chore(main): release faff 0.12.0

[github-actions]

🤖 I have created a release beep boop

0.12.0 (2026-07-25)

Features

• FAFF-199: ADR L4 — loop-authored ADR supersession under two-tier provenance authority (#404) (705731d)
• FAFF-259: DoD-gated project → Done — release the deferred transition on the release-gate predicate (#374) (41173cb)
• FAFF-318: resumable frontier eval sweep via per-kind checkpointing (#468) (1283c41)
• FAFF-319: driver arms for the 8 judgement-eval kinds + static oracle triage (#456) (1a9b6e8)
• FAFF-335: gateway spec_review + grounding slots and the fixed spec-review-verdict contract (#384) (cacbabe)
• FAFF-338: rehome beep-boop prose to shipped CLI semantics (#377) (87597d1)
• FAFF-341: single-owner the review-iteration cap (#378) (7311289)
• FAFF-342: accept 18 shipped-but-Proposed ADRs + fix 0034/0039 inversion; adr-validate advisory (#397) (9c4771c)
• FAFF-385: post-merge verification — verification-only slice, no auto-revert (#370) (7e5ddd7)
• FAFF-391: CI failure triage — classify flaky vs real, act per class in unattended runs (#373) (b61c5be)
• FAFF-444: regions check — require-graph enforcement replaces text lint (#372) (1d6e886)
• FAFF-445: review-call.mjs oversized-diff preflight — size-check before dispatch (#380) (1340c0c)
• FAFF-446: remove legacy budget.price_per_mtok knob (#382) (c6f3430)
• FAFF-447: sentry kill-switch reacts to L4 estimate-only budget-metering degrade (#383) (da349a5)
• FAFF-456: jot/plot create-path idempotency + Linear-write link safety (#381) (06f7a6e)
• FAFF-463: PRDR git-landing — faff prdr accept (sole writer) + renumber + git-aware validate (#398) (4d227d6)
• FAFF-466: wire sentry check's detection reads through integrityGate's detection consumer (#392) (1a3aab2)
• FAFF-468: point L4 dial-coherence refusals at .faffrc.local.yaml overlay + document recipe (#387) (59deb2c)
• FAFF-470: mint-scoped detached sentry poller (primary watchdog locus) (#388) (c13be95)
• FAFF-471: sentrycheck — staleness-triggered sentry consult in the Stop-hook family (#389) (025e477)
• FAFF-475: hard-surface faff doctor COPY at beep-boop autonomous entry (#375) (f1b776a)
• FAFF-485: single-home 'Lean tracker reads' gateway rule + lean prep/tidy comment scans (#465) (f322ad3)
• FAFF-491: forbid + mechanically fence build-subagent self-backgrounding of gate commands (#390) (a258fdb)
• FAFF-493: L4 topology-write authority envelope — a referencing contract over the existing dial, 216-free (#393) (757133e)
• FAFF-494: autonomous plot re-entry harness core — /faff-plot --autonomous gate-answering seam (#401) (36a2281)
• FAFF-496: run-start trigger predicate — run-trigger contract + faff run-start + coverage measure block (#402) (737fb66)
• FAFF-498: wire faff run-start into beep-boop §0a — three-way PLAN/drain/refuse (L4-guarded) (#407) (34e217c)
• FAFF-505: scaffold-faff-lab.sh — sixth external-verification rung (#436) (a73270b)
• FAFF-508: publish faff docs + theory as a Docusaurus site on GitHub Pages (#478) (2bd7d7b)
• FAFF-513: P1/P2/P3 scaffolders emit L4-passing .faffrc + a repo-side lint (#394) (3bd5e98)
• FAFF-514: faff integrity-boundary emitter — faff owns the declaration content (+ADR-0074) (#399) (5d910a4)
• FAFF-515: container-create follows the PRDR lifecycle — supersede ADR-0071's container-confirm floor (#395) (3884e63)
• FAFF-518: faff integrity-digest snapshot/verify — custody-based tamper detection (#400) (b13e525)
• FAFF-520: concurrency executors bracket each graft dispatch with integrity-digest (#419) (c5cdd70)
• FAFF-521: signals.outward producer + plot-ignition outward-only guard (#406) (2b752a1)
• FAFF-522: default gates.fallback to fail-closed — secure-by-default merge-gate floor (#403) (6a62207)
• FAFF-523: shared backends: model/provider/auth config namespace (#408) (4c0179c)
• FAFF-526: git-only local-merge path — faff merge-gate --local + no-remote-gated merge-fence hardening (#405) (3957de2)
• FAFF-527: L4 run re-entry — faff lights-out --resume <run-id> (#421) (dc6bc9f)
• FAFF-529: cut faff + SUT .faffrc configs over to the backends: shape (#410) (8ec9b95)
• FAFF-533: CI-workflow gate source — 4th discoverRungs detector (#413) (3ac3770)
• FAFF-534: within-run convergence default ON (L4 non-optional, L3 opt-out only) (#466) (4d280ff)
• FAFF-535: PRD-greedy sibling-drain ordering (#422) (0a04a25)
• FAFF-536: self-hosting core-defect intake — orchestrator-lane capture + outward-self-intake classification (#423) (a72c120)
• FAFF-538: scaffolder CLI-surface drift-guard — verb/subcommand/slot-key existence check (#464) (8538f77)
• FAFF-539: faff self-intake — mechanical same-team gate for the outward-self-intake reclassification (#451) (294ddab)
• FAFF-546: faff adr accept + adrGitTier — verb and merge-confidence-gate trigger for ADR Proposed to Accepted (#437) (987f566)
• FAFF-549: bare /faff-plot discovers a committed docs/prd PRD before intake (#428) (ad5257a)
• FAFF-556: git-only queue-state via stable item-keys (#433) (1b91c91)
• FAFF-557: faff prd-checklist — read checklist-PRD stop-conditions into the prd-coverage schema (#434) (d4e3cec)
• FAFF-559: wire git-only §8.5 run-done consult — pipe queue-state + prd-checklist (#435) (86df926)
• FAFF-562: document footprint-discriminating on-missing posture for governance-check (#494) (ccea3a4)
• FAFF-563: seeded-defect scaffolding for measuring holdout evaluator error rates (#463) (927f5dd)
• FAFF-564: tamper-evident hash chain over events.jsonl — schema-2 prev links + ledger-write fold (#452) (50c7111)
• FAFF-566: injection-to-merge red-team probe set (#454) (756881a)
• FAFF-568: anchor and verify the events.jsonl hash chain in governance-check (#471) (1a0d934)
• FAFF-569: resolved-elsewhere finding-ticket diagnostic — faff findings-reconcile + tidy category (#453) (fc1f6da)
• FAFF-571: first-class superseded run-ledger terminal outcome (#442) (4c3bce0)
• FAFF-572: harden the L3/L4 no-prompt invariant in the Autonomous Mode Contract (#441) (1c82edf)
• FAFF-573: graft build-time premise-superseded close-path — superseded-done producer (#457) (6212f0b)
• FAFF-576: shared fail-closed argv parser + CLI-wide flag migration (#458) (f26b5d0)
• FAFF-577: strict base .faffrc.yaml parsing — malformed base fails loud (FAFF_CONFIG_BASE_LENIENT escape hatch) (#447) (b9f5c2a)
• FAFF-580: declare POSIX-only + Node >= 20, one homeDir() everywhere (#482) (3cfb366)
• FAFF-593: codex spawn family for faff engine call — codex exec --json child transport (#495) (65a4f91)
• FAFF-594: global 5-hour window-mode budget governor (#492) (85fa043)
• FAFF-595: de-hook worktree provisioning — direct-arg mode on setup-worktree.sh (#469) (70882c1)
• FAFF-598: faff contract <name> --describe — contract prose generated from contract-defs/schemas; gateway sections become pointers (#485) (a688449)
• FAFF-601: Agent Delivery Evidence spec — v0.1 baseline + v0.2 anchor/verify/integrity delta (#490) (8aba4ba)
• FAFF-604: telemetry adapter seam — budget/economics read an engine-declared spend source (#496) (ec28e4c)
• FAFF-623: extend the FAFF-568 anchor to the merge-floor leg (#491) (3a9af2c)
• FAFF-624: force within-run convergence at L4 in code, not prose alone (#475) (c157262)
• FAFF-625: holdout error-rate production run — offline-proxy lower bound (0/360 false-pass) (#493) (960f0fe)
• FAFF-628: faff cli-surface --json — declared CLI grammar, flag-level drift-guard validation (#487) (c4e2d53)
• FAFF-634: thread the house voice into context-stripped dispatches (#489) (ff8b84a)

Bug Fixes

• FAFF-502: encode '.' → '-' in transcriptBaseDir so dotted worktree cwds resolve real transcripts (#416) (34549e0)
• FAFF-503: branch-protection-check probes the effective-rules API so it sees GitHub rulesets (#417) (7fd3dd1)
• FAFF-512: refresh external-verification SUT scaffolders — P2/P4 PRD leash-authoring (#391) (a3d4ac6)
• FAFF-524: SUT scaffolders align L4 dial config with the two-file posture (#409) (5980b51)
• FAFF-525: downgrade corrective-integrity no-declaration to an advisory in the L4 preflight (#424) (55e737d)
• FAFF-530: foreground-to-terminal discipline for dispatched build subagents (#420) (92c2143)
• FAFF-531: sample tracking block indent for inserted config keys (#412) (464250e)
• FAFF-532: worktree config-copy skips git-tracked files, never clobbers a committed .faffrc.yaml (#411) (77e2d85)
• FAFF-537: merge-gate accepts bare --squash/--merge/--rebase, fails loud on no method (#418) (3181a94)
• FAFF-540: --converge non-convergence backstop resets on build-queue admission, not filed_this_wave (#455) (f7d2100)
• FAFF-544: SUT scaffolders default SUT_ROOT to the repo-sibling faff-suts, not $HOME (#425) (38fc9af)
• FAFF-545: merge-gate --local lands worktree-aware when base is checked out in a peer (#430) (7330d00)
• FAFF-547: stop SUT RUNBOOKs leaking test intent into the loop (#429) (c211116)
• FAFF-548: ignore the faffrc overlay by glob (.faffrc.*.yaml), not the exact local name (#427) (f113e04)
• FAFF-552: budget baseline persists measure_session_id (owning-session survives compaction) (#440) (ded1c65)
• FAFF-553: strict heartbeat flag parsing + sentry in-flight staleness grace (#446) (c0abc3a)
• FAFF-554: bless string-only outcomes + additive outcome_details sidecar (#439) (aee9ab5)
• FAFF-558: budget tokens_at_start baseline survives mid-run compaction (#431) (61098a7)
• FAFF-560: budget token attribution honours the run's owning session_id over the ambient one (#432) (f4e1b2e)
• FAFF-574: serialise events.jsonl appends — lock-guarded, O(1) tail-read seq mint (#445) (689d336)
• FAFF-575: lock-serialised run-ledger mutations — shared fs-lock helper, unique tmp names, fence inside the critical section (#449) (fcec022)
• FAFF-578: run-dir resolution tolerates filesystem churn — latestRunDir never throws through the turn-end Stop hooks (#450) (e5ee7ba)
• FAFF-579: CLI hygiene bundle — dead exports, entrypoint docs, price-table staleness anchor (#481) (8729eb5)
• FAFF-591: resolve effects/events run dir against the main checkout, not cwd (#484) (d7319ae)
• FAFF-617: per-backend wall-clock budget slicing so a hung primary can't starve the adversarial fallback chain (#462) (0e3195a)
• FAFF-618: move the operator tailnet host out of the scaffolders (#477) (7af7a57)
• FAFF-626: escape the raw NUL map-key separator in effects.js (#480) (e152444)
• FAFF-627: readGovernanceConfig throws legacy-config-name instead of process.exit(2) (#483) (180595e)
• FAFF-630: accept --execute in merge-gate's argv allowlist (#472) (5cf48dc)
• FAFF-633: integrity-digest resolves its SHA-256 tool from an absolute candidate list (macOS portable) (#488) (5e3a847)

---

This PR was generated with Release Please. See documentation.