# Changelog

## Baseline

- First survey — no prior run to compare against. CAI 46.

## Lenses

- Code Health 71
- Maturity 85
- Readiness 29
- Security 52

## Changes since last survey

- 300 commits — 187 feature/other, 113 fixes

## By area

- server/src — 95 commits
- ui/src — 59 commits
- packages/adapter-utils — 30 commits
- (root) — 24 commits
- packages/plugins — 20 commits
- packages/adapters — 18 commits
- .github/workflows — 11 commits
- packages/shared — 10 commits
- packages/db — 6 commits
- cli/src — 5 commits
- .agents/skills — 4 commits
- tests/e2e — 3 commits
- doc/connections — 2 commits
- scripts/__tests__ — 2 commits
- .github/scripts — 1 commit
- doc/LOW-TRUST-PRESETS.md — 1 commit
- docs/guides — 1 commit
- docs/specs — 1 commit
- packages/skills-catalog — 1 commit
- scripts/acpx-patch-packaging.test.mjs — 1 commit

## Notable commits

- fix: Fix import completion UX: inbox flood, false-failure message, stale company list (#10538)
- fix: Fix issue descriptions in structured wake payloads (#10151)
- fix: Upload company import packages as compressed zip uploads (fix large-company imports through Cloud) (#10531)
- fix: fix(a11y): add ARIA progressbar to QuotaBar component (#1878)
- fix: fix(a11y): add aria-label to mobile tab selector in PageTabBar (#1871)
- fix: fix(acpx): decouple host proxy spawn cwd from in-sandbox remoteCwd (#10122)
- fix: fix(adapter-utils): carry the workspace origin remote into transported git workspaces (#10873)
- fix: fix(adapter-utils): correct confirmation wake semantics (#10588)
- fix: fix(adapter-utils): keep sandbox proxy sockets within Linux path limit (#10221)
- fix: fix(adapters): keep user-scoped env bindings on the agent Test action (#10926)
- fix: fix(adapters): persist ACPX process identity for hot restart (#9838)
- fix: fix(agents): disable cheap model profiles by default (#10019)
- fix: fix(auth): clarify protected-agent assignment blocks (#10893)
- fix: fix(built-in-agents): allow first-time setup of a needs_setup built-in under board-approval policy (#10129)
- fix: fix(ci): make PR-template inline-description contract explicit (#10558)
- fix: fix(ci): regenerate lockfile for patch changes (#10132)
- fix: fix(claude-local): trust Paperclip URLs in allowlist sandbox (#10438)
- fix: fix(codex): classify mid-turn harness crashes structurally as retriable infra (#10210)
- fix: fix(codex): do not inject a duplicate --skip-git-repo-check for sandbox runs (#10595)
- fix: fix(codex): let sandbox runs use the sandbox image's own Codex login (#10582)
- …and 280 more