add FailureBackoffErrorResponse to the published 429 contract test and docs (deploy blocker)
add FailureBackoffErrorResponse to the published 429 contract test and docs (deploy blocker) drop per_domain_concurrent as a customer 429 source; bound per-domain by account max_in_flight consecutive-failure tracking with notify and auto-pause for all schedule types ( option 4) anti-bot system device-check HTTP client sessions bypass the egress guard — route via proxied, SSRF-checked egress (deploy ) opt-in fallback from forced T4 to T3/T3.5 on challenge or timeout ( option 5)
New Features
9consecutive-failure tracking with notify and auto-pause for all schedule types ( option 4)
consecutive-failure tracking with notify and auto-pause for all schedule types ( option 4)
opt-in fallback from forced T4 to T3/T3.5 on challenge or timeout ( option 5)
opt-in fallback from forced T4 to T3/T3.5 on challenge or timeout ( option 5)
per-(user, URL) back-off after consecutive identical failures ( option 3)
per-(user, URL) back-off after consecutive identical failures ( option 3)
bound concurrency per sticky exit/session (clearance reuse, cookie-cohort, force_sticky)
bound concurrency per sticky exit/session (clearance reuse, cookie-cohort, force_sticky)
anti-bot system clearance-store replay (enforcement phase of ) after shadow metrics
anti-bot system clearance-store replay (enforcement phase of ) after shadow metrics
surface failure hints and steer examples to render_js="auto" ( options 1+2)
surface failure hints and steer examples to render_js="auto" ( options 1+2)
obs-pgstat top [n] wrapper for pg_stat_statements attribution
obs-pgstat top [n] wrapper for pg_stat_statements attribution
stable check keys and fail-closed recovery closer for log-monitor internal tooling, plus stale-memo dry-run report
stable check keys and fail-closed recovery closer for log-monitor internal tooling, plus stale-memo dry-run report
alert on Cloudflare Workers daily request quota before Error 1027
alert on Cloudflare Workers daily request quota before Error 1027
Improvements
2detailed-logs crawl grouping via partial index and keyset pagination
detailed-logs crawl grouping via partial index and keyset pagination
exhaustion-nurture scans read balances from credit_balance_cache instead of re-summing credit_ledger
exhaustion-nurture scans read balances from credit_balance_cache instead of re-summing credit_ledger
Bug Fixes
27add FailureBackoffErrorResponse to the published 429 contract test and docs (deploy blocker)
add FailureBackoffErrorResponse to the published 429 contract test and docs (deploy blocker)
drop per_domain_concurrent as a customer 429 source; bound per-domain by account max_in_flight
drop per_domain_concurrent as a customer 429 source; bound per-domain by account max_in_flight
anti-bot system device-check HTTP client sessions bypass the egress guard — route via proxied, SSRF-checked egress (deploy )
anti-bot system device-check HTTP client sessions bypass the egress guard — route via proxied, SSRF-checked egress (deploy )
follow-up: 2 deferred item(s) (deferred from )
follow-up: 2 deferred item(s) (deferred from )
update DomainConcurrencyDeferralHigh promtool expectation after description change (deploy )
update DomainConcurrencyDeferralHigh promtool expectation after description change (deploy )
expire_abandoned_drafts while-True batch loop hangs the internal service test suite (and is unbounded in prod); add pytest-timeout (deploy )
expire_abandoned_drafts while-True batch loop hangs the internal service test suite (and is unbounded in prod); add pytest-timeout (deploy )
anti-bot system device-check HTTP client session sends impersonate without browser compatibility kwargs — Firefox TLS incoherence on T3 (deploy )
anti-bot system device-check HTTP client session sends impersonate without browser compatibility kwargs — Firefox TLS incoherence on T3 (deploy )
api-changelog behaviour-change test must not assume the entry is in the top release block (deploy )
api-changelog behaviour-change test must not assume the entry is in the top release block (deploy )
test-check-deploy-contracts.sh bundle helpers break on 's shared line in bootstrap-body.sh (deploy )
test-check-deploy-contracts.sh bundle helpers break on 's shared line in bootstrap-body.sh (deploy )
test lists mandate-banned words as literals and trips the wording scanner (deploy )
test lists mandate-banned words as literals and trips the wording scanner (deploy )
schedule auto-pause counts platform queue-full and stale-claim failures — capacity incident pauses customer schedules
schedule auto-pause counts platform queue-full and stale-claim failures — capacity incident pauses customer schedules
follow-up: alterlab_api_worker_rss_bytes soak verification of api memory fix (deferred from )
follow-up: alterlab_api_worker_rss_bytes soak verification of api memory fix (deferred from )
production-action executor crashes on first real dispatch — maintenance_windows FK target not loaded (NoReferencedTableError)
production-action executor crashes on first real dispatch — maintenance_windows FK target not loaded (NoReferencedTableError)
T4 `page.route('**/*')` adds Pragma/Cache-Control no-cache to every request
T4 `page.route('**/*')` adds Pragma/Cache-Control no-cache to every request
publish recovery outcomes for internal service, AI engine, LLM and log-analysis error-trigger checks
publish recovery outcomes for internal service, AI engine, LLM and log-analysis error-trigger checks
logical-generation selectors fail closed on an in-progress generation instead of skipping it (shadow dry run raced the nightly upload)
logical-generation selectors fail closed on an in-progress generation instead of skipping it (shadow dry run raced the nightly upload)
publish recovery outcomes for billing/payment error-trigger checks
publish recovery outcomes for billing/payment error-trigger checks
pg cache-hit alert attributes misses to recurring statements and ignores calls=1 one-offs
pg cache-hit alert attributes misses to recurring statements and ignores calls=1 one-offs
degrade gracefully and alert accurately when shared OpenRouter free-tier budget is exhausted
degrade gracefully and alert accurately when shared OpenRouter free-tier budget is exhausted
CLOUDFLARE_API_TOKEN lacks Cache Settings Edit and Single Redirect Edit — edge cache and redirect rules not deployed
CLOUDFLARE_API_TOKEN lacks Cache Settings Edit and Single Redirect Edit — edge cache and redirect rules not deployed
worker image installs floating latest Chrome (155) while identity constants claim Chrome 150 — pin and gate the binary version
worker image installs floating latest Chrome (155) while identity constants claim Chrome 150 — pin and gate the binary version
stop labelling warning-threshold counts Critical in error-trigger internal tooling and list unlinked memos first in aging handoff
stop labelling warning-threshold counts Critical in error-trigger internal tooling and list unlinked memos first in aging handoff
re-measure Cloudflare T4 after and set telemetry-gated policy for cloudflare_js and cloudflare_blocked
re-measure Cloudflare T4 after and set telemetry-gated policy for cloudflare_js and cloudflare_blocked
cache recreate onto volatile-lru — OOM-on-write exposure, cloud provider reconnect gap, state-dependent rollback (review finding — )
cache recreate onto volatile-lru — OOM-on-write exposure, cloud provider reconnect gap, state-dependent rollback (review finding — )
origin-lock installer self-probe always fails from the host — lock is effective (external probe 403), deploy goes red
origin-lock installer self-probe always fails from the host — lock is effective (external probe 403), deploy goes red
publish recovery outcomes for container, edge and database error-trigger checks
publish recovery outcomes for container, edge and database error-trigger checks
cache volatile-lru rollback runbook lost writer-fencing contract after — test_redis_backfill_job_ttl red on deploy
cache volatile-lru rollback runbook lost writer-fencing contract after — test_redis_backfill_job_ttl red on deploy
Breaking Changes
1RESERVED_HARD-promoted hosts bypass cohort sticky identity and share one rotating reserved session, breaking IP-bound clearance reuse (review finding — )
RESERVED_HARD-promoted hosts bypass cohort sticky identity and share one rotating reserved session, breaking IP-bound clearance reuse (review finding — )