What's New

Auto-generated digest of recent changes across the OpenAdapt ecosystem. Last updated: 2026-08-29 22:59 UTC

OpenAdapt

• docs: front the agent-callable path (#1137) — merged

• docs: put the walkthrough next to quickstart (#1136) — merged

• feat: Day-1 partner kit after quickstart (#1135) — merged

• docs: add get-started and the 15s X proof to the README social line (#1134) — merged

• docs: show flow compose for work that crosses backends (#1133) — merged

• build(deps): bump github/codeql-action/analyze from 4.37.7 to 4.37.9 (#1132) — merged

• docs: drop Production-admission legalese; state Production per workflow (#1130) — merged

• chore(lifecycle): repin the Production lifecycle source to openadapt-ops main (#1129) — merged

• chore(release): reconcile platform manifest with flow 1.34.0, privacy 1.0.4 (#1128) — merged

• docs: rewrite the README around the first run (#1127) — merged

• docs: reconcile the two contributing guides (#1126) — merged

• docs: record that the CLA is published, not under consideration (#1125) — merged

• chore(policy): sync generated source boundary (#1124) — merged

• chore(release): reconcile platform manifest substrate projection (#1121) — merged

• ci: gate launcher release publication (#1120) — merged

• chore: ignore every .env variant, not one at a time (#1119) — merged

• ci: bind launcher releases to the release app (#1118) — merged

• Replace the legacy GitBook link (#1117) — merged

• Derive launcher lifecycle from signed admissions (#1116) — merged

• docs: lead with the verified base-package quickstart (#1115) — merged

openadapt-flow

• ci: skip the expensive suite on documentation-only PRs (#441) — merged

• feat: refuse VERIFIED without an independent system-of-record read (#435) — merged

• feat(process): sequence independently admitted capabilities (#434) — merged

• feat(visualize): render composed parents without merging ProgramGraphs (#433) — merged

• feat(compiler): admit REST bindings only after held-out Effect confirmation (#432) — merged

• docs: drop 29-app failure-discovery from README (#431) — merged

• feat(compose): sequence separately recorded Flow bundles (#430) — merged

• docs: clarify governed and multi-app workflow paths (#428) — merged

• fix: retain fail-closed qualification summaries (#427) — merged

• fix: preserve X11 library name casing (#426) — merged

• docs: match four published claims to their artifacts (#425) — merged

• docs(paper): correct the tree map, and name the profile in each main.tex (#424) — merged

• docs: rewrite the README around what the tool does (#423) — merged

• fix(release): create the GitHub Release with the App instead of semantic-release (#422) — merged

• fix(release): install PyYAML before the claims registry gate (#421) — merged

• docs: publish the Contributor License Agreement CONTRIBUTING has promised (#420) — merged

• fix(release): restore changelog generation, backfill v1.0.0-v1.33.0, detect the gap (#419) — merged

• feat(sanitize): materialize an approved derivative from its archive (#418) — merged

• fix(validate-hosted): name the derivative whose approval is missing (#417) — merged

• fix(macos): match known Chrome AX title suffixes (#416) — merged

openadapt-desktop

• feat: Qualify this recording fills Flow pins from the demo (#152) — merged

• fix: do not assert POSIX journal modes on Windows (#151) — merged

• ci: bump the actions group with 3 updates (#150) — merged

• build: lock python floors for httpx, segno, PyInstaller, and semantic-release (#146) — merged

• build: bump the npm-minor group with 3 updates (#145) — merged

• fix: close Desktop release and Tray protocol gaps (#143) — merged

• docs: rewrite the README, and say up front that there is no build to download (#142) — merged

• feat(capture): put both published workbench shots under the capture contract (#141) — merged

• fix(tests): read tracked source files as UTF-8, not as the platform locale (#140) — merged

• style: consume the canonical cool design tokens from openadapt-web (#139) — merged

• fix(ci): allowlist FFmpeg's public signing-key digest in gitleaks (#138) — merged

• Add the qualification program workbench (#137) — merged

• chore(policy): sync generated source boundary (#136) — merged

• Guide the first real workflow run (#135) — merged

• chore: ignore every .env variant, not one at a time (#134) — merged

• Scope Desktop secret scans to the tested change (#133) — merged

• Bind production admission to tag attestations (#132) — merged

• feat: route hosted runs through Flow's governed adapter (#130) — merged

• ci: derive Desktop Production from central admission (#126) — merged

openadapt-agent

• docs: name the three roles and default runtime interface (#41) — merged

• feat: serve the synthetic tutorial and report HALTED honestly (#40) — merged

• docs: rewrite the README around the local MCP bridge (#39) — merged

• Fix the Agent MCPB dependency closure (#38) — merged

• docs: stop naming 2.0.2 as a shipped release (#37) — merged

• chore(policy): sync generated source boundary (#36) — merged

• chore: ignore every .env variant, not one at a time (#35) — merged

• Derive Agent state from release admission (#33) — merged

• chore(deps): Bump astral-sh/setup-uv from 9.0.0 to 10.0.1 (#32) — merged

• chore(deps): Bump the codeql-action group with 2 updates (#31) — merged

openadapt-ml

• docs: rewrite README for a human reader (#78) — merged

• chore(policy): sync generated source boundary (#77) — merged

• chore: ignore every .env variant, not one at a time (#75) — merged

openadapt-evals

• feat: ExtraDup kit against MockMed and local OpenEMR (#320) — merged

• feat(evidence): publish the Flow 1.34.0 comparison; supersede 1.33.0 (#319) — merged

• docs: rewrite README for a human reader (#318) — merged

• fix(evidence): follow the verified-certificate retention receipt (#317) — merged

• chore(policy): sync generated source boundary (#316) — merged

• fix(windows): require fresh isolation proofs before pool work (#315) — merged

• chore(release): prepare 0.94.1 (#312) — merged

• fix(evidence): match the retention digests the Cloud writer emits (#311) — merged

• docs(changelog): list the importer workflow in the 0.94.0 section (#310) — merged

• feat(ci): add the authorized importer workflow and fix the proposal bot (#309) — merged

• feat(evidence): implement the private-export contract mechanism (#308) — merged

• chore: ignore every .env variant, not one at a time (#307) — merged

• chore(release): prepare 0.94.0 (#306) — merged

• fix(evidence): bind retained evidence to the reviewed signing route (#305) — merged

• docs(evidence): draft the private-export contract (#304) — merged

• feat(evidence): add v3 qualification and immutable recovery (#303) — merged

• chore(release): prepare 0.93.0 (#302) — merged

• feat(ci): propose the next release as a reviewable pull request (#301) — merged

• feat(evidence): bind Cloud acceptance to the public Sigstore instance (#300) — merged

• fix(evidence): accept the timestamp format GitHub CLI actually emits (#299) — merged

openadapt-capture

• Close recorder database sessions before finalization (#125) — merged

• fix(db): never raise from the connect handler, and scale the budget test right (#124) — merged

• fix(db): bound the write-lock wait by the worst case it can really produce (#123) — merged

• fix(db): bound the SQLite write-lock wait by time, not by attempts (#122) — merged

• docs: the control commands ship in 1.3.0, not 1.2.3 (#121) — merged

• chore(release): cover the last two commits in the 1.3.0 notes (#120) — merged

• fix(test): do not assert a POSIX execute bit on Windows (#119) — merged

• feat: install FFmpeg with one command, from a pinned LGPL build (#118) — merged

• chore(release): prepare 1.3.0 (#117) — merged

• fix(recorder): survive SQLite writer contention in the video writer (#116) — merged

• ci: bound the trial step and drop the flaking Windows lane from the gate (#115) — merged

• ci: qualify releases on hosted runners, schedule the live lanes (#114) — merged

• chore(release): prepare 1.2.3 (#113) — merged

• fix(ci): allowlist the published extension key by exact value (#112) — merged

• docs: rewrite the README and move the deep contracts into docs/ (#111) — merged

• fix(release): let the changelog document the pending release candidate (#110) — merged

• test(fixtures): run the byte check on every matching builder (#109) — merged

• fix(fixtures): bind synthetic provenance to the fixture byte determinants (#107) — merged

• fix(db): retry transient SQLite writer locks (#106) — merged

• chore(policy): sync generated source boundary (#105) — merged

openadapt-privacy

• fix: decide separated action text by shape, and label identifiers by recognizer (#19) — merged

• docs: rewrite the README, and replace the examples with measured output (#18) — merged

• chore(policy): sync generated source boundary (#17) — merged

• chore: ignore every .env variant, not one at a time (#16) — merged

openadapt-types

• feat: Tier-2 oracle adapter; refuse visual VERIFIED (#33) — merged

• feat(execute): bind Seal fields on the evidence receipt (#32) — merged

• docs: state the real number of shipped schema files (#31) — merged

• docs: rewrite the README around the schema you actually import (#30) — merged

• chore(policy): sync generated source boundary (#29) — merged

• chore: ignore every .env variant, not one at a time (#28) — merged