This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+1 more
Affected surfaces
Summary
AI summaryGovernance mode enforcement for AI ops and instance-level actor identity tracking were added.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Adds `mode` option to AI ops governance: advisory (default) or enforce blocking over-tier runs. Adds `mode` option to AI ops governance: advisory (default) or enforce blocking over-tier runs. Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Feature | Medium |
Introduces instance-level actor identity recorded as `<instance>:<pid>` in ledger rows, brain edits, and timeline versions. Introduces instance-level actor identity recorded as `<instance>:<pid>` in ledger rows, brain edits, and timeline versions. Source: llm_adapter@2026-06-10 Confidence: high |
— |
| Feature | Medium |
Schema version 8 adds additive `actor` columns to three tables; updater performs eager migration for existing databases. Schema version 8 adds additive `actor` columns to three tables; updater performs eager migration for existing databases. Source: llm_adapter@2026-06-10 Confidence: high |
— |
Full changelog
v2.39.0
Governance enforce mode and actor identity — the staged Phase 3 of the Resolve 21 AI-ops work, built on three recorded design decisions: single-editor/multi-client concurrency target, instance-level identity, render-ops-only governance scope.
Added
- Governance
modefor the media-creating AI ops (motion deblur, speech generation):advisory(default — today's behavior, confirm-preview warnings only) orenforce, where an over-tier run is blocked with a structuredGOVERNANCE_BLOCKEDerror before token issuance, naming the exceeded dimensions and usage. Escape hatches: raise the tier or thresholds viaset_ai_governance, relax the mode, or passoverride_governance=trueto consciously exceed the tier once.set_ai_governanceacceptsmode(andpresetis now optional when only mode/overrides change);get_ai_governancereports it. - Instance-level actor identity: each entry point declares itself at startup —
stdio,network-sse,network-http,control-panel,batch-cli— and AI-ops ledger rows, brain edits, and timeline versions now carry anactorcolumn (<instance>:<pid>) alongside the existinginitiator. Initiator says why a row exists; actor says who wrote it. - Schema v8 (additive
actorcolumns on three tables). The updater's eager migration handles existing databases.
Validation
- Offline unit suite: 1,049 tests, 0 failures, 0 errors (17 new for this phase).
- v8 migration verified against a copy of a real project database (v6 → v8; 38 brain edits and 14 timeline versions preserved; originals untouched).
- No DaVinci Resolve scripting behavior changed; the enforce gate and identity stamping are local logic on already-confirm-gated paths.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Beta — feedback welcome: [email protected]