v0.9.14: variable resolution perf improvements, files provenance lineage

[waleedlatif1]

• fix(execution): make code placeholder and reference scans linear (fix(execution): make code placeholder and reference scans linear #8608)
• fix(code-placeholders): make python bare-placeholder classification and tagged-template edits linear (fix(code-placeholders): make python bare-placeholder classification and tagged-template edits linear #8611)
• fix(files): retain known lineage through binary exports and extraction (fix(files): retain known lineage through binary exports and extraction #8614)
• fix(mothership): preserve workflow identity in background confirmations (fix(mothership): preserve workflow identity in background confirmations #8615)

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

1 Skipped Deployment

Project	Deployment	Actions	Updated
docs	Skipped		Oct 5, 2026 7:45am UTC

[cubic-dev-ai]

All reported issues were addressed across 16 files

_{Fix all with cubic | Re-trigger cubic}

[greptile-apps]

Confidence Score: 5/5

[Medium risk] Performance optimizations for variable resolution and file provenance tracking.

The PR appears safe to merge based on the reviewed changes.

Summary

The PR makes reference and placeholder scans incremental, retains known secret lineage through binary exports and archive extraction, and restores execution identity in durable background confirmations.

• Adds coverage for provenance persistence, protected readback, and workflow confirmation.

Diagram

%%{init: {'theme': 'neutral'}}%%
flowchart LR
  A[Compiled and mounted secret candidates] --> B[Function file export]
  B --> C[Text: scan and narrow]
  B --> D[Binary: retain candidates]
  C --> E[Persist file provenance]
  D --> E
  E --> F[Archive extraction inherits lineage]
  F --> G[Protected runtime readback]
  E --> H[Opaque egress requires no known candidates]

Loading

_{Reviews (1) · Last reviewed commit: "fix(mothership): preserve workflow ident..."}