v0.9.42

What's Changed

• feat(console): explore + filter network machines by agent version by @DGaffney in #169
• fix: stop showing live machines as "not reachable" when the boot publish fails by @DGaffney in #173
• Brokerage attestation authority + soft-cutover hardening (ADR-0003, ADR-0004) by @DGaffney in #174

Full Changelog: v0.9.41...v0.9.42

v0.9.41

What's Changed

• fix: honest status surfacing while a machine downloads its models by @DGaffney in #170
• Remote diagnosability for advisor-unreachable machines (advisorFault) by @DGaffney in #171
• fix: tool-aware dispatch + DWQ tool-call parser pairing (#166) by @DGaffney in #172

Full Changelog: v0.9.40...v0.9.41

v0.9.40

What's Changed

• fix(console): repair SSRF image-fetch pin for node Happy-Eyeballs by @DGaffney in #165
• fix: patch the field failures surfaced by the 2026-07-03 bug-report triage by @DGaffney in #168

Full Changelog: v0.9.39...v0.9.40

v0.9.39

What's Changed

• security: fix follow-up audit must-fix set (SSRF criticals, getServiceAuth, exchange input validation) by @DGaffney in #162
• fix(installer): stop PlistBuddy error text leaking into LaunchAgent plist by @DGaffney in #163

Full Changelog: v0.9.38...v0.9.39

v0.9.38

What's Changed

• fix: stop false "session expired" banner + make re-auth actually work by @DGaffney in #156

Full Changelog: v0.9.37...v0.9.38

v0.9.37

What's Changed

• fix(console): recognize no-mda-chain as a hardware-attestation blocker by @rchowe in #154
• security: remediate 2026-07-01 adversarial audit (28 findings) by @DGaffney in #155

Full Changelog: v0.9.36...v0.9.37

v0.9.36

What's Changed

• fix(settlement): make settlement resilient to relay/mirror/session failure by @DGaffney in #142
• feat(exchange): app-password session for direct PDS writes (no OAuth re-auth) by @DGaffney in #143
• fix(exchange): drop TS parameter properties (AppView crash-loop under strip-only types) by @DGaffney in #144
• fix(settlement): strip $type before verifying receipt signatures + targeted backfill by @DGaffney in #145
• Remove unservable Gemma 4 E4B from the recommended model rotation by @DGaffney in #146
• fix(settlement): reconcile attestation selfSignature signed-vs-stored divergence by @DGaffney in #147
• feat(scripts): cross-PDS settlement-backlog audit by @DGaffney in #148
• docs(security): calibrate confidential-tier claims to the actual posture by @DGaffney in #149
• feat: per-machine tool-calling toggle for top models by @DGaffney in #150
• fix: bind confidential/attested routing to the serving machine by @DGaffney in #151
• docs(copy): frame attestation, confidential tier & credits as experimental by @DGaffney in #152
• feat(models): complete Qwen3.5 recommended family by @ApexDevelopment in #153

New Contributors

• @ApexDevelopment made their first contribution in #153

Full Changelog: v0.9.35...v0.9.36

v0.9.35

What's Changed

• Follow-up: stream tool calls with correct finish reason by @tijs in #139
• fix(subprocess): don't abort tool-call streams on slow first token (#133) by @DGaffney in #137
• chore(release): bump version to 0.9.35 by @DGaffney in #140

New Contributors

• @tijs made their first contribution in #139

Full Changelog: v0.9.34...v0.9.35

v0.9.34

What's Changed

• fix(native-mlx): stop on chat-turn delimiters (runaway <end_of_turn>) by @DGaffney in #135
• chore(release): bump version to 0.9.34 by @DGaffney in #136

Full Changelog: v0.9.33...v0.9.34

v0.9.33

What's Changed

• feat(inference): expose & document min_provider_version on the OpenAI API by @DGaffney in #128
• feat(release): auto-register the confidential cdHash on Railway by @DGaffney in #129
• fix(secure-mode): don't show a false "enabled" screen when not attested by @DGaffney in #130
• fix(secure-mode): treat "device not yet in NanoMDM" enqueue 500 as pending, not a failure by @DGaffney in #131
• fix(sync): single CAS transactor for provider-record settings by @DGaffney in #132
• chore(release): bump version to 0.9.33 by @DGaffney in #134

Full Changelog: v0.9.32...v0.9.33