All pull requests

Pull requests

• deps(rust): bump the rust-dependencies group across 1 directory with 28 updates

  dependenciesrust
  #3540·dependabot[bot] opened Nov 14, 2026Bot·

  ·

• build(deps): bump @hono/node-server from 2.1.1 to 2.1.8 in /examples/openclaw-nucleus-plugin

  dependenciesjavascript
  #3539·dependabot[bot] opened Nov 14, 2026Bot·

  ·

• hardening: a private user+network namespace inside the workload's own PID namespace (runtime half of #3528)

  #3536·brandon-coproduct opened Nov 14, 2026Contributor·

  ·
  2

• ifc-kernel: make the decide_pure Lean extraction elaborate, and build it

  #3533·brandon-coproduct opened Nov 12, 2026Contributor·

  ·
  2

• Add offline Studio Equipment certificate verification

  #3532·brandon-coproduct opened Nov 9, 2026Contributor·

  ·

• build(deps): bump qs from 6.16.0 to 6.17.1 in /examples/openclaw-nucleus-plugin

  dependenciesjavascript
  #3530·dependabot[bot] opened Nov 3, 2026Bot·

  ·

• node: GET /v1/pods/{id}/ended reports what the pod's ledger was charged

  #3527·brandon-coproduct opened Nov 1, 2026Contributor·

  ·
  1

• host-decide: the node records every tool decision and its completion in the pod's lifecycle log

  #3526·brandon-coproduct opened Nov 1, 2026Contributor·

  ·

• node metering: price cached input tokens at the cached rate

  #3524·brandon-coproduct opened Nov 1, 2026Contributor·

  ·
  2

• egress: a declaration cannot turn a push into a fetch (Pa.Egress.1 L1)

  #3523·brandon-coproduct opened Nov 1, 2026Contributor·

  ·
  1

• xtask: egress-proofs, the broker's egress decisions proved in Lean (0/8), and its README badge

  #3522·brandon-coproduct opened Nov 1, 2026Contributor·

  ·
  1

• nucleus-cli: federation key-directory test no longer depends on umask (#3486)

  #3521·coproduct-gatehouse[bot] opened Oct 31, 2026Bot·

  ·
  1

• broker: a push names only the refs its upstream's push_refs allow

  #3520·brandon-coproduct opened Oct 31, 2026Contributor·

  ·
  1

• request-proof: the durable replay ledger is the vendored native Olog store

  #3519·brandon-coproduct opened Oct 31, 2026Contributor·

  ·
  2

• host-decide: a write in a review-gated workspace stays in the cell (deployed lineage)

  #3518·brandon-coproduct opened Oct 31, 2026Contributor·

  ·
  1

• tool-proxy: the workload door serves the pod's own policy, read-only (deployed lineage)

  #3517·brandon-coproduct opened Oct 31, 2026Contributor·

  ·
  1

• node: a caller binding may name an operator-defined compartment (deployed lineage)

  #3516·brandon-coproduct opened Oct 31, 2026Contributor·

  ·
  1

• node: price metered calls from reported usage; an unread call is charged its ceiling (deployed lineage)

  #3515·brandon-coproduct opened Oct 31, 2026Contributor·

  ·
  2

• node: service guests and guest-bound job grants (stage 1, not wired)

  #3514·brandon-coproduct opened Oct 31, 2026Contributor·

  ·

• node: reserve a metered call's ceiling before it runs; settle down to its price

  #3513·brandon-coproduct opened Oct 31, 2026Contributor·

  ·

• node: a revoked broker connection drops its call without holding the revocation watch

  #3510·brandon-coproduct opened Oct 30, 2026Contributor·

  ·
  1

• build(deps): bump fast-uri from 3.1.8 to 3.1.9 in /examples/openclaw-nucleus-plugin

  dependenciesjavascript
  #3509·dependabot[bot] opened Oct 30, 2026Bot·

  ·

• Generation certificates with rollback, and one host contract for every envelope

  #3506·brandon-coproduct opened Oct 26, 2026Contributor·

  ·
  5

• deps: update Hono without downgrading the MCP SDK

  dependenciesjavascript
  #3504·dependabot[bot] opened Oct 21, 2026Bot·

  ·
  1

• deps(actions): bump dtolnay/rust-toolchain from e2a55d2ffb04f378e9626c28d38b36d230d1e12f to 683b588c487a69d01f6c6ddf40f036ff682cc2c8

  dependenciesgithub_actions
  #3502·dependabot[bot] opened Oct 19, 2026Bot·

  ·