docs(changelog): backfill 9 merged PRs before the 0.96.0 cut

[mabry1985]

Nine PRs merged since v0.95.1 without a CHANGELOG entry. Our release notes are single-source (the desktop updater notes and the Discord changelog are generated from CHANGELOG.md), so cutting 0.96.0 as-is would ship notes missing a headline feature (Hermes runtime) and a security-relevant default change (filesystem.allow_run). This backfills [Unreleased] so prepare-release.yml rolls a complete section.

Added

• Hermes as a first-class agent runtime (feat(cli): protoagent hermes — one-command Hermes preset + runtime use/list (ADR 0033) #1889) + hardening (fix(runtime): harden the ACP/Hermes runtime path — /v1 switch, instance pinning, serialization, context usage #1891)

Changed

• filesystem.allow_run defaults OFF on the headless tier (fix(config): default filesystem.allow_run OFF on the headless UI tier #1888)

Fixed

• Fleet members no longer inherit the hub's identity — AGENT_NAME (fix(fleet): set spawned member's own AGENT_NAME instead of inheriting the hub's #1886), SOUL/persona (fleet: agents load their OWN SOUL/persona, not the hub placeholder #1882), A2A tenant URL (fleet: members self-advertise their A2A tenant URL (multi-tenancy) #1881)
• Whole trace when an agent runs in its own Langfuse project (fix(tracing): make a fleet agent's trace whole when it runs in its own Langfuse project #1893)
• Background knowledge-ingest wakes the agent on completion (fix(knowledge): retrigger the agent when a background ingest job completes #1887)
• Quieter plugin hot-reload logs (fix(plugins): silence routine hot-reload router re-mount, keep real dup warning #1885)

The three entries already present (#1880, #1890, #1879) are untouched. Verified locally that scripts/changelog.py roll produces a clean 9-bullet [0.96.0] section (Added×2 / Changed×1 / Fixed×6) and resets [Unreleased].

Next step after merge: dispatch prepare-release.yml with bump=minor → 0.96.0.

🤖 Generated with Claude Code

[protoquinn]

👀 Quinn is reviewing — verdict (PASS / WARN / FAIL) + findings to follow.

[coderabbitai]

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (1)

• CHANGELOG.md is excluded by !*.md

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: 8188a6d5-ef2c-4d35-81e3-d537e00ac049

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch docs/changelog-backfill-pre-0.96.0

---

_{Comment @coderabbitai help to get the list of available commands.}

[protoquinn]

QA Audit — PR #1895 | docs(changelog): backfill 9 merged PRs before the 0.96.0 cut

VERDICT: PASS

---

CI Status

• 8 checks in progress (build, Python tests, lint, Fleet integration, A2A smoke, workspace config, Web E2E, gitleaks) — non-terminal. Approve-on-green policy promotes this review to APPROVED automatically once every check settles terminal-green.

Diff Review

• Single file: CHANGELOG.md, +37/-0, pure documentation.
• Backfills [Unreleased] with 9 merged PRs: Hermes runtime (Added), filesystem.allow_run default (Changed), and 6 Fixes (fleet identity inheritance, Langfuse tracing, knowledge-ingest wake, plugin logs).
• Existing entries (#1880, #1890, #1879) untouched.
• Entries are well-written, correctly categorized under Added/Changed/Fixed per semver convention, and cite the PR numbers they document.

Observations

• No code changes — no correctness risk, no regression surface.
• No unresolved review threads.
• Structural review skipped (1 file, 37 lines, docs-only — optional per diff_summary).

— Quinn, QA Engineer

[protoquinn]

Submitted COMMENT review on #1895.

[protoreview]

QA panel review — PASS

code-review · head 7473f0ee20e9 · shadow — comment-only

[review-synthesizer completed: workflow code-review:report]

Prose Brief

Overall risk: negligible. This is a changelog-only PR — a routine [Unreleased] roll into [0.54.0] aggregated from 9 merged PRs. No code changes, no behavioral impact, nothing deployable breaks.

Fix-first item: None. The verifier confirmed all 9 referenced PRs (#1881–#1893, excl. gaps) match their changelog descriptions; section ordering follows Keep a Changelog; the prepare-release.yml script is format-agnostic beyond the ## [Unreleased] marker. Structural and factual accuracy both check out.

Panel disagreement: None — the synthesizer arrived at an empty findings array, and the verifier corroborated it. No findings survived to dispute.

What verification changed: Nothing. The verifier resolved the synthesizer's earlier caveat about unverified factual accuracy by fetching and confirming every referenced PR. The empty array stands as final.

[]

[protoquinn]

CI terminal-green, no blockers on prior review — auto-approving on green (#748).

[protoquinn]

✅ CI went terminal-green with no blockers on the prior review — promoting it to APPROVED per the approve-on-green policy (#748).