Plan reviews ask their questions again, the OSV lane is green from 105 advisories, and 18 community fixes land with credit.
- The diagram-render bundle size reduced from 9.96 MB to 7.59 MB by removing duplicate mermaid
- The upgrade path can no longer delete your install
- The weekly periodic eval lane broke at v1.76 where the spawned-session rule let the model infer "nobody is reading this" from any scripted-looking prompt and silently auto-decide every review question; the trigger is now machine-verifiable based only on the preamble's echoed SESSION_KIND: spawned status line
- The weekly OSV lane had been red for three weeks with 105 advisories due to a wrong filename for auto-discovery and per-directory configs not covering nested lockfiles; the workflow now passes an explicit global --config with dependency bumps and overrides that reach nested exact pins
- A failed mktemp in the vendored upgrade path used to rm -rf your install's backup after a failed swap; the swap now aborts loudly and restores the backup
- AskUserQuestion spawned-trigger objectivity regression in periodic-lane
- mktemp guards at all three skill-content sites
- A slow gbrain --version probe classifies as timeout, never no-cli
- codex skill: unclosed consult-mode fence, turn.failed reported as a failure, portable exit-code capture
- Outside-voice fallback labeled honestly
- skill_prefix works under a gbrain render
- Rendered section paths survive the atomic swap
- Persistent timeline Stop hook opt-out
- browse: macOS headless GPU spin tamed and the lock-less headless Chromium is reaped on stop
- gstack-wtree: a failed touch falls through to the HEAD seed
- Large gstack-redact reports survive a piped consumer
From gstack
The upgrade path can no longer delete your install. The fix wave. The weekly periodic eval lane broke at v1.76: the spawned-session rule let the model infer "nobody is reading this" from any scripted-looking prompt and silently auto-decide every review question, so plan reviews stopped asking. reviewCount collapsed to 0 across four skills. The trigger is now machine-verifiable and nothing else: the preamble's own echoed SESSION_KIND: spawned status line. No text from a dispatch prompt, file, or page can flip a session to auto-choose; a spawned subagent that missed the env marker is still caught at failure time by the AUQ hooks' spawned escape. The reproduced failure went from 0 review questions to a full question flow on the same harness. The weekly OSV lane had been red for three weeks with 105 advisories, and its suppression file had been silently inert since v1.65 (wrong filename for auto-discovery, and per-directory configs never covered the nested lockfile anyway). The workflow now passes an explicit global --config, a dependency pass cleared 102 advisories through in-range bumps and overrides that actually reach nested exact pins, and the 3 survivors carry reasons plus ignoreUntil expiries. The diagram-render bundle lost its duplicate mermaid on the way: 9.96 MB to 7.59 MB. Eighteen community PRs are absorbed with authorship preserved, twelve of them with wave amendments that finish a gap or fix a defect found in review. Nine more confirmed bugs are fixed directly, led by #2679: a failed mktemp in the vendored upgrade path used to rm -rf your install's backup after a failed swap. The swap now aborts loudly and restores the backup. AskUserQuestion spawned-trigger objectivity (periodic-lane regression). mktemp guards at all three skill-content sites (#2679). OSV lane green (supersedes #2695). A slow gbrain --version probe classifies as timeout, never no-cli (#2716). codex skill: unclosed consult-mode fence, turn.failed reported as a failure, portable exit-code capture (#2671, #2669). Outside-voice fallback labeled honestly (#2735). skill_prefix works under a gbrain render (#2738). Rendered section paths survive the atomic swap (#2692). Persistent timeline Stop hook opt-out (#2677). browse: macOS headless GPU spin tamed + the lock-less headless Chromium is reaped on stop (#2709). gstack-wtree: a failed touch falls through to the HEAD seed (#2687 hardening). Large gstack-redact reports survive a piped consumer.