v3.3.0¶

Released 2026-07-11.

An operator-capability release. The dashboard gains authentication with scoped tokens whose every decision lands a governance receipt, a new agy adapter joins the matrix with a nightly conformance canary sealing its probe results, and the run review board projects the run journal into a web view backed by sealed evidence bundles. Groundwork lands for Windows parity and for installing bernstein as an agent skill or plugin.

Dashboard authentication and scoped tokens (#2366)¶

The dashboard is no longer an all-or-nothing surface. Operators issue scoped credentials, and every authentication decision is a receipt:

• Password login and scoped bearer tokens coexist; tokens carry either a read-only or an operator scope, and route access is enforced per scope.
• Token grants and revocations are signed journal rows; a tampered grant fails signature verification and is treated as no grant at all.
• Every allow or deny decision is recorded as a governance journal receipt, so an access review can reconstruct exactly who reached which surface and under which credential.
• bernstein dashboard-token issues, lists, and revokes tokens from the CLI; revocation is itself a signed journal row, never a silent delete.

agy adapter and adapter conformance canary (#2368)¶

agy joins the adapter matrix, and adapter contracts are now exercised nightly instead of waiting for a user's broken run:

• The agy adapter maps goals onto the agy CLI with the same contract surface as every other adapter, including golden transcripts and a contract fixture.
• A nightly canary probes every primary adapter against whatever upstream version is installed; each probe result is a sealed, content-addressed receipt mirrored into the audit chain.
• A last-green table names the newest upstream version each adapter passed with, and every row carries the hash of the receipt that attested it. bernstein doctor reads the same projection and advises when the installed version is newer than the last attested one.
• Issue automation is threshold-gated and deduplicated: one upstream flake never opens an issue, and the same failure fingerprint never opens two.

Run review board core (#2365)¶

Finished runs can now be reviewed on a board instead of by reading raw journals:

• The board is a deterministic projection of the run journal: the same journal always produces the same board state, byte for byte, with no hand-maintained status anywhere.
• A web view lists runs with their outcomes, decisions, and artefacts, consuming sealed evidence bundles so what the reviewer sees is what the journal attests.
• Further review-board phases (annotations, sign-off flows) are tracked separately.

Windows parity groundwork (#2367)¶

The platform layer gains the pieces Windows needs, validated so far on the existing test matrix:

• Process cleanup emits reap receipts into the audit chain, so a killed worker tree is reconstructable after the fact on every platform.
• Job Object process management groups worker processes on Windows the way process groups do on POSIX, closing the orphaned-child gap.
• Worktree isolation is junction-aware, so per-task isolation survives filesystems where symlinks require elevation.
• Full validation on Windows runners is tracked separately.

Agent skill and plugin packaging groundwork (#2369)¶

Installing bernstein as an agent skill or plugin gets its packaging foundation:

• bernstein skills package builds a skill/plugin bundle from the packaged templates, with a manifest generated from the package version so the bundle can never drift from the release.
• Each install produces a lineage receipt, so an installed bundle can be traced back to the exact release artefact it came from.
• Remaining distribution surfaces are tracked separately.

Housekeeping¶

• Resolved all open scanner alerts: applied suggested idiom cleanups, moved dashboard password comparison onto a computationally expensive key derivation, and annotated two exception-name-only log lines as scanner false positives.
• Dependency updates.