[{"data":1,"prerenderedAt":18},["ShallowReactive",2],{"release:0.2.13":3},{"version":4,"title":5,"description":6,"date":7,"url":8,"markdownPath":9,"prerelease":10,"html":11,"newer":12,"older":15},"0.2.13","L4 0.2.13","Software Factory MVP adds a reviewed Task-to-PR workflow for existing GitHub repositories. The official web, Shell, installer, standalone Server, portable Linux amd64 runtime and version-pinned Docs share 0.2.13…","2026-10-26","\u002Fchangelog\u002Fv0.2.13","\u002Fchangelog\u002Fv0.2.13.md",false,"\u003Cp>Software Factory MVP adds a reviewed Task-to-PR workflow for existing GitHub repositories. The official web, Shell, installer, standalone Server, portable Linux amd64 runtime and version-pinned Docs share \u003Cstrong>0.2.13\u003C\u002Fstrong>. Customer Servers remain pinned until their operator completes the backup\u002Fupdate flow.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Exact private action review binds arguments, identities, Task\u002Fconversation, repository\u002Fbase\u002Fref, connection, workspace revision, pinned image and expiry. Current Role\u002Fdelegation\u002Fresource checks apply before execution and throughout Node leases. Uncertain effects are held for inspection and never replayed automatically.\u003C\u002Fli>\n\u003Cli>Linux Compute Nodes pair through a one-use Owner code and connect outward to Cloudflare or VPS Servers. Task workspaces retain full pinned Git history, edits, local commits and dependency caches on fixed-capacity ext4 disks. Fresh non-root containers enforce CPU\u002Fmemory\u002FPID\u002Ftime\u002Fnetwork limits; the trusted Node alone controls Docker and loop mounts.\u003C\u002Fli>\n\u003Cli>The Server publishes exact reviewed local commit\u002Ftree SHAs to one dedicated branch and draft PR in the original repository. Existing GitHub Actions and preview deployments remain authoritative. Exact-head failure logs support a new approved repair in the same workspace and PR; absent\u002Fskipped\u002Fincomplete evidence is explicit.\u003C\u002Fli>\n\u003Cli>Settings provides Node pairing\u002Frevocation and repository provider selection. Private Runs show requests, exact diffs, test receipts, review decisions and canonical PR\u002FCI\u002FPreview links. Tasks show coarse workflow state without exposing private source content.\u003C\u002Fli>\n\u003Cli>Native Pi shell tools remain disabled. Workspace containers receive no Git provider credential, Server secret or Docker socket. A separate trusted source broker temporarily uses one single-repository read capability and exports a bundle; Git write credentials and App keys stay on the Server.\u003C\u002Fli>\n\u003Cli>Host process execution exposes only a fixed tool allowlist and never launches a shell. The isolated container entrypoint receives the exact approved script on stdin. Node credentials and bounded recovery receipts use private, validated SQLite records with full-synchronous transactions, exact action\u002Flease acknowledgement and explicit Server-origin binding. File reads use bounded no-follow handles and check the same inode they read.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>This release appends Server migration \u003Cstrong>0023\u003C\u002Fstrong> within the existing \u003Ccode>server-v1\u003C\u002Fcode> lineage. Merged SQL is unchanged. Existing GitHub\u002FGitLab\u002FGitea repository references and deployment integrations remain available; executable factory publication is GitHub-first.\u003C\u002Fp>\n\u003Cp>See \u003Ca href=\"https:\u002F\u002Fgithub.com\u002Finchidev\u002Fllll\u002Fblob\u002Fv0.2.13\u002Fdocs\u002Fsoftware-factory.md\" rel=\"noopener\">operator setup, limits and verification\u003C\u002Fa>. Local and CI fixtures cover approval\u002Frevocation, exact Git publication, failing-CI repair, two-Server HTTP isolation, real Docker Git\u002Fdisk separation, Node journal recovery and native-tool denial. Real afterprompt\u002FGitHub installation, public Server topology, loop-quota\u002Freboot and desktop\u002Fmobile acceptance remain with the operator's Grok bot. Docker shares the host kernel and is restricted to trusted-code use; hostile public tenants require stronger isolation. Factory actions do not implicitly authorize merging, releasing or production deployment of the repository being edited.\u003C\u002Fp>\n",{"title":13,"url":14},"L4 0.2.14","\u002Fchangelog\u002Fv0.2.14",{"title":16,"url":17},"L4 0.2.12","\u002Fchangelog\u002Fv0.2.12",1793335827178]