Releases

0.7.0

86 commit(s) since v0.6.0.

Features

minvmd: warn within a minute when the switch datapath is lost (#1679) (86fd641)
minimald-rpc,minimald,minimal: end a task run's box daemon-side (#1680) (29a7f5d)
installer: install a staged version with --version (#1716) (c5091f0)
stdlib: bootstrap_rung attr class (#1752) (c4887be)
diag: min diag upload hands a bundle to the portal that diagnoses it (#1722) (4f46d58)

Fixes

Probe session git info on the host, not in the daemon (#1430) (21f4074)
min: offer min init scaffold when add has no minimal.toml (#1538) (d8665fd)
check: treat libresolv as a glibc stub lib (#1561) (85c9b4a)
show a download meter when adding packages in a sandbox (#1583) (63a4b99)
deps: bump yanked chacha20 0.10.1 -> 0.10.2 (#1589) (dd63965)
deps: pin bitmaps 3.1.0 to clear RUSTSEC-2025-0167 (unsound) (#1588) (bab81cf)
release: a breaking change under any type bumps the minor (#1544) (9a26da1)
release: pin every GitHub Release tag to the built commit (#1706) (fd4c076)
release: leave unstable alone on versioned builds (#1712) (87c7362)
lint: scope the strict clippy gate to the branch's own lines, and take it out of just fix (#1749) (7f60810)
sandbox2,minimald: fork every container on a thread that never retires (#1748) (ccfb654)
minimald: close the client channel when shedding a stalled binding (#1747) (dd38a84)
minimald: trim the state volume on every tick and at quiesce (#1744) (6727d04)
minimald: add new ListenArgs fields to the test_cli initializer (#1757) (cb9d115)
minvmd: detect leaked __krun-vmm in classify_detach_poll (#1732) (e0e322c)
minvmd: raise RLIMIT_NOFILE in the VMM child before boot (#1740) (285c846)
mip: warn on AppArmor-restricted user namespaces before builds (#1734) (e1528b7)
minimald: distinguish attach timeout from closed, detach on stop timeout (#1733) (3d20a68)
minimal,minimald: record the data volume's allocated size in diagnostic bundles (#1743) (1a37a15)
minimal: stop task run hanging on a held-open stdin pipe (#1741) (9d42580)
mctx: attribute missing read-only patch source errors (#1739) (486e595)
cap and exclude plain-directory patch sources (#1736) (f70c637)
test(e2e): exercise env_vars inherit across the VM boundary (#1543) (766b647)

Other changes

verify: the agent runtime's gate runs clippy and the touched crates (#1570) (25d38aa)
deny: ignore RUSTSEC-2026-0292 until nickel pins imbl-sized-chunks 0.2 (#1576) (4368d63)
deps: bump the cargo group with 4 updates (#1574) (4bd4aee)
deps: bump taiki-e/install-action in the github-actions group (#1573) (8241963)
specs: move the native deny-all resolver rule under NET-079 (#1566) (47f70da)
specs: bind box identity, scoped revocation and the proxy leg in BEP and NET (#1578) (24dd6f2)
agent-verify: scope clippy to the touched crates (#1674) (6356668)
check: cover MissingRuntimeDeps::check interpreter and dep-cache paths (#1677) (294765a)
hygiene: disable zizmor self-repository audit and pin zizmor (#1590) (9fd37f3)
nightly: notify on hygiene failures and surface the stress step (#1591) (802317a)
minimald: add proptest and a first request-head property test (#1678) (14eaac2)
T4 — Stop min login minting certificates and remove min ssh-forward from the client (#1673) (2608bdb)
T1 — Route two-label box names through the proxy, own-address boxes on the VM host included, and log every refusal (#1685) (054c6e1)
T7 — Show --network and --ingress with the new spellings and hint at the old ones (#1676) (fc3b441)
T26 — Retry the hostname listener and clear its warning without a restart (#1681) (b684267)
T2 — Resolve host.min.internal from every box and route the old literal host address with a notice (#1683) (ca598af)
agents: list every workflow in the CI lane map (#1431) (18b4784)
T23 — Prove a box outlives its client and a lost exec takes only its own command (#1689) (3f78b05)
T12 — Answer the box zone from a loopback answerer (#1694) (4e0abc5)
T17 — Accept the four egress fields on own-address and host-address boxes and show the effective rules (#1690) (df86cce)
T5 — Remove the HTTPS reverse proxy and client certificates from the daemon and serve direct-tcpip in every build (#1698) (f1c9b10)
T52 — Add the dynamic_ingress setting to the box's ingress policy (#1699) (e36343f)
T8 — Seal a none box, vsock included, and keep attach working (#1692) (db96615)
return errors instead of panicking on untrusted input (#1560) (ae6d033)
minimald: unify the session process test doubles (#1558) (51ecd14)
T3 — Names through the shipped proxy, end to end (#1704) (6f57509)
T59 — Create a named VM with its own state, socket and daemon, leaving the default VM's paths unchanged (#1702) (22ad605)
T51 — Forward a box port to the laptop over the session (#1705) (93dad7e)
T27 — Configure or auto-select the proxy port and route two daemons' names at once (#1701) (fecbfd4)
promote: make AUR and Homebrew publishing opt-in on stable promotions (#1695) (e5b0b89)
release: lead the pipeline doc with the stable release runbook (#1696) (d208e3c)
T18 — Decide every frame with one pure verdict and enforce own-address egress at the relay (#1700) (1cdf5aa)
run the five required lanes on release branches (#1715) (a62f11e)
make the session outbound request its own e2e case (#1720) (1c40f33)
T6 — Retired surfaces gone, end to end (#1717) (25bfabe)
T29 — Hostnames recover, and two daemons share a machine, end to end (#1721) (973f507)
add Vale prose linting for markdown (#1352) (2e44d1b)
lint: enable fifteen clean clippy lints and add a diff-scoped gate (#1724) (2b004df)
T40 — Reject relay frames whose source is not the box's lease (#1738) (3c17671)
T34 — Refuse proxied requests exactly as direct connections, and close HTTP/2 at the proxy (#1737) (7051b70)
T9 — Publish an own-address box on host loopback from a fresh install, with the installer checking the switch binary (#1723) (f9945c0)
add proxy_refuses_like_direct to the session e2e (#1746) (a909897)
T11 — Choose a network posture on a stock install, end to end (#1745) (000dade)
T30 — Pin allowed names to the addresses they resolved to, refuse denied ranges, and answer AAAA, HTTPS and SVCB empty (#1730) (82ef7e3)
T19 — Default own-address boxes to deny-all, with the announcement, the opt-out, and task runs under the same rules (#1727) (25436fe)
[worker:coverage] test minimal::diag::cmd_bug bundle collection (#1684) (699c0f0)
[worker:coverage] test minimald async_main CLI/path helpers (#1682) (8c8573a)
[worker:coverage] test cmd_task_run env-resolution failures (#1594) (4359c6b)
T39 — Run every box without CAP_NET_RAW (#1742) (ea29f32)
deps: bump the cargo group with 8 updates (#1751) (eb4f8a9)
deps: bump taiki-e/install-action in the github-actions group (#1750) (0ab6010)
declare 0.7.0 as the next release (#1758) (3828ef8)
loadouts: document directory loadout layout in --loadout row (#1754) (333eea1)
readme: restore the muscle-memory sentence in the Loadouts section (#1731) (da927cc)
gate workflow changes on actionlint and zizmor (#1592) (427b13b)
T13 — Advise the resolver command at session start and probe the reserved range (#1725) (eb81dd7)
T67 — Move the reserved local range to the design's 127.0.64.0/24 (#1761) (5e2b46e)
installer: assert linux amd64 and arm64 ship the VM stack (#1763) (192b328)

0.6.0

127 commit(s) since v0.5.4.

Features

op: capture upstream NOTICE/COPYRIGHT files at source extraction (#1040) (#1341) (a812c94)
containers: plumb container specs into graph, spechash gen, cache meta (a30ac97)
packaging: CI-owned AUR, Homebrew, and deb/rpm/apk distribution (#1313) (8e7e72c)
support loadout.toml in per-loadout directories (#1346) (8750096)
sandbox2: add the network plan and the launch sequence (#1422) (28cbda2)
minimald: one network provider for every sandbox path (#1371) (ace5ae4)
minvmd: warn within a minute when the switch datapath is lost (#1679) (86fd641)
minimald-rpc,minimald,minimal: end a task run's box daemon-side (#1680) (29a7f5d)
installer: install a staged version with --version (#1716) (c5091f0)

Fixes

document activating a path that already has a session (#1348) (eeabf23)
document session activate behaviour when a path has no minimal.toml (#1347) (1dece5e)
refresh only the default packages remote when scaffolding minimal.toml (#1345) (0faf940)
bound minimald host mailbox sends so a wedged host can't hang attach or stop (#1369) (64b55f4)
surface the %{ escape when Nickel-evaluated task command strings fail (#1367) (b07fc39)
op: make the notices temp filename unique per write (#1365) (31c4db2)
nightly smoke races — detached vcs worktrees, dead-host shutdown gating, e2e teardown (#1378) (c6cc5fe)
raise recursion_limit to 256 in mip and related crates for rustc query-depth overflow (#1384) (5f36593)
minvmd: wait for a race winner on autospawn child exit (#1385) (5b58c68)
name the coding agents the registry packages (#1396) (c54f40e)
Lead Getting Started with the three-command path and reconcile the installer URL to /stable (#1406) (6f03659)
minimal: skip host cache warm-up for VM-backed providers (#1417) (c6a7422)
readme: end the multiplexer sentence at the loadout (#1411) (6927869)
minimald: say what ip said when a tap cannot reach its namespace (#1423) (6e9381b)
clarify min update re-pins upstream instead of self-updating (#1416) (c577326)
assert guest egress in the session e2e so a lost gvproxy switch fails the proof (#1392) (a89486e)
prune content-addressed store from diagnostic state listing (#1414) (54835ad)
bound minimald host-to-binding send so a dark client can't wedge a session (#1408) (3199247)
report a wrong-depth mfile key at its correct path and warn once per file (#1390) (6ec9632)
navigate the session-exit menu by label in the e2e PTY driver (#1386) (8d2fe77)
kani: unblock the proof build on Kani 0.68.0's std shim (#1434) (a46730c)
ci: scope the spec-lint app token to the permissions it uses (#1432) (db29dbe)
Treat plain-directory patch sources as recursive globs (#1541) (c6ba073)
mfile: do not fabricate missing read-only patch sources (#1540) (fbef9a6)
make bashrc run when $SHELL is set to bash (#1400) (91acc6f)
Probe session git info on the host, not in the daemon (#1430) (21f4074)
min: offer min init scaffold when add has no minimal.toml (#1538) (d8665fd)
check: treat libresolv as a glibc stub lib (#1561) (85c9b4a)
show a download meter when adding packages in a sandbox (#1583) (63a4b99)
deps: bump yanked chacha20 0.10.1 -> 0.10.2 (#1589) (dd63965)
deps: pin bitmaps 3.1.0 to clear RUSTSEC-2025-0167 (unsound) (#1588) (bab81cf)
release: a breaking change under any type bumps the minor (#1544) (9a26da1)
release: pin every GitHub Release tag to the built commit (#1706) (fd4c076)
release: leave unstable alone on versioned builds (#1712) (87c7362)

Other changes

add the template and its advisory linter (#1307) (67e6085)
skip commitlint on Dependabot commits (#1364) (6120afd)
deps: bump the cargo group with 8 updates (#1362) (e8551e2)
deps: bump taiki-e/install-action in the github-actions group (#1361) (323ae08)
specs: refresh TEMPLATE.md; there is no status field (#1368) (a514ac9)
deps: bump the cargo group with 10 updates (#1398) (140bb1b)
deps: bump taiki-e/install-action in the github-actions group (#1397) (456763e)
README.md: add For coding agents setup section (#1394) (af90016)
deps: bump rustls to 0.23.45 for RUSTSEC-2026-0285 (#1409) (36475b7)
remove the minimal-review caller (#1410) (70899df)
readme: note min dash, git push min://, lifecycle hooks, session policy (#1395) (f4df887)
README: position Minimal as not a multiplexer, name loadouts skill (#1399) (e740e8e)
reference: note SHELL selects the attach shell in [session.vars] (#1407) (f2e32e0)
op: lock package ordering in min init stack matching (#1391) (6a815b0)
remove the review policy file; the defaults apply (#1412) (41d1987)
decode: cover Error::report_to AttrTooDeep branch (#1413) (43183a4)
mip: document cache notices subcommand (#1415) (24dbbfe)
README: lead the first screen with the agent box and its boundary (#1393) (31fd8fd)
README: link the loadouts blog post from the loadouts paragraph (#1424) (13e9bdd)
ignore .DS_Store and add just test-one (#1421) (0b4302f)
README: sessions + min dash demo above the first heading (#1429) (b2a86d1)
specs: add the box networking spec (NET) (#1380) (2d269cd)
specs: add the local box egress proxy spec (BEP) (#1426) (cb384e3)
purge verified-dead code and narrow dead_code allows (#1549) (5496431)
release: build once with an explicit release version, tag last (#1375) (23929a6)
kani: move to Kani 0.68.0, drop the MSRV relaxation, name compile failures (#1435) (a157ef4)
minimal-toml: pin pkgs at f4de33d0 and give sessions cargo-nextest (#1551) (d26971c)
minimal-toml: declare fmt and verify for the agent runtime (#1542) (7b6f6d2)
kani: run the proof lane for crates/bep changes (#1537) (8052fe8)
spikes: record the NET plan's two experiments (SP1, SP2) (#1539) (d55f919)
specs: bind BEP's full-breadth marker and the name-constraint subtree rule (#1433) (0b15777)
move oversized inline test modules into sibling files (#1554) (2da1c8f)
specs: rule box idle and stop as the client's in NET (#1436) (55fdade)
bundle repeated argument lists into named structs (#1553) (62b29e0)
share the codespan stderr renderer (#1550) (04fc322)
convert hand-written error enums to thiserror (#1552) (6dbed1c)
spikes: name nsdelegate, narrow the resolver carve-out, add the native resolver gap (#1562) (f761a2d)
split the god modules into focused submodules (#1557) (6b425f6)
specs: close the macOS loopback and cgroup classifier questions in NET (#1563) (9b763dd)
verify: the agent runtime's gate runs clippy and the touched crates (#1570) (25d38aa)
deny: ignore RUSTSEC-2026-0292 until nickel pins imbl-sized-chunks 0.2 (#1576) (4368d63)
deps: bump the cargo group with 4 updates (#1574) (4bd4aee)
deps: bump taiki-e/install-action in the github-actions group (#1573) (8241963)
specs: move the native deny-all resolver rule under NET-079 (#1566) (47f70da)
specs: bind box identity, scoped revocation and the proxy leg in BEP and NET (#1578) (24dd6f2)
agent-verify: scope clippy to the touched crates (#1674) (6356668)
check: cover MissingRuntimeDeps::check interpreter and dep-cache paths (#1677) (294765a)
hygiene: disable zizmor self-repository audit and pin zizmor (#1590) (9fd37f3)
nightly: notify on hygiene failures and surface the stress step (#1591) (802317a)
minimald: add proptest and a first request-head property test (#1678) (14eaac2)
T4 — Stop min login minting certificates and remove min ssh-forward from the client (#1673) (2608bdb)
T1 — Route two-label box names through the proxy, own-address boxes on the VM host included, and log every refusal (#1685) (054c6e1)
T7 — Show --network and --ingress with the new spellings and hint at the old ones (#1676) (fc3b441)
T26 — Retry the hostname listener and clear its warning without a restart (#1681) (b684267)
T2 — Resolve host.min.internal from every box and route the old literal host address with a notice (#1683) (ca598af)
agents: list every workflow in the CI lane map (#1431) (18b4784)
T23 — Prove a box outlives its client and a lost exec takes only its own command (#1689) (3f78b05)
T12 — Answer the box zone from a loopback answerer (#1694) (4e0abc5)
T17 — Accept the four egress fields on own-address and host-address boxes and show the effective rules (#1690) (df86cce)
T5 — Remove the HTTPS reverse proxy and client certificates from the daemon and serve direct-tcpip in every build (#1698) (f1c9b10)
T52 — Add the dynamic_ingress setting to the box's ingress policy (#1699) (e36343f)
T8 — Seal a none box, vsock included, and keep attach working (#1692) (db96615)
return errors instead of panicking on untrusted input (#1560) (ae6d033)
minimald: unify the session process test doubles (#1558) (51ecd14)
T3 — Names through the shipped proxy, end to end (#1704) (6f57509)
T59 — Create a named VM with its own state, socket and daemon, leaving the default VM's paths unchanged (#1 10BC8 702) (22ad605)
T51 — Forward a box port to the laptop over the session (#1705) (93dad7e)
T27 — Configure or auto-select the proxy port and route two daemons' names at once (#1701) (fecbfd4)
promote: make AUR and Homebrew publishing opt-in on stable promotions (#1695) (e5b0b89)
release: lead the pipeline doc with the stable release runbook (#1696) (d208e3c)
T18 — Decide every frame with one pure verdict and enforce own-address egress at the relay (#1700) (1cdf5aa)
run the five required lanes on release branches (#1715) (a62f11e)
make the session outbound request its own e2e case (#1720) (1c40f33)
T6 — Retired surfaces gone, end to end (#1717) (25bfabe)
T29 — Hostna...

0.6.0

126 commit(s) since v0.5.4.

Features

op: capture upstream NOTICE/COPYRIGHT files at source extraction (#1040) (#1341) (a812c94)
containers: plumb container specs into graph, spechash gen, cache meta (a30ac97)
packaging: CI-owned AUR, Homebrew, and deb/rpm/apk distribution (#1313) (8e7e72c)
support loadout.toml in per-loadout directories (#1346) (8750096)
sandbox2: add the network plan and the launch sequence (#1422) (28cbda2)
minimald: one network provider for every sandbox path (#1371) (ace5ae4)
minvmd: warn within a minute when the switch datapath is lost (#1679) (86fd641)
minimald-rpc,minimald,minimal: end a task run's box daemon-side (#1680) (29a7f5d)
installer: install a staged version with --version (#1716) (c5091f0)

Fixes

document activating a path that already has a session (#1348) (eeabf23)
document session activate behaviour when a path has no minimal.toml (#1347) (1dece5e)
refresh only the default packages remote when scaffolding minimal.toml (#1345) (0faf940)
bound minimald host mailbox sends so a wedged host can't hang attach or stop (#1369) (64b55f4)
surface the %{ escape when Nickel-evaluated task command strings fail (#1367) (b07fc39)
op: make the notices temp filename unique per write (#1365) (31c4db2)
nightly smoke races — detached vcs worktrees, dead-host shutdown gating, e2e teardown (#1378) (c6cc5fe)
raise recursion_limit to 256 in mip and related crates for rustc query-depth overflow (#1384) (5f36593)
minvmd: wait for a race winner on autospawn child exit (#1385) (5b58c68)
name the coding agents the registry packages (#1396) (c54f40e)
Lead Getting Started with the three-command path and reconcile the installer URL to /stable (#1406) (6f03659)
minimal: skip host cache warm-up for VM-backed providers (#1417) (c6a7422)
readme: end the multiplexer sentence at the loadout (#1411) (6927869)
minimald: say what ip said when a tap cannot reach its namespace (#1423) (6e9381b)
clarify min update re-pins upstream instead of self-updating (#1416) (c577326)
assert guest egress in the session e2e so a lost gvproxy switch fails the proof (#1392) (a89486e)
prune content-addressed store from diagnostic state listing (#1414) (54835ad)
bound minimald host-to-binding send so a dark client can't wedge a session (#1408) (3199247)
report a wrong-depth mfile key at its correct path and warn once per file (#1390) (6ec9632)
navigate the session-exit menu by label in the e2e PTY driver (#1386) (8d2fe77)
kani: unblock the proof build on Kani 0.68.0's std shim (#1434) (a46730c)
ci: scope the spec-lint app token to the permissions it uses (#1432) (db29dbe)
Treat plain-directory patch sources as recursive globs (#1541) (c6ba073)
mfile: do not fabricate missing read-only patch sources (#1540) (fbef9a6)
make bashrc run when $SHELL is set to bash (#1400) (91acc6f)
Probe session git info on the host, not in the daemon (#1430) (21f4074)
min: offer min init scaffold when add has no minimal.toml (#1538) (d8665fd)
check: treat libresolv as a glibc stub lib (#1561) (85c9b4a)
show a download meter when adding packages in a sandbox (#1583) (63a4b99)
deps: bump yanked chacha20 0.10.1 -> 0.10.2 (#1589) (dd63965)
deps: pin bitmaps 3.1.0 to clear RUSTSEC-2025-0167 (unsound) (#1588) (bab81cf)
release: a breaking change under any type bumps the minor (#1544) (9a26da1)
release: pin every GitHub Release tag to the built commit (#1706) (fd4c076)
release: leave unstable alone on versioned builds (#1712) (87c7362)

Other changes

add the template and its advisory linter (#1307) (67e6085)
skip commitlint on Dependabot commits (#1364) (6120afd)
deps: bump the cargo group with 8 updates (#1362) (e8551e2)
deps: bump taiki-e/install-action in the github-actions group (#1361) (323ae08)
specs: refresh TEMPLATE.md; there is no status field (#1368) (a514ac9)
deps: bump the cargo group with 10 updates (#1398) (140bb1b)
deps: bump taiki-e/install-action in the github-actions group (#1397) (456763e)
README.md: add For coding agents setup section (#1394) (af90016)
deps: bump rustls to 0.23.45 for RUSTSEC-2026-0285 (#1409) (36475b7)
remove the minimal-review caller (#1410) (70899df)
readme: note min dash, git push min://, lifecycle hooks, session policy (#1395) (f4df887)
README: position Minimal as not a multiplexer, name loadouts skill (#1399) (e740e8e)
reference: note SHELL selects the attach shell in [session.vars] (#1407) (f2e32e0)
op: lock package ordering in min init stack matching (#1391) (6a815b0)
remove the review policy file; the defaults apply (#1412) (41d1987)
decode: cover Error::report_to AttrTooDeep branch (#1413) (43183a4)
mip: document cache notices subcommand (#1415) (24dbbfe)
README: lead the first screen with the agent box and its boundary (#1393) (31fd8fd)
README: link the loadouts blog post from the loadouts paragraph (#1424) (13e9bdd)
ignore .DS_Store and add just test-one (#1421) (0b4302f)
README: sessions + min dash demo above the first heading (#1429) (b2a86d1)
specs: add the box networking spec (NET) (#1380) (2d269cd)
specs: add the local box egress proxy spec (BEP) (#1426) (cb384e3)
purge verified-dead code and narrow dead_code allows (#1549) (5496431)
release: build once with an explicit release version, tag last (#1375) (23929a6)
kani: move to Kani 0.68.0, drop the MSRV relaxation, name compile failures (#1435) (a157ef4)
minimal-toml: pin pkgs at f4de33d0 and give sessions cargo-nextest (#1551) (d26971c)
minimal-toml: declare fmt and verify for the agent runtime (#1542) (7b6f6d2)
kani: run the proof lane for crates/bep changes (#1537) (8052fe8)
spikes: record the NET plan's two experiments (SP1, SP2) (#1539) (d55f919)
specs: bind BEP's full-breadth marker and the name-constraint subtree rule (#1433) (0b15777)
move oversized inline test modules into sibling files (#1554) (2da1c8f)
specs: rule box idle and stop as the client's in NET (#1436) (55fdade)
bundle repeated argument lists into named structs (#1553) (62b29e0)
share the codespan stderr renderer (#1550) (04fc322)
convert hand-written error enums to thiserror (#1552) (6dbed1c)
spikes: name nsdelegate, narrow the resolver carve-out, add the native resolver gap (#1562) (f761a2d)
split the god modules into focused submodules (#1557) (6b425f6)
specs: close the macOS loopback and cgroup classifier questions in NET (#1563) (9b763dd)
verify: the agent runtime's gate runs clippy and the touched crates (#1570) (25d38aa)
deny: ignore RUSTSEC-2026-0292 until nickel pins imbl-sized-chunks 0.2 (#1576) (4368d63)
deps: bump the cargo group with 4 updates (#1574) (4bd4aee)
deps: bump taiki-e/install-action in the github-actions group (#1573) (8241963)
specs: move the native deny-all resolver rule under NET-079 (#1566) (47f70da)
specs: bind box identity, scoped revocation and the proxy leg in BEP and NET (#1578) (24dd6f2)
agent-verify: scope clippy to the touched crates (#1674) (6356668)
check: cover MissingRuntimeDeps::check interpreter and dep-cache paths (#1677) (294765a)
hygiene: disable zizmor self-repository audit and pin zizmor (#1590) (9fd37f3)
nightly: notify on hygiene failures and surface the stress step (#1591) (802317a)
minimald: add proptest and a first request-head property test (#1678) (14eaac2)
T4 — Stop min login minting certificates and remove min ssh-forward from the client (#1673) (2608bdb)
T1 — Route two-label box names through the proxy, own-address boxes on the VM host included, and log every refusal (#1685) (054c6e1)
T7 — Show --network and --ingress with the new spellings and hint at the old ones (#1676) (fc3b441)
T26 — Retry the hostname listener and clear its warning without a restart (#1681) (b684267)
T2 — Resolve host.min.internal from every box and route the old literal host address with a notice (#1683) (ca598af)
agents: list every workflow in the CI lane map (#1431) (18b4784)
T23 — Prove a box outlives its client and a lost exec takes only its own command (#1689) (3f78b05)
T12 — Answer the box zone from a loopback answerer (#1694) (4e0abc5)
T17 — Accept the four egress fields on own-address and host-address boxes and show the effective rules (#1690) (df86cce)
T5 — Remove the HTTPS reverse proxy and client certificates from the daemon and serve direct-tcpip in every build (#1698) (f1c9b10)
T52 — Add the dynamic_ingress setting to the box's ingress policy (#1699) (e36343f)
T8 — Seal a none box, vsock included, and keep attach working (#1692) (db96615)
return errors instead of panicking on untrusted input (#1560) (ae6d033)
minimald: unify the session process test doubles (#1558) (51ecd14)
T3 — Names through the shipped proxy, end to end (#1704) (6f57509)
T59 — Create a named VM with its own state, socket and daemon, leaving the default VM's paths unchanged (#1702) (22ad605)
T51 — Forward a box port to the laptop over the session (#1705) (93dad7e)
T27 — Configure or auto-select the proxy port and route two daemons' names at once (#1701) (fecbfd4)
promote: make AUR and Homebrew publishing opt-in on stable promotions (#1695) (e5b0b89)
release: lead the pipeline doc with the stable release runbook (#1696) (d208e3c)
T18 — Decide every frame with one pure verdict and enforce own-address egress at the relay (#1700) (1cdf5aa)
run the five required lanes on release branches (#1715) (a62f11e)
make the session outbound request its own e2e case (#1720) (1c40f33)
T6 — Retired surfaces gone, end to end (#1717) (25bfabe)
T29 — Hostna...

0.6.0

121 commit(s) since v0.5.4.

Features

op: capture upstream NOTICE/COPYRIGHT files at source extraction (#1040) (#1341) (a812c94)
containers: plumb container specs into graph, spechash gen, cache meta (a30ac97)
packaging: CI-owned AUR, Homebrew, and deb/rpm/apk distribution (#1313) (8e7e72c)
support loadout.toml in per-loadout directories (#1346) (8750096)
sandbox2: add the network plan and the launch sequence (#1422) (28cbda2)
minimald: one network provider for every sandbox path (#1371) (ace5ae4)
minvmd: warn within a minute when the switch datapath is lost (#1679) (86fd641)
minimald-rpc,minimald,minimal: end a task run's box daemon-side (#1680) (29a7f5d)
installer: install a staged version with --version (#1716) (c5091f0)

Fixes

document activating a path that already has a session (#1348) (eeabf23)
document session activate behaviour when a path has no minimal.toml (#1347) (1dece5e)
refresh only the default packages remote when scaffolding minimal.toml (#1345) (0faf940)
bound minimald host mailbox sends so a wedged host can't hang attach or stop (#1369) (64b55f4)
surface the %{ escape when Nickel-evaluated task command strings fail (#1367) (b07fc39)
op: make the notices temp filename unique per write (#1365) (31c4db2)
nightly smoke races — detached vcs worktrees, dead-host shutdown gating, e2e teardown (#1378) (c6cc5fe)
raise recursion_limit to 256 in mip and related crates for rustc query-depth overflow (#1384) (5f36593)
minvmd: wait for a race winner on autospawn child exit (#1385) (5b58c68)
name the coding agents the registry packages (#1396) (c54f40e)
Lead Getting Started with the three-command path and reconcile the installer URL to /stable (#1406) (6f03659)
minimal: skip host cache warm-up for VM-backed providers (#1417) (c6a7422)
readme: end the multiplexer sentence at the loadout (#1411) (6927869)
minimald: say what ip said when a tap cannot reach its namespace (#1423) (6e9381b)
clarify min update re-pins upstream instead of self-updating (#1416) (c577326)
assert guest egress in the session e2e so a lost gvproxy switch fails the proof (#1392) (a89486e)
prune content-addressed store from diagnostic state listing (#1414) (54835ad)
bound minimald host-to-binding send so a dark client can't wedge a session (#1408) (3199247)
report a wrong-depth mfile key at its correct path and warn once per file (#1390) (6ec9632)
navigate the session-exit menu by label in the e2e PTY driver (#1386) (8d2fe77)
kani: unblock the proof build on Kani 0.68.0's std shim (#1434) (a46730c)
ci: scope the spec-lint app token to the permissions it uses (#1432) (db29dbe)
Treat plain-directory patch sources as recursive globs (#1541) (c6ba073)
mfile: do not fabricate missing read-only patch sources (#1540) (fbef9a6)
make bashrc run when $SHELL is set to bash (#1400) (91acc6f)
Probe session git info on the host, not in the daemon (#1430) (21f4074)
min: offer min init scaffold when add has no minimal.toml (#1538) (d8665fd)
check: treat libresolv as a glibc stub lib (#1561) (85c9b4a)
show a download meter when adding packages in a sandbox (#1583) (63a4b99)
deps: bump yanked chacha20 0.10.1 -> 0.10.2 (#1589) (dd63965)
deps: pin bitmaps 3.1.0 to clear RUSTSEC-2025-0167 (unsound) (#1588) (bab81cf)
release: a breaking change under any type bumps the minor (#1544) (9a26da1)
release: pin every GitHub Release tag to the built commit (#1706) (fd4c076)
release: leave unstable alone on versioned builds (#1712) (87c7362)

Other changes

add the template and its advisory linter (#1307) (67e6085)
skip commitlint on Dependabot commits (#1364) (6120afd)
deps: bump the cargo group with 8 updates (#1362) (e8551e2)
deps: bump taiki-e/install-action in the github-actions group (#1361) (323ae08)
specs: refresh TEMPLATE.md; there is no status field (#1368) (a514ac9)
deps: bump the cargo group with 10 updates (#1398) (140bb1b)
deps: bump taiki-e/install-action in the github-actions group (#1397) (456763e)
README.md: add For coding agents setup section (#1394) (af90016)
deps: bump rustls to 0.23.45 for RUSTSEC-2026-0285 (#1409) (36475b7)
remove the minimal-review caller (#1410) (70899df)
readme: note min dash, git push min://, lifecycle hooks, session policy (#1395) (f4df887)
README: position Minimal as not a multiplexer, name loadouts skill (#1399) (e740e8e)
reference: note SHELL selects the attach shell in [session.vars] (#1407) (f2e32e0)
op: lock package ordering in min init stack matching (#1391) (6a815b0)
remove the review policy file; the defaults apply (#1412) (41d1987)
decode: cover Error::report_to AttrTooDeep branch (#1413) (43183a4)
mip: document cache notices subcommand (#1415) (24dbbfe)
README: lead the first screen with the agent box and its boundary (#1393) (31fd8fd)
README: link the loadouts blog post from the loadouts paragraph (#1424) (13e9bdd)
ignore .DS_Store and add just test-one (#1421) (0b4302f)
README: sessions + min dash demo above the first heading (#1429) (b2a86d1)
specs: add the box networking spec (NET) (#1380) (2d269cd)
specs: add the local box egress proxy spec (BEP) (#1426) (cb384e3)
purge verified-dead code and narrow dead_code allows (#1549) (5496431)
release: build once with an explicit release version, tag last (#1375) (23929a6)
kani: move to Kani 0.68.0, drop the MSRV relaxation, name compile failures (#1435) (a157ef4)
minimal-toml: pin pkgs at f4de33d0 and give sessions cargo-nextest (#1551) (d26971c)
minimal-toml: declare fmt and verify for the agent runtime (#1542) (7b6f6d2)
kani: run the proof lane for crates/bep changes (#1537) (8052fe8)
spikes: record the NET plan's two experiments (SP1, SP2) (#1539) (d55f919)
specs: bind BEP's full-breadth marker and the name-constraint subtree rule (#1433) (0b15777)
move oversized inline test modules into sibling files (#1554) (2da1c8f)
specs: rule box idle and stop as the client's in NET (#1436) (55fdade)
bundle repeated argument lists into named structs (#1553) (62b29e0)
share the codespan stderr renderer (#1550) (04fc322)
convert hand-written error enums to thiserror (#1552) (6dbed1c)
spikes: name nsdelegate, narrow the resolver carve-out, add the native resolver gap (#1562) (f761a2d)
split the god modules into focused submodules (#1557) (6b425f6)
specs: close the macOS loopback and cgroup classifier questions in NET (#1563) (9b763dd)
verify: the agent runtime's gate runs clippy and the touched crates (#1570) (25d38aa)
deny: ignore RUSTSEC-2026-0292 until nickel pins imbl-sized-chunks 0.2 (#1576) (4368d63)
deps: bump the cargo group with 4 updates (#1574) (4bd4aee)
deps: bump taiki-e/install-action in the github-actions group (#1573) (8241963)
specs: move the native deny-all resolver rule under NET-079 (#1566) (47f70da)
specs: bind box identity, scoped revocation and the proxy leg in BEP and NET (#1578) (24dd6f2)
agent-verify: scope clippy to the touched crates (#1674) (6356668)
check: cover MissingRuntimeDeps::check interpreter and dep-cache paths (#1677) (294765a)
hygiene: disable zizmor self-repository audit and pin zizmor (#1590) (9fd37f3)
nightly: notify on hygiene failures and surface the stress step (#1591) (802317a)
minimald: add proptest and a first request-head property test (#1678) (14eaac2)
T4 — Stop min login minting certificates and remove min ssh-forward from the client (#1673) (2608bdb)
T1 — Route two-label box names through the proxy, own-address boxes on the VM host included, and log every refusal (#1685) (054c6e1)
T7 — Show --network and --ingress with the new spellings and hint at the old ones (#1676) (fc3b441)
T26 — Retry the hostname listener and clear its warning without a restart (#1681) (b684267)
T2 — Resolve host.min.internal from every box and route the old literal host address with a notice (#1683) (ca598af)
agents: list every workflow in the CI lane map (#1431) (18b4784)
T23 — Prove a box outlives its client and a lost exec takes only its own command (#1689) (3f78b05)
T12 — Answer the box zone from a loopback answerer (#1694) (4e0abc5)
T17 — Accept the four egress fields on own-address and host-address boxes and show the effective rules (#1690) (df86cce)
T5 — Remove the HTTPS reverse proxy and client certificates from the daemon and serve direct-tcpip in every build (#1698) (f1c9b10)
T52 — Add the dynamic_ingress setting to the box's ingress policy (#1699) (e36343f)
T8 — Seal a none box, vsock included, and keep attach working (#1692) (db96615)
return errors instead of panicking on untrusted input (#1560) (ae6d033)
minimald: unify the session process test doubles (#1558) (51ecd14)
T3 — Names through the shipped proxy, end to end (#1704) (6f57509)
T59 — Create a named VM with its own state, socket and daemon, leaving the default VM's paths unchanged (#1702) (22ad605)
T51 — Forward a box port to the laptop over the session (#1705) (93dad7e)
T27 — Configure or auto-select the proxy port and route two daemons' names at once (#1701) (fecbfd4)
promote: make AUR and Homebrew publishing opt-in on stable promotions (#1695) (e5b0b89)
release: lead the pipeline doc with the stable release runbook (#1696) (d208e3c)
T18 — Decide every frame with one pure verdict and enforce own-address egress at the relay (#1700) (1cdf5aa)
run the five required lanes on release branches (#1715) (a62f11e)
make the session outbound request its own e2e case (#1720) (1c40f33)
T6 — Retired surfaces gone, end to end (#1717) (25bfabe)
T29 — Hostna...

0.6.0

80 commit(s) since v0.5.4.

Features

op: capture upstream NOTICE/COPYRIGHT files at source extraction (#1040) (#1341) (a812c94)
containers: plumb container specs into graph, spechash gen, cache meta (a30ac97)
packaging: CI-owned AUR, Homebrew, and deb/rpm/apk distribution (#1313) (8e7e72c)
support loadout.toml in per-loadout directories (#1346) (8750096)
sandbox2: add the network plan and the launch sequence (#1422) (28cbda2)
minimald: one network provider for every sandbox path (#1371) (ace5ae4)

Fixes

document activating a path that already has a session (#1348) (eeabf23)
document session activate behaviour when a path has no minimal.toml (#1347) (1dece5e)
refresh only the default packages remote when scaffolding minimal.toml (#1345) (0faf940)
bound minimald host mailbox sends so a wedged host can't hang attach or stop (#1369) (64b55f4)
surface the %{ escape when Nickel-evaluated task command strings fail (#1367) (b07fc39)
op: make the notices temp filename unique per write (#1365) (31c4db2)
nightly smoke races — detached vcs worktrees, dead-host shutdown gating, e2e teardown (#1378) (c6cc5fe)
raise recursion_limit to 256 in mip and related crates for rustc query-depth overflow (#1384) (5f36593)
minvmd: wait for a race winner on autospawn child exit (#1385) (5b58c68)
name the coding agents the registry packages (#1396) (c54f40e)
Lead Getting Started with the three-command path and reconcile the installer URL to /stable (#1406) (6f03659)
minimal: skip host cache warm-up for VM-backed providers (#1417) (c6a7422)
readme: end the multiplexer sentence at the loadout (#1411) (6927869)
minimald: say what ip said when a tap cannot reach its namespace (#1423) (6e9381b)
clarify min update re-pins upstream instead of self-updating (#1416) (c577326)
assert guest egress in the session e2e so a lost gvproxy switch fails the proof (#1392) (a89486e)
prune content-addressed store from diagnostic state listing (#1414) (54835ad)
bound minimald host-to-binding send so a dark client can't wedge a session (#1408) (3199247)
report a wrong-depth mfile key at its correct path and warn once per file (#1390) (6ec9632)
navigate the session-exit menu by label in the e2e PTY driver (#1386) (8d2fe77)
kani: unblock the proof build on Kani 0.68.0's std shim (#1434) (a46730c)
ci: scope the spec-lint app token to the permissions it uses (#1432) (db29dbe)
Treat plain-directory patch sources as recursive globs (#1541) (c6ba073)
mfile: do not fabricate missing read-only patch sources (#1540) (fbef9a6)
make bashrc run when $SHELL is set to bash (#1400) (91acc6f)
Probe session git info on the host, not in the daemon (#1430) (21f4074)
min: offer min init scaffold when add has no minimal.toml (#1538) (d8665fd)
check: treat libresolv as a glibc stub lib (#1561) (85c9b4a)

Other changes

add the template and its advisory linter (#1307) (67e6085)
skip commitlint on Dependabot commits (#1364) (6120afd)
deps: bump the cargo group with 8 updates (#1362) (e8551e2)
deps: bump taiki-e/install-action in the github-actions group (#1361) (323ae08)
specs: refresh TEMPLATE.md; there is no status field (#1368) (a514ac9)
deps: bump the cargo group with 10 updates (#1398) (140bb1b)
deps: bump taiki-e/install-action in the github-actions group (#1397) (456763e)
README.md: add For coding agents setup section (#1394) (af90016)
deps: bump rustls to 0.23.45 for RUSTSEC-2026-0285 (#1409) (36475b7)
remove the minimal-review caller (#1410) (70899df)
readme: note min dash, git push min://, lifecycle hooks, session policy (#1395) (f4df887)
README: position Minimal as not a multiplexer, name loadouts skill (#1399) (e740e8e)
reference: note SHELL selects the attach shell in [session.vars] (#1407) (f2e32e0)
op: lock package ordering in min init stack matching (#1391) (6a815b0)
remove the review policy file; the defaults apply (#1412) (41d1987)
decode: cover Error::report_to AttrTooDeep branch (#1413) (43183a4)
mip: document cache notices subcommand (#1415) (24dbbfe)
README: lead the first screen with the agent box and its boundary (#1393) (31fd8fd)
README: link the loadouts blog post from the loadouts paragraph (#1424) (13e9bdd)
ignore .DS_Store and add just test-one (#1421) (0b4302f)
README: sessions + min dash demo above the first heading (#1429) (b2a86d1)
specs: add the box networking spec (NET) (#1380) (2d269cd)
specs: add the local box egress proxy spec (BEP) (#1426) (cb384e3)
purge verified-dead code and narrow dead_code allows (#1549) (5496431)
release: build once with an explicit release version, tag last (#1375) (23929a6)
kani: move to Kani 0.68.0, drop the MSRV relaxation, name compile failures (#1435) (a157ef4)
minimal-toml: pin pkgs at f4de33d0 and give sessions cargo-nextest (#1551) (d26971c)
minimal-toml: declare fmt and verify for the agent runtime (#1542) (7b6f6d2)
kani: run the proof lane for crates/bep changes (#1537) (8052fe8)
spikes: record the NET plan's two experiments (SP1, SP2) (#1539) (d55f919)
specs: bind BEP's full-breadth marker and the name-constraint subtree rule (#1433) (0b15777)
move oversized inline test modules into sibling files (#1554) (2da1c8f)
specs: rule box idle and stop as the client's in NET (#1436) (55fdade)
bundle repeated argument lists into named structs (#1553) (62b29e0)
share the codespan stderr renderer (#1550) (04fc322)
convert hand-written error enums to thiserror (#1552) (6dbed1c)
spikes: name nsdelegate, narrow the resolver carve-out, add the native resolver gap (#1562) (f761a2d)
split the god modules into focused submodules (#1557) (6b425f6)
specs: close the macOS loopback and cgroup classifier questions in NET (#1563) (9b763dd)
verify: the agent runtime's gate runs clippy and the touched crates (#1570) (25d38aa)
deny: ignore RUSTSEC-2026-0292 until nickel pins imbl-sized-chunks 0.2 (#1576) (4368d63)
deps: bump the cargo group with 4 updates (#1574) (4bd4aee)
deps: bump taiki-e/install-action in the github-actions group (#1573) (8241963)
specs: move the native deny-all resolver rule under NET-079 (#1566) (47f70da)
specs: bind box identity, scoped revocation and the proxy leg in BEP and NET (#1578) (24dd6f2)
agent-verify: scope clippy to the touched crates (#1674) (6356668)

0.6.0

78 commit(s) since v0.5.4.

Features

op: capture upstream NOTICE/COPYRIGHT files at source extraction (#1040) (#1341) (a812c94)
containers: plumb container specs into graph, spechash gen, cache meta (a30ac97)
packaging: CI-owned AUR, Homebrew, and deb/rpm/apk distribution (#1313) (8e7e72c)
support loadout.toml in per-loadout directories (#1346) (8750096)
sandbox2: add the network plan and the launch sequence (#1422) (28cbda2)
minimald: one network provider for every sandbox path (#1371) (ace5ae4)

Fixes

document activating a path that already has a session (#1348) (eeabf23)
document session activate behaviour when a path has no minimal.toml (#1347) (1dece5e)
refresh only the default packages remote when scaffolding minimal.toml (#1345) (0faf940)
bound minimald host mailbox sends so a wedged host can't hang attach or stop (#1369) (64b55f4)
surface the %{ escape when Nickel-evaluated task command strings fail (#1367) (b07fc39)
op: make the notices temp filename unique per write (#1365) (31c4db2)
nightly smoke races — detached vcs worktrees, dead-host shutdown gating, e2e teardown (#1378) (c6cc5fe)
raise recursion_limit to 256 in mip and related crates for rustc query-depth overflow (#1384) (5f36593)
minvmd: wait for a race winner on autospawn child exit (#1385) (5b58c68)
name the coding agents the registry packages (#1396) (c54f40e)
Lead Getting Started with the three-command path and reconcile the installer URL to /stable (#1406) (6f03659)
minimal: skip host cache warm-up for VM-backed providers (#1417) (c6a7422)
readme: end the multiplexer sentence at the loadout (#1411) (6927869)
minimald: say what ip said when a tap cannot reach its namespace (#1423) (6e9381b)
clarify min update re-pins upstream instead of self-updating (#1416) (c577326)
assert guest egress in the session e2e so a lost gvproxy switch fails the proof (#1392) (a89486e)
prune content-addressed store from diagnostic state listing (#1414) (54835ad)
bound minimald host-to-binding send so a dark client can't wedge a session (#1408) (3199247)
report a wrong-depth mfile key at its correct path and warn once per file (#1390) (6ec9632)
navigate the session-exit menu by label in the e2e PTY driver (#1386) (8d2fe77)
kani: unblock the proof build on Kani 0.68.0's std shim (#1434) (a46730c)
ci: scope the spec-lint app token to the permissions it uses (#1432) (db29dbe)
Treat plain-directory patch sources as recursive globs (#1541) (c6ba073)
mfile: do not fabricate missing read-only patch sources (#1540) (fbef9a6)
make bashrc run when $SHELL is set to bash (#1400) (91acc6f)
Probe session git info on the host, not in the daemon (#1430) (21f4074)
min: offer min init scaffold when add has no minimal.toml (#1538) (d8665fd)
check: treat libresolv as a glibc stub lib (#1561) (85c9b4a)

Other changes

add the template and its advisory linter (#1307) (67e6085)
skip commitlint on Dependabot commits (#1364) (6120afd)
deps: bump the cargo group with 8 updates (#1362) (e8551e2)
deps: bump taiki-e/install-action in the github-actions group (#1361) (323ae08)
specs: refresh TEMPLATE.md; there is no status field (#1368) (a514ac9)
deps: bump the cargo group with 10 updates (#1398) (140bb1b)
deps: bump taiki-e/install-action in the github-actions group (#1397) (456763e)
README.md: add For coding agents setup section (#1394) (af90016)
deps: bump rustls to 0.23.45 for RUSTSEC-2026-0285 (#1409) (36475b7)
remove the minimal-review caller (#1410) (70899df)
readme: note min dash, git push min://, lifecycle hooks, session policy (#1395) (f4df887)
README: position Minimal as not a multiplexer, name loadouts skill (#1399) (e740e8e)
reference: note SHELL selects the attach shell in [session.vars] (#1407) (f2e32e0)
op: lock package ordering in min init stack matching (#1391) (6a815b0)
remove the review policy file; the defaults apply (#1412) (41d1987)
decode: cover Error::report_to AttrTooDeep branch (#1413) (43183a4)
mip: document cache notices subcommand (#1415) (24dbbfe)
README: lead the first screen with the agent box and its boundary (#1393) (31fd8fd)
README: link the loadouts blog post from the loadouts paragraph (#1424) (13e9bdd)
ignore .DS_Store and add just test-one (#1421) (0b4302f)
README: sessions + min dash demo above the first heading (#1429) (b2a86d1)
specs: add the box networking spec (NET) (#1380) (2d269cd)
specs: add the local box egress proxy spec (BEP) (#1426) (cb384e3)
purge verified-dead code and narrow dead_code allows (#1549) (5496431)
release: build once with an explicit release version, tag last (#1375) (23929a6)
kani: move to Kani 0.68.0, drop the MSRV relaxation, name compile failures (#1435) (a157ef4)
minimal-toml: pin pkgs at f4de33d0 and give sessions cargo-nextest (#1551) (d26971c)
minimal-toml: declare fmt and verify for the agent runtime (#1542) (7b6f6d2)
kani: run the proof lane for crates/bep changes (#1537) (8052fe8)
spikes: record the NET plan's two experiments (SP1, SP2) (#1539) (d55f919)
specs: bind BEP's full-breadth marker and the name-constraint subtree rule (#1433) (0b15777)
move oversized inline test modules into sibling files (#1554) (2da1c8f)
specs: rule box idle and stop as the client's in NET (#1436) (55fdade)
bundle repeated argument lists into named structs (#1553) (62b29e0)
share the codespan stderr renderer (#1550) (04fc322)
convert hand-written error enums to thiserror (#1552) (6dbed1c)
spikes: name nsdelegate, narrow the resolver carve-out, add the native resolver gap (#1562) (f761a2d)
split the god modules into focused submodules (#1557) (6b425f6)
specs: close the macOS loopback and cgroup classifier questions in NET (#1563) (9b763dd)
verify: the agent runtime's gate runs clippy and the touched crates (#1570) (25d38aa)
deny: ignore RUSTSEC-2026-0292 until nickel pins imbl-sized-chunks 0.2 (#1576) (4368d63)
deps: bump the cargo group with 4 updates (#1574) (4bd4aee)
deps: bump taiki-e/install-action in the github-actions group (#1573) (8241963)
specs: move the native deny-all resolver rule under NET-079 (#1566) (47f70da)

0.6.0

71 commit(s) since v0.5.4.

Features

op: capture upstream NOTICE/COPYRIGHT files at source extraction (#1040) (#1341) (a812c94)
containers: plumb container specs into graph, spechash gen, cache meta (a30ac97)
packaging: CI-owned AUR, Homebrew, and deb/rpm/apk distribution (#1313) (8e7e72c)
support loadout.toml in per-loadout directories (#1346) (8750096)
sandbox2: add the network plan and the launch sequence (#1422) (28cbda2)
minimald: one network provider for every sandbox path (#1371) (ace5ae4)

Fixes

document activating a path that already has a session (#1348) (eeabf23)
document session activate behaviour when a path has no minimal.toml (#1347) (1dece5e)
refresh only the default packages remote when scaffolding minimal.toml (#1345) (0faf940)
bound minimald host mailbox sends so a wedged host can't hang attach or stop (#1369) (64b55f4)
surface the %{ escape when Nickel-evaluated task command strings fail (#1367) (b07fc39)
op: make the notices temp filename unique per write (#1365) (31c4db2)
nightly smoke races — detached vcs worktrees, dead-host shutdown gating, e2e teardown (#1378) (c6cc5fe)
raise recursion_limit to 256 in mip and related crates for rustc query-depth overflow (#1384) (5f36593)
minvmd: wait for a race winner on autospawn child exit (#1385) (5b58c68)
name the coding agents the registry packages (#1396) (c54f40e)
Lead Getting Started with the three-command path and reconcile the installer URL to /stable (#1406) (6f03659)
minimal: skip host cache warm-up for VM-backed providers (#1417) (c6a7422)
readme: end the multiplexer sentence at the loadout (#1411) (6927869)
minimald: say what ip said when a tap cannot reach its namespace (#1423) (6e9381b)
clarify min update re-pins upstream instead of self-updating (#1416) (c577326)
assert guest egress in the session e2e so a lost gvproxy switch fails the proof (#1392) (a89486e)
prune content-addressed store from diagnostic state listing (#1414) (54835ad)
bound minimald host-to-binding send so a dark client can't wedge a session (#1408) (3199247)
report a wrong-depth mfile key at its correct path and warn once per file (#1390) (6ec9632)
navigate the session-exit menu by label in the e2e PTY driver (#1386) (8d2fe77)
kani: unblock the proof build on Kani 0.68.0's std shim (#1434) (a46730c)
ci: scope the spec-lint app token to the permissions it uses (#1432) (db29dbe)
Treat plain-directory patch sources as recursive globs (#1541) (c6ba073)
mfile: do not fabricate missing read-only patch sources (#1540) (fbef9a6)
make bashrc run when $SHELL is set to bash (#1400) (91acc6f)

Other changes

add the template and its advisory linter (#1307) (67e6085)
skip commitlint on Dependabot commits (#1364) (6120afd)
deps: bump the cargo group with 8 updates (#1362) (e8551e2)
deps: bump taiki-e/install-action in the github-actions group (#1361) (323ae08)
specs: refresh TEMPLATE.md; there is no status field (#1368) (a514ac9)
deps: bump the cargo group with 10 updates (#1398) (140bb1b)
deps: bump taiki-e/install-action in the github-actions group (#1397) (456763e)
README.md: add For coding agents setup section (#1394) (af90016)
deps: bump rustls to 0.23.45 for RUSTSEC-2026-0285 (#1409) (36475b7)
remove the minimal-review caller (#1410) (70899df)
readme: note min dash, git push min://, lifecycle hooks, session policy (#1395) (f4df887)
README: position Minimal as not a multiplexer, name loadouts skill (#1399) (e740e8e)
reference: note SHELL selects the attach shell in [session.vars] (#1407) (f2e32e0)
op: lock package ordering in min init stack matching (#1391) (6a815b0)
remove the review policy file; the defaults apply (#1412) (41d1987)
decode: cover Error::report_to AttrTooDeep branch (#1413) (43183a4)
mip: document cache notices subcommand (#1415) (24dbbfe)
README: lead the first screen with the agent box and its boundary (#1393) (31fd8fd)
README: link the loadouts blog post from the loadouts paragraph (#1424) (13e9bdd)
ignore .DS_Store and add just test-one (#1421) (0b4302f)
README: sessions + min dash demo above the first heading (#1429) (b2a86d1)
specs: add the box networking spec (NET) (#1380) (2d269cd)
specs: add the local box egress proxy spec (BEP) (#1426) (cb384e3)
purge verified-dead code and narrow dead_code allows (#1549) (5496431)
release: build once with an explicit release version, tag last (#1375) (23929a6)
kani: move to Kani 0.68.0, drop the MSRV relaxation, name compile failures (#1435) (a157ef4)
minimal-toml: pin pkgs at f4de33d0 and give sessions cargo-nextest (#1551) (d26971c)
minimal-toml: declare fmt and verify for the agent runtime (#1542) (7b6f6d2)
kani: run the proof lane for crates/bep changes (#1537) (8052fe8)
spikes: record the NET plan's two experiments (SP1, SP2) (#1539) (d55f919)
specs: bind BEP's full-breadth marker and the name-constraint subtree rule (#1433) (0b15777)
move oversized inline test modules into sibling files (#1554) (2da1c8f)
specs: rule box idle and stop as the client's in NET (#1436) (55fdade)
bundle repeated argument lists into named structs (#1553) (62b29e0)
share the codespan stderr renderer (#1550) (04fc322)
convert hand-written error enums to thiserror (#1552) (6dbed1c)
spikes: name nsdelegate, narrow the resolver carve-out, add the native resolver gap (#1562) (f761a2d)
split the god modules into focused submodules (#1557) (6b425f6)
specs: close the macOS loopback and cgroup classifier questions in NET (#1563) (9b763dd)
verify: the agent runtime's gate runs clippy and the touched crates (#1570) (25d38aa)

0.6.0

70 commit(s) since v0.5.4.

Features

op: capture upstream NOTICE/COPYRIGHT files at source extraction (#1040) (#1341) (a812c94)
containers: plumb container specs into graph, spechash gen, cache meta (a30ac97)
packaging: CI-owned AUR, Homebrew, and deb/rpm/apk distribution (#1313) (8e7e72c)
support loadout.toml in per-loadout directories (#1346) (8750096)
sandbox2: add the network plan and the launch sequence (#1422) (28cbda2)
minimald: one network provider for every sandbox path (#1371) (ace5ae4)

Fixes

document activating a path that already has a session (#1348) (eeabf23)
document session activate behaviour when a path has no minimal.toml (#1347) (1dece5e)
refresh only the default packages remote when scaffolding minimal.toml (#1345) (0faf940)
bound minimald host mailbox sends so a wedged host can't hang attach or stop (#1369) (64b55f4)
surface the %{ escape when Nickel-evaluated task command strings fail (#1367) (b07fc39)
op: make the notices temp filename unique per write (#1365) (31c4db2)
nightly smoke races — detached vcs worktrees, dead-host shutdown gating, e2e teardown (#1378) (c6cc5fe)
raise recursion_limit to 256 in mip and related crates for rustc query-depth overflow (#1384) (5f36593)
minvmd: wait for a race winner on autospawn child exit (#1385) (5b58c68)
name the coding agents the registry packages (#1396) (c54f40e)
Lead Getting Started with the three-command path and reconcile the installer URL to /stable (#1406) (6f03659)
minimal: skip host cache warm-up for VM-backed providers (#1417) (c6a7422)
readme: end the multiplexer sentence at the loadout (#1411) (6927869)
minimald: say what ip said when a tap cannot reach its namespace (#1423) (6e9381b)
clarify min update re-pins upstream instead of self-updating (#1416) (c577326)
assert guest egress in the session e2e so a lost gvproxy switch fails the proof (#1392) (a89486e)
prune content-addressed store from diagnostic state listing (#1414) (54835ad)
bound minimald host-to-binding send so a dark client can't wedge a session (#1408) (3199247)
report a wrong-depth mfile key at its correct path and warn once per file (#1390) (6ec9632)
navigate the session-exit menu by label in the e2e PTY driver (#1386) (8d2fe77)
kani: unblock the proof build on Kani 0.68.0's std shim (#1434) (a46730c)
ci: scope the spec-lint app token to the permissions it uses (#1432) (db29dbe)
Treat plain-directory patch sources as recursive globs (#1541) (c6ba073)
mfile: do not fabricate missing read-only patch sources (#1540) (fbef9a6)
make bashrc run when $SHELL is set to bash (#1400) (91acc6f)

Other changes

add the template and its advisory linter (#1307) (67e6085)
skip commitlint on Dependabot commits (#1364) (6120afd)
deps: bump the cargo group with 8 updates (#1362) (e8551e2)
deps: bump taiki-e/install-action in the github-actions group (#1361) (323ae08)
specs: refresh TEMPLATE.md; there is no status field (#1368) (a514ac9)
deps: bump the cargo group with 10 updates (#1398) (140bb1b)
deps: bump taiki-e/install-action in the github-actions group (#1397) (456763e)
README.md: add For coding agents setup section (#1394) (af90016)
deps: bump rustls to 0.23.45 for RUSTSEC-2026-0285 (#1409) (36475b7)
remove the minimal-review caller (#1410) (70899df)
readme: note min dash, git push min://, lifecycle hooks, session policy (#1395) (f4df887)
README: position Minimal as not a multiplexer, name loadouts skill (#1399) (e740e8e)
reference: note SHELL selects the attach shell in [session.vars] (#1407) (f2e32e0)
op: lock package ordering in min init stack matching (#1391) (6a815b0)
remove the review policy file; the defaults apply (#1412) (41d1987)
decode: cover Error::report_to AttrTooDeep branch (#1413) (43183a4)
mip: document cache notices subcommand (#1415) (24dbbfe)
README: lead the first screen with the agent box and its boundary (#1393) (31fd8fd)
README: link the loadouts blog post from the loadouts paragraph (#1424) (13e9bdd)
ignore .DS_Store and add just test-one (#1421) (0b4302f)
README: sessions + min dash demo above the first heading (#1429) (b2a86d1)
specs: add the box networking spec (NET) (#1380) (2d269cd)
specs: add the local box egress proxy spec (BEP) (#1426) (cb384e3)
purge verified-dead code and narrow dead_code allows (#1549) (5496431)
release: build once with an explicit release version, tag last (#1375) (23929a6)
kani: move to Kani 0.68.0, drop the MSRV relaxation, name compile failures (#1435) (a157ef4)
minimal-toml: pin pkgs at f4de33d0 and give sessions cargo-nextest (#1551) (d26971c)
minimal-toml: declare fmt and verify for the agent runtime (#1542) (7b6f6d2)
kani: run the proof lane for crates/bep changes (#1537) (8052fe8)
spikes: record the NET plan's two experiments (SP1, SP2) (#1539) (d55f919)
specs: bind BEP's full-breadth marker and the name-constraint subtree rule (#1433) (0b15777)
move oversized inline test modules into sibling files (#1554) (2da1c8f)
specs: rule box idle and stop as the client's in NET (#1436) (55fdade)
bundle repeated argument lists into named structs (#1553) (62b29e0)
share the codespan stderr renderer (#1550) (04fc322)
convert hand-written error enums to thiserror (#1552) (6dbed1c)
spikes: name nsdelegate, narrow the resolver carve-out, add the native resolver gap (#1562) (f761a2d)
split the god modules into focused submodules (#1557) (6b425f6)
specs: close the macOS loopback and cgroup classifier questions in NET (#1563) (9b763dd)

0.6.0

70 commit(s) since v0.5.4.

Features

op: capture upstream NOTICE/COPYRIGHT files at source extraction (#1040) (#1341) (a812c94)
containers: plumb container specs into graph, spechash gen, cache meta (a3 10BC8 0ac97)
packaging: CI-owned AUR, Homebrew, and deb/rpm/apk distribution (#1313) (8e7e72c)
support loadout.toml in per-loadout directories (#1346) (8750096)
sandbox2: add the network plan and the launch sequence (#1422) (28cbda2)
minimald: one network provider for every sandbox path (#1371) (ace5ae4)

Fixes

document activating a path that already has a session (#1348) (eeabf23)
document session activate behaviour when a path has no minimal.toml (#1347) (1dece5e)
refresh only the default packages remote when scaffolding minimal.toml (#1345) (0faf940)
bound minimald host mailbox sends so a wedged host can't hang attach or stop (#1369) (64b55f4)
surface the %{ escape when Nickel-evaluated task command strings fail (#1367) (b07fc39)
op: make the notices temp filename unique per write (#1365) (31c4db2)
nightly smoke races — detached vcs worktrees, dead-host shutdown gating, e2e teardown (#1378) (c6cc5fe)
raise recursion_limit to 256 in mip and related crates for rustc query-depth overflow (#1384) (5f36593)
minvmd: wait for a race winner on autospawn child exit (#1385) (5b58c68)
name the coding agents the registry packages (#1396) (c54f40e)
Lead Getting Started with the three-command path and reconcile the installer URL to /stable (#1406) (6f03659)
minimal: skip host cache warm-up for VM-backed providers (#1417) (c6a7422)
readme: end the multiplexer sentence at the loadout (#1411) (6927869)
minimald: say what ip said when a tap cannot reach its namespace (#1423) (6e9381b)
clarify min update re-pins upstream instead of self-updating (#1416) (c577326)
assert guest egress in the session e2e so a lost gvproxy switch fails the proof (#1392) (a89486e)
prune content-addressed store from diagnostic state listing (#1414) (54835ad)
bound minimald host-to-binding send so a dark client can't wedge a session (#1408) (3199247)
report a wrong-depth mfile key at its correct path and warn once per file (#1390) (6ec9632)
navigate the session-exit menu by label in the e2e PTY driver (#1386) (8d2fe77)
kani: unblock the proof build on Kani 0.68.0's std shim (#1434) (a46730c)
ci: scope the spec-lint app token to the permissions it uses (#1432) (db29dbe)
Treat plain-directory patch sources as recursive globs (#1541) (c6ba073)
mfile: do not fabricate missing read-only patch sources (#1540) (fbef9a6)
make bashrc run when $SHELL is set to bash (#1400) (91acc6f)

Other changes

add the template and its advisory linter (#1307) (67e6085)
skip commitlint on Dependabot commits (#1364) (6120afd)
deps: bump the cargo group with 8 updates (#1362) (e8551e2)
deps: bump taiki-e/install-action in the github-actions group (#1361) (323ae08)
specs: refresh TEMPLATE.md; there is no status field (#1368) (a514ac9)
deps: bump the cargo group with 10 updates (#1398) (140bb1b)
deps: bump taiki-e/install-action in the github-actions group (#1397) (456763e)
README.md: add For coding agents setup section (#1394) (af90016)
deps: bump rustls to 0.23.45 for RUSTSEC-2026-0285 (#1409) (36475b7)
remove the minimal-review caller (#1410) (70899df)
readme: note min dash, git push min://, lifecycle hooks, session policy (#1395) (f4df887)
README: position Minimal as not a multiplexer, name loadouts skill (#1399) (e740e8e)
reference: note SHELL selects the attach shell in [session.vars] (#1407) (f2e32e0)
op: lock package ordering in min init stack matching (#1391) (6a815b0)
remove the review policy file; the defaults apply (#1412) (41d1987)
decode: cover Error::report_to AttrTooDeep branch (#1413) (43183a4)
mip: document cache notices subcommand (#1415) (24dbbfe)
README: lead the first screen with the agent box and its boundary (#1393) (31fd8fd)
README: link the loadouts blog post from the loadouts paragraph (#1424) (13e9bdd)
ignore .DS_Store and add just test-one (#1421) (0b4302f)
README: sessions + min dash demo above the first heading (#1429) (b2a86d1)
specs: add the box networking spec (NET) (#1380) (2d269cd)
specs: add the local box egress proxy spec (BEP) (#1426) (cb384e3)
purge verified-dead code and narrow dead_code allows (#1549) (5496431)
release: build once with an explicit release version, tag last (#1375) (23929a6)
kani: move to Kani 0.68.0, drop the MSRV relaxation, name compile failures (#1435) (a157ef4)
minimal-toml: pin pkgs at f4de33d0 and give sessions cargo-nextest (#1551) (d26971c)
minimal-toml: declare fmt and verify for the agent runtime (#1542) (7b6f6d2)
kani: run the proof lane for crates/bep changes (#1537) (8052fe8)
spikes: record the NET plan's two experiments (SP1, SP2) (#1539) (d55f919)
specs: bind BEP's full-breadth marker and the name-constraint subtree rule (#1433) (0b15777)
move oversized inline test modules into sibling files (#1554) (2da1c8f)
specs: rule box idle and stop as the client's in NET (#1436) (55fdade)
bundle repeated argument lists into named structs (#1553) (62b29e0)
share the codespan stderr renderer (#1550) (04fc322)
convert hand-written error enums to thiserror (#1552) (6dbed1c)
spikes: name nsdelegate, narrow the resolver carve-out, add the native resolver gap (#1562) (f761a2d)
split the god modules into focused submodules (#1557) (6b425f6)
specs: close the macOS loopback and cgroup classifier questions in NET (#1563) (9b763dd)

0.6.0

68 commit(s) since v0.5.4.

Features

op: capture upstream NOTICE/COPYRIGHT files at source extraction (#1040) (#1341) (a812c94)
containers: plumb container specs into graph, spechash gen, cache meta (a30ac97)
packaging: CI-owned AUR, Homebrew, and deb/rpm/apk distribution (#1313) (8e7e72c)
support loadout.toml in per-loadout directories (#1346) (8750096)
sandbox2: add the network plan and the launch sequence (#1422) (28cbda2)
minimald: one network provider for every sandbox path (#1371) (ace5ae4)

Fixes

document activating a path that already has a session (#1348) (eeabf23)
document session activate behaviour when a path has no minimal.toml (#1347) (1dece5e)
refresh only the default packages remote when scaffolding minimal.toml (#1345) (0faf940)
bound minimald host mailbox sends so a wedged host can't hang attach or stop (#1369) (64b55f4)
surface the %{ escape when Nickel-evaluated task command strings fail (#1367) (b07fc39)
op: make the notices temp filename unique per write (#1365) (31c4db2)
nightly smoke races — detached vcs worktrees, dead-host shutdown gating, e2e teardown (#1378) (c6cc5fe)
raise recursion_limit to 256 in mip and related crates for rustc query-depth overflow (#1384) (5f36593)
minvmd: wait for a race winner on autospawn child exit (#1385) (5b58c68)
name the coding agents the registry packages (#1396) (c54f40e)
Lead Getting Started with the three-command path and reconcile the installer URL to /stable (#1406) (6f03659)
minimal: skip host cache warm-up for VM-backed providers (#1417) (c6a7422)
readme: end the multiplexer sentence at the loadout (#1411) (6927869)
minimald: say what ip said when a tap cannot reach its namespace (#1423) (6e9381b)
clarify min update re-pins upstream instead of self-updating (#1416) (c577326)
assert guest egress in the session e2e so a lost gvproxy switch fails the proof (#1392) (a89486e)
prune content-addressed store from diagnostic state listing (#1414) (54835ad)
bound minimald host-to-binding send so a dark client can't wedge a session (#1408) (3199247)
report a wrong-depth mfile key at its correct path and warn once per file (#1390) (6ec9632)
navigate the session-exit menu by label in the e2e PTY driver (#1386) (8d2fe77)
kani: unblock the proof build on Kani 0.68.0's std shim (#1434) (a46730c)
ci: scope the spec-lint app token to the permissions it uses (#1432) (db29dbe)
Treat plain-directory patch sources as recursive globs (#1541) (c6ba073)
mfile: do not fabricate missing read-only patch sources (#1540) (fbef9a6)

Other changes

add the template and its advisory linter (#1307) (67e6085)
skip commitlint on Dependabot commits (#1364) (6120afd)
deps: bump the cargo group with 8 updates (#1362) (e8551e2)
deps: bump taiki-e/install-action in the github-actions group (#1361) (323ae08)
specs: refresh TEMPLATE.md; there is no status field (#1368) (a514ac9)
deps: bump the cargo group with 10 updates (#1398) (140bb1b)
deps: bump taiki-e/install-action in the github-actions group (#1397) (456763e)
README.md: add For coding agents setup section (#1394) (af90016)
deps: bump rustls to 0.23.45 for RUSTSEC-2026-0285 (#1409) (36475b7)
remove the minimal-review caller (#1410) (70899df)
readme: note min dash, git push min://, lifecycle hooks, session policy (#1395) (f4df887)
README: position Minimal as not a multiplexer, name loadouts skill (#1399) (e740e8e)
reference: note SHELL selects the attach shell in [session.vars] (#1407) (f2e32e0)
op: lock package ordering in min init stack matching (#1391) (6a815b0)
remove the review policy file; the defaults apply (#1412) (41d1987)
decode: cover Error::report_to AttrTooDeep branch (#1413) (43183a4)
mip: document cache notices subcommand (#1415) (24dbbfe)
README: lead the first screen with the agent box and its boundary (#1393) (31fd8fd)
README: link the loadouts blog post from the loadouts paragraph (#1424) (13e9bdd)
ignore .DS_Store and add just test-one (#1421) (0b4302f)
README: sessions + min dash demo above the first heading (#1429) (b2a86d1)
specs: add the box networking spec (NET) (#1380) (2d269cd)
specs: add the local box egress proxy spec (BEP) (#1426) (cb384e3)
purge verified-dead code and narrow dead_code allows (#1549) (5496431)
release: build once with an explicit release version, tag last (#1375) (23929a6)
kani: move to Kani 0.68.0, drop the MSRV relaxation, name compile failures (#1435) (a157ef4)
minimal-toml: pin pkgs at f4de33d0 and give sessions cargo-nextest (#1551) (d26971c)
minimal-toml: declare fmt and verify for the agent runtime (#1542) (7b6f6d2)
kani: run the proof lane for crates/bep changes (#1537) (8052fe8)
spikes: record the NET plan's two experiments (SP1, SP2) (#1539) (d55f919)
specs: bind BEP's full-breadth marker and the name-constraint subtree rule (#1433) (0b15777)
move oversized inline test modules into sibling files (#1554) (2da1c8f)
specs: rule box idle and stop as the client's in NET (#1436) (55fdade)
bundle repeated argument lists into named structs (#1553) (62b29e0)
share the codespan stderr renderer (#1550) (04fc322)
convert hand-written error enums to thiserror (#1552) (6dbed1c)
spikes: name nsdelegate, narrow the resolver carve-out, add the native resolver gap (#1562) (f761a2d)
split the god modules into focused submodules (#1557) (6b425f6)

minimal 0.7.0-dev.86.g192b3280

0.7.0

Features

Fixes

Other changes

Uh oh!

minimal 0.6.0-dev.127.g25436fef

0.6.0

Features

Fixes

Other changes

Uh oh!

minimal 0.6.0-dev.126.g82ef7e3f

0.6.0

Features

Fixes

Other changes

Uh oh!

minimal 0.6.0-dev.121.g3c17671b

0.6.0

Features

Fixes

Other changes

Uh oh!

minimal 0.6.0-dev.80.g63566682

0.6.0

Features

Fixes

Other changes

Uh oh!

minimal 0.6.0-dev.78.g85c9b4a5

0.6.0

Features

Fixes

Other changes

Uh oh!

minimal 0.6.0-dev.71.g25d38aaa

0.6.0

Features

Fixes

Other changes

Uh oh!

minimal 0.6.0

0.6.0

Features

Fixes

Other changes

Uh oh!

minimal 0.6.0-dev.70.g9b763dd5

0.6.0

Features

Fixes

Other changes

Uh oh!

minimal 0.6.0-dev.68.g6b425f6c

0.6.0

Features

Fixes

Other changes

Uh oh!