This release adds 1 notable feature for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+14 more
Affected surfaces
Summary
AI summaryNew swarm init --with-permissions flag adds role-based capability manifests and audit trails.
Full changelog
Two dream-cycle items shipped together.
Fixed / Added
-
#2768 SubagentPermissionDelegate — new
swarm init --with-permissions <preset>flag ships a per-role capability manifest to.swarm/permissions.jsonland seeds an append-only audit trail at.swarm/permission-audit.jsonl. Presets:strict,standard,permissive. Metadata + audit layer only — Claude Code's Task tool owns runtime enforcement. E2E verified in a fresh scratch cwd: 3 role rows + 3 granted events written, state.json records the preset, bogus presets fail cleanly at parse time. Closes the ClawArena "privilege-granting is #1 orchestration bottleneck" gap from arXiv 2606.31174. -
#2739 Flash Attention credibility cleanup — dropped the "2.49x-7.47x speedup" claim from all 5 CLAUDE.md sites. It was inherited from upstream marketing and never reproduced in-tree. Every dream-cycle for 7+ nights flagged it as a credibility drag. Doc now reads "integration available; measured speedup pending benchmark" and explains WHY the number was dropped.
Upgrade
npx ruflo@latest --version # → 3.32.12
Refs: dream-cycles #2727 #2739 #2752 #2760 #2763 #2768 #2778 #2783 (Flash Attention flagged repeatedly), #2768 (ClawArena).
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]