posted an update

Build Week engineering log — July 16

Retrospective post; exact commits and release timestamps are public.

We hardened LoopSkill's control-plane identity and installation boundary.

  • v3.2.5 added trusted Codex App turn attestation, one-route-per-real-turn enforcement, authoritative artifact digests, durable lost-output recovery with no resend, atomic projections, safe Pack/heartbeat migration, and exact release/install identities.
  • v3.2.6 removed ambient python3 fallback for generated Adaptive state operations. The runtime interpreter must come from the exact installed MCP registration; a missing interpreter, bridge, schema, or dependency now fails closed as STATE_RUNTIME_UNAVAILABLE.

Acceptance remained layered: exact commit, same-SHA install identity, independent checks, and real App canary evidence were kept separate from GitHub Actions compatibility evidence.

Releases: v3.2.5 and v3.2.6.

Log in or sign up for Devpost to join the conversation.