chore(main): release engine-and-dependents libraries

[JSONbored]

🤖 I have created a release beep boop

contract: 3.17.0

3.17.0 (2026-07-29)

Features

• ams: migrate the AMS miner MCP server to @loopover/contract (#9542) (9713f26), closes #9536
• contract: add @loopover/contract, the single zod source for tool and API schemas (#9530) (95f1524)
• contract: give the request schemas, the control plane, and the self-host endpoints one contract (#9750) (#9757) (5220a35)
• contract: migrate every remote MCP tool contract to @loopover/contract (#9518) (#9559) (968c731)
• gate: choose provider, model, effort and self-consistency runs — per repo, and escalated on guarded paths (#9821) (a65655c)
• mcp: discovery surfaces, registry publish, and the stdio gateway (#9526) (#9735) (983ea31)
• mcp: generate every tool, CLI, client, and docs surface from the contract (#9521) (#9590) (bd139a5)
• mcp: migrate the stdio MCP server's 102 tools to @loopover/contract (#9537) (#9565) (d5a5a8f)
• mcp: one registry-driven telemetry contract at all three dispatch chokepoints (#9525) (#9579) (06a090f)
• stats: publish a fleet accuracy trend, so the weekly table means something again (#9775) (47842ec), closes #9676

Fixes

• contract: close the last duplications and make the .shape trap impossible (#9762) (#9765) (edbdb58)
• contract: regenerate api-schemas for #9813's ignoredCheckRuns (#9837) (8659503), closes #9836
• release: publish @loopover/contract, and catch this class of break before it ships (#9749) (#9763) (6dd5791)
• review: split unrecognized human-override verdicts out of confirmed (#9916) (cd491d2)

engine: 3.17.0

3.17.0 (2026-07-29)

Features

• benchmark: anti-overfit controls — repo-level seeded split, caps, rotation (#9263) (#9600) (9942512)
• benchmark: maintainer action-space schema and proposal validator (#9260) (#9595) (b543e1e)
• benchmark: multi-class proposal scorer on the shared primitives (#9262) (#9599) (534dfd5)
• benchmark: reversal-aware realized-history ground truth (#9261) (#9598) (1819298)
• benchmark: untrusted candidate sandbox policy and fail-closed run verdict (#9264) (#9606) (3200abc)
• gate: choose provider, model, effort and self-consistency runs — per repo, and escalated on guarded paths (#9821) (a65655c)
• gate: gate.ignoredCheckRuns — exclude a third-party check from CI resolution entirely (#9813) (84c2462)
• proof: public per-repo proof summary, endpoint and README badge (#9569) (#9608) (7ffb51e)

Fixes

• ci: normalize committed CRLF to LF and name the failure for what it is (#9799) (ee98373)
• engine: accept the { kind: 'existing', repo } IdeaTarget shape in validateIdeaSubmission (#9634) (c086363)
• engine: drop opportunity-metadata's blanket v8-ignore directives and branch-cover the scoring logic they hid (#9635) (61ab43e), closes #9616
• engine: guard benchmark ground-truth against invalid window and duplicate roster (#9882) (300c381), closes #9644
• engine: isolate getTenantConfig reads and normalize tenant config (#9614) (#9627) (676ba3c)
• engine: keep renderRepoMap's output within maxOutputChars including the marker (#9633) (d997bac)
• engine: share governor-ledger's repo-segment guard with the three normalizers that skipped it (#9625) (8e3e4f5), closes #9610
• engine: surface discovery-index contract-version skew and actually send the version on the query wire (#9631) (80827df), closes #9615
• engine: validate the repo and PR number behind buildResultsPayload's customer link (#9611) (#9632) (5aa94b7)
• eval: commit each published score to the corpus a reader can download (#9811) (bcdd2f8), closes #9805
• eval: stamp the in-Worker threshold backtest with its corpus freeze point (#9804) (2755994)
• openapi: declare the predictedGate/dataQuality fields branch-analysis actually returns (#9531) (#9587) (a858cbc)
• routing: impose a total order on the reviewer-vote read so latest-vote-wins is deterministic (#9885) (e3247ed), closes #9638
• signals: unify the test-evidence code-path predicate as isTestableCodePath (#9906) (cb167ba), closes #9696

mcp: 3.17.0

3.17.0 (2026-07-29)

Features

• contract: add @loopover/contract, the single zod source for tool and API schemas (#9530) (95f1524)
• contract: migrate every remote MCP tool contract to @loopover/contract (#9518) (#9559) (968c731)
• mcp: add validate:mcp, the contract validator that enforces all three servers (#9520) (#9575) (0e990a3)
• mcp: discovery surfaces, registry publish, and the stdio gateway (#9526) (#9735) (983ea31)
• mcp: generate every tool, CLI, client, and docs surface from the contract (#9521) (#9590) (bd139a5)
• mcp: migrate the stdio MCP server's 102 tools to @loopover/contract (#9537) (#9565) (d5a5a8f)
• mcp: one registry-driven telemetry contract at all three dispatch chokepoints (#9525) (#9579) (06a090f)

Fixes

• contract: close the last duplications and make the .shape trap impossible (#9762) (#9765) (edbdb58)
• mcp: await PostHog flush via unit-tested stdio wrapper (#8738) (7ee07cc), closes #8690
• mcp: correct loopover_check_issue_slop description and drop the dead issue-slop rubric (#8959) (fcecf0c), closes #8907
• mcp: exit the CLI cleanly on a broken-pipe stdout/stderr error (#8731) (2fc27bc), closes #8691
• mcp: mirror loopover_clear_selftune_override in the CLI stdio package (#9300) (#9361) (09eb223)
• mcp: stop --json=false and --exit-code=false enabling the flag they disable (#8725) (60f9f8f)
• security: close two open GitHub Security Advisories (#9281) (29591ca)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @loopover/contract bumped from ^0.1.0 to ^3.17.0
    • @loopover/engine bumped from ^3.16.0 to ^3.17.0

miner: 3.17.0

3.17.0 (2026-07-29)

Features

• ams: migrate the AMS miner MCP server to @loopover/contract (#9542) (9713f26), closes #9536
• contract: give the request schemas, the control plane, and the self-host endpoints one contract (#9750) (#9757) (5220a35)
• mcp: discovery surfaces, registry publish, and the stdio gateway (#9526) (#9735) (983ea31)
• mcp: generate every tool, CLI, client, and docs surface from the contract (#9521) (#9590) (bd139a5)
• mcp: migrate the stdio MCP server's 102 tools to @loopover/contract (#9537) (#9565) (d5a5a8f)
• mcp: one registry-driven telemetry contract at all three dispatch chokepoints (#9525) (#9579) (06a090f)
• miner: add a claim reclaim CLI to expire orphaned soft-claims (#9717) (edf0883), closes #9686
• miner: run the target repo's own test/lint/build commands before opening a PR (#8819) (e10abf2)
• miner: wire deny-hook synthesis to a live consumer and give it an operator CLI (#8806) (#8817) (33bacda)
• orb: salvageability axis — hold fixable, well-authored PRs instead of one-shot-closing (#8986) (7fd84ff)

Fixes

• engine: surface discovery-index contract-version skew and actually send the version on the query wire (#9631) (80827df), closes #9615
• engine: treat an Infinity WIP cap as uncapped, not collapsed to 0 (#8945) (6aaea39)
• eval: commit each published score to the corpus a reader can download (#9811) (bcdd2f8), closes #9805
• miner: a rejecting captureError must not skip runCleanup()/exit in the crash handlers (#9688) (#9902) (36dd1c8)
• miner: add blocked_own_open_pr to the AttemptCliResult union (#9384) (42e1015)
• miner: AmsPolicySpec parse warnings are computed but never surfaced to the operator (#8978) (3369ebc), closes #8853
• miner: carry assignees through normalizeCandidate in opportunity-ranker (#9343) (b554957)
• miner: check out baseBranch on the fresh-clone path so the first attempt succeeds (#9682) (#9904) (25dcdd8)
• miner: close the clone-lock TOCTOU on a still-empty lockfile (#9681) (#9915) (1e1b004)
• miner: compare-and-set the orphan reclaim so a stale probe cannot free a live re-acquired slot (#8992) (8444812)
• miner: delete the orphaned portfolio chat-action duplicate (#8662) (1cc2146)
• miner: drift-guard doctor store-integrity list against migrate STORES (#9689) (#9899) (49a3b17)
• miner: drop discovery-index candidates whose repo bans AI contributions (#9680) (#9908) (93e80ac)
• miner: drop stale ProcessEnv casts on resolveReplaySnapshotDbPath (#8768) (7b2104d), closes #8642
• miner: fail acquire() on an attempt_id/repo mismatch (#8964) (266b07d)
• miner: fall back to global config.apiUrl in loopoverApiUrl (#8937) (4dfe15d)
• miner: governor reputation-history read-modify-write is unguarded, unlike sibling scalar-state writes (#8988) (62e6d25), closes #8855
• miner: governor-chokepoint-persisted's load-evaluate-save cycle isn't atomic (#8993) (49a27c2), closes #8856
• miner: guard runAttempt's worktree cleanup and hosted claim release in the finally block (#9677) (#9912) (84553fc)
• miner: include laptop-state in doctor integrity and migrate store lists (#8749) (713145f), closes #8641
• miner: index-parse deny-hooks --history and route failures through the shared CLI error contract (#9886) (3bee8cc)
• miner: log discovery-index query failures before failing open (#9346) (ab6a44d)
• miner: make governor-run-halt's ledger recording a genuine transition detector (#9367) (6c220b3)
• miner: printHelp() omits the working deny-hooks subcommand (#8933) (1eeaae1), closes #8851
• miner: re-entry must transition the dequeued repo's run-state, and no-op on an empty queue (#9887) (027e797)
• miner: reclaim orphaned worktree allocations on every acquire() (#8918) (eab6ecf)
• miner: refuse a duplicate attempt when this miner already has an open PR for the exact issue (#8808) (#8815) (d5ec15a)
• miner: reject a portfolio-queue identifier containing the '::' composite-id separator (#8925) (32ee72e)
• miner: replace never-registered run with loop in fleet-mode manifests (#9524) (6bb8588)
• miner: self-review-context never supplies recent-merged-PR history, contradicting its own "same fidelity" claim (#8969) (987f7ce), closes #8852
• miner: surface verification payload in attempt-cli JSON for verification_failed (#9372) (a58ce3d)
• miner: treat an absent x-ratelimit-remaining header as unknown, not a 0 budget (#9678) (#9897) (dcd70b9)
• miner: wire AMS policy resolver to the documented discovery order (#9106) (f2f32cc), closes #8863
• miner: wire isValidRepoSegment into the seven remaining owner/repo parsers (#9911) (e150198)
• orb: webhook redelivery, reputation cadence, DB retention, and gate severity fidelity (#9237) (d2c8d27)
• packaging: ship the LICENSE @loopover/miner declares, and assert it everywhere (#9787) (122a283)
• review: auto-clear stale manual-review lock-contention hold; sync engine gate-decision twin (#9107) (6aacf08)
• review: default cross-issue copycat/reward-farming dedupe on for reward-eligible repos (#9226) (b251912)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @loopover/contract bumped from ^0.1.0 to ^3.17.0
    • @loopover/engine bumped from ^3.16.0 to ^3.17.0

---

This PR was generated with Release Please. See documentation.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
🔵 In progress View logs	loopover-ui	53a655c	Jul 29 2026, 10:26 PM

[loopover-orb]

Warning

⏸️ LoopOver review result - manual review recommended

_{Review updated: 2026-07-29 23:29:35 UTC}

12 files · 1 AI reviewer · 1 blocker · CI green · clean

⏸️ Suggested Action - Manual Review

Review summary
This is an automated release-please chore PR bumping five workspace packages (contract, mcp, engine, miner, ui-kit) to 3.17.0 in lockstep, along with the manifest, package-lock, server.json, and CHANGELOGs. The version bumps and internal dependency ranges (@​loopover/contract, @​loopover/engine) are consistent across all package.json files, expected-engine.version matches the engine bump, and the .release-please-manifest.json also fixes a pre-existing duplicate key for packages/loopover-contract. This is standard, low-risk generated release tooling output.

Nits — 3 non-blocking

• The external review brief's 'no SLSA/sigstore attestation' and 'long-file' flags on package-lock.json are expected noise for a release-please PR and generated lockfile, not real defects.
• Worth double-checking that @​loopover/contract and @​loopover/engine were actually published to npm at 3.17.0 before this manifest merges, per the existing release ordering note in packages/loopover-contract/CHANGELOG.md, though that's an out-of-band publish-sequencing concern rather than something visible in the diff.
• Diff looks like trivial or whitespace-only churn — Reduce whitespace-only or formatting-only churn and keep the diff focused on substantive changes.

Concerns raised — review before merging

• No linked issue detected: No closing reference or linked issue number was found in the PR metadata/body. — If this PR is intended to solve an issue, link it explicitly in the PR body.

📋 Copy for AI agents — paste into your coding agent

Fix the following blocker(s) from this PR review:

1. No linked issue detected: No closing reference or linked issue number was found in the PR metadata/body. — If this PR is intended to solve an issue, link it explicitly in the PR body.

Decision drivers

• ❌ Code review — 1 blocker (1 reviewer)
• ❌ Gate result — Blocking (Repo-configured hard blocker found.)

Context & advisory signals — never blocks the verdict

Signal	Result	Evidence
Linked issue	✅ No-issue rationale	PR body explains why no issue is linked.
Related work	⚠️ 1 scoped overlap	Top overlaps are listed below; lower-confidence bulk is hidden.
Change scope	❌ 8/20	High review scope from cached public metadata (no linked issue context).
Validation posture	✅ 25/25	PR body includes validation/test evidence.
Contributor workload	✅ 10/10	Author activity: 14 registered-repo PR(s), 13 merged, 306 issue(s).
Contributor context	✅ Confirmed Gittensor contributor	JSONbored; Gittensor profile; 14 PR(s), 306 issue(s).
Improvement	ℹ️ Insufficient signal	risk: low · value: insufficient-signal

Review context

• Author: JSONbored
• Role context: owner (maintainer lane)
• Public audience mode: oss maintainer
• Lane context: Repository is configured for direct PR review.
• Public profile languages: Python, TypeScript, Ruby, Go, MDX, Shell, Solidity, JavaScript
• Official Gittensor activity: 14 PR(s), 306 issue(s).
• Related work: Titles/paths share 2 meaningful terms. (issue #9102)

Contributor next steps

• Start here: Treat this as maintainer-lane context rather than normal contributor-lane activity.
• Then work through the remaining 3 steps in the Signals table above.

Signal definitions

• Related work = same linked issue, overlapping active PRs, or title/path similarity.
• Change scope = cached public metadata such as size labels, draft state, and review-burden hints.
• Validation posture = whether the PR provides enough public validation/test evidence for maintainer review.
• Contributor workload = public contributor activity and cleanup pressure, not a repo-wide quality failure.
• Contributor context = public GitHub/Gittensor identity context; non-Gittensor status is not a blocker.

🧪 Chat with LoopOver

Ask LoopOver a question about this PR directly in a comment — grounded only in the same cached, public-safe facts shown above, never a new claim.

• @loopover ask <question> answers contribution-quality Q&A with source citations and freshness.
• @loopover chat <question> answers in natural prose from cached decision-pack facts via local inference (maintainer/collaborator; read-only).
• A plain-language @loopover mention with a real question is routed to the closest matching read-only command automatically — no exact syntax required.

Full command reference: https://loopover.ai/docs/loopover-commands

🧪 Experimental — new and may change.

Decision record

• action: hold · clause: missing_linked_issue
• config: 1a4bcf3eaf5368f3803ee86cf4f8157b8b7e5ab218f6cc630a0355b292dff137 · pack: oss-anti-slop · ci: passed
• record: d21966a8ae041ddfbbbbc95b96bb6b6e7d0fb8b5a957f1ef6bb94773c7c83fe7 (schema v5, head 44dfad6)

_{🟩 Safe / merged · 🟦 Advisory · 🟨 Held for review · 🟥 Blocked / closed}

---

💰 Earn for open-source contributions like this. Gittensor lets GitHub contributors earn for the work they already do — register to start earning →.

Checked by LoopOver, a quiet PR intelligence layer for OSS maintainers.

• Re-run LoopOver review

[superagent-security]

Superagent didn't find any vulnerabilities or security issues in this PR.

[codecov]

Bundle Report

Bundle size has no change ✅

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.86%. Comparing base (4b57927) to head (44dfad6).
⚠️ Report is 2 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #9883   +/-   ##
=======================================
  Coverage   91.86%   91.86%           
=======================================
  Files         921      921           
  Lines      113266   113266           
  Branches    27301    27301           
=======================================
  Hits       104049   104049           
  Misses       7929     7929           
  Partials     1288     1288           

Flag	Coverage Δ
backend	95.68% <ø> (ø)
engine	72.24% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.