Daily Update - 2026-07-04

Summary of Changes

Features

• feat(policy): Milestone-E production activation — GATE 3 auto-activation, authorization ALLOW path, code_executor invariant (8bc96607f, Tal Muskal, 14 hours ago)
• feat(policy): implement Milestone D — tool-layer enforcement gates (GATE 1/2/3 + genty seam) (f72c865f0, Tal Muskal, 17 hours ago)
• feat(policy): implement Milestone C — evidence producers (signed breakpoints, proxy + in-process attestation, attribution) (15f6e381d, Tal Muskal, 18 hours ago)
• feat(policy): implement Milestone B — configurable policy engine (trust-chain evaluator + authorization issuance) (8917086be, Tal Muskal, 20 hours ago)
• feat(policy): Milestone A unified trust core (envelopes, keys, chains) (c7434f541, Tal Muskal, 21 hours ago)

Bug Fixes

• fix(policy): wire ALL load-bearing tool-layer gates onto production paths (Milestone D) (93f6d09d6, Tal Muskal, 15 hours ago)
• fix(policy): wire Milestone-D tool-layer gates onto production paths (5ed5f6a24, Tal Muskal, 17 hours ago)
• fix(policy): anchor signed-breakpoint enforcement to trusted config + wire streaming proxy attestation (6c237f529, Tal Muskal, 18 hours ago)
• fix(policy): close global-option argv-evasion bypass in Milestone-B matcher (d52da64f7, Tal Muskal, 19 hours ago)
• fix(policy): close four Milestone-B authorization-bypass defects + fold-ins (af7cdfbaa, Tal Muskal, 19 hours ago)
• fix(policy): verify true delegation-chain linkage in trust core (fe759f625, Tal Muskal, 20 hours ago)

Refactors

• refactor(trust): extract trust primitives to @a5c-ai/trust-core leaf package (8d360b20c, Tal Muskal, 7 hours ago)

Documentation

• docs(policy): document shipped proof-based policy enforcement (Milestones A-E) (32a127734, Tal Muskal, 14 hours ago)
• docs(policy): promote 4 review notes to required AC-53..56 per owner approval (82468de0d, Tal Muskal, 21 hours ago)
• docs(security): proof-policy Draft 3 — close 3 residual adversarial-review attacks (0001bf707, Tal Muskal, 21 hours ago)
• docs(security): revise proof-based policy enforcement spec after adversarial review (ee190ca37, Tal Muskal, 21 hours ago)
• docs(design): add proof-based policy enforcement spec (a80a75fab, Tal Muskal, 22 hours ago)

Tests

• test(policy): fix millisecond-boundary flake in GATE-3 credential wiring test (00ddcdb98, Tal Muskal, 15 hours ago)
• test(policy): author Milestone E e2e trust-chain suite + example configs (d6b1de16f, Tal Muskal, 15 hours ago)
• test(policy): fix malformed AC-10.3a GATE-1 fixture to a real sibling-call mismatch (852bccd26, Tal Muskal, 17 hours ago)
• test(policy): author Milestone D test suite (tool-layer enforcement gates) (ddb5a1945, Tal Muskal, 17 hours ago)
• test(policy): author Milestone C test suite (evidence producers) from design spec (bacc5085d, Tal Muskal, 19 hours ago)
• test(policy): author Milestone B test suite (policy-engine) from design spec (3dae881ea, Tal Muskal, 20 hours ago)
• test(policy): author Milestone A trust-core test suite from design spec (03cb86d42, Tal Muskal, 21 hours ago)

Maintenance

• chore(policy): register @a5c-ai/trust-core + @a5c-ai/policy-adapter in lockfile (093029aad, Tal Muskal, 7 hours ago)
• chore(graph): track upstream agent versions (733e662aa, a5c automation, 18 hours ago)
• chore(graph): track upstream agent versions (9d8fbf02f, a5c automation, 18 hours ago)
• Fix observe command failing to load: quote argument-hint value (#1123) (44a5d58b4, Daniel Kalman, 24 hours ago)

Links to PRs Merged

• #1083 Track upstream agent CLI versions - https://github.com/a5c-ai/babysitter/pull/1083
• #1097 docs: changelog update 2026-07-02 - https://github.com/a5c-ai/babysitter/pull/1097
• #1120 Track upstream agent CLI releases - https://github.com/a5c-ai/babysitter/pull/1120
• #1123 fix(plugins): quote observe command argument-hint so it loads - https://github.com/a5c-ai/babysitter/pull/1123
• #1134 Track upstream agent CLI versions - https://github.com/a5c-ai/babysitter/pull/1134

Issues Opened

• None found.

Issues Closed

• None found.

CI Status Summary

• Live Stack: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694197098
• CI: in_progress/pending on changelog/daily-2026-07-04 - https://github.com/a5c-ai/babysitter/actions/runs/28694193720
• Agent Review Dispatch: completed/cancelled on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694175337
• Agent Review Dispatch: completed/cancelled on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694174912
• Agent Review Dispatch: completed/cancelled on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694174417
• Issue Triage Dispatch: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694168412
• Issue Triage Dispatch: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694168396
• CI: completed/cancelled on changelog/daily-2026-07-04 - https://github.com/a5c-ai/babysitter/actions/runs/28694168180
• Agent Review Dispatch: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694150812
• Issue Triage Dispatch: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694145971
• Issue Triage Dispatch: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694145429
• Agent Review Dispatch: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694144897
• QA Daily: in_progress/pending on main - https://github.com/a5c-ai/babysitter/actions/runs/28694045688
• Triage: Publish Failure: completed/failure on main - https://github.com/a5c-ai/babysitter/actions/runs/28682551339
• Publish: completed/failure on staging - https://github.com/a5c-ai/babysitter/actions/runs/28682274345
• Staging Sync Command Surfaces: completed/success on staging - https://github.com/a5c-ai/babysitter/actions/runs/28682274325
• Agent Dispatch: completed/skipped on main - https://github.com/a5c-ai/babysitter/actions/runs/28670197424
• Agent Plan Dispatch: completed/skipped on main - https://github.com/a5c-ai/babysitter/actions/runs/28670197403
• QA Dispatch: completed/skipped on main - https://github.com/a5c-ai/babysitter/actions/runs/28670197398
• Agent Review Dispatch: completed/skipped on main - https://github.com/a5c-ai/babysitter/actions/runs/28670197397

Live-stack Test Results

• Live Stack: in_progress/pending on staging - https://github.com/a5c-ai/babysitter/actions/runs/28694197098