chore(main): release 1.1.0

[github-actions]

🤖 I have created a release beep boop

1.1.0 (2026-09-21)

Features

• a2a: hermetic remote execution — tool floor, prompt isolation, real bounds (plan43 phase 1) (394d5a0)
• a2a: per-task access tokens + exact-ID metered skill invocation (plan43 phase 1) (745f2ff)
• benchmarks: PLAN-45 Phase 5.1/5.2 skill ablation harness with an in-context control arm (05e2d8c)
• efficiency: in-tree Anthropic provider with native tool search, 9k-class prefix, tool telemetry, batch lanes (a205fe6)
• efficiency: stop idle token burn, stable cached prefix, hot tool set, honest ledger (6550a7f)
• harness: grounded outcomes for the autonomous worker — body-level tool errors, model identity, L0-L4 evidence, verified task completion, records-mode hold, repeat guard, taint, run feedback (1d2023c)
• identity: activate ERC-8004 registration + reputation bridge (PLAN-47 P3) (cffdcc1)
• launch: Control-UI-first channel docs, sidebar Help link, launch runbook, demo tape (p1-7, Phase 4) (6fbdc8f)
• launch: MIT-clean LICENSE, egress disclosure, LIMITATIONS.md, npm not-published state, plan39-r2 labels (89d902a)
• marketplace: flywheel-protecting separation + canonical corpus (plan43 phase 0) (68bc997)
• memory: remote A2A task turns never become node state (plan43 phase 1, R2) (4acb029)
• payments: AP2 mandate layer over x402 + payment-path freeze (PLAN-47 P0-P1) (e9e69a2)
• payments: AP2 runtime enforcement — consume-once, context binding, PDR (PLAN-47 P4) (f2652a6)
• payments: AP2 SD-JWT/P-256 wire format + CDP smart-account scaffold (30161be)
• payments: bind mandate into x402 sig + consent gating (PLAN-48 P5) (4db65c0)
• payments: Circles consent lineage for AP2 payments (PLAN-47 P4.x) (0a609a4)
• payments: deliver spend escalations to the operator (PLAN-48 P2) (0a502e9)
• payments: passkey step-up on high-value approvals (PLAN-48 P2, D-2) (b927e15)
• payments: PLAN-48 Phase 6 adversarial pass + D-4 first-run defaults (f7f4a35)
• payments: PLAN-49 Phase 1 — dollar money view (no money moved) (0ae85e0)
• payments: PLAN-49 Phase 2 core — in-app funding on the consent rail (d919d92)
• payments: spend grants + escalation, end to end (PLAN-48 P0-P1) (fedc2cb)
• plan43: Phase 3 chunk 3d — commerce standing from real outcomes, listings kill switch, banned-seller exclusion, slash-only bond ledger (2e98143)
• plan43: Phase 3 skill commerce trust layer — lineage gate, registry royalty, signed receiver-side attestations, A2A attest exchange (3a-3c) (b73226b)
• plan43: Phase 4 — status-based contribution rewards (D-D, invariant I5), adversarially passed (baa95d5)
• plan44: Phase 0 — the loop sees and records (user stream, cursor safety, telemetry, proposer default) (8b09e4c)
• plan44: Phase 1 — labels, signals, sampler diversity; Phase 0 adversarial fixes (f76f64d)
• plan44: Phase 2 — a gate that measures the runtime (bb91e3b)
• plan44: skills.evolution.probe — in-process runtime-pathway trial for operators (7474aa7)
• plugins: add HOL Guard before-tool-call plugin (#84) (89c221d)
• skill-evolution: description contract + never-triggered repair loop (PLAN-44 Phase 4a) (1a1bae8)
• skill-evolution: PLAN-44 Phase 3 security closures (1f63507)
• skill-evolution: proposer sees live descriptions; overlap check refuses near-duplicate descriptions (PLAN-44 Phase 4b) (332cce9)
• skill-evolution: routing repair — rewrite non-routable harvested/received descriptions to the contract (PLAN-44 5c) (3085baa)
• skill-evolution: usage signal from the journal + description contract at P2P ingest (PLAN-44 5a/5b) (3d487bd)
• skills: 5 fidelity upgrades — tasks runner, semantic lint, schema layer, drift discipline, proposer model (plan42) (cdb7682)
• skills: curriculum admission gate — grown tasks must be skill-dependent (SkillLearnBench) (3006b86)
• skills: impact trail + gate-bypass closure + evolution config surface (plan42, Phase 0) (23c0f30)
• skills: PLAN-45 5.4 cross-model tag on the provenance trailer and the review list (98b55ec)
• skills: PLAN-45 5.5 external benchmark corpus + validation shell pinned to the confined host (d167ff6)
• skills: PLAN-45 Phase 0 — retire the crystallizer, purge its output, stop tool-level "reward", quarantine scrapes, parse the provenance trailer (ed83a3b)
• skills: PLAN-45 Phase 1 (1.1-1.3, 1.5) — one outcome substrate: run-grounded execution rows, evidence-only consumers, per-skill evidence record, de-anchored judge, labeler calibration (ff86cdb)
• skills: PLAN-45 Phase 1.4 — retire the legacy skill producers (refiner, mutation/research modes, PLAN-21 slow update, pareto, prompt optimization) (f1a172b)
• skills: PLAN-45 Phase 2 — reachable, honest gate: canonical capability families, temporal split, context parity, sequential testing with alpha spending, cost gate, rejected-edit memory, credited wins, records demoted (c524131)
• skills: PLAN-45 Phase 3 close the loop: canary ladder, monitor, rollback, retraction (d1ffc60)
• skills: PLAN-45 Phase 4 trust is not evidence at every boundary (24d4638)
• skills: PLAN-45 Phase 6 surfaces: Evolution tab, skills evidence CLI, doctor section (f2d68dd)
• skills: research-backed corpus + gate upgrade — sign test, K trials, seeded canonical corpus, suite split, corpus miner (plan42) (00ee111)
• skills: Skill Proposer ReAct agent + gated proposal staging (plan42, Phase 3) (4b58b17)
• skills: trace reconstruction, labeling, stratified sampling (plan42, Phase 1) (7511ed8)
• skills: validation gate — the benchmark that decides promotion (plan42, Phase 4) (b2ef07a)
• skills: wiki layer + Wiki Maintainer evolution pass (plan42, Phase 2) (7ff7b55)
• skills: wiki lint, P2P propagation with evidence, evolution status RPC (plan42, Phase 5) (9f0c38d)
• ui: Spend Grants & Approvals panel (PLAN-48) (4fd315c)
• ui: Usage moves to the main navigation under Overview; Overview gets a spend card (cf9332b)
• usage: PLAN-50 Phase 5 — cache coaching, burn rate, OTel counters, live pricing, cost modes (5882fb9)
• usage: PLAN-50 Phase 6 — audit fixes, cost per outcome, what-if replay, explain, cache-aware heartbeats (e4ca140)
• usage: PLAN-50 usage ledger — every token, every model, every feature (incl. embeddings) (bc31e5e)
• wallet: PLAN-49 Phase 0.5 foundation — embedded-wallet provisioning mode (Path B) (6dfedd7)
• wallet: spend-permission policy core + smart-account config (PLAN-47 P2) (9384895)

Bug Fixes

• a2a: guard cfg.a2a optional access in client-tool (CI tsc red) (61b9bdb)
• ci: pin corpus jsonl to LF so the Windows checkout matches the embedded byte pin (plan43 phase 0) (35a1e7b)
• exec: honor an explicit security=deny on the sandbox host when no sandbox is configured (5f6259d)
• gateway: Spend Grants page no longer depends on the marketplace being enabled (9fddaf9)
• memory: end the gateway freeze, cut the DB ~460 MB, fix two decay/lifecycle bugs (audit 2026-09-07) (b5072e3)
• plan43: route ban-to-invite revocation through the circles side (R17) (6bc468a)
• plan44: Phase 1 adversarial pass — tool-aware error classes, judge leak, terminal-env precedence (70715fc)
• plan44: Phase 2 adversarial pass — confined validation shell, workspace registry, gate convergence (bb8e0ae)
• skill-evolution: 5a/5b adversarial pass — cursor never skips deferred runs, first-party-only credits, async memoized ingest index (4c06aab)
• skill-evolution: contract trigger accepts gerund and 'if the user' phrasings; routing-repair failure reason carries the refused text (135f901)
• skill-evolution: Phase 3 adversarial pass — provenance hijack, admin-gated override, fence gaps, D-7 livelock (b18fbd2)
• skill-evolution: Phase 4a adversarial pass — re-gate repaired descriptions, clause-level contract, harvested skills patchable (78748b7)
• skill-evolution: Phase 4b adversarial pass — positive-clause overlap, squat demotion, fenced proposer index, repair-time overlap (a57ce77)
• skill-evolution: routing-repair adversarial pass — bounded spend, no clobbering, evolved skills untouched, laundering closed (cf325c8)
• skill-evolution: validation sessions load no bootstrap context (PLAN-44 Phase 3 polish) (7c1d126)
• skills: atomic quarantine writes + envelope salvage; zero-inflation journal scans (ae01526)
• skills: dedicated 8k-token evolution LLM lane — live truncation fix (plan42) (c8b3179)
• skills: fast-forward the sampler cursor past stale history (plan42) (869eb59)
• skills: first-balanced-object JSON extraction, proposer protocol-error logging, FINAL-prefix tolerant checker values (plan42) (6173473)
• skills: lenient JSON extraction for maintainer/proposer output; surface parse issues (plan42) (f4cee2e)
• skills: paged journal reads + marathon-run guard — live stall fix (plan42) (3d737a6)
• skills: PLAN-45 Phase 1 adversarial pass — back-fill on every consolidation, blind headers, feedback re-stamp, distillation cursor, gate history (f9b2613)
• skills: re-bind pre-4.4 routing-repaired peer skills instead of flagging them as tamper (dccbf95)
• skills: selective blob inflation + metadata pre-filters for evolution scans (plan42) (744b0e5)
• skills: status RPC echoes the real default validation mode (tasks) after PLAN-45 2.8 (160e14a)
• skills: stop legacy unvalidated crystal churn at both ends (plan42) (a9a6e5a)
• tasks: command checks use the platform shell; POSIX-only check tests skip on Windows (63b17e5)

---

This PR was generated with Release Please. See documentation.