Skip to content
himmel

v1.0.0 release notes

Curated, user-facing summary of what changed since v0.3.0-pre.10, grouped by theme. CHANGELOG.md stays the generated, per-commit record (scripts/gen-changelog.sh, never hand-edited); this file is the readable version.

Release date: 2026-09-30.

Platform support

Linux is supported and CI-gated on every PR. macOS is supported, verified by the nightly macos-cadence run (green, 8/8 shards: nightly runs). Windows is not supported. Details and evidence source: the Support matrix.

Install, update and uninstall

  • The install-provenance writer now records “ours” snapshots, so an install can be surgically reverted instead of restored wholesale.
  • Uninstall keeps a bounded number of backups, saves live bytes before a TTY restore, and refuses --purge-state on a torn provenance ledger row.
  • Main-module guards compare realpaths, so a symlinked invocation path is no longer a silent no-op.

macOS portability

The nightly macOS run was triaged in slices: BSD touch/sed/wc, realpath under TMPDIR, missing flock/timeout, bash 3.2 quirks, crontab hermeticity, and the sticky bit on directory modes. macOS verifies on the nightly only (not a per-PR check); the nightly summary now fails visibly instead of masking a red.

Guardrails and hooks

  • Auto-approve, tail-pipe and write-fence hardening: fd-dup redirects, escaped fd-dup shapes, uniq second-positional writes, STDIN-only CR writer shapes.
  • A classifier-denial detector and log (redaction, field caps, rotation), with a denials= column on the console tick.
  • Agent dispatches that override the model to Fable are denied without an escalation marker.
  • The dormant codex-adversarial /pr-check pass was removed.

Chief and workers

  • New append-results.sh so a leg’s marker bullet always lands at the end of its handover doc; inherited worker-only environment is scrubbed before a sibling is armed.
  • Console tick gains a CI queue-latency field with a SATURATED flag and a board release panel per fixVersion; SHIP-STEP and PAUSE-RISK denials are paged.
  • The Sonnet tier and the Telegram and cadence model pins moved to the 5.5 tier.

CI and release tooling

  • Windows and macOS run on the nightly only; queued CI runs on superseded PR heads are cancelled; duplicate codeowner-gate and title-lint runs collapse while pending.
  • check-ci shares a per-PR status cache and backs off on rate limits; merge-on-green accepts active ruleset protection.
  • A dispatch-only os-verify runs impacted suites on one OS.
  • One suite-lock liveness owner replaces overlapping checks.
  • Pinned tools were bumped to current stable and every pin is watched by the nightly drift guard.

Other

  • The luna vault alerts on an auto-commit stall.
  • A prompt-cache eval probe corrected four false cache claims in the docs.