Code

feat: trait-level grant expiry enforcement + binding-store tenant-scoping (attested-signing durable-store follow-ups)

feat: non-consuming background-subagent result poll + durable parent/child index (follow-up to #4084 Gap 2)

[Security] Stop unwrapping SecretString into String on the credential path

[Security] Signer approval gate should not be Optional

Attested-signing: harden custodial-mainnet KMS fail-closed guard

Attested-signing: TrustEnrollment ceremony + connected-wallet trust registration

[tracking] Attested-signing: multi-tenant operational model (per-tenant config + key/credential lifecycle)

Improve Credit / Rate Limit Transparency and Prevent Token Consumption on Failed Requests

Feature Request: Custom Telegram API Host

[QA] Discord channel stops replying while ironclaw stays active with tokio workers pinned at 100% CPU

test(tools): CI boundary test ratcheting tool execution through the audited dispatch funnel (#4019 step 1)

Durably enforce tool-execution invariants: audited single funnel + deny-by-default config + CI boundary tests

Interactive chat tool calls bypass ToolDispatcher::dispatch (no ActionRecord audit, no channel tool-filter)

Reborn GSuite: add shim and live harness coverage

feat(signing): durable one-shot challenge store + WebAuthn verifier + fail-closed audit (attested-signing PR4/10)

[Reborn] Standalone composition root doesn't wire hooked-prompt deps (gate-ref factory / capability input resolver) under HOOKS_ENABLED

[hooks] SecurityAuditSink adoption at remaining boundary call sites

[hooks] Third-party activation hardening follow-ups (#3951/#3934)

[hooks] FS-hardening follow-up: RESOLVE_NO_XDEV bind-mount containment

Rename CLAUDE.md to something more semantic

RFC: Add canonical OpenAPI/AsyncAPI contracts for Gateway, WebUI, and event surfaces

[QA] `select_archive_for_arch()` and `download_binary_and_run_installer()` functions are brokwn in installer script for macOS/Linux since 0.26, a month ago

test(arch): assert production composition populates security audit/gate seams (maintainability guardrail)

Harden LocalFilesystem: honor CAS::Absent + durable writes (atomic rename + fsync)

Pattern: default-to-no-op guardrails get silently bypassed (3 instances across reborn-integration PRs)

subagent E2E §5.2: blocking spawn parent recovers after child completion

[Question] Mission notify_channels inherit selected conversation source in Web UI Chat

Improve channel badges in Web UI conversation list

Failed Mission “Retry” button calls fire endpoint but returns fired:false

Thread::restore_from_messages drops orphan assistant rows, preventing out-of-band context injection