OmO ဗားရှင်းဟောင်းများ ဒေါင်းလုဒ်

What changed
omo verifies the device service it downloads against the real release key set. The device service's release key set is now pinned to the minted Ed25519 keys, operational first and recovery second, in packages/device-service-core/src/release/release-key.json (a byte copy of the service's own release-key.json). A release signed by either key installs; one signed by neither, or with a malformed signature, is refused before anything is written. Until now the pin was a placeholder that refused every release. (#12437)
Skills and prompts no longer point at skills, files or agents that do not exist, and CI now refuses any new one. The Native ultrawork directive told sessions to read the bun-1-4 skill, which Senpi renamed to bun; it now names bun. remove-deadcode asked for a typescript-programmer skill, which made OpenCode refuse the whole task call; it now loads programming. frontend and ulw-research no longer load an open-design skill that omo never shipped and instead name the nexu-io/open-design library. The ulw-research assembly worker loads imagegen and ulw-loop only when the session lists them, and frontend loads the browser skill where it asked for OpenCode's playwright. OpenCode now ships the hyperplan skill that its hyperplan mode tells the session to load; until now only this repository's own checkout had it. Seven programming references and one frontend cross-reference that pointed at files in the wrong directory, or at a file that never existed, now open the right file. A new check in the root test suite resolves every skill name, skill-relative path, agent and category in shipped skills and prompts for each edition that ships them, and names the closest real target when one is missing. (#12484)
When omo drops the OpenSSL default certificate file (/etc/ssl/cert.pem on macOS) from the engine's trust store, it now tells you why. omo doctor prints an INFO line naming the file, the cause, the certificate block where reading stopped, and whether the drop trusts fewer certificates than plain Bun would. omo trust ensure --json reports the same facts as defaultFileDrop. It is never a warning or a failure. (#12499, part of #10762)
2026-11-05 - Name the OpenSSL default-file drop (#12499, part of #10762)
Design revision 11, 4.4 item 6. readDefaultFileCandidates takes its narrowing flags from the exported DROP_CAUSE_NARROWING table. On a drop, acquireEngineTrust records one openssl-default-file-malformed entry carrying file, cause, blockIndex and narrowing instead of two plain codes, and returns it as defaultFileDrop. runTrustStage prints it in the trust ensure --json line. trust-diagnostics.ts accepts that structured entry and still accepts the plain code for an unreadable file; it refuses another file name, an unknown cause, a non-integer block index or a narrowing flag that does not match the cause. engine-trust-doctor.ts reads the adopted generation's diagnostics.1.jsonl and diagnostics.jsonl, takes the last import-exec or ensure record of that generation, and gives omo doctor one INFO line: the drop, or default-file: kept / unreadable. A missing or torn log yields no line and never fails doctor.
Native skills no longer point Senpi sessions at OpenCode-only agents, tools and commands. A community audit of the installed skills found 16 more references that exist only in OpenCode or nowhere: refactor consulted an oracle agent and called team_list and team_status, debugging ended a team with team_shutdown_request and team_approve_shutdown, frontend loaded skills through a skill tool and addressed a Prometheus planner, ulw-loop named an explorer agent, a plan agent and a /cancel command, ulw-plan offered a git category, and ultimate-browsing named a web-search tool and Playwright MCP calls. Senpi now gets the deep-high lane in place of oracle, the task_send shutdown handshake and task_output in place of the missing team tools, and explore, the ulw-plan workflow and /goal pause or /goal clear in the Native skills. The shar

Changed
- Built-in reasoning defaults are back to their values before 5.1.59: daily mode runs Claude Opus 5.5 at medium effort again, and every other rung raised to high in 5.1.59 returns to its previous medium or xhigh setting. (#12271) (#12272)
- The architect task category can now implement as well as design. Its description and child prompt name broad debugging across many sources (code, logs, git history, issues, docs, configuration, runtime evidence) as a use case, and the child is told it has the full tool set and should carry a requested change through to a verified result. A caller that wants a design write-up without file edits marks the task advisory-only (#12238). Model routing is unchanged. (#12239)
Fixed
- The native-binary-parity CI check no longer fails when a leftover task-host shard is still running on one side and has already exited on the other: both doctor lines are runtime state. (#12148) (#12153)
- c636c06e5a Merge pull request #12272 from code-yeongyu/revert/12094-reasoning-defaults
- dd69a43616 Merge remote-tracking branch 'origin/dev' into revert/12094-reasoning-defaults
- b5fd542ba4 Merge pull request #12239 from code-yeongyu/fix/architect-writable
- 2821fac395 Merge remote-tracking branch 'origin/dev' into fix/architect-writable
- e0d74870cf Merge pull request #12259 from code-yeongyu/fix/12256-eq-hermetic-mcp
- 5177e6fb9e Revert "Merge pull request #12094 from code-yeongyu/fix/12085-builtin-reasoning-high"
- d7f9c82232 Merge pull request #12153 from code-yeongyu/fix/12148-parity-shard-fold
- 12ec2cd3ea test(qa): re-record EQ E21-E24 linux goldens from the hermetic-MCP harness (#12256)
- f30147198f fix(qa): count a sandbox-disabled remote MCP as settled in the EQ startup wait (#12256)
- a708319a0b fix(qa): keep live third-party MCP instructions out of the EQ observation (#12256)
- a5e1061f11 Merge remote-tracking branch 'origin/dev' into fix/architect-writable
- 72a6bae47e Merge pull request #12212 from code-yeongyu/release/v5.1.59-source-state
- 966fe3d2db Merge remote-tracking branch 'origin/dev' into fix/12148-parity-shard-fold
- f615e62aa1 docs(changes): match the #12239 note to the tightened wording
- 75a5be4306 Merge remote-tracking branch 'origin/dev' into fix/architect-writable
- 11852ded93 docs(changes): note the writable architect category (#12239)
- 7232c70151 fix(qa): fold INFO and WARN shard doctor lines in the binary/npm parity compare
bun add -g omo-ai