docs(oauth): say a code is exchanged only under its sign-in's DPoP key

docs(plan): propose remembering an agent's consent per client and scope set

test(scenarios): sign in again after a restart before operating

docs(tools): say what each xray mode catches, and what neither does

test(ownership): attack the stranger's walk and take the human's PDS down

fix(http): read the request before the endless test server answers

chore(schema): spike jacquard-lexicon's validator behind Catalog

fix(verify): say when --allow-shared-host turned the one refusal off

docs: say where the lexicons live, how to publish them and how to check

fix(pds)!: refuse a P-256 node key at the reservation, naming the curve

docs(plan): write down the default-scope-ceiling decision for an owner

fix(pds)!: serve a blob under the type its bytes carry, not only its claim

docs(plan): write down the options for the relay commands on the e-stop socket

fix(pds)!: refuse a delete at the tombstone cap instead of dropping a tombstone

fix: unwrap the log lines that were emitting runs of spaces

feat(serve): poll policy records beside the operator claim

docs(cli): audit every command-line surface and propose one convention

feat(pds): admit reserved hosts and attested contexts through the tree

test(serve): expect the policy member on an empty deployment's stats

feat(serve): load AWS regional certificates with --attest

feat(agentd): sign each context's provisioning with the node key

docs(stack): remove reference to non-existent record host service kind

docs(overview): fix incorrect constant reference

fix(docs): correct lexicon count in conformance doc

docs(serve): add missing oauth-authorization-server route to table

feat(stats): count repositories beside accounts

feat(harnesses): time the log signal against the hook signal

docs(harnesses): stop depending on the subagent lifecycle pair

test(serve): check the deployment's unit against the registry it names

docs(plan): keep the register to the work this repository does

feat: move nav to right

docs(plan): tick the four stamp-contract items this branch closed

docs(harnesses): tick the five contract items and correct two assumptions

docs: carve out retargeting from the no-second-pull-request rule

docs(zone-reconciliation): describe the reconciler in the voice of a design

docs(operations): cut the runbook to the commands an operator runs

test(didbot-serve): hand the spawned server a real port instead of 0

docs: move the hook setup into DEVELOPING.md and cut it down

docs(e-stop): drop the stale pane Done item

docs: move the hook setup into DEVELOPING.md and cut it down

test(pds): pin that an active account's delete still refuses a missing record

test(hookd): assert the credential file's mode outside the file that sets it

docs(plan): name the credential kinds and admin routes auth.rs has

docs(plan): say the e-stop pane is not built

docs(plan): say what the ops dashboard actually serves

docs(readme): correct which hooks fire on what, and which run tests

docs(didbot-policy): say why Evaluator::compile has no default body

docs(didbot-serve): say which routes actually accept a DPoP credential

docs(zone-reconciliation): say that nothing constructs a reconciler yet

test(hookd): pin that a refused provision is retried on the next scrobble

docs(pds): say that no operator surface clears a stranded account

feat(didbot-serve): carry the half-provisioned count on the health line

test(didbot-serve): hand the spawned server a real port instead of 0

test(pds): pin the activation rollback and the startup count

feat(didbot-serve)!: report missing blobs at boot on `bot.did.stats`

test(didbot-dev): keep the deployment's systemd unit and this binary's flags in step

test(didbot-identity): pin label alignment in the wildcard depth predicate

docs(site-anim): stop calling a retired direction the site's hero animation

docs(hookd): say which of the two state writes a caller wants

fix(didbot-pds): let the zone apex reach the handle-collision check

test(setup): drive forget through the binary with no terminal

refactor(hookd): say the stack-configuration fallback once

fix(mcp): bound a request to the personal data server

docs(plan): tick the two model-provenance items in provenance

build!: drop the feed, which is its own repository now