Changelog

0.15.1 (2026-10-14)

Fixes

• yard: allow time for hosted Foreman planning (#201) (a6dfd2b)
• yard: wait for planner capabilities before intake (#199) (b6ac6cd)

0.15.0 (2026-10-14)

Features

• c5: improve issue intake and add Render deploy button (aa4bd11)
• issues: add triage status labels (476d4c2)
• issues: require duplicate checks (bf92656)
• issues: require proposed feature behavior (0763cf2)
• render: add safe community deploy button (5644857)

Fixes

• yard: recover hosted planning attempts (#194) (d8ca358)

Documentation

• contributing: cite external product claims (da4c957)
• contributing: require sandbox guide checks (d1b41c3)
• tasks: record Foreman pool fix promotion (#187) (ce27545)

0.14.2 (2026-10-14)

Fixes

• yard: isolate Foreman coordinator pool (#183) (b7cf8ac)

0.14.1 (2026-10-14)

Fixes

• yard: make intake erasure resumable and fenced (#177) (5bec892)

Documentation

• tasks: record hosted Yard amendment payout (#176) (b4441b8)

0.14.0 (2026-10-14)

Features

• c4: qualify hosted allowance amendments (#169) (4d71d0f)

Fixes

• yard: accept canonical allowance amendment receipts (#170) (fb1d71f)
• yard: accept rotated runtime login (3810fb2)
• yard: canonicalize amendment receipts (fb1d71f)
• yard: validate rotated runtime role (740b4d1)

Documentation

• record C4 live blockers (b2265e4)

0.13.0 (2026-10-13)

Features

• c4: version allowance consent and Yard amendments (#165) (08173f9)

0.12.2 (2026-10-13)

Fixes

• api: qualify hosted Yard recovery and document deployment (#160) (1003b7c)

0.12.1 (2026-10-12)

Fixes

• kernel: retry browser creation and clean up owned sessions (#156) (d82c80b)
• repair mandate retries and signing queue; style creator footer (#155) (8f6a520)

0.12.0 (2026-10-12)

Features

• api: rate limits on the signed platform API (T-0330) (d3ef57d)
• api: rate limits, live contract, API portal, typed errors on every route (#77, T-0156) (ff8a552)
• api: serve the platform API contract at /v1/openapi.json (T-0331) (23f5e6b)
• docs: the APIMatic developer portal, published with the website at /stood/api/ (T-0332) (49806ca)

Fixes

• api: a reserved payment reaches PayPal within one pass, not an hour later (T-0349) (dadc45a)
• api: a waiting settlement logs why, as a fixed reason code (T-0345) (7749d4f)
• api: GitHub reads fall back to the read token when the App key is unset (#77) (529b175)
• api: read PayPal's real order shapes so looked-up captures and voids resolve (6f3ac61)
• api: read PayPal's real order shapes, so looked-up captures and voids resolve (T-0347) (a693ed7)
• api: reserved payments reach PayPal at once; stood-api on Starter; void lesson (98c643f)
• api: the live run resumes after packages and retries one refused read (T-0346) (e036093)
• api: waiting settlements log why; the live run resumes after packages (54cb8dc)
• ci: tell checkouts' databases apart by compose folder, not project name (771df5d)
• yard-api: a deletion fence between planning and intake erasure (T-0351) (44ef9d3)
• yard-api: complete reserved submissions and drafts against the current version (T-0350) (589f4f8)
• yard-api: erase the planner's thread for every intake version (T-0338) (89b5c3d)
• yard-api: fifth audit: erasure, secret deadline, recovery, preview and notice lifecycles, job overlap (d46a217)
• yard-api: lease notice keys and mark them delivered only after the send (T-0342) (80e1cc2)
• yard-api: payouts recover PayPal's real duplicate answer; settlement on after the release review (af60015)
• yard-api: refuse secrets past their handover deletion deadline (T-0339) (aeb2fba)
• yard-api: reserve preview deploys before Render; sweep incomplete and untracked ones (T-0341) (78f5be7)
• yard-api: resumable preview cleanup and an atomic global preview cap (T-0352, T-0353) (bae7b84)
• yard-api: run hosted jobs without overlap; schedule secret purge and recovery (T-0339, T-0340, T-0343) (1e663f3)
• yard-api: sixth audit: stale recovery, deletion fence, resumable cleanup, atomic preview cap (7b55254)
• yard: recover a duplicate payout from where PayPal really puts the link; live payout check (T-0335) (3822562)

Documentation

• an uncaptured PayPal order has no captures list, confirmed live (T-0347) (af7ef16)
• fifth audit fixes in TASKS and SETUP (T-0338 to T-0343) (0c2b56b)
• PayPal Payouts guide from the live run; payouts on in the sandbox (T-0336) (9c352ac)
• record the production release review; settlement waits only for the owner's switch (T-0337) (ef3db43)
• settlement is on in production since 2026-10-11 (T-0337) (16df3d4)
• sixth audit fixes in TASKS and SETUP (T-0350 to T-0353) (b675c26)
• the live end-to-end run, completed and confirmed in PayPal (T-0296) (cd577e9)
• the live end-to-end run, completed and confirmed in PayPal (T-0296) (4c45414)
• what has to be true before real money; the README says what is live now (T-0334) (28178da)

0.11.0 (2026-10-11)

Features

• api: only the judge's decisions can pay a code milestone (T-0306) (dca4c70)
• api: the reconciler reads GitHub with the Yard App's short-lived tokens (T-0311) (6921efa)
• evidence storage, OpenAPI 3.1 contract and APIMatic SDK, tighter secret checks (C4 #77) (#121) (b76257d)
• foreman: acceptance tests are data the Foreman writes and Yard renders, never model-written code (T-0318) (1915a93)
• foreman: acceptance tests drive the builder's program only through stood-harness (T-0308) (bcd3df8)
• ops: read-only review of every decision the old runner recorded (T-0307) (c255df7)
• ops: recover a funding stuck in CREATING from a PayPal order id (T-0310) (9fa0a36)
• plan to blueprint with Stood baselines, usage release, intake deletion and expiry (C4 #77) (#125) (d71bae6)
• runner: frozen tests run in the judge's own process, apart from the builder's code (T-0305) (02ec8fd)
• yard: builder payouts on PayPal's contract, funding recovery and operations (#77) (d5ef629)
• yard: builder payouts, per-job ledger, 48-hour holdback and disputes (T-0313, T-0314) (b0593f6)
• yard: the buyer pays Yard's fee on top of each milestone, in the same hold (T-0312) (6f6e8bd)
• yard: Yard's PayPal merchant is the payee of every allowance (T-0297) (5f858c0)

Fixes

• api: a code decision settles only the tranche's latest package (T-0302) (710603d)
• api: a GitHub outage leaves the package retryable, never decided (T-0315) (ba9ff7f)
• api: claim each run, back off waiting ones, run the untried first (T-0301) (65e7673)
• api: count only an explicit WAIT as waiting; reaching approval is progress (T-0300) (efa16d5)
• api: count waiting fundings as waiting, not advanced (T-0300) (e85ddf6)
• api: every waiting run names the step it stopped at (T-0299) (910724f)
• api: fair queues past any number of jobs backing off (T-0321) (150a4f4)
• api: repository downloads are capped while streaming; long archive paths are kept exactly (T-0327) (d710dd7)
• api: run leases are owned by a token, renewed while working, bounded by a deadline (T-0320) (bf446c6)
• api: worker counters count state changes; a refused funding is a failure (T-0319) (ea6ec76)
• ops,yard: recovery cannot write to PayPal; settled reviews stay monitored; 401 reads refresh; failed checks are reported (T-0326) (49fab15)
• ops: funding recovery only reads; it refuses any state the normal flow would act on (T-0323) (20e3225)
• PayPal holds that hung live, hosted package submission, the live end-to-end tool (C4 #77) (#127) (862773f)
• runner: a file passes only when every test in it ran and passed; a broken suite is never a red baseline (T-0316, T-0317) (5a7c42d)
• runner: harden the code runner from the external audit (#77) (ed3feb6)
• runner: pass only on real test results, lock the workspace read-only, wait on install outages (T-0298) (649c132)
• runner: run tests as nobody with every capability dropped; qualify the audit's attacks live (T-0304) (2d3672d)
• runner: the run deadline aborts the run and stops the VM; a VM that will not stop is reported (T-0328) (05580ec)
• yard: no payout dead ends: resend window, owner actions, full reconciliation, logged issues (T-0325) (801e4af)
• yard: payouts follow PayPal's contract: recover duplicates, retry what is retryable (T-0324) (27c7948)
• yard: the blueprint editor edits acceptance cases, and plans keep them (T-0318) (bb6c0cd)

Documentation

• ADR-0026 amendment on what a PASS proves; settlement off in production; tasks T-0298 to T-0304 (4813be0)
• fifth audit (T-0327, T-0328) in TASKS (d7ca491)
• operations batch (funding recovery, GitHub App reads, fee line); Yard's own PayPal app for Payouts (ADR-0027) (34b9415)
• second audit (T-0315 to T-0322): judge outcomes, case format, ADR-0026 note, guide (117d694)
• the judge (owner decision), Vercel Sandbox guide, release review; tasks T-0305 to T-0309 (03d6262)
• third audit (T-0323 to T-0325): payouts on PayPal's contract, owner actions (6b47279)

Refactoring

• runner: call the image hash what it is, a label hash, from the image the runner boots (T-0303) (22e5e12)

0.10.0 (2026-10-10)

Features

• api: Kernel approves the PayPal sandbox buyer step unattended (T-0284) (ef45a9d)
• api: tranche view a platform can act on without trusting a notification (T-0189) (4768151)
• C3 live Yard adapters (planner, GitHub, Stood reads, previews, Kernel) (5b61814)
• foreman: carry imported research to the planner as quoted data, verdict always kept (T-0283) (c315c2d)
• foreman: live Grok planner, cost-first and unable to set money (T-0221) (7b54858)
• trusted code runner on Vercel Sandbox, from commit to one verified decision (C4 #77) (#117) (08c8b88)
• yard-web: idea gallery as visual cards with one action (T-0282) (982d028)
• yard: GitHub App adapter that enforces Yard's repository rules (T-0188) (561ddcf)
• yard: hosted Foreman with a shared daily cap, pinned to the sandbox repository (T-0181) (0fd8ebe)
• yard: live Render previews with Yard's own cap, buyer-only, swept hourly (T-0196) (5260609)
• yard: planner budget that holds across restarts and replicas (T-0181) (7287152)
• yard: read Stood's signed tranche view for holds, captures and refusals (T-0189) (156ae4f)

Fixes

• api: match PayPal hosts exactly in the Kernel approver; plainly fake test values (T-0284) (4fdb47a)
• Kernel approves PayPal's current sandbox pages unattended (C3) (#115) (4e68f28)
• yard-web: drop unreachable country-name fallbacks to keep the 98% gate (T-0282) (70bd51e)

Documentation

• yard-web: idea card screenshots, desktop and mobile (T-0282) (4ffbfab)

0.9.0 (2026-10-09)

Features

• host Yard sign-in and import StartupTribunal research (b2c8389)
• yard: close C2 — smoother idea intake, 98% app coverage enforced, two UI bugs fixed (#109) (3cbc906)

0.8.0 (2026-10-08)

Features

• Yard on Render, signing and funding through the API, earned live status (#100) (69098d9)

0.7.0 (2026-10-08)

Features

• payments: close out C1: alerts, saved-account funding, sandbox-faithful simulator, sealed tokens (#95) (8d9a1f3)

0.6.0 (2026-10-08)

Features

• payments: let a named person resolve a reconciliation finding (T-0257) (165e6d3)

Documentation

• security: prepare the OpenSSF Best Practices badge answers (T-0258) (f494c30)

0.5.0 (2026-10-08)

Features

• payments: first real PayPal sandbox release and refuse, verified webhooks (#83) (f346acd)
• payments: hold without the buyer via PayPal Vault, nightly sandbox run, secret guard (#87) (f1fbb74)
• payments: hourly reconciliation audit, proven idempotency, migrations and TLS on release (#89) (7ab68d4)

0.4.1 (2026-10-08)

Fixes

• sdk: end every request at the SDK's own deadline (#70) (a7fce68)

0.4.0 (2026-10-08)

Features

• batch 7 — evidence path, reconciliation audit, pricing disclosure, privacy (#55) (6c42523)
• yard: A2A surface, search and public Board stream, notices, previews and remaining fakes (#54) (e11901a)
• yard: advance pre-credential implementation round (#46) (bba9e58)
• yard: hold-gated builds, Stood mandate, change orders, operators and reputation (#53) (a0395c5)
• yard: refused, reworked and paid judge path across Stood and Yard (#47) (70da339)
• yard: role-filtered stream, step 9 key screen and planner contract suite (#52) (05a632d)
• yard: test-key vault, step 9 intake, handover checklist and Render Blueprint (#48) (55e66bb)

Fixes

• build: give tests more time inside Render's image build (#64) (dd605db)
• ci: build yard-contracts before the Yard web app in the Pages site build (#68) (e484627)
• deploy: Render build fixes and Starter reconciler (#60) (9704b43)
• deploy: start the reconciler with an explicit node runtime (#67) (95e76c1)

Documentation

• paypal: how we use the PayPal AI Toolkit and sandbox MCP (#56) (7344a85)
• paypal: record how the AI Toolkit and sandbox MCP server are used (defd64d)
• paypal: record how the AI Toolkit and sandbox MCP server are used (7344a85)

0.3.0 (2026-10-05)

Features

• core: scope final usage and establish evidence and Yard contracts (#32) (b6acdef)
• demo: align code milestones, product contracts and judge fixtures (#30) (0f9b6bb)
• mock: add provider switching and durable Stood scenarios (#38) (3c008e0)
• providers: add explicit modes and SDK-tested PayPal simulation (#37) (e22e086)
• yard: add durable Board, network mock flow and simulated landing page (#39) (1f3d5f1)
• yard: establish API, domains, restricted storage and public SDK foundations (#34) (823e538)

Documentation

• tasks: add Stood, Yard, provider-abstraction and E2E backlog T-0197 to T-0234 (#35) (d4fa4db)
• tasks: record Yard visual quality and simulation messaging (#36) (efc3621)
• yard: add Yard companion product docs (#31) (37d2bac)
• yard: design system, brand kit, real-time state, intake, hosting decision, crew contract (#33) (e794520)

0.2.0 (2026-10-05)

Features

• core: add guarded PayPal operations and signed draft API (#23) (523c899)
• core: bootstrap Docker and tested decision gate (#9) (2854815)
• decision: enforce model confidence and preserve evidence details (#10) (31176e2)
• payments: add durable operation schema and database checks (#16) (86ab9f2)
• payments: persist operation reservations and outcomes atomically (#18) (a62dff4), closes #15
• payments: recover tranche state through validated transitions (#20) (cd0028b), closes #19
• payments: recover, persist and reconcile holds safely (#21) (f5020ec)
• payments: reserve day-four reauthorisation safely (#13) (c3cc338), closes #12
• payments: validate allowance currency and capture safety policies (#11) (82e5e25)
• site: reposition landing page on agent-to-agent payments (#24) (9eebf39)

Fixes

• payments: enforce forward ledger history and server timestamps (#17) (1056457), closes #15

Documentation

• payments: track onboarding and reconciliation prerequisites (#14) (994b47f)

0.1.0 (2026-10-03)

Features

• foundation docs, Volt brand, landing page and quality gate (61598f8)