September 3, 2026 · 3.0.0-alpha.13

Crews that hold their word, hooks that fire

Stage 3 of the roadmap, finished honestly: what a crew member declares is now what actually happens. Plus the missing half of hooks — they were registrable and editable, and now they run.

• Improved

  A member with a tool allowlist is refused anything outside it, by name

• Improved

  A read-only member cannot run tools that change things — write, destructive, privileged — whatever the permission preset allows. Reads and browser…

• Improved

  A member's budget becomes that task's spending cap, governed by the same ask / wait / stop machinery as a mission budget

• Improved

  Before.tool gates every model-initiated tool call — a blocking hook's refusal cancels the call before anything executes;

• Improved

  Before.file.write / after.file.write fire per written path, so a formatter or a protected-path gate works;