All versions since 12.62.0 (2026-08-21)

12.62.0 (2026-08-21) Latest

dev: CAT-170 correlated recovery-pass retry-cap alerts (lands #3209) (#3842) (d8fab3b)
dev: CAT-173 surface mutual fence standoffs (lands #3241) (#3839) (083e390)
dev: CAT-46 durable liveness anchor health checks (lands #3219) (#3841) (42efe53)
dev: CTL-1210 — split node config by lifecycle (cluster-secrets.json + node.json) (#3823) (8c0dc4b)
dev: CTL-1679 — recovery pass retries safe/retryable failures by default (#3835) (f594755)
dev: CTL-1958 — owner comms tools write through the cloud proxy, read from the replica; mint deleted (#3816) (cee3edf)
dev: CTL-2085 — auto-update claude CLI and Agent SDK on persistent hosts (#3817) (668c731)
dev: CTL-2151 — ask skill gains duplicate-search and blast-radius triage (#3866) (1bff497)

dev: CAT-116 — validate registry identity at dispatch revision (#3838) (5343dc1)
dev: CAT-124 close deferred recovery-pass review findings (#3836) (542d69e)
dev: CAT-139 — watchdog runner accepts an explicit —config path (#3833) (4f4c567)
dev: CAT-251 — prevent HOME-restoration leaks in tests (#3834) (bf5be52)
dev: CAT-47 commit the audit-comment dedup latch only on confirmed delivery (#3831) (5e6fee4)
dev: CTL-1550 — Bounded event-log coverage correctness (4 bugs: backfill probe, cap size, window clamp, first-line drop, per-event filter) (#3760) (d52d085)
dev: CTL-1596 — cluster secret sync hardening (5 latent bugs) (#3821) (80fd237)
dev: CTL-2052 — classify the refused proxy label-write, cool it down, and stop after N (#3815) (6069d8b)
dev: CTL-2056 — fix two fleet alarm blind spots (ratelimit-poller + escalation counter) (#3761) (fb66677)
dev: CTL-2108 — emit entitlement.restored.<host> when a shed host regains entitlement (#3840) (e6a0581)
dev: CTL-2137 — exclude listing-blocked bg sessions from the admission count (#3846) (7d8480d)
dev: trust the Tailscale MagicDNS name in the monitor’s reply-origin allowlist (#3830) (d8bde5d)