garrytanandcapy-ai[bot] 67dd3449eb feat(sealed): sealed-output guard over every published commit, in the pre-push hook and gstack-pregate sealed ...

A repo with a sealed key in .gstack/pregate.json (base branch union the
pushed commit, so a push can tighten but never relax) refuses publishing
sealed paths, transcripts, quoted answers, seeds or local home paths to a
public or unknown destination (SEALED_OUTPUT_REFUSED); private warns.
Path rules see every added, renamed or copied path in each published
commit (git rev-list <local> --not --remotes=<remote>), text rules each
commit's added lines; waivers only from the base branch allow file; a
malformed policy fails closed; visibility caches public 24 h, private 1 h.

Co-authored-by: capy-ai[bot] <230910855+capy-ai[bot]@users.noreply.github.com>

2026-10-13 00:53:03 +00:00

..

code-intelligence

v1.91.11.0 refactor: one state-root rule, browse route table, shared shard engine, PTY harness split, MECE review resolvers (#3002)

2026-10-01 11:57:48 -07:00

cso

v1.91.85.0 fix(cso,deploy): /cso on Windows Git 2.56 and macOS Docker, zsh-safe loops, honest deploy stops (Wave 9 Lane D) (#3134)

2026-10-11 15:43:33 +00:00

diagram-render

v1.91.32.0 fix: Codex works from zsh, free text never enters shell commands, honest failures (#3057)

2026-10-06 23:42:19 +00:00

gate-diff

feat: honest work and gate integrity — gate-edit detector, review/ship gate pass, zero-run green, claims-need-evidence kernel (#3114)

2026-10-10 22:33:01 +00:00

pregate

feat(sealed): sealed-output guard over every published commit, in the pre-push hook and gstack-pregate sealed

2026-10-13 00:53:03 +00:00

aside-render.ts

v1.91.24.0 test: audit wave — PR evals keep finished work, honest ceilings, EVAL_POLICY v2, faster free suite (#3031)

2026-10-05 01:29:54 +00:00

autoplan-export.ts

fix(autoplan): decision ids stay unique across reopened gate revisions (#3160)

2026-10-12 16:00:01 -07:00

autoplan-gate.ts

v1.91.79.0 feat(eval-plan): /eval-plan tier 1, lane-check, evidence verify, coordinator contract, owner brief, contributor-PR mode, banned terms (multi-agent wave PR E) (#3123)

2026-10-11 03:10:06 +00:00

autoplan-phase-publication.ts

v1.87.6.0 fix: make checks reliable and everyday validation faster (#2898)

2026-09-22 14:57:52 -04:00

autoplan-prompts.ts

v1.91.79.0 feat(eval-plan): /eval-plan tier 1, lane-check, evidence verify, coordinator contract, owner brief, contributor-PR mode, banned terms (multi-agent wave PR E) (#3123)

2026-10-11 03:10:06 +00:00

autoplan-reconcile.ts

v1.91.72.0 feat(autoplan): unattended runner gstack-autoplan next|submit, pluggable outside voice, review checklists, spec-loop cap (multi-agent wave B-runner) (#3117)

2026-10-11 00:32:15 +00:00

autoplan-run.ts

v1.91.92.0 feat(outside-voice): enforce codex_reviews consent in the send binaries, codex_effort setting, privacy disclosures (Wave 9 Lane C) (#3144)

2026-10-11 19:09:12 +00:00

autoplan-state.ts

v1.91.72.0 feat(autoplan): unattended runner gstack-autoplan next|submit, pluggable outside voice, review checklists, spec-loop cap (multi-agent wave B-runner) (#3117)

2026-10-11 00:32:15 +00:00

autoplan-timing.ts

v1.91.70.0 feat(unattended): artifact contract + validator, unattended session kind, findings-derived review log, gate list (multi-agent wave B-core) (#3115)

2026-10-10 23:26:08 +00:00

banned-terms.ts

v1.91.79.0 feat(eval-plan): /eval-plan tier 1, lane-check, evidence verify, coordinator contract, owner brief, contributor-PR mode, banned terms (multi-agent wave PR E) (#3123)

2026-10-11 03:10:06 +00:00

bin-context.ts

v1.91.19.0 fix: severe fix wave (truthful gates, no lost memory, every host finds gstack) (#3025)

2026-10-04 07:58:41 -07:00

changelog-check.ts

v1.91.73.0 feat(ship): repo ship policy, gstack-restamp stamp-at-merge, tree receipt, evidence bundle, ship receipt (multi-agent wave C-stamp) (#3118)

2026-10-11 01:01:42 +00:00

ci-gate.ts

v1.91.13.0 fix: severe bug wave (autoplan guard, land-and-deploy CI gate, project identity, gbrain, review gates) (#3013)

2026-10-02 11:11:00 -07:00

claude-bin.ts

…

claude-code-migration.ts

v1.91.92.0 feat(outside-voice): enforce codex_reviews consent in the send binaries, codex_effort setting, privacy disclosures (Wave 9 Lane C) (#3144)

2026-10-11 19:09:12 +00:00

claude-code-windows-job.ts

v1.86.0.0 feat: route outside reviews by harness (#2850)

2026-09-14 14:32:45 -07:00

claude-code.ts

v1.91.45.0 feat: configurable model tiers and advisory freshness (#3073)

2026-10-08 08:00:08 +00:00

claude-journal-records.ts

v1.91.34.0 fix: /autoplan on current Claude Code and long sessions, quieter pre-push and sync guards, gstack-post, gstack-doctor (#3069)

2026-10-07 23:29:05 +00:00

claude-owned-journal.ts

v1.91.91.0 fix(review-gates): fail closed on unparsed severities, survive auto-compaction copies, read-only plan-eng-review reports back (Wave 9 Lane B) (#3143)

2026-10-11 18:16:33 +00:00

claude-public-transcript.ts

v1.91.34.0 fix: /autoplan on current Claude Code and long sessions, quieter pre-push and sync guards, gstack-post, gstack-doctor (#3069)

2026-10-07 23:29:05 +00:00

conductor-env-shim.ts

…

context-bill.ts

…

contributor-mode.ts

v1.91.79.0 feat(eval-plan): /eval-plan tier 1, lane-check, evidence verify, coordinator contract, owner brief, contributor-PR mode, banned terms (multi-agent wave PR E) (#3123)

2026-10-11 03:10:06 +00:00

coordinator-contract.ts

v1.91.79.0 feat(eval-plan): /eval-plan tier 1, lane-check, evidence verify, coordinator contract, owner brief, contributor-PR mode, banned terms (multi-agent wave PR E) (#3123)

2026-10-11 03:10:06 +00:00

design-catalog.ts

v1.84.0.0 feat: impeccable interop: detector pre-pass in four design skills, DOM-mode scans, open DESIGN.md format, one typed slop catalog (#2832)

2026-09-08 22:40:22 -07:00

design-detect-contract.ts

v1.84.0.0 feat: impeccable interop: detector pre-pass in four design skills, DOM-mode scans, open DESIGN.md format, one typed slop catalog (#2832)

2026-09-08 22:40:22 -07:00

design-md.ts

v1.91.12.0 v1.91.12.0: audit fix wave, ~11-minute paid eval lanes, eval reliability policy (#2999)

2026-10-01 13:55:16 -07:00

doctor-components.ts

v1.91.79.0 feat(eval-plan): /eval-plan tier 1, lane-check, evidence verify, coordinator contract, owner brief, contributor-PR mode, banned terms (multi-agent wave PR E) (#3123)

2026-10-11 03:10:06 +00:00

dom-dump-script.ts

v1.84.0.0 feat: impeccable interop: detector pre-pass in four design skills, DOM-mode scans, open DESIGN.md format, one typed slop catalog (#2832)

2026-09-08 22:40:22 -07:00

dom-dump.js

v1.84.0.0 feat: impeccable interop: detector pre-pass in four design skills, DOM-mode scans, open DESIGN.md format, one typed slop catalog (#2832)

2026-09-08 22:40:22 -07:00

egress-receipt.ts

v1.91.11.0 refactor: one state-root rule, browse route table, shared shard engine, PTY harness split, MECE review resolvers (#3002)

2026-10-01 11:57:48 -07:00

error-handling.ts

…

eval-model.ts

v1.90.0.0 feat: make browser cookie imports explicit and safe (#2964)

2026-09-25 12:06:45 -04:00

eval-plan.ts

v1.91.79.0 feat(eval-plan): /eval-plan tier 1, lane-check, evidence verify, coordinator contract, owner brief, contributor-PR mode, banned terms (multi-agent wave PR E) (#3123)

2026-10-11 03:10:06 +00:00

evidence-bundle.ts

v1.91.79.0 feat(eval-plan): /eval-plan tier 1, lane-check, evidence verify, coordinator contract, owner brief, contributor-PR mode, banned terms (multi-agent wave PR E) (#3123)

2026-10-11 03:10:06 +00:00

frontend-scope.ts

v1.84.0.0 feat: impeccable interop: detector pre-pass in four design skills, DOM-mode scans, open DESIGN.md format, one typed slop catalog (#2832)

2026-09-08 22:40:22 -07:00

fs-atomic.ts

v1.87.0.0 feat: add verified CSO audits and replayable repair bundles (#2852)

2026-09-14 15:14:58 -07:00

fs-utils.ts

…

gate-list.ts

fix(autoplan): decision ids stay unique across reopened gate revisions (#3160)

2026-10-12 16:00:01 -07:00

gate-outcomes.ts

v1.91.92.0 feat(outside-voice): enforce codex_reviews consent in the send binaries, codex_effort setting, privacy disclosures (Wave 9 Lane C) (#3144)

2026-10-11 19:09:12 +00:00

gbrain-exec.ts

v1.91.19.0 fix: severe fix wave (truthful gates, no lost memory, every host finds gstack) (#3025)

2026-10-04 07:58:41 -07:00

gbrain-guards.ts

…

gbrain-local-status.ts

v1.91.19.0 fix: severe fix wave (truthful gates, no lost memory, every host finds gstack) (#3025)

2026-10-04 07:58:41 -07:00

gbrain-repo-policy-client.ts

v1.91.11.0 refactor: one state-root rule, browse route table, shared shard engine, PTY harness split, MECE review resolvers (#3002)

2026-10-01 11:57:48 -07:00

gbrain-sources.ts

v1.91.19.0 fix: severe fix wave (truthful gates, no lost memory, every host finds gstack) (#3025)

2026-10-04 07:58:41 -07:00

gbrain-supabase-provision.ts

…

greptile-early.ts

v1.91.34.0 fix: /autoplan on current Claude Code and long sessions, quieter pre-push and sync guards, gstack-post, gstack-doctor (#3069)

2026-10-07 23:29:05 +00:00

gstack-decision-semantic.ts

…

gstack-decision.ts

v1.91.11.0 refactor: one state-root rule, browse route table, shared shard engine, PTY harness split, MECE review resolvers (#3002)

2026-10-01 11:57:48 -07:00

gstack-memory-helpers.ts

v1.91.13.0 fix: severe bug wave (autoplan guard, land-and-deploy CI gate, project identity, gbrain, review gates) (#3013)

2026-10-02 11:11:00 -07:00

gstack-post.ts

v1.91.34.0 fix: /autoplan on current Claude Code and long sessions, quieter pre-push and sync guards, gstack-post, gstack-doctor (#3069)

2026-10-07 23:29:05 +00:00

headless-artifacts.ts

v1.91.77.0 feat(ship): two-stage gstack-pregate, gstack-regen generated-file registry, intent-based issue links (multi-agent wave C-pregate) (#3121)

2026-10-11 01:57:16 +00:00

is-conductor.ts

…

issue-links.ts

v1.91.77.0 feat(ship): two-stage gstack-pregate, gstack-regen generated-file registry, intent-based issue links (multi-agent wave C-pregate) (#3121)

2026-10-11 01:57:16 +00:00

jsonl-store.ts

…

lane-ownership.ts

v1.91.79.0 feat(eval-plan): /eval-plan tier 1, lane-check, evidence verify, coordinator contract, owner brief, contributor-PR mode, banned terms (multi-agent wave PR E) (#3123)

2026-10-11 03:10:06 +00:00

memory-ingest-landing.ts

v1.91.19.0 fix: severe fix wave (truthful gates, no lost memory, every host finds gstack) (#3025)

2026-10-04 07:58:41 -07:00

model-catalog.ts

v1.91.92.0 feat(outside-voice): enforce codex_reviews consent in the send binaries, codex_effort setting, privacy disclosures (Wave 9 Lane C) (#3144)

2026-10-11 19:09:12 +00:00

model-policy-cli.ts

v1.91.94.0 feat(codex): --effort <level> overrides reasoning effort for one run (#3146) (#3151)

2026-10-12 13:17:02 -07:00

model-policy-freshness-github.ts

v1.91.45.0 feat: configurable model tiers and advisory freshness (#3073)

2026-10-08 08:00:08 +00:00

model-policy-freshness-parser-worker.ts

v1.91.45.0 feat: configurable model tiers and advisory freshness (#3073)

2026-10-08 08:00:08 +00:00

model-policy-freshness-publication.ts

v1.91.45.0 feat: configurable model tiers and advisory freshness (#3073)

2026-10-08 08:00:08 +00:00

model-policy-freshness-sources.ts

v1.91.45.0 feat: configurable model tiers and advisory freshness (#3073)

2026-10-08 08:00:08 +00:00

model-policy-freshness.ts

v1.91.45.0 feat: configurable model tiers and advisory freshness (#3073)

2026-10-08 08:00:08 +00:00

model-policy-notice.ts

v1.91.45.0 feat: configurable model tiers and advisory freshness (#3073)

2026-10-08 08:00:08 +00:00

model-policy.ts

v1.91.45.0 feat: configurable model tiers and advisory freshness (#3073)

2026-10-08 08:00:08 +00:00

office-hours-review.ts

v1.91.72.0 feat(autoplan): unattended runner gstack-autoplan next|submit, pluggable outside voice, review checklists, spec-loop cap (multi-agent wave B-runner) (#3117)

2026-10-11 00:32:15 +00:00

outside-consent.ts

v1.91.92.0 feat(outside-voice): enforce codex_reviews consent in the send binaries, codex_effort setting, privacy disclosures (Wave 9 Lane C) (#3144)

2026-10-11 19:09:12 +00:00

outside-review-result.ts

v1.91.91.0 fix(review-gates): fail closed on unparsed severities, survive auto-compaction copies, read-only plan-eng-review reports back (Wave 9 Lane B) (#3143)

2026-10-11 18:16:33 +00:00

outside-voice-api.ts

v1.91.72.0 feat(autoplan): unattended runner gstack-autoplan next|submit, pluggable outside voice, review checklists, spec-loop cap (multi-agent wave B-runner) (#3117)

2026-10-11 00:32:15 +00:00

outside-voice-runner.ts

v1.91.72.0 feat(autoplan): unattended runner gstack-autoplan next|submit, pluggable outside voice, review checklists, spec-loop cap (multi-agent wave B-runner) (#3117)

2026-10-11 00:32:15 +00:00

owner-brief.ts

fix(autoplan): decision ids stay unique across reopened gate revisions (#3160)

2026-10-12 16:00:01 -07:00

path-spelling.ts

v1.91.89.0 fix(windows,setup): Git Bash hook false-positive recovery, incoming-checker auto-update, setup never deletes its own checkout (Wave 9 Lane A0) (#3140)

2026-10-11 16:48:11 +00:00

plan-reality.ts

v1.91.78.0 feat(review): plan reality rows, sideways review and cso sweep, investigate recipes (multi-agent wave PR D) (#3119)

2026-10-11 02:14:23 +00:00

pricing.ts

v1.91.80.0 fix(eval-plan): price the default eval-arms tier (claude-opus-5-5, gpt-6.1-sol) (#3124)

2026-10-11 05:35:30 +00:00

qa-deadline.ts

v1.91.12.0 v1.91.12.0: audit fix wave, ~11-minute paid eval lanes, eval reliability policy (#2999)

2026-10-01 13:55:16 -07:00

qa-evidence.ts

v1.91.19.0 fix: severe fix wave (truthful gates, no lost memory, every host finds gstack) (#3025)

2026-10-04 07:58:41 -07:00

redact-audit-log.ts

v1.91.11.0 refactor: one state-root rule, browse route table, shared shard engine, PTY harness split, MECE review resolvers (#3002)

2026-10-01 11:57:48 -07:00

redact-engine.ts

v1.91.32.0 fix: Codex works from zsh, free text never enters shell commands, honest failures (#3057)

2026-10-06 23:42:19 +00:00

redact-patterns.ts

v1.91.32.0 fix: Codex works from zsh, free text never enters shell commands, honest failures (#3057)

2026-10-06 23:42:19 +00:00

regen.ts

v1.91.77.0 feat(ship): two-stage gstack-pregate, gstack-regen generated-file registry, intent-based issue links (multi-agent wave C-pregate) (#3121)

2026-10-11 01:57:16 +00:00

remote-identity.ts

v1.91.13.0 fix: severe bug wave (autoplan guard, land-and-deploy CI gate, project identity, gbrain, review gates) (#3013)

2026-10-02 11:11:00 -07:00

restamp.ts

v1.91.73.0 feat(ship): repo ship policy, gstack-restamp stamp-at-merge, tree receipt, evidence bundle, ship receipt (multi-agent wave C-stamp) (#3118)

2026-10-11 01:01:42 +00:00

result-codes.ts

feat(sealed): sealed-output guard over every published commit, in the pre-push hook and gstack-pregate sealed

2026-10-13 00:53:03 +00:00

review-evidence.ts

v1.91.70.0 feat(unattended): artifact contract + validator, unattended session kind, findings-derived review log, gate list (multi-agent wave B-core) (#3115)

2026-10-10 23:26:08 +00:00

runtime-pins.ts

v1.91.77.0 feat(ship): two-stage gstack-pregate, gstack-regen generated-file registry, intent-based issue links (multi-agent wave C-pregate) (#3121)

2026-10-11 01:57:16 +00:00

sealed-guard.ts

feat(sealed): sealed-output guard over every published commit, in the pre-push hook and gstack-pregate sealed

2026-10-13 00:53:03 +00:00

ship-policy.ts

v1.91.73.0 feat(ship): repo ship policy, gstack-restamp stamp-at-merge, tree receipt, evidence bundle, ship receipt (multi-agent wave C-stamp) (#3118)

2026-10-11 01:01:42 +00:00

ship-receipt.ts

v1.91.77.0 feat(ship): two-stage gstack-pregate, gstack-regen generated-file registry, intent-based issue links (multi-agent wave C-pregate) (#3121)

2026-10-11 01:57:16 +00:00

spec-review-cap.ts

v1.91.72.0 feat(autoplan): unattended runner gstack-autoplan next|submit, pluggable outside voice, review checklists, spec-loop cap (multi-agent wave B-runner) (#3117)

2026-10-11 00:32:15 +00:00

spend-ledger.ts

v1.91.72.0 feat(autoplan): unattended runner gstack-autoplan next|submit, pluggable outside voice, review checklists, spec-loop cap (multi-agent wave B-runner) (#3117)

2026-10-11 00:32:15 +00:00

staging-guard.ts

…

state-root.ts

v1.91.18.0 feat: Opus 5.5 cleanup follow-ups — scoped transcript consent, opt-in Claude overlay, safety-rule evals, calibrated judges (#3023)

2026-10-03 18:49:34 -07:00

tracker-guard.ts

…

transcript-consent.ts

v1.91.18.0 feat: Opus 5.5 cleanup follow-ups — scoped transcript consent, opt-in Claude overlay, safety-rule evals, calibrated judges (#3023)

2026-10-03 18:49:34 -07:00

tree-receipt.ts

v1.91.73.0 feat(ship): repo ship policy, gstack-restamp stamp-at-merge, tree receipt, evidence bundle, ship receipt (multi-agent wave C-stamp) (#3118)

2026-10-11 01:01:42 +00:00

version-source.ts

v1.91.19.0 fix: severe fix wave (truthful gates, no lost memory, every host finds gstack) (#3025)

2026-10-04 07:58:41 -07:00

worktree.ts

…