Keep authenticated verified OpenRouter usage frames in the known subtotal even when transport fails, without certifying complete cost or token totals. Cover the real pinned SDK interruption plus a successful retry and update both reviewed runtime closure pins.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Retry the normal Agents link within a bounded deadline and use the ordinary dismissal control if the asynchronously loaded announcement covers it. Preserve the company-isolation and history assertions.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Reproduce the page/sidebar mismatch after a real manual switch and browser history navigation. Dismiss covering announcements through the normal UI. Preserve dense ZIP bytes with a CRC table and bound cold CLI health inside the existing setup budget.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Co-Authored-By: Paperclip <noreply@paperclip.ing>
* codex/hermes-native-runner:
fix(ui): scope canonical agents to their authorized company
test(server): drain runtime writes and load routes in setup
Co-Authored-By: Paperclip <noreply@paperclip.ing>
* codex/hermes-routines:
fix(ui): scope canonical agents to their authorized company
test(server): drain runtime writes and load routes in setup
Keep alias caches and redirects on the agent company. Defer remembered UUID paths until canonical resolution and verify organization switching with a delayed public alias response.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Move only the additional Hermes setup assertions to the stacked follow-up. Keep all existing Cursor setup tests in place.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Hash all three Hermes setup inputs. Keep the PR below the review limit by moving the unchanged public setup and account-cache test files to the stacked qualification follow-up.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Restore directory write access inside the private worker home before removal, without following external directory symlinks.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Refresh both source-owned native parent pins for the sandbox payload change. Retain the prior reviewed interpreter and dependency entries; only tool_process.py changes.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Derive platform pins from previously verified manifests with only tool_process.py changed. Require fresh cloud materialization and retain the prior concurrent-write failure.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Provide the minimal bubblewrap device mount for native shell redirects and atomic writes, probe it before credential staging, and cover concurrent writes plus protected paths.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Preserve flat Runner acknowledgement receipts so native steering emits one
transcript item. Add a pinned Hermes regression across Rust PRP with distinct
durable and provider turn identities and stale-control rejection.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Cover native edit approval within the authorized invocation and record bounded,
versioned tool grants per conversation. Recheck policy and cancellation before
each operation. Restore named custom connections through their configured
identity and reject native route fallback. Bind assigned skill contents across
temporary lease replacements while preserving their write protection.
Qualify real native once/deny/session file effects, provider restart, distinct
same-name tool identities, conversation isolation and unanswered permission
cancellation with the credential-free production ACPX fixture. Update the
reviewed platform closure pins and document the remaining release gates.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Require saved image checks to pass after account and billing evidence is collected. Advance the explicit image definition to version 2.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Record the committed-source browser cancellation, stale-answer denial, process retirement and reported cost. Keep historical failures and remaining release gates explicit.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Bind the expired card to its original unanswered request and require the canonical zero-answer cancellation result. Preserve the failed live measurement and advance qualification definitions.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Bind usage to the admitted native session and turn before cancelled prompt settlement. Check its durable PRP carrier and harden qualification receipt identity and budget capture.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
