All versions since 12.59.0 (2026-08-20)

12.59.0 (2026-08-20)

dev: CTL-2000 — steward-first escalation (resolver-independent slice) (#3742) (87ca75d)
dev: CTL-2074 phase 1 — cloud-proxy identity config seam (bot.cloud.botUserId) (#3738) (bbb56cb)

dev: CTL-1754 — the escalation card read a key written on 0 of 44 live signals, so it always said “(no reason)” (#3699) (7f562b6)
dev: CTL-1851 — an SDK worker cannot outlive its daemon, so a restart is PROOF its ghost is dead (#3694) (61587c8)
dev: CTL-1889 inc 4 — a status write with no linearis stopped reporting itself applied (#3724) (741cbd5)
dev: CTL-2045 — the install proved the credential could READ, and the incident was a WRITE it never tested (#3706) (318268f)
dev: CTL-2050 — an artifact that proves a phase succeeded retracts the infra failure that buried it (#3690) (c90e30a)
dev: CTL-2068 — a claim the pipeline can overwrite is not a claim (#3712) (18d8eb9)
dev: CTL-2068 — the guard shipped INERT on mini; resolve the state map through a ladder (#3714) (f499dcb)
dev: CTL-2076 — setup_project_config preserves committed Linear identity on regen; surface the registry team-identity mismatch (CAT-52) (#3736) (ef5b0b1)
execution-core: OTL-67 — SDK-dispatched workers lose per-ticket OTEL_RESOURCE_ATTRIBUTES to settings.json pin (#3721) (4cc82ce)

dev: CTL-1785 phase 1 — entitlement seam (zero-import leaf, tri-state flag, local provider, off by default) (#3755) (cccf3b4)
dev: CTL-1786 phase 1 — lease-authority.mjs cloud client + auth-spike probe (#3756) (dcad0fe)
dev: CTL-1864 — publish slot-based active_count on node.heartbeat (#3768) (7051350)
dev: CTL-1974 — codify catalyst-dev:project-orchestrator as thin steward wrapper (#3759) (4de7a1a)
dev: CTL-1985 — catalyst enrol one-key host enrollment installer (#3758) (a903177)

execution-core: CTL-2090 — triage-capped ticket can no longer deadlock admission (#3787) (2a649dc)
execution-core: CTL-2103 — scrub PATH so the gh-unavailable test is deterministic (#3778) (be1840b)

dev: CTC-133 — CQRS fencing split + SDK replica cutover (#3762) (15450f1)
dev: CTL-1984 — re-arm claude-accounts.env without daemon restart (#3809) (b24dedc)
dev: CTL-2070 — a timely per-ticket actor source (fleet write-ledger) for the lane-claim guard (#3765) (cf9efd0)

dev: CTL-1783 — a deliberate reopen archives the stale worker dir, doesn’t get re-Done’d (#3723) (2d6ee09)
dev: CTL-2082 — refresh linear skill against linearis drift (#3750) (a93eca9)

dev: CAT-170 correlated recovery-pass retry-cap alerts (lands #3209) (#3842) (d8fab3b)
dev: CAT-173 surface mutual fence standoffs (lands #3241) (#3839) (083e390)
dev: CAT-46 durable liveness anchor health checks (lands #3219) (#3841) (42efe53)
dev: CTL-1210 — split node config by lifecycle (cluster-secrets.json + node.json) (#3823) (8c0dc4b)
dev: CTL-1679 — recovery pass retries safe/retryable failures by default (#3835) (f594755)
dev: CTL-1958 — owner comms tools write through the cloud proxy, read from the replica; mint deleted (#3816) (cee3edf)
dev: CTL-2085 — auto-update claude CLI and Agent SDK on persistent hosts (#3817) (668c731)
dev: CTL-2151 — ask skill gains duplicate-search and blast-radius triage (#3866) (1bff497)

dev: CAT-116 — validate registry identity at dispatch revision (#3838) (5343dc1)
dev: CAT-124 close deferred recovery-pass review findings (#3836) (542d69e)
dev: CAT-139 — watchdog runner accepts an explicit —config path (#3833) (4f4c567)
dev: CAT-251 — prevent HOME-restoration leaks in tests (#3834) (bf5be52)
dev: CAT-47 commit the audit-comment dedup latch only on confirmed delivery (#3831) (5e6fee4)
dev: CTL-1550 — Bounded event-log coverage correctness (4 bugs: backfill probe, cap size, window clamp, first-line drop, per-event filter) (#3760) (d52d085)
dev: CTL-1596 — cluster secret sync hardening (5 latent bugs) (#3821) (80fd237)
dev: CTL-2052 — classify the refused proxy label-write, cool it down, and stop after N (#3815) (6069d8b)
dev: CTL-2056 — fix two fleet alarm blind spots (ratelimit-poller + escalation counter) (#3761) (fb66677)
dev: CTL-2108 — emit entitlement.restored.<host> when a shed host regains entitlement (#3840) (e6a0581)
dev: CTL-2137 — exclude listing-blocked bg sessions from the admission count (#3846) (7d8480d)
dev: trust the Tailscale MagicDNS name in the monitor’s reply-origin allowlist (#3830) (d8bde5d)