[JacobStephens2]

Summary

0.20.0 adds Triage to turn Reports into triaged issues and Review to review and fix another Trusted account’s pull requests (#1715, #1718).

• thirdshift triage reads a Report from stdin or --file, investigates read-only in a throwaway worktree, and files and cross-links issues. It comments on covering open issues instead of filing duplicates, preserving their labels. --recommend-only returns proposals without publishing (Add recommendation-only Triage runs for Reports #1714, File triaged issues by default #1716, Comment on open issues covering a Triage Report #1720).
• thirdshift review <PR URL> reviews eligible same-repository PRs, commits and pushes fixes, and posts a findings comment. --recommend-only leaves the branch unchanged; review --author <login> selects the lowest-numbered eligible PR for one Review per Pass (Add recommend-only pull request Review runs #1713, Address Review run findings on the pull request branch #1719, Review one author’s waiting pull requests as a Pass #1724).
• Triage changes proposed ready-for-agent states to needs-triage unless explicitly allowed. Issues needing credentials or production access to confirm become ready-for-human; needs-info and ready-for-human proposals carry forwardable questionnaires in issues and notifications (File triaged issues by default #1716, Write questionnaires for Triage issues that need a person #1721, Triage run: turn a Report into triaged issues #1715).
• Triage’s opt-in --read-machine or per-repository configuration allows read-only host investigation with a writable worktree. It requires Bubblewrap and working Linux user namespaces; sandbox startup failure stops the Command (Let Triage read the machine through an opt-in read-only sandbox #1717, Triage run: turn a Report into triaged issues #1715).
• Review runs execute repository instructions’ final validation and configured commands, including in recommend-only mode. Requested Security reviews run when addressing findings; later fixes trigger validation again. Public reports withhold copied private Security material (Run repository-specific validation in Review runs #1722, Run requested Security reviews during Review runs #1723, Review run: review another author's pull request and address its findings #1718).
• Other-account Session traces and sidecars must stay inside their Command record directory. Command-log reads for logs, Activity recovery, and Process Steps in show and the Console must stay under the accepted log directory (Keep an Other-account Session trace inside its Command record #1683, Keep an Other-account Command log under its accepted log directory #1685, Keep Other-account Process Steps inside the accepted log directory #1687).
• Architect and the architecture-review Step refuse ideas outside the origin repository before viewing or labelling them (Refuse an Architect idea outside the origin repository #1689).

Also: homepage workflow copy and Apple Silicon Linux setup docs (#1678, #1669), non-Linux release refusal and isolated platform compile errors (#1681), and a CI status-test timing fix (#1692).

Version diff

diff --git a/Cargo.lock b/Cargo.lock
index 6e79f36f..bb737985 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -2184,3 +2184,3 @@ dependencies = [
 name = "thirdshift"
-version = "0.19.0"
+version = "0.20.0"
 dependencies = [
diff --git a/Cargo.toml b/Cargo.toml
index d9183f33..a3cf73f0 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -2,3 +2,3 @@
 name = "thirdshift"
-version = "0.19.0"
+version = "0.20.0"
 edition = "2024"