diff --git a/.release-please-manifest.json b/.release-please-manifest.json
index f2ecd08d..9d1a25b7 100644
--- a/.release-please-manifest.json
+++ b/.release-please-manifest.json
@@ -1,3 +1,3 @@
 {
-	".": "0.1.0"
+	".": "0.2.0"
 }
diff --git a/CHANGELOG.md b/CHANGELOG.md
new file mode 100644
index 00000000..71690a58
--- /dev/null
+++ b/CHANGELOG.md
@@ -0,0 +1,271 @@
+# Changelog
+
+## [0.2.0](https://github.com/RigelBuild/compass/compare/v0.1.0...v0.2.0) (2026-09-10)
+
+
+### ⚠ BREAKING CHANGES
+
+* **ui:** migrate apps/ui to Solid 2 (RIG-2202) ([#548](https://github.com/RigelBuild/compass/issues/548))
+
+### Features
+
+* **app-bundle:** add compass-app-bundle project that builds the release tarball ([#431](https://github.com/RigelBuild/compass/issues/431)) ([cb3be7e](https://github.com/RigelBuild/compass/commit/cb3be7e3a7ec5cf24fe9c6e5cf85c48ff61c0619))
+* **app-bundle:** re-scope the bundle to carry embedded's sidecars (RIG-3200) ([#863](https://github.com/RigelBuild/compass/issues/863)) ([d524f02](https://github.com/RigelBuild/compass/commit/d524f0223063c092cc7613a89c421cd165603fb3))
+* **app:** make the darwin podman-machine check real and provisioning-aware (RIG-3202) ([#1034](https://github.com/RigelBuild/compass/issues/1034)) ([e65ada1](https://github.com/RigelBuild/compass/commit/e65ada1bf3f97175147a0b459dfb22bb3cb15466))
+* **ci:** lint SQL migrations with squawk + sqruff (RIG-3031) ([#764](https://github.com/RigelBuild/compass/issues/764)) ([5f3c256](https://github.com/RigelBuild/compass/commit/5f3c256e4b57e92e74b506cfc7790f5fd92c0252))
+* **cli:** add operator message-post and agent-status nouns (RIG-2662, RIG-2663) ([#585](https://github.com/RigelBuild/compass/issues/585)) ([a11e167](https://github.com/RigelBuild/compass/commit/a11e16716585b4d5c36df136be7d875ebb8f5ca2))
+* **comms:** deliver ask answers as messages on the durable rail (RIG-2257) ([#600](https://github.com/RigelBuild/compass/issues/600)) ([4228ee7](https://github.com/RigelBuild/compass/commit/4228ee7e0f39339c86968ba6fe8de6a757faae29))
+* **comms:** OpenDM handler + AsAccount adapter + relay dispatch + spawn auto-open (RIG-2964) ([#757](https://github.com/RigelBuild/compass/issues/757)) ([afcce53](https://github.com/RigelBuild/compass/commit/afcce53631a2711fd061030d1a83a8770ff89a58))
+* **comms:** org-management agent tools — comms adapters, hub dispatch, spawn role/persona (RIG-2673) ([#630](https://github.com/RigelBuild/compass/issues/630)) ([bca111c](https://github.com/RigelBuild/compass/commit/bca111c45ddcf4f1208a0f51df0a8360f80dea0d))
+* **comms:** peer-DM T0 name-addressing cutover — agents address channels+topics by name (RIG-2956) ([#730](https://github.com/RigelBuild/compass/issues/730)) ([c8ee830](https://github.com/RigelBuild/compass/commit/c8ee830c526121ffb2dfc257d14e1ad320b5aed3))
+* **compass-agent:** activate loop OpenTelemetry in cli.ts main() (RIG-2508 T1) ([#648](https://github.com/RigelBuild/compass/issues/648)) ([837687c](https://github.com/RigelBuild/compass/commit/837687ca740e5ea79e0db75783e93239fa539565))
+* **compass-agent:** add board_set_issue_state native tool (RIG-3191) ([#842](https://github.com/RigelBuild/compass/issues/842)) ([5b80961](https://github.com/RigelBuild/compass/commit/5b80961a9654c2019985de2b301befda9145f079))
+* **compass-agent:** add comms_open_dm + comms_dm peer-DM tools (RIG-2966) ([#749](https://github.com/RigelBuild/compass/issues/749)) ([7d896c4](https://github.com/RigelBuild/compass/commit/7d896c46f5b489f6c1578b9e9c1aaad6e2d49501))
+* **compass-agent:** add effect dep + Bun runtime smoke (RIG-2424 T1) ([#465](https://github.com/RigelBuild/compass/issues/465)) ([0ee510a](https://github.com/RigelBuild/compass/commit/0ee510afb35af480dd38b3a01647eb4e45aadee9))
+* **compass-agent:** add the forge tool surface (T1+T2) (RIG-2672) ([#603](https://github.com/RigelBuild/compass/issues/603)) ([ea0a9d8](https://github.com/RigelBuild/compass/commit/ea0a9d8dda56e083612f84f87c2a08d439a21392))
+* **compass-agent:** ask round-trip over the comms transport (RIG-1509) ([#411](https://github.com/RigelBuild/compass/issues/411)) ([65b261d](https://github.com/RigelBuild/compass/commit/65b261d8b20bce0de881bd55a6991c967820dfe3))
+* **compass-agent:** consolidate transport ManagedRuntime ownership (RIG-2424 T5) ([#475](https://github.com/RigelBuild/compass/issues/475)) ([b1e2ce1](https://github.com/RigelBuild/compass/commit/b1e2ce15763dd316fae64c5325243c9fd357ac17))
+* **compass-agent:** decode traceparent off the wire control (RIG-2871) ([#957](https://github.com/RigelBuild/compass/issues/957)) ([3823c2d](https://github.com/RigelBuild/compass/commit/3823c2d3582fd87339d3cb5cecbcc79bb178e3d3))
+* **compass-agent:** meter the inbound control source + span its connections (O3) ([#540](https://github.com/RigelBuild/compass/issues/540)) ([c3fc01d](https://github.com/RigelBuild/compass/commit/c3fc01ddf0d480dcaf5496359f5fb2f56a5bfea2))
+* **compass-agent:** migrate control-source reconnect pump to Effect (RIG-2424 T4) ([#474](https://github.com/RigelBuild/compass/issues/474)) ([4961ce7](https://github.com/RigelBuild/compass/commit/4961ce705ac062ee19e8e99759de1d3d3cbbf2c2))
+* **compass-agent:** migrate frame-sink durable lane to Effect (RIG-2424 T2) ([#467](https://github.com/RigelBuild/compass/issues/467)) ([1084c42](https://github.com/RigelBuild/compass/commit/1084c42c3b0cda6a1cb7395aa2ad0c3b39516ea9))
+* **compass-agent:** migrate off the vendored oh-my-pi subtree onto @oh-my-pi/* 18.0.11 (RIG-2407) ([#924](https://github.com/RigelBuild/compass/issues/924)) ([a64f003](https://github.com/RigelBuild/compass/commit/a64f0036d283758754d7d659c751c1296d4d3ad2))
+* **compass-agent:** migrate publish spine to Effect (RIG-2424 T3) ([#471](https://github.com/RigelBuild/compass/issues/471)) ([69581b1](https://github.com/RigelBuild/compass/commit/69581b1951acd73409952a4d55815337b1dc23ff))
+* **compass-agent:** require role/persona on agents_spawn_peer and render handles only (RIG-2726) ([#762](https://github.com/RigelBuild/compass/issues/762)) ([0393d52](https://github.com/RigelBuild/compass/commit/0393d52ea6bf435fa7f22181a0087502413a7f2f))
+* **compass-agent:** scaffold transport OTel layer + containment test (O1a) ([#515](https://github.com/RigelBuild/compass/issues/515)) ([e121084](https://github.com/RigelBuild/compass/commit/e121084d94913f175ca4fbbdb4721c1b891ebcc7))
+* **compass-agent:** SessionInjection op-kind observation on the steer/deliver seam (RIG-2486) ([#496](https://github.com/RigelBuild/compass/issues/496)) ([d567033](https://github.com/RigelBuild/compass/commit/d567033ab40c1aa1fd725a0c57574054c550aa27))
+* **compass-agent:** span the outbound transport send + drain (O4) ([#542](https://github.com/RigelBuild/compass/issues/542)) ([9eb8d67](https://github.com/RigelBuild/compass/commit/9eb8d67a047e2bb9c076a0cf576ffda09552001e))
+* **compass-agent:** surface error/abort content as SessionError trace frames (RIG-2616 T2) ([#850](https://github.com/RigelBuild/compass/issues/850)) ([3839fb9](https://github.com/RigelBuild/compass/commit/3839fb9defb43f87848ca610b28ded88e8a179f7))
+* **compass-agent:** surface swallowed models.yml errors at boot; fail closed on unresolvable pinned model (RIG-2654) ([#697](https://github.com/RigelBuild/compass/issues/697)) ([b4447d5](https://github.com/RigelBuild/compass/commit/b4447d5790d6f03d58e2394d9a1011a01daa131c))
+* **compass-agent:** thread TurnTracer through the three injection shapes (RIG-2508 T2) ([#693](https://github.com/RigelBuild/compass/issues/693)) ([8b60afd](https://github.com/RigelBuild/compass/commit/8b60afdfa3df4b2f4234e8cc82b81e6cf2f047c9))
+* **compass-agent:** trace-continuity bridge module (RIG-2508 T1) ([#688](https://github.com/RigelBuild/compass/issues/688)) ([e20c1eb](https://github.com/RigelBuild/compass/commit/e20c1ebe7947ac0a2544841a8693fbbaded08cfa))
+* **compass-agent:** validate spawn role against the closed Manager taxonomy (RIG-3074) ([#810](https://github.com/RigelBuild/compass/issues/810)) ([655b056](https://github.com/RigelBuild/compass/commit/655b056d4efda1f0533ef6d539c79077338c473f))
+* **compass-agent:** wire OTLP exporters behind the transport OTel gate (O1b) ([#520](https://github.com/RigelBuild/compass/issues/520)) ([03f26d0](https://github.com/RigelBuild/compass/commit/03f26d0890463fdcfa317e70e2a880fe4465a258))
+* **compass-app:** close-time cancel of a window's in-flight calls (SEA-2035 M3b) ([#360](https://github.com/RigelBuild/compass/issues/360)) ([f9b4f88](https://github.com/RigelBuild/compass/commit/f9b4f88f7304db3185069247d75e49a3ac48360f))
+* **compass-app:** darwin build path via build-tag restructure (RIG-2753, T2) ([#640](https://github.com/RigelBuild/compass/issues/640)) ([eb2240f](https://github.com/RigelBuild/compass/commit/eb2240fb1f145e059b1cfa2bed9d4f65ff4c03b2))
+* **compass-app:** flip GTK3->GTK4 + webkitgtk-6.0 core (T2-T5) (RIG-2819) ([#682](https://github.com/RigelBuild/compass/issues/682)) ([4c958ca](https://github.com/RigelBuild/compass/commit/4c958ca86160abe5e9d3cb7bd6c7f76ac83351d1))
+* **compass-app:** multi-window gtk3 e2e smoke gate (SEA-2035 M4) ([#369](https://github.com/RigelBuild/compass/issues/369)) ([e3d18ea](https://github.com/RigelBuild/compass/commit/e3d18ea11fab97c33fbd05de9a94f99ed5158c01))
+* **compass-app:** revive embedded dual-mode + supervisor pipeline (RIG-3197, RIG-3198) ([#844](https://github.com/RigelBuild/compass/issues/844)) ([6a22bf9](https://github.com/RigelBuild/compass/commit/6a22bf946e47e3781f480c19936e3b080fe50d0e))
+* **compass-app:** thread the bundle bin/ dir onto the embedded stack's PATH ([#415](https://github.com/RigelBuild/compass/issues/415)) ([809c616](https://github.com/RigelBuild/compass/commit/809c6168227af5d6837d277ee8ebcf403265fa64))
+* **compass-app:** version stamp + --version on the desktop shell ([#414](https://github.com/RigelBuild/compass/issues/414)) ([3305429](https://github.com/RigelBuild/compass/commit/3305429c079f802f2dac80601f8e14b01161e8d6))
+* **compass-stack:** add preflight checks + self-host docs (RIG-2761) ([#669](https://github.com/RigelBuild/compass/issues/669)) ([ae0a9ce](https://github.com/RigelBuild/compass/commit/ae0a9ceb80c2ae33c08217cbfcf896410206fac7))
+* **compass-ui:** add the embedded boot arm to the shell-mode fork (RIG-3199) ([#861](https://github.com/RigelBuild/compass/issues/861)) ([3bdeac8](https://github.com/RigelBuild/compass/commit/3bdeac8ae53a6f2f1f50a96435bf354625bab353))
+* **compass-ui:** board-ify the Bridge PRs view (RIG-2129) ([#416](https://github.com/RigelBuild/compass/issues/416)) ([9b5ec31](https://github.com/RigelBuild/compass/commit/9b5ec31cf2c69c57a929a0c8ff90a91e058efe13))
+* **compass:** compass-guestd real PID-1 init (RIG-2589) ([#552](https://github.com/RigelBuild/compass/issues/552)) ([93b4a63](https://github.com/RigelBuild/compass/commit/93b4a631fc02d94f66986fd089d206d1a7e54b31))
+* **compass:** handle-address request inputs — schema, proto flip, resolver, comms edge (RIG-2880) ([#698](https://github.com/RigelBuild/compass/issues/698)) ([0a22bab](https://github.com/RigelBuild/compass/commit/0a22babb1b300c860bdd8fd421ad5a351b4bc632))
+* **compass:** microVM V2a boot harness + KVM-gated boot spike (RIG-2591) ([#574](https://github.com/RigelBuild/compass/issues/574)) ([d73ae7e](https://github.com/RigelBuild/compass/commit/d73ae7ee87d2623b96fa92f5a9e59779fc8900e1))
+* **compass:** pack bootable erofs guest image + module initramfs (RIG-2590) ([#559](https://github.com/RigelBuild/compass/issues/559)) ([06866a6](https://github.com/RigelBuild/compass/commit/06866a69f66019930b6e6ef0ef4104bf49de9f3d))
+* **compass:** seed GuestControl proto + host vsock dialer (RIG-2588) ([#547](https://github.com/RigelBuild/compass/issues/547)) ([6fffd5c](https://github.com/RigelBuild/compass/commit/6fffd5cc8d8e603d77352c1164d6f9a9d8dae8e3))
+* **config:** admit prompts/<role>/SYSTEM.md + expose Prompts info bucket (RIG-3075) ([#808](https://github.com/RigelBuild/compass/issues/808)) ([a9b889f](https://github.com/RigelBuild/compass/commit/a9b889f01e5a852ac9574392cb569ba74c2f8a0e))
+* **config:** profile registry — admit profiles/<name>/profile.yml at all three doors (RIG-2968) ([#813](https://github.com/RigelBuild/compass/issues/813)) ([ec3fe59](https://github.com/RigelBuild/compass/commit/ec3fe5903e54fc897ae6a539549ae3c527545601))
+* **config:** role prompts, concepts doc, and skill labels for the Manager taxonomy (RIG-3076, RIG-3077, RIG-3078) ([#802](https://github.com/RigelBuild/compass/issues/802)) ([ac68cd4](https://github.com/RigelBuild/compass/commit/ac68cd44784a8083d2cd920cce39be422fddb1e7))
+* **delivery:** factor routeMentionsFor + add scanMissedMentions (RIG-2600) ([#549](https://github.com/RigelBuild/compass/issues/549)) ([5872e73](https://github.com/RigelBuild/compass/commit/5872e737ec8b03e48075cafffced328abd2f23b1))
+* **delivery:** offline-mention record+wake arms + owed-mention start sweep (RIG-1641 T2) ([#499](https://github.com/RigelBuild/compass/issues/499)) ([c9ad908](https://github.com/RigelBuild/compass/commit/c9ad9084a284ab596e61eb29859446588b649945))
+* **delivery:** propagate trace context through delivery dispatch (RIG-2892) ([#739](https://github.com/RigelBuild/compass/issues/739)) ([aa025b0](https://github.com/RigelBuild/compass/commit/aa025b05695b7cd0966443e54ce635e7ffd0faaa))
+* **delivery:** reap held-deliver entries on Runner re-enroll (RIG-1612) ([#463](https://github.com/RigelBuild/compass/issues/463)) ([2a5843f](https://github.com/RigelBuild/compass/commit/2a5843f75bb05317ffe8b4c69f6a18f24905fe0b))
+* **delivery:** wire recovery scan at both recovery points + live-path mark (RIG-2601) ([#551](https://github.com/RigelBuild/compass/issues/551)) ([32f4aa6](https://github.com/RigelBuild/compass/commit/32f4aa6e3deb840b5765bff2fdb67a559dee8294))
+* **design-ledger:** add `Retired` row status for scrapped-without-successor decisions ([#522](https://github.com/RigelBuild/compass/issues/522)) ([6f38814](https://github.com/RigelBuild/compass/commit/6f38814c518586029776fbf0ce49059edacf2bc0))
+* **devenv:** add microVM VMM userspace toolset to dev shell ([#502](https://github.com/RigelBuild/compass/issues/502)) ([cf5d3e6](https://github.com/RigelBuild/compass/commit/cf5d3e6917f7a83b7dfffa6e90df55ddb15eb4b7))
+* **devenv:** de-pin 3 agent-image devenv-fork sites onto the tool (RIG-2812) ([#815](https://github.com/RigelBuild/compass/issues/815)) ([44e5034](https://github.com/RigelBuild/compass/commit/44e5034baa59ead8d8ae3f16f2e2fbfa51adbc32))
+* **devenv:** move root devenv source onto the RigelBuild fork (RIG-2814) ([#816](https://github.com/RigelBuild/compass/issues/816)) ([66ce611](https://github.com/RigelBuild/compass/commit/66ce61170a2f9de43a26b22f95e75c8a3fb529e7))
+* **devenv:** relax Linux guards for macOS-native postgres/server/UI/cert/mint (SEA-2003) ([#346](https://github.com/RigelBuild/compass/issues/346)) ([00a8d06](https://github.com/RigelBuild/compass/commit/00a8d0611ec0efc7d3380e5cab6d1ad5fac2dd15))
+* **e2e:** AwaitControlDispatch fixture primitive over SubscribeAgentSession (RIG-2487) ([#504](https://github.com/RigelBuild/compass/issues/504)) ([29f1f59](https://github.com/RigelBuild/compass/commit/29f1f597b57fd5a3de97cfdf7a09a1b40a79b4e4))
+* **fabric:** add NATS EventFabric + RunnerFabric seams (RIG-3107) ([#877](https://github.com/RigelBuild/compass/issues/877)) ([909a02b](https://github.com/RigelBuild/compass/commit/909a02bbe61d714b2f93c2efa643d369dd329c98))
+* **fabric:** add tenant-wildcard comms subscribe (RIG-3107) ([#903](https://github.com/RigelBuild/compass/issues/903)) ([6371320](https://github.com/RigelBuild/compass/commit/6371320dd623a2703e42846b6bebcdbd48571b13))
+* **fabric:** add the RoutingFabric seam for binding-cache invalidation (RIG-3108) ([#955](https://github.com/RigelBuild/compass/issues/955)) ([c953baa](https://github.com/RigelBuild/compass/commit/c953baa3d80390433a45b2525ce81ce61c9cb1d8))
+* **flake:** repo-root flake.nix packaging + nixpkgs-pin parity gate (RIG-2757, T6) ([#642](https://github.com/RigelBuild/compass/issues/642)) ([1b3f52f](https://github.com/RigelBuild/compass/commit/1b3f52fb08a69cb3d12cf3f5eb7ba7c75520c36d))
+* **forge:** agent turn-end notification arm + forge ack (RIG-2732) ([#678](https://github.com/RigelBuild/compass/issues/678)) ([0ee2f6b](https://github.com/RigelBuild/compass/commit/0ee2f6b87dd3ce0c748aa1997b1c811800627c52))
+* **forge:** container-scope subscriptions, notification kinds, forge ack frame (RIG-2732) ([#674](https://github.com/RigelBuild/compass/issues/674)) ([7a8ddae](https://github.com/RigelBuild/compass/commit/7a8ddaea559ac4562eb2c2f6ff67efa39f65933a))
+* **forge:** GitHub App installation-token source (RIG-2732) ([#679](https://github.com/RigelBuild/compass/issues/679)) ([31de779](https://github.com/RigelBuild/compass/commit/31de7793a769a8ad7507f0ed2f9b3636298bc794))
+* **forge:** GitHub Provider write methods + Provider.BodyLimit (RIG-2170) ([#394](https://github.com/RigelBuild/compass/issues/394)) ([7396fcf](https://github.com/RigelBuild/compass/commit/7396fcffa57b131aa8ef4ed657d4383572e9cc48))
+* **forge:** GitHub read Provider — GetIssue/GetPullRequest/Checks ([#413](https://github.com/RigelBuild/compass/issues/413)) ([4fb68a8](https://github.com/RigelBuild/compass/commit/4fb68a813ae541cfcdab1594688e0903b2cdc919))
+* **forge:** GitHub SubmitReview + Provider.SubmitReview method (RIG-2170) ([#398](https://github.com/RigelBuild/compass/issues/398)) ([b1001f2](https://github.com/RigelBuild/compass/commit/b1001f27a967ded8ebab5b112cec92dbfdd1dfcd))
+* **forge:** Linear provider (read + write, issues half) (RIG-2170) ([#400](https://github.com/RigelBuild/compass/issues/400)) ([068320d](https://github.com/RigelBuild/compass/commit/068320d0b0b6a42f777803cfe25cb2cd49001a76))
+* **forge:** ListUpdatedIssues updated-order conditional walk (RIG-2883 T2) ([#709](https://github.com/RigelBuild/compass/issues/709)) ([2e3245c](https://github.com/RigelBuild/compass/commit/2e3245cb639166a4b47782b116fbb2a9cb828f37))
+* **forge:** notify router + snapshot apply (RIG-2732) ([#676](https://github.com/RigelBuild/compass/issues/676)) ([c5c6862](https://github.com/RigelBuild/compass/commit/c5c6862d7989a38aaf5d68281bbc37548ef27389))
+* **forge:** reconcile sweep + conditional reads (RIG-2732) ([#677](https://github.com/RigelBuild/compass/issues/677)) ([0518386](https://github.com/RigelBuild/compass/commit/051838648578ad8b5eb804ae99e150d0bb555640))
+* **forge:** surface rate-limit retry hint on the forge error channel (RIG-2255) ([#750](https://github.com/RigelBuild/compass/issues/750)) ([2426dd2](https://github.com/RigelBuild/compass/commit/2426dd2ed04b5b1ea3b6ce929547188e219086f8))
+* **forge:** webhook ingress + event normalize (RIG-2732) ([#675](https://github.com/RigelBuild/compass/issues/675)) ([082a28c](https://github.com/RigelBuild/compass/commit/082a28cf4947a692451e354f64de471f1197ea33))
+* **forge:** wire agent forge subscribe/unsubscribe — store writer + DL-053 GC (RIG-2732) ([#631](https://github.com/RigelBuild/compass/issues/631)) ([f7c414a](https://github.com/RigelBuild/compass/commit/f7c414a7ead82ffb275861b4db7ab622f44988fd))
+* **guest_control:** grow GuestControl with the V2b exec surface (RIG-2493) ([#696](https://github.com/RigelBuild/compass/issues/696)) ([d97d8bc](https://github.com/RigelBuild/compass/commit/d97d8bcf2c8d57c34f96c836e365634587eb0c0f))
+* **guest-image:** microVM guest kernel + rootfs derivations and moon build gate ([#507](https://github.com/RigelBuild/compass/issues/507)) ([1b968b8](https://github.com/RigelBuild/compass/commit/1b968b8b6aa82a234f77d0f6c86d396a13b59330))
+* **guestd:** arm nft_script as guest root before the exec gate (V3 W1) ([#754](https://github.com/RigelBuild/compass/issues/754)) ([43b98d0](https://github.com/RigelBuild/compass/commit/43b98d021ed788fb3f5f0d4117bcec3aed545121))
+* **guestd:** forward /run/compass/agent.sock to the host gateway over vsock ([#817](https://github.com/RigelBuild/compass/issues/817)) ([193f78d](https://github.com/RigelBuild/compass/commit/193f78da24c1b80e37361f43cf7f0e5736f8954b))
+* **guestd:** replace the Health-only stub with the V2b in-guest supervisor (RIG-2493) ([#701](https://github.com/RigelBuild/compass/issues/701)) ([d86412d](https://github.com/RigelBuild/compass/commit/d86412d1fef89e3c013d84485ef62476a6875b32))
+* **ingest:** board reconciler startup sweep + slow ticker + watermark (RIG-2883) ([#708](https://github.com/RigelBuild/compass/issues/708)) ([b769389](https://github.com/RigelBuild/compass/commit/b769389413edd268d168fc75647900acaebac46b))
+* **ingest:** board webhook arm — fan-out sink + hydrating ingest queue (RIG-2883) ([#706](https://github.com/RigelBuild/compass/issues/706)) ([d9227fc](https://github.com/RigelBuild/compass/commit/d9227fc2a1f4e1a8e0c3b79f3929c4a6e77d2a43))
+* **keyboard:** four G-leader sequence rows + display/aria hardening (RIG-2708) ([#613](https://github.com/RigelBuild/compass/issues/613)) ([c7105ce](https://github.com/RigelBuild/compass/commit/c7105ceee5faca1f02b4edd8c1b68d7e54ebf808))
+* **keyboard:** leader-sequence runtime in the keymap dispatcher (RIG-2709) ([#616](https://github.com/RigelBuild/compass/issues/616)) ([29c4a7f](https://github.com/RigelBuild/compass/commit/29c4a7fb9cf27b56f0adde6f30060bd39b104c60))
+* **keyboard:** sequence-grammar chord helpers for leader chords (RIG-2707) ([#612](https://github.com/RigelBuild/compass/issues/612)) ([90f01bf](https://github.com/RigelBuild/compass/commit/90f01bf375e5ec2b82ea6b1eebeaf0f18515ce6d))
+* **linearagent:** Linear Agent Session webhook types + API client (RIG-2717 T1/T2) ([#637](https://github.com/RigelBuild/compass/issues/637)) ([3217854](https://github.com/RigelBuild/compass/commit/3217854a0862f945631949fcf0d8254c732346ac))
+* **linearagent:** Linear Agent Session webhook types + API client (RIG-2717 T1/T2) ([#638](https://github.com/RigelBuild/compass/issues/638)) ([574025c](https://github.com/RigelBuild/compass/commit/574025ca235d00f51ba361b1a47ee85e4b775777))
+* **linearagent:** responder routing + async dispatcher (RIG-2717 T4/T6) ([#646](https://github.com/RigelBuild/compass/issues/646)) ([077d08f](https://github.com/RigelBuild/compass/commit/077d08f41eb0f9ff6f1b8453c525963a86db544b))
+* **lint:** enable depguard + gomodguard_v2 with an active import fence (RIG-3033) ([#763](https://github.com/RigelBuild/compass/issues/763)) ([4593022](https://github.com/RigelBuild/compass/commit/45930222f80df6d08e18bd33f4077ed9d023a447))
+* **lint:** stricter Biome rules + GritQL fixed-sleep ban (RIG-3032) ([#769](https://github.com/RigelBuild/compass/issues/769)) ([0af33ac](https://github.com/RigelBuild/compass/commit/0af33ac070976556b2104896699c621ebe780603))
+* **microvm:** host-written per-session pidfiles with PID-reuse defense (RIG-2498) ([#974](https://github.com/RigelBuild/compass/issues/974)) ([19c3c95](https://github.com/RigelBuild/compass/commit/19c3c95cd9b15cb94cf911fba9d0b3c47ec89ff3))
+* **microvmtest:** add untagged microVM test gate package ([#503](https://github.com/RigelBuild/compass/issues/503)) ([6840479](https://github.com/RigelBuild/compass/commit/684047930dddc969eae28e40c51a875996c007c4))
+* **microvm:** virtio-fs mount-ns isolation + volume-quota verification (RIG-2497) ([#912](https://github.com/RigelBuild/compass/issues/912)) ([0e05a9a](https://github.com/RigelBuild/compass/commit/0e05a9a7757fddd1521bf4aa7da0dc59324611a4))
+* **notify:** resolve a check_suite head SHA to its PR number (RIG-2869) ([#950](https://github.com/RigelBuild/compass/issues/950)) ([088d13a](https://github.com/RigelBuild/compass/commit/088d13ac383cfd01552672d89c5b2eef247277ad))
+* **otel:** add go/internal/otel bootstrap package (RIG-2888) ([#699](https://github.com/RigelBuild/compass/issues/699)) ([108f174](https://github.com/RigelBuild/compass/commit/108f174a336eaae543ef9e9b84043c117e4b3a60))
+* **otel:** emit runner client spans (RIG-2890) ([#714](https://github.com/RigelBuild/compass/issues/714)) ([20fa1c0](https://github.com/RigelBuild/compass/commit/20fa1c056cfca004568954cb1597f8a786290d47))
+* **otel:** emit server-side spans + traceresponse header (RIG-2889) ([#713](https://github.com/RigelBuild/compass/issues/713)) ([bd97337](https://github.com/RigelBuild/compass/commit/bd9733786afb98ab7ed2c44d1c0f41e54c13e7aa))
+* **otel:** link a reply's trace back to its trigger (RIG-3499) ([#1041](https://github.com/RigelBuild/compass/issues/1041)) ([e2b919e](https://github.com/RigelBuild/compass/commit/e2b919e83902ddd4bd23e9617d021014237bf6d2))
+* **otel:** stamp the PostHog session id onto backend spans (J1 inbound half) ([#996](https://github.com/RigelBuild/compass/issues/996)) ([6966925](https://github.com/RigelBuild/compass/commit/6966925900eee1bc40529343165ee5740d233fa4))
+* **prompts:** activate the issue/PR-tool references in the role block-0 prompts (RIG-1734) ([#849](https://github.com/RigelBuild/compass/issues/849)) ([b937e25](https://github.com/RigelBuild/compass/commit/b937e253233ce02bd198f93f3538d4a9b2ed7904))
+* **proto:** add SessionError to the compass.v1 session-trace contract (RIG-2616 T1) ([#846](https://github.com/RigelBuild/compass/issues/846)) ([ad7bff4](https://github.com/RigelBuild/compass/commit/ad7bff400efe2b1fe2fcca8ea0086bb0d3e7e215))
+* **proto:** add SessionInjection + trigger_traceparent trace fields (RIG-2891) ([#700](https://github.com/RigelBuild/compass/issues/700)) ([9e3f2db](https://github.com/RigelBuild/compass/commit/9e3f2db0d927a5563e53fe6db1d7a3530517b622))
+* **proto:** add traceparent to SteerControl/DeliverControl for trace continuity (RIG-2508) ([#694](https://github.com/RigelBuild/compass/issues/694)) ([c484235](https://github.com/RigelBuild/compass/commit/c48423544590d1fc5805f5852e7b9095da43ca7d))
+* **proto:** forge submit_review arm + ReviewRef ack + envelope ForgeRef/client_request_id (RIG-2170) ([#393](https://github.com/RigelBuild/compass/issues/393)) ([92287a4](https://github.com/RigelBuild/compass/commit/92287a4322048e71bef112ef9c9c666df56d89c0))
+* **proto:** OpenDM RPC + gateway arm; GROUP_DM retirement; DM/convert fields (RIG-2962) ([#738](https://github.com/RigelBuild/compass/issues/738)) ([7eddb90](https://github.com/RigelBuild/compass/commit/7eddb90ff61579db6a9fdaf22aaf92fb79edbe07))
+* **proto:** org-management comms + spawn arms for agent gateway (RIG-2673) ([#628](https://github.com/RigelBuild/compass/issues/628)) ([dd4f291](https://github.com/RigelBuild/compass/commit/dd4f29114c373abcd24ba161fb9792009881740a))
+* **release:** attach the Linux client bundle to the semver Release (RIG-2752) ([#761](https://github.com/RigelBuild/compass/issues/761)) ([6c61631](https://github.com/RigelBuild/compass/commit/6c6163115e6cd5ebbbe0ba1a104dbc0a9aaad123))
+* **release:** build the macOS .app/.dmg client bundle on a macos-14 lane (RIG-2754) ([#784](https://github.com/RigelBuild/compass/issues/784)) ([3acedd7](https://github.com/RigelBuild/compass/commit/3acedd7aed94f39072322d7f47094f09c546ae73))
+* **release:** release-gated asset + image jobs, port release-notes tool (RIG-2915) ([#742](https://github.com/RigelBuild/compass/issues/742)) ([7188de6](https://github.com/RigelBuild/compass/commit/7188de621a181dfb57117af7b39814aa34bdcb37))
+* **release:** release-please config + unified release.yml (RIG-2914) ([#741](https://github.com/RigelBuild/compass/issues/741)) ([5219558](https://github.com/RigelBuild/compass/commit/5219558d212a04011b74326e53a09d323eae7521))
+* **release:** version.txt base for bundle, required-image release posture, unified-lane docs (RIG-2916) ([#743](https://github.com/RigelBuild/compass/issues/743)) ([867159a](https://github.com/RigelBuild/compass/commit/867159a335dfe01cd90ab37a6a2aeb04c2431202))
+* **renovate:** auto-bump DefaultPostgresImage digest within postgres:18 (RIG-2774) ([#673](https://github.com/RigelBuild/compass/issues/673)) ([86c1bd7](https://github.com/RigelBuild/compass/commit/86c1bd7fdfc7305c515e514c95fb575fed2b83e8))
+* **renovate:** auto-refresh pinned Nix FOD hashes on dep bump (RIG-2727) ([#626](https://github.com/RigelBuild/compass/issues/626)) ([99ecc40](https://github.com/RigelBuild/compass/commit/99ecc40d57cca4e1a9921dc2d4cc915d60feda16))
+* **renovate:** couple go bump to go-overlay refresh (RIG-3100) ([#841](https://github.com/RigelBuild/compass/issues/841)) ([e327cbd](https://github.com/RigelBuild/compass/commit/e327cbd8dd1f7d576976fcb2ca3eaf0f5e5e27c3))
+* **renovate:** migrate compass off Dependabot to self-hosted Renovate (RIG-2432) ([#477](https://github.com/RigelBuild/compass/issues/477)) ([e3d8161](https://github.com/RigelBuild/compass/commit/e3d8161c4f8273eb307f33e6d6af9bac468c7ab8))
+* **renovate:** re-land postgres-stack customManager (RIG-2774) ([#772](https://github.com/RigelBuild/compass/issues/772)) ([5371d81](https://github.com/RigelBuild/compass/commit/5371d81cc5a01c1aa14d891a0903e62f1fd52e05))
+* **renovate:** track the RigelBuild/devenv fork in both devenv locks (RIG-2815) ([#865](https://github.com/RigelBuild/compass/issues/865)) ([40398f7](https://github.com/RigelBuild/compass/commit/40398f7d35e8eb44150054f9dcc2b6180f288fc0))
+* **runner:** backend-gated startup preflight (RIG-3147) ([#843](https://github.com/RigelBuild/compass/issues/843)) ([0773a48](https://github.com/RigelBuild/compass/commit/0773a48733e85b1e2da161e2c2fd54f2ec024923))
+* **runnerhub:** agent forge-call relay legs (RIG-2170) ([#405](https://github.com/RigelBuild/compass/issues/405)) ([b3a5841](https://github.com/RigelBuild/compass/commit/b3a58415b449d3514adcacde238d3eb599b26fe5))
+* **runnerhub:** bounded per-router send queue for non-blocking dispatch (RIG-2688) ([#604](https://github.com/RigelBuild/compass/issues/604)) ([05d88e7](https://github.com/RigelBuild/compass/commit/05d88e72f9db9bb2b7b22551f7ed3ef15640b6ef))
+* **runner:** microVM boot canary startup preflight (RIG-3148) ([#847](https://github.com/RigelBuild/compass/issues/847)) ([1646e0c](https://github.com/RigelBuild/compass/commit/1646e0cdba3625b073563810b8164e691034ddc0))
+* **runner:** serve the AgentGateway over a per-session vsock path on microVM ([#818](https://github.com/RigelBuild/compass/issues/818)) ([5fbf3e2](https://github.com/RigelBuild/compass/commit/5fbf3e24027f6aeb0ec00e10cc7c3d615e7e4aba))
+* **runtime:** add --volumes to PodmanCLI.Remove as defense-in-depth ([#417](https://github.com/RigelBuild/compass/issues/417)) ([280e999](https://github.com/RigelBuild/compass/commit/280e99970e81d203bae2b8e785caf098c450913d))
+* **runtime:** deliver egress policy to the guest; skip host arm on self-arming backends (V3 W2) ([#755](https://github.com/RigelBuild/compass/issues/755)) ([73a28b7](https://github.com/RigelBuild/compass/commit/73a28b712723eb7d011067b69039e4cd92959acd))
+* **runtime:** fill MicroVMRuntime lifecycle methods (RIG-2493) ([#719](https://github.com/RigelBuild/compass/issues/719)) ([6a2c05c](https://github.com/RigelBuild/compass/commit/6a2c05c2c9f27600f396ca9e3482823342ed0879))
+* **runtime:** freeze ContainerRuntime.Resize + ResourceLimits at S1 ([#454](https://github.com/RigelBuild/compass/issues/454)) ([64e1583](https://github.com/RigelBuild/compass/commit/64e15839ac174cd4be99c61a312e843ab9cba4f2))
+* **runtime:** host GuestExec layer + portable exit-signal error type (RIG-2493) ([#702](https://github.com/RigelBuild/compass/issues/702)) ([27c9411](https://github.com/RigelBuild/compass/commit/27c9411b216691b50136fa0c751f7ef5977dec34))
+* **runtime:** microVM backend seam + config-driven selection (RIG-2491) ([#491](https://github.com/RigelBuild/compass/issues/491)) ([8fb58e0](https://github.com/RigelBuild/compass/commit/8fb58e07718736d93f74c0766f77340f99a2e0bf))
+* **runtime:** microVM static preflight + shared hostcheck core (RIG-3146) ([#835](https://github.com/RigelBuild/compass/issues/835)) ([7e23d19](https://github.com/RigelBuild/compass/commit/7e23d19d904e4cc6d146fe6118d05fda3fcabcc6))
+* **secrets:** admin-gated SetServerSecret/DeleteServerSecret over the server registry ([#962](https://github.com/RigelBuild/compass/issues/962)) ([2de6479](https://github.com/RigelBuild/compass/commit/2de64797963cf867d882614231e0bb86e057b95f))
+* **server:** assemble the GitHub agent-notification lane (RIG-2732 T7) ([#735](https://github.com/RigelBuild/compass/issues/735)) ([e3f764b](https://github.com/RigelBuild/compass/commit/e3f764b73709debe6fab35026bc83f7ee82304ff))
+* **server:** forge write chokepoint — ForgeCaller impl (RIG-2170) ([#408](https://github.com/RigelBuild/compass/issues/408)) ([83ae205](https://github.com/RigelBuild/compass/commit/83ae205b40e64fadc987f0ab5363fa68b8fe2724))
+* **server:** mount the Linear webhook ingress /webhooks/linear (RIG-2732 T7) ([#744](https://github.com/RigelBuild/compass/issues/744)) ([4f539b0](https://github.com/RigelBuild/compass/commit/4f539b0a703fcb6c9557f7dda529ed4f88901eae))
+* **server:** offline-agent wake seam + system-authorized resume (RIG-1641 T3) ([#497](https://github.com/RigelBuild/compass/issues/497)) ([b924399](https://github.com/RigelBuild/compass/commit/b924399b66397b13f4f944490117f510f9565ba4))
+* **server:** per-deployment public URL + deep-link builder (RIG-2717 T5) ([#639](https://github.com/RigelBuild/compass/issues/639)) ([5d01d87](https://github.com/RigelBuild/compass/commit/5d01d87706e5c225d98886d9aa89881ab621ac14))
+* **server:** re-point the forge boot consumers at the server resolver ([#988](https://github.com/RigelBuild/compass/issues/988)) ([f227491](https://github.com/RigelBuild/compass/commit/f2274911d071bdeaf5571f00d87c881df075ef59))
+* **server:** retire the forge poll driver, mount the App-only board webhook lane (RIG-2883 T5) ([#724](https://github.com/RigelBuild/compass/issues/724)) ([55bcefa](https://github.com/RigelBuild/compass/commit/55bcefab3fbc575927fd2023c16c4e09879670da))
+* **server:** seed the tree root as role "supervisor" (RIG-3079) ([#834](https://github.com/RigelBuild/compass/issues/834)) ([bf216c2](https://github.com/RigelBuild/compass/commit/bf216c24800e83a32cfe85b1e0b2461ef447365d))
+* **server:** wire the forge write path end to end (RIG-2170) ([#425](https://github.com/RigelBuild/compass/issues/425)) ([e25b19c](https://github.com/RigelBuild/compass/commit/e25b19c020db8f1a458cb4b54fee4204cd7c0d5f))
+* **server:** wire the Linear agent-notification lane data sink (RIG-2732 T7) ([#751](https://github.com/RigelBuild/compass/issues/751)) ([8e68875](https://github.com/RigelBuild/compass/commit/8e68875012ac73408df0ec639fbfa32bbfc33b1c))
+* **stack:** bundle Plane-B fan-in OTel Collector as a supervised child (RIG-2825) ([#672](https://github.com/RigelBuild/compass/issues/672)) ([faf2bc1](https://github.com/RigelBuild/compass/commit/faf2bc1f6c240003a9d2c944f2cbb882eeece9ea))
+* **stack:** container-backed postgres + --database-external opt-out (RIG-2759, T8) ([#652](https://github.com/RigelBuild/compass/issues/652)) ([fcae4f0](https://github.com/RigelBuild/compass/commit/fcae4f00590ee8ab74e9c1d82e58b53808688b41))
+* **stack:** pgid-record v2 kind-tagged union for container teardown (RIG-2760, T8a) ([#644](https://github.com/RigelBuild/compass/issues/644)) ([78da0f1](https://github.com/RigelBuild/compass/commit/78da0f1b63d8a3c151b06db0c0480fd2e0df305a))
+* **stack:** pin stock postgres:18 container image by digest (RIG-2758, T7) ([#641](https://github.com/RigelBuild/compass/issues/641)) ([4d1ebe4](https://github.com/RigelBuild/compass/commit/4d1ebe43a4d7d802fd11ea8741f31aebef79f07f))
+* **stack:** read the process identity token via sysctl on darwin (RIG-3548) ([#1033](https://github.com/RigelBuild/compass/issues/1033)) ([735ec26](https://github.com/RigelBuild/compass/commit/735ec268e43c2704a568a0a9130b89d80ef8703f))
+* **stack:** supervise a bundled NATS broker as a stack container (RIG-3107) ([#878](https://github.com/RigelBuild/compass/issues/878)) ([d3488ff](https://github.com/RigelBuild/compass/commit/d3488ff767adf83eba3ba215d7931a5066d1e844))
+* **store,server:** model registry store + operator write RPC + fail-closed config lint (RIG-3122) ([#853](https://github.com/RigelBuild/compass/issues/853)) ([010188b](https://github.com/RigelBuild/compass/commit/010188b11ececba41174158fccf99ccb4fff65dc))
+* **store:** add mentions_routed_at marker column + scan surface (RIG-2599) ([#546](https://github.com/RigelBuild/compass/issues/546)) ([6338f82](https://github.com/RigelBuild/compass/commit/6338f8225c39ab65595c240aee43d3aa8ad04fdc))
+* **store:** add the durable session_bindings table and its store methods (RIG-3108) ([#990](https://github.com/RigelBuild/compass/issues/990)) ([983e620](https://github.com/RigelBuild/compass/commit/983e620a7f21ec851b94c286cb11682a2564264d))
+* **store:** admit SubjectService token principal (enum half) (RIG-2863) ([#911](https://github.com/RigelBuild/compass/issues/911)) ([71522ff](https://github.com/RigelBuild/compass/commit/71522ff7d633bd24e580ddf71f5c5cb3feac99d2))
+* **store:** forge authored-artifact ownership index (RIG-2170) ([#404](https://github.com/RigelBuild/compass/issues/404)) ([fd5ca78](https://github.com/RigelBuild/compass/commit/fd5ca78c51fde3af6279aa67da2ca6d1c868dc1d))
+* **store:** migrate accounts + agent_tree to sqlc (T2) ([#790](https://github.com/RigelBuild/compass/issues/790)) ([2d9db7c](https://github.com/RigelBuild/compass/commit/2d9db7cc224909bbb6699732d754e75f3cdc73cb))
+* **store:** migrate channels + channel_pins + coordination to sqlc (T3) ([#792](https://github.com/RigelBuild/compass/issues/792)) ([be9c371](https://github.com/RigelBuild/compass/commit/be9c371b64989c21c58f6a24c7c1baa1e6100706))
+* **store:** migrate messages + topics + delivery to sqlc (T4) ([#795](https://github.com/RigelBuild/compass/issues/795)) ([ff5bfab](https://github.com/RigelBuild/compass/commit/ff5bfab8ee3ceafbe520c4b89c66012a5cb71d0a))
+* **store:** owed_mentions durable backstop + AckDelivery clear (RIG-1641 T1) ([#494](https://github.com/RigelBuild/compass/issues/494)) ([6835515](https://github.com/RigelBuild/compass/commit/68355156b7cc0682828ca6620a18f427e0ba7e55))
+* **store:** recency-guard write-path threading for forge_updated_at (RIG-2883) ([#710](https://github.com/RigelBuild/compass/issues/710)) ([96199ce](https://github.com/RigelBuild/compass/commit/96199ced1e669c4833101df2e3e1b69b749e26c9))
+* **store:** reserved DM group + upsert + create-guard + convert-on-add (RIG-2963) ([#746](https://github.com/RigelBuild/compass/issues/746)) ([0df3c57](https://github.com/RigelBuild/compass/commit/0df3c57465d690cf534ebcb15c61ab50179ac807))
+* **store:** RLS enforcement + per-transaction tenant scoping (RIG-3106) ([#830](https://github.com/RigelBuild/compass/issues/830)) ([6d4acdb](https://github.com/RigelBuild/compass/commit/6d4acdba18d335da1b77f7665fbd4b20293c9365))
+* **store:** scaffold sqlc + arm the inline-SQL ban gate (T1) ([#780](https://github.com/RigelBuild/compass/issues/780)) ([a84f2d2](https://github.com/RigelBuild/compass/commit/a84f2d23a5d20b90798d2189d7d4cf5c041eff26))
+* **store:** server_secrets registry, physically separate from user secrets ([#960](https://github.com/RigelBuild/compass/issues/960)) ([bad69ff](https://github.com/RigelBuild/compass/commit/bad69ffec49037f0063ff112ce43e874b9130c75))
+* **store:** tenant schema + identity plumbing (RIG-2861 T1) ([#715](https://github.com/RigelBuild/compass/issues/715)) ([a17625b](https://github.com/RigelBuild/compass/commit/a17625b456c7c9c9368e82269f39a622a36e35b6))
+* **store:** watermark persistence + enabled-repo enumeration (RIG-2883 T4) ([#705](https://github.com/RigelBuild/compass/issues/705)) ([95421e2](https://github.com/RigelBuild/compass/commit/95421e2589fe7f3f542ebe49fb7a97e2a9e3fb1b))
+* **toolchain:** add devenv-cli source resolver tool (RIG-2546) ([#666](https://github.com/RigelBuild/compass/issues/666)) ([46fe144](https://github.com/RigelBuild/compass/commit/46fe144c8f83f29866086507f0426c64d45f0518))
+* **toolchain:** re-land devenv-cli source resolver tool (RIG-2546 T1) ([#771](https://github.com/RigelBuild/compass/issues/771)) ([990644e](https://github.com/RigelBuild/compass/commit/990644ea8e1d2e648c2995038210d7c8495736f9))
+* **tools:** compass-app-dev local build+launch loop for the native client (RIG-3103) ([#819](https://github.com/RigelBuild/compass/issues/819)) ([0426dc4](https://github.com/RigelBuild/compass/commit/0426dc49d3317e03842fbbb56bda0717044988e3))
+* **ui:** add the Bridge advancing-card dormant chase-light hook (RIG-2128) ([#409](https://github.com/RigelBuild/compass/issues/409)) ([37c4e0a](https://github.com/RigelBuild/compass/commit/37c4e0a1c049d6195f3870744afc8ef32b157c9e))
+* **ui:** adopt CoachTip across command-backed chrome + register sidebar toggles (RIG-2704) ([#618](https://github.com/RigelBuild/compass/issues/618)) ([f9cd5bd](https://github.com/RigelBuild/compass/commit/f9cd5bdba7cc28076466eba7c6a05036156e9eec))
+* **ui:** adopt frozen 1-bit pixel-art state-dot glyphs (RIG-2118) ([#862](https://github.com/RigelBuild/compass/issues/862)) ([eb5ef7a](https://github.com/RigelBuild/compass/commit/eb5ef7a169de011d3d705f5bd533eee7baf444f8))
+* **ui:** BadgeGlyph — Option-B axis badge (glyph + 2-char code) ([#377](https://github.com/RigelBuild/compass/issues/377)) ([69bb2f5](https://github.com/RigelBuild/compass/commit/69bb2f50c513a18ddc8ddbc77c50760e92dec274))
+* **ui:** board cuts over to live roster — store.agents() + tree-empty seam (SEA-2099, SEA-2100) ([#367](https://github.com/RigelBuild/compass/issues/367)) ([8b202de](https://github.com/RigelBuild/compass/commit/8b202de4e3f9a523e9c662d18cb02dff29cbfda4))
+* **ui:** Bridge 2-D roving-tabindex keyboard grid + empty-board (RIG-2130) ([#472](https://github.com/RigelBuild/compass/issues/472)) ([16e0d09](https://github.com/RigelBuild/compass/commit/16e0d09c5e15571d4580b62335e5d755058a2e72))
+* **ui:** Cmd/Ctrl+K command palette + point-of-use shortcut chips (RIG-2483) ([#529](https://github.com/RigelBuild/compass/issues/529)) ([dc07f46](https://github.com/RigelBuild/compass/commit/dc07f46e6941523d9d855128b65e54bca624591e))
+* **ui:** CoachTip coaching tooltip component (RIG-2703) ([#615](https://github.com/RigelBuild/compass/issues/615)) ([ba93b66](https://github.com/RigelBuild/compass/commit/ba93b6600a1615270097ad7c1c3ce9b5eff33557))
+* **ui:** embed posthog-js behind an off-by-default analytics flag ([#689](https://github.com/RigelBuild/compass/issues/689)) ([797cd71](https://github.com/RigelBuild/compass/commit/797cd71138695bde093af6bf9b195b127902002a))
+* **ui:** flip CI/review badges to BadgeGlyph + wire DS badge CSS (SEA-2122) ([#378](https://github.com/RigelBuild/compass/issues/378)) ([0535407](https://github.com/RigelBuild/compass/commit/053540731ecf40734800b0c62b57916ae530eff9))
+* **ui:** install the keyboard spine at the App root (RIG-2456) ([#489](https://github.com/RigelBuild/compass/issues/489)) ([94a8331](https://github.com/RigelBuild/compass/commit/94a833191a3f959b67e790793c7b6073d9c913ca))
+* **ui:** migrate apps/ui to Solid 2 (RIG-2202) ([#548](https://github.com/RigelBuild/compass/issues/548)) ([fb234f3](https://github.com/RigelBuild/compass/commit/fb234f339b63d067b2ff7f1032e1d088f39117e4))
+* **ui:** offline fixture boot mode + build-scan hard wall ([#382](https://github.com/RigelBuild/compass/issues/382)) ([b84989f](https://github.com/RigelBuild/compass/commit/b84989fa5c365f81636d6e50ff9af589cc4dd177))
+* **ui:** point visual-smoke harness at offline fixture mode ([#383](https://github.com/RigelBuild/compass/issues/383)) ([5089e1d](https://github.com/RigelBuild/compass/commit/5089e1de5d5c741f1280ef431edee4d7dcda4969))
+* **ui:** re-clothe Bridge grid shell onto the hairline board look ([#389](https://github.com/RigelBuild/compass/issues/389)) ([82294b6](https://github.com/RigelBuild/compass/commit/82294b6a78853905362c3593d375b4dbdd57586d))
+* **ui:** re-clothe Bridge issue card onto the DS .cx-card (RIG-2126) ([#403](https://github.com/RigelBuild/compass/issues/403)) ([56ec3b6](https://github.com/RigelBuild/compass/commit/56ec3b67eaaa845d7ae989a0d2b5ffbaf34ae2d1))
+* **ui:** re-theme demo fixtures to a Manager-named example tree (RIG-2346) ([#444](https://github.com/RigelBuild/compass/issues/444)) ([5c42d52](https://github.com/RigelBuild/compass/commit/5c42d52ac46fc19d9d246947996955b3d4e5fff2))
+* **ui:** scope-aware tier-3 command dispatch (RIG-2529) ([#519](https://github.com/RigelBuild/compass/issues/519)) ([f406cfe](https://github.com/RigelBuild/compass/commit/f406cfe544fe0f312b94a1515b52c076a31fd3d7))
+* **ui:** searchable ? keyboard-shortcuts overlay (RIG-2482) ([#526](https://github.com/RigelBuild/compass/issues/526)) ([2cc992a](https://github.com/RigelBuild/compass/commit/2cc992a41fdb3e53c24fcb8fb9b6e6733d848e15))
+* **ui:** stamp the server trace id onto captured product events (RIG-2874) ([#938](https://github.com/RigelBuild/compass/issues/938)) ([98b6ce9](https://github.com/RigelBuild/compass/commit/98b6ce99b731771c927eae70a8a7ed9ac4cbfa68))
+* **vfs:** session persistent-volume lifecycle API + local-dir backend (RIG-3278) ([#898](https://github.com/RigelBuild/compass/issues/898)) ([747b403](https://github.com/RigelBuild/compass/commit/747b4035a41a7bbadf810092c7b08ac415bc4761))
+
+
+### Bug Fixes
+
+* **agent:** idle @-mention steer starts a turn via prompt(), not continue() ([#514](https://github.com/RigelBuild/compass/issues/514)) ([e0e8973](https://github.com/RigelBuild/compass/commit/e0e8973b425961fff1e052fa0ced6718998ca89f))
+* **agent:** terse the reply-in-channel cue — why lives in SYSTEM.md, not per batch (RIG-2664) ([#583](https://github.com/RigelBuild/compass/issues/583)) ([693bfe5](https://github.com/RigelBuild/compass/commit/693bfe52c1ebc2b75271fdfa217c30613e9de31b))
+* **app-bundle:** stage postgres share + lib so the bundled cluster can initdb ([#448](https://github.com/RigelBuild/compass/issues/448)) ([a2667a2](https://github.com/RigelBuild/compass/commit/a2667a23f9ac459548da27d166c160c49b440d67))
+* **biome:** scope type-aware nursery rules off compass-agent transport (RIG-3051) ([#789](https://github.com/RigelBuild/compass/issues/789)) ([944d095](https://github.com/RigelBuild/compass/commit/944d0957617f1a93aaa5cddca393d8e7544e12ca))
+* **build:** stamp version.txt semver on the nix + devenv build paths (RIG-3346) ([#939](https://github.com/RigelBuild/compass/issues/939)) ([87f3f79](https://github.com/RigelBuild/compass/commit/87f3f79de017cbdf8e93c5b2144b169edafcadb8))
+* **ci:** always run design-ledger-gate on PRs (RIG-3441) ([#942](https://github.com/RigelBuild/compass/issues/942)) ([446bb16](https://github.com/RigelBuild/compass/commit/446bb165cc6c7cf5b3a61c59f0027d625a4d9f55))
+* **ci:** skip the CI rollup on a cancelled run so superseded commits are not false-red ([#506](https://github.com/RigelBuild/compass/issues/506)) ([48d4a7c](https://github.com/RigelBuild/compass/commit/48d4a7cd4c2262b437ebf461a6e14c943cee643b))
+* **ci:** switch moon to native file hashing to end the main full-sweep git race (RIG-2585) ([#555](https://github.com/RigelBuild/compass/issues/555)) ([c7fe3f9](https://github.com/RigelBuild/compass/commit/c7fe3f9a742259681f3d3b24bcf07c79acd25a99))
+* **ci:** union the PR affected closure with the task-level one (RIG-3381) ([#935](https://github.com/RigelBuild/compass/issues/935)) ([ff04f85](https://github.com/RigelBuild/compass/commit/ff04f85009297dca4c33c4df8ca7b09b0fe777c2))
+* **cli:** bound the secret-set stdin read + reject mismatched routing flags (SEA-2030) ([#370](https://github.com/RigelBuild/compass/issues/370)) ([d0030f6](https://github.com/RigelBuild/compass/commit/d0030f6763b40e533d39e6e573ddbdc554075c68))
+* **comms:** guard nil derefs to clear nilaway T3 lane ([#775](https://github.com/RigelBuild/compass/issues/775)) ([f2a7e12](https://github.com/RigelBuild/compass/commit/f2a7e12a5050f5cb541931b2ff1749c99657ce7f))
+* **comms:** resolve agent-caller owner in CreateAgent (RIG-1644) ([#443](https://github.com/RigelBuild/compass/issues/443)) ([a87cb70](https://github.com/RigelBuild/compass/commit/a87cb706aa04ba81d3a9fdec8efe21a6f911f97f))
+* **compass-agent:** derive LITELLM_MCP_URL from the delivered base URL (RIG-2674) ([#587](https://github.com/RigelBuild/compass/issues/587)) ([47d46e0](https://github.com/RigelBuild/compass/commit/47d46e041073890352f28f1a5d66a8c51293dc09))
+* **compass-agent:** emit the export-surface dts probe under node_modules to end the main-CI git race ([#541](https://github.com/RigelBuild/compass/issues/541)) ([121c021](https://github.com/RigelBuild/compass/commit/121c021de987dee453e659025366bb36fac1a0c6))
+* **compass-agent:** event-gate the (g) probe tests instead of a wall-clock budget (RIG-3455) ([#970](https://github.com/RigelBuild/compass/issues/970)) ([375377a](https://github.com/RigelBuild/compass/commit/375377ad9137b1e805e5abacb053b7311bc0410f))
+* **compass-agent:** isolate transport gauge tests from the shared metric registry (RIG-2656) ([#712](https://github.com/RigelBuild/compass/issues/712)) ([101c3f3](https://github.com/RigelBuild/compass/commit/101c3f3c56e4873f74f828fd3782895b875cbfa6))
+* **compass-agent:** recover a deliver stranded against an untracked startup stream (RIG-2644) ([#572](https://github.com/RigelBuild/compass/issues/572)) ([4fbbfee](https://github.com/RigelBuild/compass/commit/4fbbfeeb2812ed1da5558d746cf0831f0d87a6d0))
+* **compass-app:** repoint default agent image to the live rigelbuild GHCR owner ([#455](https://github.com/RigelBuild/compass/issues/455)) ([c25ce94](https://github.com/RigelBuild/compass/commit/c25ce94fce6dba974921700a5d35036f5dcd14f0))
+* **deps:** update typescript dependencies ([#591](https://github.com/RigelBuild/compass/issues/591)) ([01d7d20](https://github.com/RigelBuild/compass/commit/01d7d20680202552e62466f48b4498a87e5d32c5))
+* **design-ledger:** resolve DL-298/DL-299 cross-lane id collisions on main ([#737](https://github.com/RigelBuild/compass/issues/737)) ([3572ea6](https://github.com/RigelBuild/compass/commit/3572ea6b5be469849af46a9568a9da36c42d1134))
+* **design:** de-collide duplicate ledger id DL-239, renumber the RIG-2490 row to DL-240 (RIG-2619) ([#554](https://github.com/RigelBuild/compass/issues/554)) ([1e8c0ab](https://github.com/RigelBuild/compass/commit/1e8c0ab95dc3dfb6972111c3b78861e45b913306))
+* **design:** renumber colliding ledger ids DL-319/DL-320 to DL-322/DL-323 ([#851](https://github.com/RigelBuild/compass/issues/851)) ([fab4a67](https://github.com/RigelBuild/compass/commit/fab4a67f758d1622632e503a5b67af165f540a33))
+* **design:** renumber colliding ledger ids DL-327..330 to DL-334..337 (RIG-3107) ([#927](https://github.com/RigelBuild/compass/issues/927)) ([c374bb9](https://github.com/RigelBuild/compass/commit/c374bb980b386dc0cfd71c80974d43c3e1d0cae4))
+* **devenv:** build the operator CLI so the box never serves a stale binary (RIG-3342) ([#925](https://github.com/RigelBuild/compass/issues/925)) ([a971c6c](https://github.com/RigelBuild/compass/commit/a971c6cd1c27217dbeed47645e8148938cadf2d9))
+* **devenv:** force moon global toolchain so compass-go tasks resolve (RIG-2286) ([#428](https://github.com/RigelBuild/compass/issues/428)) ([3af740e](https://github.com/RigelBuild/compass/commit/3af740edb5d0ecba37c0ff365d3bdb518c2d2d46))
+* **devenv:** single-source the dogfood runner-id so mint and runner never drift (RIG-2660) ([#582](https://github.com/RigelBuild/compass/issues/582)) ([4e78a49](https://github.com/RigelBuild/compass/commit/4e78a4959a8ec6f3905af4f47ec53a6481fe79fb))
+* **eng-docs:** bump astro to v7 with lockstep starlight/check (RIG-2585 sec, closes [#564](https://github.com/RigelBuild/compass/issues/564)) ([#570](https://github.com/RigelBuild/compass/issues/570)) ([b5f92c3](https://github.com/RigelBuild/compass/commit/b5f92c3ae44350c61d53d6c33c4a4f76aaf8bd1b))
+* **eng-docs:** serialize astro check after build to end data-store rename race ([#427](https://github.com/RigelBuild/compass/issues/427)) ([785f69f](https://github.com/RigelBuild/compass/commit/785f69f7df020a4ff5508ba925f34bcc674526f3))
+* **flake:** ship the UI dist with #compass-app (RIG-3474) ([#1011](https://github.com/RigelBuild/compass/issues/1011)) ([9d0a00f](https://github.com/RigelBuild/compass/commit/9d0a00fcb167239758871080f769078ad3c3cac0))
+* **forge:** make the live-Linear oracle deterministic + gate it on the forge surface (RIG-2909) ([#721](https://github.com/RigelBuild/compass/issues/721)) ([5cb9397](https://github.com/RigelBuild/compass/commit/5cb9397cc33bf9d2a0f1f72b2f7829cfc04e5412))
+* **go:** repoint a stale sealedsecurity store import to RigelBuild (RIG-1893) ([#479](https://github.com/RigelBuild/compass/issues/479)) ([d0b05a9](https://github.com/RigelBuild/compass/commit/d0b05a902dee9e5523f8e07571c4180e5e5add5a))
+* **guest-image:** stage /sbin/modprobe so in-guest egress arm autoloads netfilter (RIG-3028) ([#759](https://github.com/RigelBuild/compass/issues/759)) ([e01a20a](https://github.com/RigelBuild/compass/commit/e01a20a9e429b90275d2e4fb03fc65f97fe8a720))
+* **ingest:** key notify snapshot comments by stable id, not URL (RIG-2732) ([#768](https://github.com/RigelBuild/compass/issues/768)) ([5e6bc9b](https://github.com/RigelBuild/compass/commit/5e6bc9b015b4a6b921131985ee24d142a5755ed4))
+* **inline-sql-gate:** exempt tool CLI from noConsole in its nested biome config ([#787](https://github.com/RigelBuild/compass/issues/787)) ([b758bbd](https://github.com/RigelBuild/compass/commit/b758bbdb84e9b4d3b9a9295ee8dc043be40998b2))
+* **microvm:** force ExecStream receive-side down on ctx cancel ([#770](https://github.com/RigelBuild/compass/issues/770)) ([381b241](https://github.com/RigelBuild/compass/commit/381b24127320c9f5f9b94e45a0f87505a255bbc9))
+* **nilaway:** clear guestd + events nil-panic findings ([#779](https://github.com/RigelBuild/compass/issues/779)) ([38cb17f](https://github.com/RigelBuild/compass/commit/38cb17f467aed4330683e3c8562fa7ab6558edd2))
+* **release:** read the release-please App Client ID from an Actions variable (RIG-2995) ([#985](https://github.com/RigelBuild/compass/issues/985)) ([11076ea](https://github.com/RigelBuild/compass/commit/11076eabd1954775e998635c96918573c541828b))
+* **renovate:** build devenv CLI from root lock, not deleted forks/devenv (RIG-2406) ([#518](https://github.com/RigelBuild/compass/issues/518)) ([26e524a](https://github.com/RigelBuild/compass/commit/26e524a301829aa881b9b64c441e52be052c4fd0))
+* **renovate:** lockstep flake.nix nixpkgs rev on devenv-nixpkgs bump (RIG-3099) ([#814](https://github.com/RigelBuild/compass/issues/814)) ([a69b610](https://github.com/RigelBuild/compass/commit/a69b6101c3b7eb2117d93c78a5d519c9220dfe4a))
+* **renovate:** mirror flake.nix Go vendorHash + cap wails/v3 below 3.1 (RIG-2852) ([#681](https://github.com/RigelBuild/compass/issues/681)) ([589675a](https://github.com/RigelBuild/compass/commit/589675afd72c6bcc199c37ec16ae1df04ddad8bd))
+* **renovate:** read the App Client ID from the client-id input (RIG-2995) ([#1039](https://github.com/RigelBuild/compass/issues/1039)) ([1661a07](https://github.com/RigelBuild/compass/commit/1661a072af226be1441eabc2a4e613064de845de))
+* **renovate:** refresh the FOD hash on devenv-nixpkgs channel bumps (RIG-3296) ([#897](https://github.com/RigelBuild/compass/issues/897)) ([1b21603](https://github.com/RigelBuild/compass/commit/1b21603c08d85858170f598c1c28ca1e7f7b4e6f))
+* **runner/gateway:** un-park SteerControl so [@mention](https://github.com/mention) steers reach the agent ([#476](https://github.com/RigelBuild/compass/issues/476)) ([25794b6](https://github.com/RigelBuild/compass/commit/25794b641127b4054c734de6e5293bed905f940a))
+* **runner:** close publisher outside pubMu to prevent telemetry stall ([#430](https://github.com/RigelBuild/compass/issues/430)) ([97859dc](https://github.com/RigelBuild/compass/commit/97859dcba9e4e84e72d8eb8a9d86fd57cfbd2108))
+* **runner:** guard microVM launcher Pdeathsig behind a linux build tag (RIG-3213) ([#848](https://github.com/RigelBuild/compass/issues/848)) ([17111cc](https://github.com/RigelBuild/compass/commit/17111cc037b0d981d89ece502098264cd6bd7915))
+* **runner:** guard nil derefs to clear nilaway T1 lane ([#773](https://github.com/RigelBuild/compass/issues/773)) ([8f23b54](https://github.com/RigelBuild/compass/commit/8f23b541b3c028ed052327fe998c593603e1a506))
+* **runnerhub:** bound the send1 deliverRefusals registry (RIG-1610) ([#483](https://github.com/RigelBuild/compass/issues/483)) ([a4ab0c7](https://github.com/RigelBuild/compass/commit/a4ab0c7d50a9f6cd3e3894b5672b98c4d0d881e8))
+* **runnerhub:** guard proto-getter nil oneofs for nilaway (T2) ([#774](https://github.com/RigelBuild/compass/issues/774)) ([ed9c493](https://github.com/RigelBuild/compass/commit/ed9c493373f93d7e6dbde991fdd9c778af33bcff))
+* **runtime:** guard nilaway findings in runtime + microvm lanes (T5) ([#777](https://github.com/RigelBuild/compass/issues/777)) ([db628cc](https://github.com/RigelBuild/compass/commit/db628cc6e4cca397ccaaedcdfcfb806a6609c58a))
+* **runtime:** nil-guard launchFunc result so nilaway proves vm non-nil (RIG-1534) ([#799](https://github.com/RigelBuild/compass/issues/799)) ([c4a7070](https://github.com/RigelBuild/compass/commit/c4a70701ab7ab678dd0fad046b233589f310071b))
+* **secrets:** guarantee the secretspec CLI as an install-time dependency (RIG-3437) ([#1043](https://github.com/RigelBuild/compass/issues/1043)) ([2db7e4e](https://github.com/RigelBuild/compass/commit/2db7e4e69fed26c3e0fad033d0c3942fd755da37))
+* **server:** guard nilaway proto-getter and spawn-memo derefs ([#778](https://github.com/RigelBuild/compass/issues/778)) ([d8acd3e](https://github.com/RigelBuild/compass/commit/d8acd3ee324540ca1a83dad862e1f6637e69bef8))
+* **server:** send leading registration-ack on SubscribeAgentSession (RIG-3044) ([#785](https://github.com/RigelBuild/compass/issues/785)) ([9d675bb](https://github.com/RigelBuild/compass/commit/9d675bb194863e2453fa56f8a93187cf1669a13c))
+* **server:** skip redundant ConfigVersion signal on idempotent re-Put (RIG-1657) ([#432](https://github.com/RigelBuild/compass/issues/432)) ([31073d7](https://github.com/RigelBuild/compass/commit/31073d77a1ec90db7cb61f83871080540cd698c6))
+* **server:** wire the config-bundle store into the runner door so agents receive config ([#537](https://github.com/RigelBuild/compass/issues/537)) ([992f3b5](https://github.com/RigelBuild/compass/commit/992f3b5ea06e662003f093b7e5036fdaed9f99a0))
+* **store:** back the keyspace partition with a DB CHECK and prove the grants ([#961](https://github.com/RigelBuild/compass/issues/961)) ([349d5d2](https://github.com/RigelBuild/compass/commit/349d5d24c130c776cbd181f01fc2235831e2ef94))
+* **store:** descend through non-string-keyed nodes in models.yml credential denylist (RIG-3116) ([#826](https://github.com/RigelBuild/compass/issues/826)) ([f584880](https://github.com/RigelBuild/compass/commit/f584880ef06ba0a676a6b6a30cb0df1c210b55ce))
+* **store:** guard nilaway reachable-nil findings in store lane ([#776](https://github.com/RigelBuild/compass/issues/776)) ([8095c1e](https://github.com/RigelBuild/compass/commit/8095c1e9872978cb340716a1e0c7b92f1e0d172b))
+* **store:** reslot messages_author_idx migration 0002->0003 (dup version) ([#426](https://github.com/RigelBuild/compass/issues/426)) ([1adeb98](https://github.com/RigelBuild/compass/commit/1adeb982b6c40ed18f68ead32d201d3fa4698728))
+* **toolchain:** build the Go analysis battery with the go1.27 toolchain (RIG-3303) ([#904](https://github.com/RigelBuild/compass/issues/904)) ([ab56c27](https://github.com/RigelBuild/compass/commit/ab56c2731d0b6563403bd2684ddc6710b06d3033))
+* **tools:** point orion-ref-gate's failure hint at an in-repo doc (RIG-3344) ([#930](https://github.com/RigelBuild/compass/issues/930)) ([a125326](https://github.com/RigelBuild/compass/commit/a125326679ecb7d494101ea44eb341f35edc4abb))
+
+
+### Performance Improvements
+
+* **store:** index messages.author_account_id for AgentHasOpenAsk (RIG-1649) ([#419](https://github.com/RigelBuild/compass/issues/419)) ([be51b51](https://github.com/RigelBuild/compass/commit/be51b513230f3d78146bcd3d1f332bea24522602))
+* **ui:** highlight settled code on the leading edge, debounce only streaming ticks (RIG-1422) ([#575](https://github.com/RigelBuild/compass/issues/575)) ([beaaca4](https://github.com/RigelBuild/compass/commit/beaaca435c803a46b67e34f414948aa342a665ab))
diff --git a/version.txt b/version.txt
index 6e8bf73a..0ea3a944 100644
--- a/version.txt
+++ b/version.txt
@@ -1 +1 @@
-0.1.0
+0.2.0