix(cli): report ignored ambient proxy settings

[QA] Failed lazy delivery recovery is not retried within a coordinator lifetime

[QA] Report host-mediated egress ignoring ambient proxy variables in operator diagnostics

fix(outbound): preserve terminal status during recovery

fix(network): disable ambient proxy discovery

fix(processes): join legacy checkpoint payloads on the state token

[QA] Concurrent coordinators can both send the same durable delivery attempt

[QA] Interrupted-delivery recovery can overwrite a concurrent Delivered status

[QA] Ambient proxy env vars bypass DNS-rebinding protection in ReqwestNetworkTransport

Time awareness without prompt-cache churn: append-only rollover context and duration evidence

feat(web): add network public key to static_web_data()

extension_manager: five pre-existing findings surfaced by the WS2.4 split (false WriteFilesystem effect, untested lock predicate, two missing dispatch tests, six dropped causes)

WS5: close the attachments row — re-word §6.4.9 to exclude the read adapter, or re-home LoopAttachmentReadPort first

Split the product_wire DTO family in ironclaw_product_contracts (large_file exemption owner)

Changed-coverage gate: steering-queue slice error paths are crate-tier-only (no integration fault injection)

Monthly issue metrics report

Compaction: summarization inference must not pollute prompt cache or session affinity

Token accounting: hybrid provider-usage + tail estimates; fix ModelWorkRequest estimating from the content reference string

Compaction: derive context budget from the actual model window instead of hardcoded 128k

Cache: regression test pinning byte-identical prompt prefix across turns

Cache: keep the advertised tool array byte-identical — defer_loading/tool_reference instead of mid-run promotion

Add `hub` as alias for the `ironhub` CLI subcommand (IronHub dashboard compatibility)

reborn-tests.yml: workflow_dispatch runs structurally fail the Tests (Reborn) roll-up (critical-mutation skipped but disallowed)

Linux service install does not enable user lingering, preventing reliable unattended operation

New account email authentication not working