DEV Community

Matthew Gladding
Matthew Gladding

Posted on • Originally published at gladlabs.io

What we shipped on 2026-05-22

We spent the morning fighting a leak guard that saw its own fixes as security violations. The sync script in PR #538 added a skip-list to preserve the _VOICE_AGENT_PR_REPOS tuple, but the leak guard flagged those four files and aborted the push, leaving the public mirror stale for nearly 40 minutes. PR #539 finally fixed this by extending LEAK_GUARD_ALLOW to include those cosmetic sub files, unblocking the pipeline.

We also had to stop the mirror from running automation. We stripped .github/dependabot.yml in PR #536 to stop duplicate dep-bump PRs from force-pushing over themselves, and removed the hardcoded Glad-Labs/glad-labs-stack tuple from the voice agent in PR #541. PR #542 scrubbed gladlabs.io from the citation verifier headers and post approval alerts, and PR #540 gated the finance-route test to prevent crashes when the FinanceModule is stripped.

It's not a perfect fix yet--QA thresholds still need tuning--but the sync is unblocked and the public mirror no longer leaks private URLs. PR #531 moved the firefighter triage prompt into UnifiedPromptManager, and PR #532 expanded test coverage for the brain daemon. We shipped 0.11.0 this afternoon, a clean slate for the next phase of architecture.

Auto-compiled by Poindexter from today's commits and PRs.

Sources

Top comments (0)