[JacobStephens2]

Summary

0.12.3 centres on Trusted accounts: unattended work gets stricter trust checks, and sessions receive issue comments only from Trusted accounts (#743, #843, #849).

• Ready issue selection requires a Trusted author and latest ready-for-agent label actor; Spec Tickets require a Trusted author. Direct Issue URL runs warn and continue (Require Trusted accounts for Ready issues and Spec Tickets #743).
• Untrusted body or title edits can block Ready issue selection or Spec Ticket starts. Edits during a Run stop further sessions, including Resumes and Repairs; a Trusted relabelling resets the selection comparison point (Stop work on issues edited by untrusted accounts after ready-for-agent #843).
• Each Delivery session receives .thirdshift-issue.md with the issue title, body and Trusted accounts’ comments; other comments become placeholders. Prompts tell sessions to use that file (Hand sessions the issue with only Trusted accounts' comments #849).
• Delivery recognizes externally completed merges when the PR identity, branches and exact local head match and no local work remains. Otherwise it fails and retains local work (Report merges completed during Delivery as merged #810).
• Worktree ownership inspection uses fewer Git processes, with unchanged comparisons and a fallback for paths containing newlines (Inspect Worktree ownership with fewer git processes to shorten macOS CI #857).
• Internal refactors centralize CI conclusion readings (Read check conclusions in CI watch, not in the GitHub adapter #852), trust rules with fewer repeated membership reads (Deepen the Trusted account rule behind its own module #864), Delivery stage recording (Deepen Delivery's stage into one module that records both Recovery and the Command record #866), Recovery output rules (Deepen Recovery so each layer adds its facts and Recovery owns the rules for its lines #871), session kinds and --session matching (Name every session by a typed session kind that owns its log token, stage and --session rule #875), and the checked Harness, Model, Effort and Security asks passed to child Runs (Hand every child Run one set of child asks, built once after the Harness check #879).

Also: Console terminology and research (#830), CONTEXT.md renamed to GLOSSARY.md across guidance and prompts (#834), explainer-video research (#845), videos and architecture pages (#859, #886), and an interactive explainer-video project skill (#885).

Version diff

diff --git a/Cargo.lock b/Cargo.lock
index 95b83d2..c06d3ce 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -1469,3 +1469,3 @@ dependencies = [
 name = "thirdshift"
-version = "0.12.2"
+version = "0.12.3"
 dependencies = [
diff --git a/Cargo.toml b/Cargo.toml
index c082f26..2905b0e 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -2,3 +2,3 @@
 name = "thirdshift"
-version = "0.12.2"
+version = "0.12.3"
 edition = "2024"