Code

Routine creation response exposes internal implementation details

GitHub issue search and create capabilities fail with HTTP 403

Activity panel hides tool details and does not update during active run

feat: added sui support

Re-think the node upgrade process so a supported node can't silently fall out of the whitelist

Investigate why the 2026-07-03 mainnet resharing failed to conclude

Add sandbox coverage and a stub verifier for async TEE attestation

perf(agent_loop): per-turn LoopExecutionState and capability-candidate clones

perf(wasm): component linker rebuilt on every instantiation

perf(conversations): full conversation state cloned + serialized on every inbound message

perf(llm): tool schemas deep-cloned and re-normalized on every LLM request

perf(event_projections): snapshot replays event stream to head on every call — materialize run state

Slack least-privilege: reduce OAuth grant for read-only users (write opt-in)

feat(contract): shorten attestation expiry to 1 day only on verifier rotation

Slack personal OAuth: per-capability scope split (read vs chat:write opt-in)

Bridged tool disclosure + narrowed capability allowlist strips the bridge meta-tools (latent)

Wiring-parity guard: EXPECTED_PRODUCTION_SHAPE is hand-derived — add a production-side shape accessor

ci: add main CI checks staging-release promotion

ci(reborn): flip integration-tier coverage report from informational to ratchet

CI: job-level `if` skips block Railway deploys (Wait for CI)

ironclaw_reborn_identity: login seam (OAuth route → WebuiUserDirectory → resolver) is tested only with fakes on both sides

ironclaw_reborn_identity: adopt_migrated_identity never writes StoredUser and reverses the index/identity write order

ironclaw_reborn_identity: bind() has no OAuth-surface guard (defense-in-depth)

ironclaw_reborn_identity: cross-process divergent-email logins can split a principal

feat(webui): responsive provider list — mobile dropdown, desktop unchanged

reborn: retry path is unreachable for local-dev synthetic capabilities — reused input_ref fails staging check, collapsing retry contract into terminal driver_unavailable

reborn: memory prompt-context injection is unwired — ProductionMemoryPromptContextService never composed, memory_snippets always empty

CI red on main after engine-v2 removal: Docker Build missing prompts COPY + Clippy Windows unused import

Can't connect Slack from chat

chore: release