This release adds 3 notable features for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Affected surfaces
Summary
AI summaryAdd Skill Doctor dedupe spec, sx.llm core LLM service, and sx.ui.openSettings deep link.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Add Skill Doctor dedupe spec Add Skill Doctor dedupe spec Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Add sx.llm core LLM service Add sx.llm core LLM service Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Add sx.ui.openSettings deep link Add sx.ui.openSettings deep link Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Add real-CLI integration tests with output bounds checking Add real-CLI integration tests with output bounds checking Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Add duplicate detector UX with TTL cache support Add duplicate detector UX with TTL cache support Source: llm_adapter@2026-07-16 Confidence: high |
— |
| Feature | Low |
Keep sources whose reach was refused Keep sources whose reach was refused Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Feature | Low |
Skill Doctor detection built-in Skill Doctor detection built-in Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Performance | Low |
Persisted cache is the only fast path Persisted cache is the only fast path Source: granite4.1:30b@2026-07-16-audit Confidence: low |
— |
| Bugfix | Medium |
Fail-closed scratch dir and enforce header API key Fail-closed scratch dir and enforce header API key Source: llm_adapter@2026-07-16 Confidence: low |
— |
| Bugfix | Medium |
Harden CLI providers and validate schemas Harden CLI providers and validate schemas Source: llm_adapter@2026-07-16 Confidence: low |
— |
| Bugfix | Medium |
Consolidate/merge actions and perform AI sweep Consolidate/merge actions and perform AI sweep Source: llm_adapter@2026-07-16 Confidence: low |
— |
| Bugfix | Medium |
Fail closed when missing assets during consolidation Fail closed when missing assets during consolidation Source: llm_adapter@2026-07-16 Confidence: low |
— |
| Bugfix | Medium |
Harden adjudication prompt and add scan guards Harden adjudication prompt and add scan guards Source: llm_adapter@2026-07-16 Confidence: low |
— |
Full changelog
Changelog
- 202ecf381b66ea025d47b898e9ec13f6dbaf09ac SK-646: Add Skill Doctor dedupe spec
- 8dc8475975446be9c3e371a817fb86f0b61f58f7 SK-646: Add sx.llm core LLM service
- b19751ae5a9a061ee144ba406dc9581a65f2f86c SK-646: Add sx.ui.openSettings deep link
- fa371528d98f707481877839f95c1c51a7c0f598 SK-646: Fail-closed scratch dir, header API key
- 545daf3a786ecb7bb21721e6409998274cd8fc08 SK-646: Harden CLI providers, validate schemas
- 63388708d702378b7ecc283dc8f510e4c18872e7 SK-646: Real-CLI integration tests, output bounds
- bceac2e1fbd5ff880bdc9209868656753f70554e SK-647: Consolidate/merge actions, AI sweep
- 018c1af15e9a16dfc718836eda00e355ae30f29a SK-647: Duplicate detector UX, TTL cache, TOOLS
- 6ed5ddd4e6472d9fa1fce13448f04235a13f9c2a SK-647: Fail closed on missing assets in consolidate
- 5c9e3ff6106e07f75ac04214fa25c3fc7e3f95c2 SK-647: Harden adjudication prompt, scan guards
- 9a945576a5531c356abcfcd99360bfde74365f4a SK-647: Keep sources whose reach was refused
- 553625592ab8106e166cc110af476fe0573a9e97 SK-647: Persisted cache is the only fast path
- 8670fe421f6b0a2dc90583beb97349e93fc14445 SK-647: Skill Doctor detection built-in
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Sx
All releases →Related context
Related tools
Beta — feedback welcome: [email protected]