A community bug-fix wave plus a test-gate that finally sees the questions it was missing.
- six credential patterns in the redaction engine
- ask-first scope gate in /plan-eng-review and /plan-design-review
- /ship owns the pre-push guard install
- gbrain stopped force-enabling GBRAIN_PREPARE on transaction-mode poolers
- gbrain probe that exceeds its deadline now classifies as timeout status
- security and community dashboards now surface backend errors as unknown — backend error instead of reporting fake 0
- telemetry error_message passes through the redaction engine at log time
- Windows git-bash bins resolve their imports by cygpath-normalizing $SCRIPT_DIR
- gstack-question-log shares the audited injection-pattern list
- pre-push guard fails closed when the diff cannot be computed
- PTY plan-mode smokes now detect rendered AskUserQuestion even when stripAnsi collapses the option lines
- ios-qa E2E isolated under bun test --concurrent
gbrain writes survive transaction-mode poolers, the redaction engine learns six more secret shapes, dashboards stop lying about zero, and the plan-review smokes detect asks the harness was blind to.
Two things ship here. First, the high-priority community bug wave: gbrain stopped force-enabling GBRAIN_PREPARE on transaction-mode poolers, a slow-but-healthy probe now classifies as timeout and lets sync proceed instead of silently skipping, the redaction engine gained six credential patterns, telemetry error_message runs through redaction before it leaves the machine, both the security and community dashboards stop reporting a fake 0 when the backend errors, and the Windows git-bash bins resolve their imports.
Second, the plan-mode test gate: the real-PTY smokes for /plan-eng-review, /plan-design-review, and /office-hours were timing out on questions the skills had already rendered, because the terminal strips the cursor escapes that lay out the options.
A new collapsed-form detector catches the ask in any render, the Haiku state-judge stops coin-flipping on a leftover spinner, and /plan-eng-review + /plan-design-review now confirm what to review before grinding a full audit on an empty repo.
Fixed: gbrain on transaction-mode poolers - removed the forced GBRAIN_PREPARE=true.
Fixed: gbrain probe timeout - a probe that exceeds its deadline classifies as its own timeout status.
Fixed: Security + community dashboards - backend errors now surface as "unknown — backend error".
Fixed: Telemetry - error_message passes through the redaction engine at log time.
Fixed: Windows git-bash - cygpath-normalize $SCRIPT_DIR.
Fixed: gstack-question-log shares the audited injection-pattern list.
Fixed: Pre-push guard fails closed when the diff cannot be computed.
Fixed: PTY plan-mode smokes - the harness detects a rendered AskUserQuestion even when stripAnsi collapses the option lines.
Fixed: ios-qa E2E isolated under bun test --concurrent.
Added: Six credential patterns in the redaction engine.
Added: Ask-first scope gate in /plan-eng-review and /plan-design-review.
Added: /ship owns the pre-push guard install.