# Changelog

## Baseline

- First survey — no prior run to compare against. CAI 48.

## Lenses

- Code Health 64
- Architecture 72
- Maturity 63
- Readiness 31
- Security 63

## Changes since last survey

- 300 commits — 161 feature/other, 139 fixes

## By area

- crates/tui — 173 commits
- (root) — 23 commits
- scripts/source-structure-budget.json — 13 commits
- docs/ops — 8 commits
- crates/cli — 7 commits
- web/app — 7 commits
- crates/config — 6 commits
- crates/telemetry — 6 commits
- web/components — 5 commits
- web/lib — 5 commits
- crates/execpolicy — 4 commits
- extensions/vscode — 3 commits
- crates/tools — 2 commits
- crates/workflow-js — 2 commits
- docs/CONFIGURATION.md — 2 commits
- docs/CONTRIBUTORS.md — 2 commits
- docs/TOOL_SURFACE.md — 2 commits
- docs/WINDOWS_BEGINNER.zh-CN.md — 2 commits
- docs/evidence — 2 commits
- docs/public-surface-facts.json — 2 commits

## Notable commits

- fix: Merge FreeBSD build fix
- fix: Merge branch 'fix/windows-test-lane-0.9.4'
- fix: WIP fix(tui): clear the two standing clippy errors
- fix: chore(budgets): aggregate follows the bug-hunt fix stack (661724 -> 661794)
- fix: chore(budgets): aggregate follows the coordination-toast fix (+44 lines)
- fix: chore(budgets): aggregate follows the execpolicy security fixes (662061 -> 662167)
- fix: chore(budgets): aggregate follows the hooks/redaction/MCP-guard fixes
- fix: chore(budgets): aggregate follows the interact-stdin fix and snapshot test hardening
- fix: chore(budgets): aggregate follows the round-2 bug fixes (661843 -> 662015)
- fix: chore(budgets): aggregate follows the round-3 isolated fixes (662015 -> 662061)
- fix: chore(budgets): aggregate follows the truncator, refusal, and sandbox-honesty fixes
- fix: chore(gates): re-baseline source-structure aggregate for v0.9.4 ship fixes
- fix: docs(changelog): correct the Ratatui claim and record the 0.9.4 release-night fixes
- fix: docs(changelog): record the 2026-08-04 audit fixes for the 0.9.4 notes
- fix: docs: fix installer description and apply reviewer suggestions in Windows guide
- fix: fix(agent): a Fleet role is an identity, not a claim of write capability
- fix: fix(agent): fail closed when builder/worker is paired with read_only
- fix: fix(agent): only `type=builder` contradicts read_only, not `type=worker`
- fix: fix(audit): bump js-yaml in extensions/vscode ([GHSA redacted])
- fix: fix(ci): finish the Windows test-binary compile — gate the recorder's import too
- …and 280 more