chore(release): cut orb-v3.0.0

[github-actions]

Proposes cutting orb-v3.0.0 (a major release) from the current
stable release orb-v2.0.0.

Merging this PR tags orb-v3.0.0 and dispatches the image build/publish --
which still requires a release environment approval before anything reaches GHCR (see
.github/workflows/release-selfhost.yml). The daily beta channel is unaffected either way.

Image-relevant commits since the last stable release

• feat(gate): configurable advisory check-runs so a stuck external status never freezes the gate (feat(gate): configurable advisory check-runs so a non-resolving external status never blocks or stalls the gate forever #4372) (3175d74)
• test(gate): pin the advisory-hold cache-invalidation guarantee end-to-end (feat(gate): configurable advisory check-runs so a non-resolving external status never blocks or stalls the gate forever #4372) (1b33341)
• feat(review): add OpenAI and Anthropic API key patterns to secret scan (6a8cc67)
• fix(rebrand): rename gittensory-repo-focus-manifest.ts module (6b5b020)
• feat(mcp): expose skipped-PR audit trail as a maintainer MCP tool (6e059b0)
• feat(mcp): expose repo registration readiness as a read-only MCP tool (f7266c4)
• fix(review): treat a blank consentPhrase as unset in evaluateClaCheck (fix(review): evaluateClaCheck treats an empty-string consentPhrase as unconditionally satisfied #5838) (0a10fcb)
• fix(review): sanitize control characters in RAG chunk text before Postgres insert (2afe341)
• fix(selfhost): preserve stack traces and split fingerprints for RAG/enrichment Sentry captures (02ed1ff)
• fix(review): scan added lines whose content starts with ++ for secrets (fix(review): stale +++ file-header guard in scanDiffForSecretsWithLocations bypasses secret scanning on added lines starting with ++ #5942) (fix(review): scan added lines whose content starts with ++ for secrets #5952) (fe331a9)
• fix(signals): filter public-unsafe wantedPaths/preferredLabels from manifest findings (fix(signals): filter public-unsafe wantedPaths/preferredLabels from manifest findings #5967) (4076df1)
• fix(queue): scan patch-less copied/changed/unchanged files for secrets (fix(queue): shouldAttemptPatchLessSecretScan silently skips copied/changed/unchanged file statuses, bypassing the fail-closed secret scan guarantee #5947) (fix(queue): scan patch-less copied/changed/unchanged files for secret scan #5951) (49883fa)
• feat(selfhost): warn loudly when the private config mount is empty (6b97ffe)
• fix(review): apply the prompt-injection reputation override before the minSample guard (fix(review): apply the prompt-injection reputation override before the minSample guard #5975) (ac83483)
• fix(review): hash a JSON payload in linkedIssueSatisfactionCacheInputFingerprint (fix(review): hash a JSON payload to prevent linked-issue-satisfaction cache-key collisions #5976) (68fac24)
• fix(selfhost): give structural AI-provider config errors a long circuit-breaker cooldown (c5940b7)
• fix(selfhost): instrument the silent orb-relay-drain reentrancy skip (dd4addb)
• fix(signals): filter wantedPaths before interpolating focus-area PR guidance (fix(signals): filter wantedPaths before interpolating focus-area PR guidance #5987) (46581d7)
• fix(review): fold repo into ops_anomaly's Sentry fingerprint (def4205)
• fix(signals): make blockers explain every not-ready registration report (fix(signals): buildRegistrationReadiness can return ready:false with an empty blockers array #5946) (55cd8da)
• fix(selfhost): attach a pg.Pool error listener to prevent uncaught-exception crashes (592fdc8)
• fix(review): make size-gate file/line thresholds configurable (df54527)
• feat(review): wire the copycat containment engine into the gate (feat(review): wire the copycat containment engine into the gate #5999) (9c5a6e0)
• fix(review): give LOOPOVER_DUPLICATE_WINNER a per-repo config override (39cdc9f)
• fix(queue): log unrecognized job types in processJob instead of dropping silently (fix(queue): processJob silently drops unrecognized job types with no default case or logging #5836) (42853bd)
• fix(signals): flag the .at(-1)/.at(0) idiom in boundary-test-generation (fix(signals): flag the .at(-1)/.at(0) idiom in boundary-test-generation #6006) (3db64d8)
• fix(orb): close 5 silent-failure and missing-timeout gaps in the ORB subsystem (b490199)
• fix(orb): use String(error) instead of an untested instanceof-Error ternary (de97a73)
• fix(review): add missing duplicationDelta to REES_ANALYZER_NAMES (fix(review): add missing duplicationDelta to REES_ANALYZER_NAMES #6009) (f4e327a)
• feat(mcp): expose .loopover.yml config recommendations as a read-only MCP tool (feat(mcp): expose .loopover.yml config recommendations as a read-only MCP tool #6016) (3912e7d)
• fix(review): give LOOPOVER_OPEN_PR_FILE_COLLISION a per-repo config override (d3bf13b)
• fix(review): honor ContentRepoSpec.urlFields in directory-index synthesis (fix(review): honor ContentRepoSpec.urlFields in directory-index synthesis #6018) (018b713)
• fix(signals): carry labelPolicy.note through focusManifestPolicyToCompilerOutput (fix(signals): carry labelPolicy.note through focusManifestPolicyToCompilerOutput #6020) (79bfa91)
• feat(orb): wire Sentry into the Cloudflare Worker (central ORB broker) (f8d4a16)
• fix(orb): v8-ignore the Worker-runtime-only Sentry middleware branch (9597167)
• fix(review): preserve lockfile-tamper entry tracking across nested dependencies (fix(review): lockfile-tamper check loses entry tracking across a nested dependencies sub-object, evadable by key reordering #5837) (fix(review): preserve lockfile-tamper entry tracking across nested dependencies (#5837) #6038) (497505c)
• fix(docs): sweep remaining gittensory-* rename residue in self-host ops docs (fix(docs): sweep remaining gittensory-* rename residue in self-host ops docs #6044) (fcedc47)
• fix: bound duplicate-sibling live GitHub fetch concurrency (fix(queue): reconcileLiveDuplicateSiblings fans out unbounded GitHub fetches per duplicate-cluster sibling #5835) (fix(queue): cap duplicate-sibling live GitHub fetch concurrency (#5835) #6049) (cef9795)
• fix(config): warn on unknown top-level fields in the focus-manifest validator (fix(config): warn on unknown top-level fields in the focus-manifest validator #6075) (e3957da)
• fix(review): close draft-conversion evasion after review publishes, not just mid-review (8843bfa)
• fix(orb): add per-row identifying context to relay bulk-delete drop logs (1c25803)
• review: drop redundant banner + demote readiness chip off-ready (review: drop redundant banner + demote readiness chip off-ready #6077) (889123b)
• fix(webhook): recognize full GitHub issue URL in closing keywords (0760e1f)
• review: collapse the signal table into decision drivers + advisory fold (2e7e3e2)
• review: wire per-blocker AI fix-context, CodeRabbit-style (c1f0695)
• review: aggregate comment-size budget guard (cd05d7f)
• fix(webhook): don't trust a sparse first-ever sync as confirmed no linked issue (0ad33b7)
• docs(selfhost): document ams-observability and backup in the compose PROFILES header (chore(selfhost): docker-compose.yml PROFILES header is missing ams-observability and backup #5812) (docs(selfhost): document ams-observability and backup in the compose PROFILES header #6109) (b2df9a1)
• docs(api): add operation-level summaries to all OpenAPI routes (docs(api): add operation-level summary/description to all 78 OpenAPI routes #5810) (docs(api): add operation-level summaries to all OpenAPI routes #6111) (70d46de)
• fix(signals): sync extension overlay redaction with canonical PUBLIC_UNSAFE_TERMS (fix(signals): sync extension overlay redaction with canonical PUBLIC_UNSAFE_TERMS #6119) (d3bc79e)
• fix(queue): close self-close review-evasion after publish, not just mid-review (1d3e1a9)
• perf(queue): fetch copycat candidate files concurrently, not sequentially (daf9440)
• feat(auth): persist the GitHub user-to-server token from login (b974e10)
• review: remove the legacy comment renderer (buildPublicPrIntelligenceComment) (061bec7)
• feat(selfhost): add real end-to-end review-latency metric (ced563d)
• fix: renumber migration to 0154 (0153 claimed by feat(auth): persist the GitHub user-to-server token from login #6125 on main) (f0e960b)
• feat(auth): refresh the session's GitHub token near/past its 8h expiry (a47574a)
• fix: renumber migration to 0155 (0154 was claimed by a concurrent merge) (3db50f3)
• review: unwind the retired unifiedComment feature key (review: remove the legacy comment renderer (buildPublicPrIntelligenceComment) #6103 follow-up) (362a615)
• fix(auth): rate-limit the GitHub token-retrieval endpoint by session, not IP (4442153)
• feat(grafana): add additive maintainer review event panels (4e0113d)
• fix(auth): rate-limit /v1/auth/extension/session by session, not IP (11b3bab)
• fix(github): only swallow 404 in removePullRequestLabel (fix(github): removePullRequestLabel swallows every error, not just the documented 404 #6192) (ea2c0ea)
• refactor(settings): converge 4 duplicated settings files onto their loopover-engine shims (refactor(settings): converge 4 duplicated settings files onto their loopover-engine shims #6201) (74a79be)
• fix(settings): parse PROTECTED_AUTOCLOSE_AUTHORS_EXTRA via the shared login-list parser (#audit-3.13) (fix(settings): parse PROTECTED_AUTOCLOSE_AUTHORS_EXTRA via the shared login-list parser (#audit-3.13) #6214) (2ff4179)
• feat(api): expose self-tune override audit and clear routes (feat(review): expose self-tune override admin operations (sanitizeOverridePayload/deleteLiveOverride/listOverrideAudit) via a real route #6168) (feat(api): expose self-tune override audit and clear routes (#6168) #6215) (73b773c)
• fix(queue): honor autoCloseExemptLogins in the repeated-draft-cycling review-evasion guard (fix(queue): honor autoCloseExemptLogins in the repeated-draft-cycling review-evasion guard #6217) (b326745)
• feat(api): wire internal decision/calibration routes, drop duplicate handleParity (feat(api): wire internal decision/calibration routes, drop duplicate handleParity #6216) (00c14a5)
• chore(signals): remove dead deriveContributionLanes superseded by onboarding-pack's contribution-lane model (chore(signals): remove dead deriveContributionLanes superseded by onboarding-pack's contribution-lane model #6220) (df239aa)
• chore(review): remove dead isIgnoredReviewAuthor wrapper (zero callers, thinly wraps decideReviewEligibility) (chore(review): remove dead isIgnoredReviewAuthor wrapper (zero callers, thinly wraps decideReviewEligibility) #6223) (2ce37a3)
• docs(review): stop claiming the self-improve D1 tables don't exist (docs(review): stop claiming the self-improve D1 tables don't exist #6232) (c026c33)
• fix(github): retry label and assignee writes on stale installation tokens (c269e3f)
• feat(review): expose a repo's effective self-tuned gate thresholds via a read-only endpoint (0e41e53)
• feat(selfhost): give sweep-watchdog and PR-reconciliation a per-repo opt-out (b30d9fc)
• docs(db): guardrail listInstallations/listRepositories against tenant-facing misuse (Cross-tenant data-isolation audit #4797) (docs(db): guardrail listInstallations/listRepositories against tenant-facing misuse #6328) (bff3772)
• fix(review): exclude bare .ts app-source files from isVisualPath (fix(review): exclude bare .ts app-source files from isVisualPath #6330) (b88b319)
• feat(registry): add subnet-funded pool association to the repo model (Extend the repo-registry data model to support subnet-funded pool association #6320) (feat(registry): add subnet-funded pool association to the repo model (#6320) #6333) (7e57c5c)
• fix(review): make the visual-preview poll budget durable per head SHA (fix(review): make the visual-preview poll budget durable per head SHA #6335) (532c715)
• fix: resolve silent degrade when a configured _FILE secret is unreadable (fix(selfhost): fail fast when a configured _FILE secret is unreadable #6337) (820def1)
• feat(review): add a visible caption under each Visual/Scroll preview thumbnail (feat(review): add a visible caption under each Visual/Scroll preview thumbnail #6341) (87ce263)
• fix(selfhost): log blob-store path-traversal gets distinctly from misses (fix(selfhost): log blob-store path-traversal gets distinctly from misses #6343) (88953e8)
• feat(review): downscale desktop Visual-preview thumbnails in self-host mode (ed166ab)
• fix(selfhost): route boot-time advisories through console.error so Sentry can see them (c345711)
• chore(selfhost): remove dead nonConsumingRetryDelayMs export (chore(selfhost): remove dead nonConsumingRetryDelayMs export #6357) (6870c87)
• fix(selfhost): move Sentry init before emptyConfigDirAdvisory so it can alert too (01e8cad)
• fix(selfhost): fail open with a metric on a token-cache Redis error (fix(selfhost): fail open with a metric on a token-cache Redis error #6364) (0c18914)
• docs(selfhost): describe what the starters actually ship for critical secrets (docs(selfhost): describe what the starters actually ship for critical secrets #6365) (0b0f451)
• feat(loopover)!: full production cutover to loopover.ai, retire gittensory.aethereal.dev routes (71151ff)
• feat(review): give LOOPOVER_REVIEW_PLANNER a per-repo config override (73eb87d)
• fix(selfhost): raise ollama's default batch size to match bge-m3's context window (b0ebc16)
• feat(selfhost): make LOOPOVER_REVIEW_OPS and LOOPOVER_PUBLIC_STATS .loopover.yml-controllable (bc2f899)
• fix(review): cache the ops/public-stats manifest override for 60s (fe1b96a)
• fix(db): order pull-request list queries deterministically (1809b82)
• fix(selfhost): guard pg-adapter's rollback so it can't mask the original batch error (fix(selfhost): guard pg-adapter's rollback so it can't mask the original batch error #6392) (e73f163)
• feat(selfhost): make LOOPOVER_REVIEW_DRAFT and LOOPOVER_AUTO_FILE_DRIFT_ISSUES .loopover.yml-controllable (0d3f4cb)
• fix(api): open the public no-credential routes to any CORS origin (7f84431)
• fix(db): persist GitHub's real PR creation time into pull_requests.createdAt (198c354)
• chore(signals): converge change-guardrail.ts and preflight-limits.ts onto their @loopover/engine shims (9ebf953)
• chore(engine): remove dead isDuplicateClusterWinner (chore(engine): remove dead isDuplicateClusterWinner (its own @deprecated comment describes callers that don't exist) #6172) (f4dee3e)
• feat(mcp): validate .loopover.yml offline by extracting buildFocusManifestValidation into @loopover/engine (feat(mcp): validate .loopover.yml offline by extracting buildFocusManifestValidation into @loopover/engine #6425) (22faecf)
• chore(review): converge 9 hand-duplicated src/review/ files onto their @loopover/engine shims (chore(review): converge 9 hand-duplicated src/review/ files onto their @loopover/engine shims #6437) (4c902c4)
• fix(review): correct linked-issue claim, hard-rule, and draft-cycling bugs (980ec13)
• fix(review): wire live-gate slop commits, screenshot advisory, rate-limit scope (27bf794)
• fix(review): close three auto-apply override safety gaps (31814db)
• fix(review): defang prompt injection in RAG-retrieved reference context (3e1dbb7)
• fix(review): close cohort/score gaps in public-comment sanitizers (b2c66d7)
• fix(review): fingerprint the PR body in the AI-review cache key (a28078d)
• fix(review): honor selftune opt-out and revoked autonomy in override read-back (063399f)
• fix(review): pin expectedHeadSha on contributor_cap close action (1f0587d)
• fix(review): correlate screenshot-table presence-mode evidence to the PR head SHA (8c5230a)
• feat(review): add an opt-in draft-PR close policy to stop bot-review farming (cbb93f3)
• fix(settings): give loopover its own autonomy config-as-code (feat(agent): autonomy-levels framework (observe→…→auto) #773) (fa1aaf2)
• fix(review): give score-breakdown.ts its own curated vocabulary (8ab1270)
• fix(db): renumber colliding migration 0156 to 0157 (72c3a86)
• fix(db): grandfather the 0156 migration-number collision (56a3391)
• fix(settings): restore draftPrClosePolicy after it was dropped by the autonomy config-as-code PR (530ecdc)
• fix(ci): repair two functional breaks left by the gittensory->loopover rename (2188088)
• feat(orb): export a signed, anonymized federated calibration bundle (opt-in) (feat(orb): export a signed, anonymized federated calibration bundle (opt-in) #6505) (53ce7b2)
• fix(config): scrub remaining pre-rename gittensory references (e4b0f8c)
• feat(orb): add the opt-in federated collector transport client (push/pull) (feat(orb): add the opt-in federated collector transport client (push/pull) #6537) (8ab3472)
• refactor(settings): drop Batch A's 9 config-as-code-only DB columns (2518a16)
• feat(review): add AMS live-gate-thresholds read endpoint (feat(review): add AMS live-gate-thresholds read endpoint #6553) (e066a90)
• fix(api): stop echoing checkRunMode from the one-click activation response (3df011f)
• feat(review): bridge a submitter's AMS track record into ORB reputation, upgrade-only (feat(review): bridge a submitter's AMS track record into ORB reputation, upgrade-only #6566) (97a1938)
• feat(selfhost): make LOOPOVER_SWEEP_WATCHDOG and LOOPOVER_PR_RECONCILIATION .loopover.yml-controllable (7ca394a)
• fix(db): un-renumber migration 0156, close the gap at 0157 (f8a40d3)
• feat(review): schedule fleet escalation sweep with Discord notify (feat(review): schedule fleet escalation sweep with Discord notify #6584) (f1c62e1)
• refactor(settings): drop Batch B's 15 config-as-code-only DB columns (2b2dcca)
• feat(ui): add AMS-vs-human contributor-mix maintainer dashboard panel (feat(ui): add AMS-vs-human contributor-mix maintainer dashboard panel #6590) (758e543)
• fix(auth): send the canonical PRODUCT_USER_AGENT from github-oauth.ts (31a6a79)
• fix(config): migrate badgeEnabled/publicQualityMetrics off the DB (d8c58e0)
• fix(review): trim whitespace on three truthy env flag checks (7d9217e)
• fix(github): reject a malformed three-segment repoFullName in comments.ts (fix(github): reject a malformed three-segment repoFullName in comments.ts #6640) (cb54894)
• docs(selfhost): document the GPU-reservation force-recreate gotcha for ollama (38f7f65)
• fix(github): resolve GraphQL cache TTL per cache class (e8d4834)
• feat(orb): trust-gate inbound federated bundles per the Design: trust-gating/anti-poisoning scoring rules for federated signal-bundle import #6477 key-trust design (feat(orb): trust-gate inbound federated bundles per the #6477 key-trust design #6649) (729254a)
• refactor(signals): reuse slop.ts's canonical clamp in improvement.ts (refactor(signals): reuse slop.ts's canonical clamp in improvement.ts #6643) (176406f)
• feat(config): make sweepWatchdog staleness threshold configurable (config-as-code: sweep-watchdog staleness threshold is hardcoded, unlike its own enabled flag #6594) (feat(config): make sweepWatchdog staleness threshold configurable (#6594) #6639) (0e313c8)
• fix(agent-actions): cancel in-flight CI on a blacklist close too (fix(anti-abuse): cancel in-flight CI on a blacklist close, not just contributor_cap #6659) (34583a2)
• fix(github): compare the bot login case-insensitively when dismissing its approval (dismissLatestBotApproval compares bot login case-sensitively, unlike every sibling bot-login check #6614) (fix(github): compare the bot login case-insensitively when dismissing its approval #6662) (3199389)
• fix(review): align lockfile-tamper finding text with lockfile-entry version check (fix(review): align lockfile-tamper finding text with lockfile-entry check #6663) (c170e70)
• fix(github): reject per-segment whitespace in splitRepo (fix(github): reject per-segment whitespace in splitRepo #6664) (b4458ca)
• fix(review): guard fix-handoff suggestion blocks against an embedded code fence (fix-handoff-render.ts doesn't guard against a suggestion breaking its own code fence #6632) (fix(review): guard fix-handoff suggestion blocks against an embedded code fence #6668) (44ab5c7)
• fix(ci): stop draft PRs from wasting CI/review-pipeline resources (fix(anti-abuse): draft PRs still burn CI minutes and skip the AI-review-skip default #6670) (986a12a)
• feat(api): add a REST route + CLI mirror for loopover_get_pr_ai_review_findings (feat(api): add a REST route + CLI mirror for loopover_get_pr_ai_review_findings #6676) (885336a)
• fix(queue): re-verify write permission before the reopen re-close, like its 4 siblings (review-evasion: reopen-reclose guard skips the write-permission-readiness check its 4 sibling guards enforce #6603) (fix(queue): re-verify write permission before the reopen re-close, like its 4 siblings #6677) (99ed0cd)
• feat(openapi): document GET /v1/repos/:owner/:repo/gate-config/effective (OpenAPI spec is missing GET /v1/repos/{owner}/{repo}/gate-config/effective (documented sibling: live-gate-thresholds) #6611) (c4f31f0)
• refactor(signals): reorganize issue policy handling and improve type definitions (refactor(signals): share resolveIssuePolicy between readiness reports (#6606) #6681) (ac54b6f)
• fix(github): tighten ConfigurationCommandRequest.reason to a literal union (ConfigurationCommandRequest.reason is loosely typed string, unlike its sibling PrCommandRequest #6616) (fix(github): tighten ConfigurationCommandRequest.reason to a literal union #6678) (80bc44a)
• refactor(review-grounding): update grounding feature flags and improve documentation (58ab17e)
• fix(signals): advertise the real 99% patch coverage gate in registration readiness (fix(signals): advertise the real 99% patch coverage gate #6683) (329c064)
• fix(review): wire resolveDispositionReason into the action-executor notification (resolveDispositionReason is fully implemented and tested but never called from production code #6636) (fix(review): wire resolveDispositionReason into the action-executor notification (#6636) #6686) (8ac47e3)
• refactor(settings): drop 19 contributor-cap/review-nag/rate-limit config-as-code-only DB columns (3acc512)
• fix(queue): audit draft-dodge stand-down when agent is paused or frozen (82148ee)
• fix(queue): let draft-dodge reach the shared pause gate so stand-downs are audited (487ec95)
• fix: correct four stale 'improvementSignal not wired yet' comments (fix: correct four stale 'improvementSignal not wired yet' comments #6691) (2d493cd)
• feat(mcp): REST route + CLI mirror for loopover_get_eligibility_plan (feat(mcp): REST route + CLI mirror for loopover_get_eligibility_plan #6692) (bb028ec)
• fix(review): stop redundant republishing for a draft fork PR's repeat CI-completion triggers (fix(review): draft fork PRs republish the same review comment every few minutes (missing skip-guard) #6685) (0d9c29f)
• feat(api): add REST mirrors for the finding-taxonomy and enrichment-analyzers MCP resources (feat(api): add REST mirrors for the finding-taxonomy and enrichment-analyzers MCP resources #6706) (e3f66c4)
• feat(mcp): REST routes + CLI resource mirrors for finding-taxonomy and enrichment-analyzers (feat(mcp): REST routes + CLI resource mirrors for finding-taxonomy and enrichment-analyzers #6709) (b0677cd)
• refactor(gate): delete the dead firstTimeContributorGrace surface end-to-end (refactor(gate): delete the dead firstTimeContributorGrace surface end-to-end #6714) (cfd08ef)
• fix(api): remove duplicate finding-taxonomy/enrichment-analyzers imports (f49ec2d)
• refactor(settings): drop 11 gate/quality/AI-review config-as-code-only DB columns (2c73856)
• refactor: consolidate duplicate bounded-concurrency helpers onto mapWithConcurrency (Consolidate duplicate bounded-concurrency map helpers in src/queue and src/signals #6602) (b9de572)
• fix(review): strip NUL bytes from RAG chunk text before the storage INSERT (c43edb8)
• feat(ui): maintainer dashboard panel for the existing @Loopover chat Q&A surface (d5daf54)
• fix(api): tighten chat-qa coverage for codecov patch gate (ca7b5f9)
• fix(review): don't count a byte-identical republish toward review-burst (fix(review): don't count a byte-identical re-publish toward the review-burst anomaly counter #6724) (92afd44)
• fix(registry): scope self-host repo registration to gittensor opt-ins (104c715)
• fix(api): cover chatQaEnabled true path and ignore shard patch-partials (5f7c2c0)
• fix(api): extract chat-qa helpers for full branch coverage (af67361)
• fix(api): drop chat-qa audit catch and cover invalid JSON body (6941d1d)
• fix(api): treat malformed chat-qa JSON as an explicit 400 (1c0899b)
• fix(api): ignore chat-qa auth/json patch-partials across codecov shards (ba182ad)
• fix(mcp): rename enrichment-analyzers resource URI to loopover:// (4d9d6c4)
• feat(api): add a REST route + CLI mirror for loopover_evaluate_escalation (feat(api): add a REST route + CLI mirror for loopover_evaluate_escalation #6805) (f8d1628)
• chore(config): fix stale gittensory prose in infra/root config files (6709f9a)
• feat(api): add a REST route + CLI mirror for loopover_check_test_evidence (feat(api): add a REST route + CLI mirror for loopover_check_test_evidence #6810) (d45d8fd)
• fix(auth): give device-flow polling its own rate-limit budget (1c566a0)
• docs(packages): fix stale gittensory prose and audit citations (a00c984)
• feat(api): add a REST route + CLI mirror for loopover_suggest_boundary_tests (4d5212e)
• fix(ci): update remaining gittensory references in workflow files (7c5965d)
• fix(scripts): update remaining gittensory references, fix stale Sentry release default (6b82504)
• feat(api): REST + CLI mirror for loopover_build_results_payload (feat(api): REST + CLI mirror for loopover_build_results_payload #6904) (7f7ea50)
• fix(review): wire AMS reputation bridge into reputation gate (fix(review): wire AMS reputation bridge into reputation gate #6910) (64abfab)
• feat(api): add a REST route + CLI mirror for loopover_simulate_open_pr_pressure (feat(api): add a REST route + CLI mirror for loopover_simulate_open_pr_pressure #6915) (68b8694)
• feat(api): REST + CLI mirror for loopover_intake_idea (feat(api): REST + CLI mirror for loopover_intake_idea #6916) (f1fb812)
• feat(api): REST + stdio mirror for loopover_build_progress_snapshot (feat(api): REST + stdio mirror for loopover_build_progress_snapshot #6943) (d6cf892)
• feat(api): REST + stdio mirror for loopover_plan_idea_claims (feat(api): REST + stdio mirror for loopover_plan_idea_claims #6952) (8fa47d1)
• feat(api): REST + CLI mirror for loopover_check_improvement_potential (feat(api): REST + CLI mirror for loopover_check_improvement_potential #6955) (27c7c59)
• feat(api): add GET /v1/repos/:owner/:repo/automation-state + CLI mirror (REST + CLI mirror for loopover_get_automation_state #6742) (feat(api): add GET /v1/repos/:owner/:repo/automation-state + CLI mirror #6964) (c566906)

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	loopover-ui	73121c2	Commit Preview URL Branch Preview URL	Jul 17 2026, 05:11 PM

[superagent-security]

Superagent didn't find any vulnerabilities or security issues in this PR.