v0.9.1: Completion board, exact final dogfood, and no-publish release gate

[Hmbown]

v0.9.1 completion board and exact final dogfood gate

Purpose

This is the non-publishing fan-in board. It owns final integration evidence, one exact rebuilt/installed local dogfood, and the stop line. It does not own feature implementation and is intentionally not agent-ready.

Do not start the final freeze until every canonical blocker below is merged, independently reviewed, or explicitly deferred by Hunter.

Every agent-ready implementation issue is self-contained for a fresh clone of Hmbown/CodeWhale: it must name repo-relative entry points, provider-free acceptance, exact validation, dependencies, and the PR handoff. No cloud worker needs /Volumes/VIXinSSD/CW, workspace backups, a maintainer worktree, or a private handoff. Individual cloud workers stop at a tested PR; this board alone owns integration and the local-device dogfood.

Canonical implementation board

Children, Fleet, and coordination

• v0.9.1: Resolve one truthful child runtime before launch #414 — one truthful child runtime: manifest, isolation, identity, questions, and bounded results
• v0.9.1: Collapse Fleet and agent roles to Planner / Worker / Reviewer / Verifier #3934 — four public roles: Planner / Worker / Reviewer / Verifier
• v0.9.1: Make Operate delegate bounded leaves by default #4598 — Operate delegates bounded work by default with visible route/cost facts
• v0.9.1: Coordinate decisions, context, write scopes, and neutral fan-in #4647 — bounded decisions, scoped context, write ownership, and neutral fan-in

Evidence, execution, and authority

• v0.9.1: Ship adaptive evidence as one exact route/store/inspect contract #4619 — adaptive routing, durable artifacts, bounded inspection, receipts, and provider-free acceptance
• v0.9.1: Collapse command execution into one canonical Bash tool #4625 — one canonical model-facing Bash tool
• v0.9.1: Resolve Ask, Auto-Review, and Full Access through one permission contract #4412 — one Ask / Auto-Review / Full Access resolver across every execution path
• Codewhale not following the constitution #4032 — shipped-script recipes and structurally enforced explicit workflow constraints

Durable state, privacy, and terminal UX

• v0.9.1: Make mode and permission state durable and rendering side-effect free #4628 — durable mode/posture state, side-effect-free switching, and theme-native composer identity
• v0.9.1: Enforce one prefix/privacy invariant across forks, links, artifacts, and journals #4632 — one prefix/privacy invariant across forks, links, artifacts, and journals
• v0.9.1: Make Work one truthful queue with clear Agents, activity, and diffs #4636 — one calm Work queue with clear Agents, semantic activity, and configurable diffs
• Work Agent rows: real sub-agent details and structured current activity (restored from #2694) #2889 — real Agent details/current activity from Work
• Long output content cannot scroll — content truncated beyond viewport with no way to review #4603 — long transcript/detail scrolling
• Enter key send lag — UI freezes for hundreds of milliseconds on message send (multi-version legacy) #4605 — Enter-to-acknowledged-redraw latency

Providers, usage, and verification

• v0.9.1: Make provider/model setup, consent, and fallback truthful #4639 — selected-model setup, consent/readiness, links, and provider-neutral fallback
• v0.9.1: Dispatch Responses and Chat Completions from exact route offerings #185 — route-offering-aware Responses versus Chat Completions transport
• v0.9.1: Make route billing provenance authoritative and update usage during long turns #4324 — authoritative billing provenance plus live usage updates during long turns
• v0.9.1: Make Codewhale upstream-ready for a Verifiers v0.2.1 harness #4641 — make Codewhale upstream-ready for a Verifiers v0.2.1 built-in harness

Skills

• v0.9.1: Make /skills the single skill manager across project, global, and compatible roots #4651 — one /skills manager for inventory, audit, install, update, remove, and trust

Credit and release records

• v0.9.1: Credit material reporters, reproducers, reviewers, verifiers, and implementers equally #4649 — equal public credit for material reporters, reproducers, reviewers, verifiers, and implementers

Cloud execution waves

Use one fresh clone/branch and one focused PR per issue. Apply agent-in-progress while a worker owns an issue; do not double-assign it or let workers edit this board.

1. Foundations, parallel where files do not overlap: v0.9.1: Ship adaptive evidence as one exact route/store/inspect contract #4619, v0.9.1: Collapse command execution into one canonical Bash tool #4625, v0.9.1: Resolve Ask, Auto-Review, and Full Access through one permission contract #4412, v0.9.1: Make mode and permission state durable and rendering side-effect free #4628, v0.9.1: Enforce one prefix/privacy invariant across forks, links, artifacts, and journals #4632, v0.9.1: Dispatch Responses and Chat Completions from exact route offerings #185, v0.9.1: Make route billing provenance authoritative and update usage during long turns #4324, Long output content cannot scroll — content truncated beyond viewport with no way to review #4603, Enter key send lag — UI freezes for hundreds of milliseconds on message send (multi-version legacy) #4605, Work Agent rows: real sub-agent details and structured current activity (restored from #2694) #2889, v0.9.1: Make /skills the single skill manager across project, global, and compatible roots #4651, and the canonical role/reducer slice of v0.9.1: Collapse Fleet and agent roles to Planner / Worker / Reviewer / Verifier #3934.
2. Composed behavior after its named foundations: v0.9.1: Resolve one truthful child runtime before launch #414 after the first v0.9.1: Collapse Fleet and agent roles to Planner / Worker / Reviewer / Verifier #3934 slice plus v0.9.1: Ship adaptive evidence as one exact route/store/inspect contract #4619/v0.9.1: Collapse command execution into one canonical Bash tool #4625/v0.9.1: Resolve Ask, Auto-Review, and Full Access through one permission contract #4412; finish v0.9.1: Collapse Fleet and agent roles to Planner / Worker / Reviewer / Verifier #3934 after v0.9.1: Resolve one truthful child runtime before launch #414; v0.9.1: Make provider/model setup, consent, and fallback truthful #4639 after shared route structs settle; v0.9.1: Make Work one truthful queue with clear Agents, activity, and diffs #4636 after Work Agent rows: real sub-agent details and structured current activity (restored from #2694) #2889 plus the Work/evidence/state contracts; Codewhale not following the constitution #4032 after v0.9.1: Resolve one truthful child runtime before launch #414/v0.9.1: Collapse command execution into one canonical Bash tool #4625/v0.9.1: Resolve Ask, Auto-Review, and Full Access through one permission contract #4412; v0.9.1: Make Codewhale upstream-ready for a Verifiers v0.2.1 harness #4641 after v0.9.1: Resolve Ask, Auto-Review, and Full Access through one permission contract #4412/v0.9.1: Dispatch Responses and Chat Completions from exact route offerings #185.
3. Fan-in: v0.9.1: Coordinate decisions, context, write scopes, and neutral fan-in #4647 after v0.9.1: Resolve one truthful child runtime before launch #414/v0.9.1: Ship adaptive evidence as one exact route/store/inspect contract #4619/final v0.9.1: Collapse Fleet and agent roles to Planner / Worker / Reviewer / Verifier #3934; v0.9.1: Make Operate delegate bounded leaves by default #4598 after v0.9.1: Resolve one truthful child runtime before launch #414/v0.9.1: Coordinate decisions, context, write scopes, and neutral fan-in #4647; v0.9.1: Credit material reporters, reproducers, reviewers, verifiers, and implementers equally #4649 only after every implementation PR is resolved.

A worker may open a draft early, but it must rebase onto current main and the listed dependencies before review. Closes #N means every checkbox is proven; otherwise use Refs #N (partial).

Consolidated intake

No scope was dropped. Redundant implementation leaves were closed as redirects:

• v0.9.1: Store every large tool result as a unique durable session-owned artifact #4620–v0.9.1: Prove adaptive evidence with provider-free large-output acceptance #4624 → v0.9.1: Ship adaptive evidence as one exact route/store/inspect contract #4619
• v0.9.1: Resolve and isolate every child execution environment before launch #4627, v0.9.1: Make child questions complete, durable, and resumable from Work #4630, v0.9.1: Persist headless user-input checkpoints before emitting resume receipts #4631, v0.9.1: Scope child names, lookup, and resume identity to the owning session #4645, v0.9.1: Bound child completion handoffs while preserving exact durable results #4646 → v0.9.1: Resolve one truthful child runtime before launch #414
• v0.9.1: Make Auto-Review resolve tool permission without approval modals #4626 → v0.9.1: Resolve Ask, Auto-Review, and Full Access through one permission contract #4412
• v0.9.1: Switching mode or permission must not create empty Work #4629, v0.9.1: Restore theme-native Plan, Act, and Operate composer colors #4642 → v0.9.1: Make mode and permission state durable and rendering side-effect free #4628
• v0.9.1: Fail closed during async linked-session loading and stale-taint cleanup #4633–v0.9.1: Pin workflow journal identity across append, recovery, and reprojection #4635 → v0.9.1: Enforce one prefix/privacy invariant across forks, links, artifacts, and journals #4632
• v0.9.1: Add compact typed rollups for file reads, directory listings, and searches #4637, v0.9.1: Restore configurable inline red-green diffs for successful file mutations #4638 → v0.9.1: Make Work one truthful queue with clear Agents, activity, and diffs #4636
• v0.9.1: Let explicitly selected xAI consent routes enter readiness checks #4640, v0.9.1: Make provider and setup URLs clickable and keyboard-openable #4643, v0.9.1: Replace the DeepSeek-specific fallback with route-scoped provider-neutral state #4644 → v0.9.1: Make provider/model setup, consent, and fallback truthful #4639
• v0.9.1: Declare child write scopes and contain contention with neutral reconciliation #4648 → v0.9.1: Coordinate decisions, context, write scopes, and neutral fan-in #4647

Community evidence stays visible: #4032, #4603, and #4605 remain open under their reporter authors; restored #2889 retains @aboimpinto's design direction and explicit credit.

Merged foundation to reverify on the frozen SHA

• fix(tui): restore durable Work surface progress #4607 — Work/progress/scrolling cleanup
• fix(tui): align permission postures and compact approvals #4608 — permission postures, compact approvals, questions, and Alt/Option+V
• fix(tui): respect umask for workspace atomic writes #4609 — umask-safe atomic writes with contributor authorship preserved
• fix(goal): continue durable goals across turns #4611 — durable same-model goals with truthful pause/block/budget behavior
• test(cli): satisfy strict borrowed-path lint #4614 — strict CLI lint baseline
• fix(tui): present built-in Fleet as ready #4615 — built-in Fleet readiness without repeat setup prompting
• fix(tui): make onboarding completion durable #4616 — durable onboarding completion
• fix(kimi): enforce exact K3 and MFJS contracts #4617 — K3/MFJS route contracts with contributor trailers preserved
• fix(tui): keep long-running tools live #4618 — long-running tool liveness and reattachment

Native ACP already exists through codewhale serve --acp; verify it provider-free rather than reimplementing it.

Explicit live-account holdouts

• Restore xAI device-code OAuth login and surface endpoint errors #4410 remains open for one real xAI tool-bearing turn on the corrected build. Its provider-free implementation and receipts are required; the live account step is neither inferred nor run without Hunter's approval.
• Real Kimi K3 entitlement remains a human account check. Provider-free K3/MFJS captures are required; entitlement is not inferred from them.

Final exact-candidate gate

• Refresh origin/main, freeze one exact SHA, and record it before building.
• Every canonical blocker is merged or explicitly deferred; signed/additive history, DCO, source branches, contributor authorship/trailers, hosted CI, independent audit, and zero unresolved review threads are verified.
• Focused tests, all locked TUI tests, formatting/diff checks, strict workspace clippy, and exact hosted CI are green on the frozen tree.
• Run codewhale-local-build, codewhale-runtime-smoke, codewhale-tui-acceptance, and codewhale-release-readiness against that exact tree.
• Install only through scripts/release/install-dogfood.sh; CLI, compatibility CLI, and TUI all report the frozen SHA.
• Provider-free and visual acceptance cover the canonical issues above, native ACP, restart/replay, narrow terminal sizes, and honest route/context/billing/verification receipts.
• README screenshot/receipts, changelog, contributor list, completion ledger, and pre-publication packet identify the same candidate.
• Leave safe Kimi K3 test commands for Hunter. Do not run live K3 or xAI entitlement/tool-bearing tests without separate approval.

The final install-dogfood.sh run and installed-binary/visual receipt happen on Hunter's selected device. That local step is intentionally not delegated to a generic cloud worker and does not make any implementation issue machine-dependent.

Stop line

Completion means one exact rebuilt and installed local dogfood candidate plus truthful receipts. It does not authorize a tag, GitHub Release, crates/npm publication, public artifact upload, deployment, customer communication, paid resource, or live provider credential. Nothing is published.

[Hmbown]

Release lane status (2026-07-21, orchestrator pass)

No publish. Local 0.9.1 release lane only.

Item	Evidence
Exact SHA	d3e0951dd85c (main, 51 commits ahead of origin/main)
TUI suite	7778 passed / 0 failed / 3 ignored (cargo test -p codewhale-tui --bin codewhale-tui --locked, ~65s)
Release build	cargo build --release -p codewhale-cli -p codewhale-tui --locked green
Dogfood	Installed codewhale / codew / codewhale-tui 0.9.1 (d3e0951)
Dogfood receipt	backups/dogfood-installs/20260721T114507Z-d3e0951dd85c.txt

Closed on this pass (verified with commit receipts)

Permission contract #4412; Enter-send lag #4605; route limits #4655; Verifiers/CLI #4641; model picker #4639; prefix privacy #4632; mode persist #4628; Bash tool #4625; long-output scroll #4603; xAI OAuth #4410; provenance #4324; PublicRole #3934; Work activity fields #2889; ChildLaunchManifest #414; wire dispatch #185; skills list #4651; Operate leaf default #4598; constitution gates #4032; contributor credit #4649.

Community PRs

Landed + credited: #4656, #4657, #4658. Superseded with thanks: #4654. Drafts already on lane closed: #4652, #4653, #4487.

Honest 0.9.2 demotions (foundation only, not fully wired)

#4636 Work compact activity, #4647 decision/write-scope live enforcement, #4619 full adaptive evidence store/inspect.

Still this board

Final human dogfood acceptance matrix + explicit push / freeze / publish authorization. Do not treat this comment as publication approval.