This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+13 more
Affected surfaces
Summary
AI summaryAdded native phase command-center flow with safe defaults and built‑in onboarding.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds native phase command-center flow with new CLI commands. Adds native phase command-center flow with new CLI commands. Source: llm_adapter@2026-06-05 Confidence: high |
— |
| Feature | Medium |
Introduces local phase contracts representing run state and policies. Introduces local phase contracts representing run state and policies. Source: llm_adapter@2026-06-05 Confidence: high |
— |
| Feature | Medium |
Adds safe session start showing state without executing work. Adds safe session start showing state without executing work. Source: llm_adapter@2026-06-05 Confidence: high |
— |
| Feature | Medium |
Provides built-in onboarding with `martin-loop start`, `guide`, and `tour` commands. Provides built-in onboarding with `martin-loop start`, `guide`, and `tour` commands. Source: llm_adapter@2026-06-05 Confidence: high |
— |
| Performance | Low |
Bounds run‑store inspection to recent directories to avoid stalls from large histories. Bounds run‑store inspection to recent directories to avoid stalls from large histories. Source: llm_adapter@2026-06-05 Confidence: high |
— |
| Bugfix | Medium |
Makes `martin-loop phase preflight` and `phase run` dry‑run by default, requiring `--execute`. Makes `martin-loop phase preflight` and `phase run` dry‑run by default, requiring `--execute`. Source: llm_adapter@2026-06-05 Confidence: high |
— |
| Bugfix | Medium |
Fails closed with `contract_requires_approval` when phase state, allowed paths, or verifiers are missing. Fails closed with `contract_requires_approval` when phase state, allowed paths, or verifiers are missing. Source: llm_adapter@2026-06-05 Confidence: high |
— |
| Bugfix | Medium |
Hard‑blocks `martin-loop run` until recent local `doctor`, session, and `preflight` receipts exist for the repo and task. Hard‑blocks `martin-loop run` until recent local `doctor`, session, and `preflight` receipts exist for the repo and task. Source: llm_adapter@2026-06-05 Confidence: high |
— |
Full changelog
Added
- Native phase command-center flow - Adds local
martin-loop phase status,martin-loop phase contract,martin-loop phase preflight,martin-loop phase run, andmartin-loop session-startcommands. - Local phase contracts - Converts local phase state into an explicit MartinLoop run contract with objective, allowed paths, blocked paths, verifier commands, budget, risk, and approval posture.
- Safe session start - Shows the latest local run state, phase state, recommended next action, and common command hints without executing work.
- Built-in onboarding - Adds
martin-loop start,martin-loop guide, andmartin-loop tourso the install flow, command tour, and MCP bootstrap path live inside the product.
Safety
martin-loop phase preflightandmartin-loop phase runare dry-run by default and require--executebefore they call the normal MartinLoop preflight/run path.- Missing phase state, missing allowed paths, or missing verifiers fail closed with
contract_requires_approval. - Run-store inspection is bounded to recent run directories so large local histories do not stall session startup.
martin-loop runnow hard-blocks by default until MartinLoop has recent localdoctor, session, andpreflightreceipts for the same repo and task.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Keesan12/Martin-Loop
All releases →Related context
Related tools
Earlier breaking changes
- vmcp-v0.1.3 martin_status uses oneOf for selector exclusivity, latest as const.
- vmcp-v0.1.3 maxIterations and maxTokens modeled as integers in tool schemas.
- vmcp-v0.1.3 Tool schemas enforce additionalProperties: false on public contracts.
- vmcp-v0.1.3 Packaged artifacts now require and ship server.json alongside package.json.
Beta — feedback welcome: [email protected]