Code

feat(signing): Ledger clear-signing product — intent, review, ceremony, sidecar (8/8)

perf optimization: skip peer height approval verification when the height cannot trigger sync

Third-party skills still trip the prompt content denylist on 1.0.0: "API key" in a description kills every run (follow-up to #5169 / #5258)

feat(signing): multi-tenant isolation, trust registration, KMS ship-gate (7/8)

Add mobile app companion and EAS update config

feat(signing): provider registration + request_signature gate raise (6/8)

feat(signing): durable PostgreSQL + libSQL attested stores (5/8)

NetworkTargetPattern: neither host-pattern validator is enforced at the type level

Agent deployment fails with sysbox-mgr connection refused

Prove delivery guards, per-automation target isolation, and final-result selection end to end

Migrate Slack to canonical messaging operations and retire compatibility aliases

Release-gate Telegram pairing, delivery, attachments, and commands

Release-gate native and mem0 provider conformance, storage parity, and migration readiness

Cut over extension lifecycle callers to normalized state and define legacy retirement

Standardize agent-facing outbound messaging tool names and operation contracts

Thread a provider-supplied Retry-After onto the capability failure channel

Restart during pending Codex device authorization blocks WebUI and hides recovery code

[QA] provider_id="gemini" 400s on every tool call — builtin tool schemas ship empty "type" to functionDeclarations

Daily ironclaw failure taxonomy — 2026-07-28

refactor(contract): drop fail_attestation_submission now that the deposit is gone

Hosted-MCP: discovered tool catalogs are published per extension id, not per installation — cross-user metadata exposure on multi-principal servers

Document Gmail terminal-based setup steps in Extensions > Registry UI

Gmail OAuth popup disappears instantly when setting up via WebUI Extensions > Registry

feat(signing): attested signer-continuation runtime + composition seam (4/8)

IronHub CLI: route actions through ToolDispatcher::dispatch()

IronHub: move the catalog endpoint from env var to composition-owned config

IronHub: add a key-rotation path for the catalog manifest verify key

Bundle an agent.market marketplace extension (hosted MCP, env-configurable server URL)

Hosted MCP providers cannot attribute tools/call to a caller turn (retry dedup, conversation scoping)

feat(signing): external wallet providers — injected, NEAR redirect, WalletConnect (3/8)