What's Changed

• ci: bump astral-sh/setup-uv from 10.0.1 to 10.1.0 in the github-actions group by @dependabot[bot] in #89
• deps: bump the python-dependencies group across 1 directory with 4 updates by @dependabot[bot] in #90
• fix: publish canonical Live metadata by @stefan-jansen in #91
• docs: name local development gates by @stefan-jansen in #94
• 0.1.3 - Risk-triggered provider qualification by @stefan-jansen in #99
• docs: complete Live agent-guide audit by @stefan-jansen in #101
• Make Live workflows and book links verifiable by @stefan-jansen in #106
• fix: qualify patched CCXT HTTP dependencies by @dependabot[bot] in #109
• fix: specify IB order time in force for paper lifecycle tracking by @stefan-jansen in #104
• fix: force patched SDK dependencies during package upgrades by @stefan-jansen in #131
• ci: qualify updated setup and artifact action pins by @dependabot[bot] in #113
• deps: qualify virtualenv 21.7.13 without runtime downgrades by @dependabot[bot] in #110
• deps: qualify updated build tools and experimental Databento by @dependabot[bot] in #108
• fix: integrate broker, aggregation and guide maintenance by @stefan-jansen in #121
• fix: preserve distinct OKX funding observations by @stefan-jansen in #134
• fix: wait for Gateway acknowledgement before IB paper reconnect by @stefan-jansen in #135
• fix: retain rejected OKX soak metrics by @stefan-jansen in #136
• deps: bump the python-dependencies group with 3 updates by @dependabot[bot] in #137
• chore(deps): bump aiohttp from 3.14.3 to 3.14.4 by @dependabot[bot] in #138
• fix: replace compromised certifi roots during package upgrades by @stefan-jansen in #139
• chore(deps): bump virtualenv from 21.7.13 to 21.14.9 by @dependabot[bot] in #140
• fix: identify the public documentation release verifier by @stefan-jansen in #141

Full Changelog: v0.1.2...v0.1.3

Redacted provider qualification evidence retained for contract-based reuse.

Redacted provider qualification evidence retained for contract-based reuse.

What's Changed

• Fix release recovery after the v0.1.1 tag by @stefan-jansen in #75
• Establish public agent orientation policy by @stefan-jansen in #78
• chore: standardize public identity and release promotion by @stefan-jansen in #80
• test: honor configured release candidate version by @stefan-jansen in #83
• Make paper qualification fail closed by @stefan-jansen in #85
• Retry transient IB soak reconnects by @stefan-jansen in #88
• Bound the post-handshake snapshot in IBBroker.connect() by @stefan-jansen in #87

Full Changelog: v0.1.1...v0.1.2

Redacted provider qualification evidence retained for contract-based reuse.

Redacted provider qualification evidence retained for contract-based reuse.

Redacted provider qualification evidence retained for contract-based reuse.

Redacted provider qualification evidence retained for contract-based reuse.

What's Changed

• Fix PyPI publisher pin and add exact-artifact recovery by @stefan-jansen in #53
• Fix GitHub release repository targeting by @stefan-jansen in #54
• chore: adopt ecosystem qualification by @stefan-jansen in #56
• fix: wait through early soak wakeups by @stefan-jansen in #59
• ci: bump the github-actions group across 1 directory with 3 updates by @dependabot[bot] in #7
• fix: make paper qualification runtime explicit by @stefan-jansen in #61
• deps: bump the python-dependencies group across 1 directory with 5 updates by @dependabot[bot] in #65
• ci: bump astral-sh/setup-uv from 9.0.0 to 10.0.1 in the github-actions group by @dependabot[bot] in #63
• fix: reconcile Alpaca positions after material fills by @stefan-jansen in #68
• fix: retain provider-specific qualification evidence by @stefan-jansen in #69
• fix: exclude evidence tags from package versions by @stefan-jansen in #71
• fix: select artifact media types by GitHub endpoint by @stefan-jansen in #73

Full Changelog: v0.1.0...v0.1.1

Redacted provider qualification evidence retained for contract-based reuse.