- Current evaluation evidence is summarized without presenting the historical pre-hardening score as the latest result.
- Machine-specific checkout paths were removed from tracked evidence.
- The positive provider parsing test now has CI scheduling headroom; dedicated timeout tests retain their short deadlines.
- Contribution and security reporting guidance are included for public review.
- Durable append-only task states and attempt counts.
- Idempotent enqueue and restart recovery.
- Deterministic queued-task selection.
- Allowlisted, workspace-contained process execution.
- Timeout, cancellation, and bounded stdout/stderr capture.
- Persisted succeeded, failed, and cancelled outcomes.
- Durable metadata-only command traces and restart reconciliation.
- Explicit bounded retry for failed tasks.
- Provider-neutral structured decisions and a step-bounded agent loop.
- AGY/Gemini 3.8 Flash Low adapter with usage/latency metadata and a real smoke example.
- Bounded workspace read/exact-replacement actions and a real failing-to-passing Rust fixture evaluation.
- Opt-in macOS Seatbelt execution that denies network and writes outside the workspace, covered by a real subprocess test.
- Terminal enqueue/cancel/status/watch interface with non-mutating observation and stricter terminal-state transitions.
- Real AGY NDJSON response streaming with callback delivery and final usage metadata.
- Post-edit verification debt that prevents an untested model edit from being reported complete.
- Unix process-group termination for timeout/cancellation, covered by a descendant-process test.
No Linux isolation backend, graphical UI, or automatic merge is included in this candidate. Process-group termination does not undo side effects that occurred before timeout. Exactly-once external side effects are not guaranteed if the process dies before a trace is synced; adapters must supply idempotency or transactions. Live AGY calls are not part of CI.