docs: changelog update 2026-07-04

CHANGELOG.md

@@ -1,5 +1,46 @@
 # Changelog
 
+## [Unreleased] - 2026-07-04
+
+### Features
+- feat(policy): Milestone-E production activation — GATE 3 auto-activation, authorization ALLOW path, code_executor invariant (8bc96607f, Tal Muskal, 14 hours ago)
+- feat(policy): implement Milestone D — tool-layer enforcement gates (GATE 1/2/3 + genty seam) (f72c865f0, Tal Muskal, 17 hours ago)
+- feat(policy): implement Milestone C — evidence producers (signed breakpoints, proxy + in-process attestation, attribution) (15f6e381d, Tal Muskal, 18 hours ago)
+- feat(policy): implement Milestone B — configurable policy engine (trust-chain evaluator + authorization issuance) (8917086be, Tal Muskal, 20 hours ago)
+- feat(policy): Milestone A unified trust core (envelopes, keys, chains) (c7434f541, Tal Muskal, 21 hours ago)
+
+### Bug Fixes
+- fix(policy): wire ALL load-bearing tool-layer gates onto production paths (Milestone D) (93f6d09d6, Tal Muskal, 15 hours ago)
+- fix(policy): wire Milestone-D tool-layer gates onto production paths (5ed5f6a24, Tal Muskal, 17 hours ago)
+- fix(policy): anchor signed-breakpoint enforcement to trusted config + wire streaming proxy attestation (6c237f529, Tal Muskal, 18 hours ago)
+- fix(policy): close global-option argv-evasion bypass in Milestone-B matcher (d52da64f7, Tal Muskal, 19 hours ago)
+- fix(policy): close four Milestone-B authorization-bypass defects + fold-ins (af7cdfbaa, Tal Muskal, 19 hours ago)
+- fix(policy): verify true delegation-chain linkage in trust core (fe759f625, Tal Muskal, 20 hours ago)
+
+### Refactors
+- refactor(trust): extract trust primitives to @a5c-ai/trust-core leaf package (8d360b20c, Tal Muskal, 7 hours ago)
+
+### Documentation
+- docs(policy): document shipped proof-based policy enforcement (Milestones A-E) (32a127734, Tal Muskal, 14 hours ago)
+- docs(policy): promote 4 review notes to required AC-53..56 per owner approval (82468de0d, Tal Muskal, 21 hours ago)
+- docs(security): proof-policy Draft 3 — close 3 residual adversarial-review attacks (0001bf707, Tal Muskal, 21 hours ago)
+- docs(security): revise proof-based policy enforcement spec after adversarial review (ee190ca37, Tal Muskal, 21 hours ago)
+- docs(design): add proof-based policy enforcement spec (a80a75fab, Tal Muskal, 22 hours ago)
+
+### Tests
+- test(policy): fix millisecond-boundary flake in GATE-3 credential wiring test (00ddcdb98, Tal Muskal, 15 hours ago)
+- test(policy): author Milestone E e2e trust-chain suite + example configs (d6b1de16f, Tal Muskal, 15 hours ago)
+- test(policy): fix malformed AC-10.3a GATE-1 fixture to a real sibling-call mismatch (852bccd26, Tal Muskal, 17 hours ago)
+- test(policy): author Milestone D test suite (tool-layer enforcement gates) (ddb5a1945, Tal Muskal, 17 hours ago)
+- test(policy): author Milestone C test suite (evidence producers) from design spec (bacc5085d, Tal Muskal, 19 hours ago)
+- test(policy): author Milestone B test suite (policy-engine) from design spec (3dae881ea, Tal Muskal, 20 hours ago)
+- test(policy): author Milestone A trust-core test suite from design spec (03cb86d42, Tal Muskal, 21 hours ago)
+
+### Maintenance
+- chore(policy): register @a5c-ai/trust-core + @a5c-ai/policy-adapter in lockfile (093029aad, Tal Muskal, 7 hours ago)
+- chore(graph): track upstream agent versions (733e662aa, a5c automation, 18 hours ago)
+- chore(graph): track upstream agent versions (9d8fbf02f, a5c automation, 18 hours ago)
+- Fix observe command failing to load: quote argument-hint value (#1123) (44a5d58b4, Daniel Kalman, 24 hours ago)
 ## [Unreleased] - 2026-07-02
 
 ### Bug Fixes

docs/daily-updates/2026-07-04.md

@@ -0,0 +1,80 @@
+# Daily Update - 2026-07-04
+
+## Summary of Changes
+### Features
+- feat(policy): Milestone-E production activation — GATE 3 auto-activation, authorization ALLOW path, code_executor invariant (8bc96607f, Tal Muskal, 14 hours ago)
+- feat(policy): implement Milestone D — tool-layer enforcement gates (GATE 1/2/3 + genty seam) (f72c865f0, Tal Muskal, 17 hours ago)
+- feat(policy): implement Milestone C — evidence producers (signed breakpoints, proxy + in-process attestation, attribution) (15f6e381d, Tal Muskal, 18 hours ago)
+- feat(policy): implement Milestone B — configurable policy engine (trust-chain evaluator + authorization issuance) (8917086be, Tal Muskal, 20 hours ago)
+- feat(policy): Milestone A unified trust core (envelopes, keys, chains) (c7434f541, Tal Muskal, 21 hours ago)
+
+### Bug Fixes
+- fix(policy): wire ALL load-bearing tool-layer gates onto production paths (Milestone D) (93f6d09d6, Tal Muskal, 15 hours ago)
+- fix(policy): wire Milestone-D tool-layer gates onto production paths (5ed5f6a24, Tal Muskal, 17 hours ago)
+- fix(policy): anchor signed-breakpoint enforcement to trusted config + wire streaming proxy attestation (6c237f529, Tal Muskal, 18 hours ago)
+- fix(policy): close global-option argv-evasion bypass in Milestone-B matcher (d52da64f7, Tal Muskal, 19 hours ago)
+- fix(policy): close four Milestone-B authorization-bypass defects + fold-ins (af7cdfbaa, Tal Muskal, 19 hours ago)
+- fix(policy): verify true delegation-chain linkage in trust core (fe759f625, Tal Muskal, 20 hours ago)
+
+### Refactors
+- refactor(trust): extract trust primitives to @a5c-ai/trust-core leaf package (8d360b20c, Tal Muskal, 7 hours ago)
+
+### Documentation
+- docs(policy): document shipped proof-based policy enforcement (Milestones A-E) (32a127734, Tal Muskal, 14 hours ago)
+- docs(policy): promote 4 review notes to required AC-53..56 per owner approval (82468de0d, Tal Muskal, 21 hours ago)
+- docs(security): proof-policy Draft 3 — close 3 residual adversarial-review attacks (0001bf707, Tal Muskal, 21 hours ago)
+- docs(security): revise proof-based policy enforcement spec after adversarial review (ee190ca37, Tal Muskal, 21 hours ago)
+- docs(design): add proof-based policy enforcement spec (a80a75fab, Tal Muskal, 22 hours ago)
+
+### Tests
+- test(policy): fix millisecond-boundary flake in GATE-3 credential wiring test (00ddcdb98, Tal Muskal, 15 hours ago)
+- test(policy): author Milestone E e2e trust-chain suite + example configs (d6b1de16f, Tal Muskal, 15 hours ago)
+- test(policy): fix malformed AC-10.3a GATE-1 fixture to a real sibling-call mismatch (852bccd26, Tal Muskal, 17 hours ago)
+- test(policy): author Milestone D test suite (tool-layer enforcement gates) (ddb5a1945, Tal Muskal, 17 hours ago)
+- test(policy): author Milestone C test suite (evidence producers) from design spec (bacc5085d, Tal Muskal, 19 hours ago)
+- test(policy): author Milestone B test suite (policy-engine) from design spec (3dae881ea, Tal Muskal, 20 hours ago)
+- test(policy): author Milestone A trust-core test suite from design spec (03cb86d42, Tal Muskal, 21 hours ago)
+
+### Maintenance
+- chore(policy): register @a5c-ai/trust-core + @a5c-ai/policy-adapter in lockfile (093029aad, Tal Muskal, 7 hours ago)
+- chore(graph): track upstream agent versions (733e662aa, a5c automation, 18 hours ago)
+- chore(graph): track upstream agent versions (9d8fbf02f, a5c automation, 18 hours ago)
+- Fix observe command failing to load: quote argument-hint value (#1123) (44a5d58b4, Daniel Kalman, 24 hours ago)
+
+## Links to PRs Merged
+- #1083 Track upstream agent CLI versions - https://github.com/a5c-ai/babysitter/pull/1083
+- #1097 docs: changelog update 2026-07-02 - https://github.com/a5c-ai/babysitter/pull/1097
+- #1120 Track upstream agent CLI releases - https://github.com/a5c-ai/babysitter/pull/1120
+- #1123 fix(plugins): quote observe command argument-hint so it loads - https://github.com/a5c-ai/babysitter/pull/1123
+- #1134 Track upstream agent CLI versions - https://github.com/a5c-ai/babysitter/pull/1134
+
+## Issues Opened
+- None found.
+
+## Issues Closed
+- None found.
+
+## CI Status Summary
+- Live Stack: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694197098
+- CI: in_progress/pending on changelog/daily-2026-07-04 - https://github.com/a5c-ai/babysitter/actions/runs/28694193720
+- Agent Review Dispatch: completed/cancelled on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694175337
+- Agent Review Dispatch: completed/cancelled on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694174912
+- Agent Review Dispatch: completed/cancelled on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694174417
+- Issue Triage Dispatch: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694168412
+- Issue Triage Dispatch: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694168396
+- CI: completed/cancelled on changelog/daily-2026-07-04 - https://github.com/a5c-ai/babysitter/actions/runs/28694168180
+- Agent Review Dispatch: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694150812
+- Issue Triage Dispatch: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694145971
+- Issue Triage Dispatch: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694145429
+- Agent Review Dispatch: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694144897
+- QA Daily: in_progress/pending on main - https://github.com/a5c-ai/babysitter/actions/runs/28694045688
+- Triage: Publish Failure: completed/failure on main - https://github.com/a5c-ai/babysitter/actions/runs/28682551339
+- Publish: completed/failure on staging - https://github.com/a5c-ai/babysitter/actions/runs/28682274345
+- Staging Sync Command Surfaces: completed/success on staging - https://github.com/a5c-ai/babysitter/actions/runs/28682274325
+- Agent Dispatch: completed/skipped on main - https://github.com/a5c-ai/babysitter/actions/runs/28670197424
+- Agent Plan Dispatch: completed/skipped on main - https://github.com/a5c-ai/babysitter/actions/runs/28670197403
+- QA Dispatch: completed/skipped on main - https://github.com/a5c-ai/babysitter/actions/runs/28670197398
+- Agent Review Dispatch: completed/skipped on main - https://github.com/a5c-ai/babysitter/actions/runs/28670197397
+
+## Live-stack Test Results
+- Live Stack: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694197098