chore(release): cut orb-v3.3.0

[github-actions]

Proposes cutting orb-v3.3.0 (a minor release) from the current
stable release orb-v3.2.0.

Merging this PR tags orb-v3.3.0 and dispatches the image build/publish --
which still requires a release environment approval before anything reaches GHCR (see
.github/workflows/release-selfhost.yml). The daily beta channel is unaffected either way.

Image-relevant commits since the last stable release

• fix(review): stop large-registry-PR false-closes across grounding, content-lane, and issue matching (fix(review): stop large-registry-PR false-closes across grounding, content-lane, and issue matching #7931) (2367dbe)
• test(review): cover the null-issue-title branch in the deliverable check (test(review): cover the null-issue-title branch in the deliverable check #7940) (4482d47)
• test(selfhost): cover env_get and require_cmd in selfhost-deploy-common (test(selfhost): cover env_get and require_cmd in selfhost-deploy-common #7945) (6c20673)
• fix(review): stop the Code review row contradicting itself when AI never ran (fix(review): stop the Code review row contradicting itself when AI never ran #7946) (002a864)
• fix(review): downgrade REES 413 response to warn, not error (fix(review): downgrade REES 413 response to warn, not error #7988) (f6b2869)
• feat(orb): gate APR repo-transfer on trusted idea completion (feat(orb): gate APR repo-transfer on trusted idea completion #8001) (162b7cb)
• docs(signals): move orphaned review.enrichment doc comment to its function (docs(signals): move orphaned review.enrichment doc comment to its function #8030) (b0c88a9)
• fix(review): parse a scalar source field written as a YAML sequence (source-evidence.ts's parseSimpleFrontmatter silently drops a scalar source field written as a YAML block/flow sequence, unlike duplicates.ts's parser #8016) (fix(review): parse a scalar source field written as a YAML sequence (#8016) #8031) (53ad637)
• refactor(services): rename burden-forecast loader to reflect cache-only behavior (loadOrComputeBurdenForecastResponse can never return source: computed — the compute half was deleted in #906, the name/type/docs weren't updated #8019) (refactor(services): rename burden-forecast loader to reflect cache-only behavior (#8019) #8034) (15d62d8)
• fix(review): page fetchFallbackArtifactShots artifacts-list read past 100 artifacts (fetchFallbackArtifactShots doesn't paginate the artifacts-list read, unlike its sibling reads in the same visual-capture subsystem #8014) (fix(review): page fetchFallbackArtifactShots artifacts-list read past 100 artifacts #8035) (dc29c3a)
• fix(queue): terminalize active-review tracking in synchronize-amendment close guard (closeSynchronizeAmendmentIfPolicyEnabled skips terminalizeActiveReviewTracking, unlike its four sibling close-enforcement guards #8015) (fix(queue): terminalize active-review tracking in synchronize-amendment close guard #8044) (c2c8697)
• feat(orb): create APR repos under the submitting customer's own account (feat(orb): create APR repos under the submitting customer's own account #8046) (22d764b)
• fix(review): stop bare hotkey/coldkey mentions from false-positiving as secret leaks (fix(review): stop bare hotkey/coldkey mentions from false-positiving as secret leaks #7994) (c73f518)
• feat(orb): detect APR repo-transfer acceptance/expiry via scheduled poll (feat(orb): detect APR repo-transfer acceptance/expiry via scheduled poll #8005) (3962d99)
• fix(services): redact 'private key' from the agent-action public-safe card (agent-action-explanation-card.ts's public-redaction regex is missing "private key", present in 5 sibling redaction lists #8020) (fix(services): redact 'private key' from the agent-action public-safe card (#8020) #8027) (0cd7dc4)
• feat(notifications): extend badge notifications to AMS attempt, governor-pause, and PR-outcome events (feat(notifications): extend badge notifications to AMS attempt, governor-pause, and PR-outcome events #8057) (17848e5)
• feat(review): config-as-code manifest override for the loop-escalation sweep cron (loop-escalation-sweep is the only flag-gated cron job in job-dispatch's switch without a config-as-code manifest-override re-check #8018) (feat(review): config-as-code manifest override for the loop-escalation sweep cron #8059) (f3cb090)
• fix(selfhost): phase-align the cron scheduler to wall-clock boundaries (fix(selfhost): phase-align the cron scheduler to wall-clock boundaries #8061) (eb17890)
• refactor(loopover-extension): remove duplicate matchPullRequestTarget function and enhance test coverage for backend contract parity (matchPullRequestTarget is dead code left behind in loopover-extension/content.js by #7487's issue-page match removal #8023) (fix(extension): remove stranded matchPullRequestTarget and keep scoped CI coverage (#8023) #8062) (25e2df1)
• feat(auth): replace the global admin allowlist with a live per-repo permission check for hosted deployments (Replace the single global admin allowlist with a per-customer concept #4889) (feat(auth): replace the global admin allowlist with a live per-repo permission check for hosted deployments #8063) (dbf54e3)
• fix(review): reflect a live manual-review label in the public PR comment (fix(review): reflect a live manual-review label in the public PR comment #8068) (37e253a)
• feat(installations): add tenant self-service routes for installation health and repair (Add tenant self-service for installation health/repair (currently operator-only) #7661) (feat(api): add tenant-scoped installation health and repair (#7661) #8069) (a3dc73e)
• fix(review): count owner reopen-then-merge as a real reversal signal (fix(review): count owner reopen-then-merge as a real reversal signal #8074) (ddcf366)
• fix(review): stop paging Sentry on an expected update_branch merge conflict (fix(review): stop paging Sentry on an expected update_branch merge conflict #8077) (1026fb3)
• feat(calibration): shared ORB+AMS signal-tracking module, with AMS wired live (feat(calibration): shared ORB+AMS signal-tracking module, with AMS wired live #8079) (873ecf2)
• feat(orb): add a stored tenant-DB-credential secret type + generic revoke path to the token broker (Add a tenant-DB-credential secret type + generic revoke path to src/orb/broker.ts #8064) (feat(orb): add a stored tenant-DB-credential secret type + generic revoke path to the token broker #8080) (ed9e296)
• feat(review): same-rule repeat alarm — detection + alert, no autonomous action (feat(review): same-rule repeat alarm — detection + alert, no autonomous action #8092) (321c192)
• feat(review): per-rule (not just per-project) gate-decision precision tracking (feat(review): per-rule (not just per-project) gate-decision precision tracking #8099) (01d2b5a)
• feat(review): wire linked_issue_scope_mismatch into the shared signal-tracking module (calibration: wire linked_issue_scope_mismatch into the shared signal-tracking module (fired + reversal) #8101) (feat(review): wire linked_issue_scope_mismatch into the shared signal-tracking module #8109) (a2d2517)
• feat(orb): add an AMS-facing secret type to the generalized broker (Add AMS-specific secret type to the generalized broker (src/orb/broker.ts) #7674) (feat(orb): add an AMS-facing secret type to the generalized broker #8111) (b51103f)
• fix(selfhost): stop pinning sharp's Dockerfile install, let overrides resolve it (fix(selfhost): stop pinning sharp's Dockerfile install, let overrides resolve it #8115) (c52d862)
• feat(review): wire remaining configured gate blockers into signal tracking (calibration: wire recordRuleFired/recordHumanOverride for the remaining isConfiguredGateBlocker codes (excludes linked_issue_scope_mismatch, covered by #8101) #8104) (feat(review): wire remaining configured gate blockers into signal tracking (#8104) #8119) (073de61)
• fix(agent-actions): replace blanket concrete-evidence breaker exemption with per-rule track record (fix(agent-actions): replace blanket concrete-evidence breaker exemption with per-rule track record #8124) (c02a277)
• fix(review): reject plain ws: in isSafeEndpointUrl, matching its own "secure" doc comment (fix(review): reject plain ws: in isSafeEndpointUrl, matching its own "secure" doc comment #8131) (24929e3)
• feat(review): record a confirmed override when the owner closes an AI-judgment-held PR (calibration: record a 'confirmed' HumanOverrideEvent when an owner closes an aiReviewLowConfidenceHold PR #8123) (feat(review): record a confirmed override when the owner closes an AI-judgment-held PR #8125) (c5b483b)
• feat(review): capture bounded raw context in the linked_issue_scope_mismatch fired signal (calibration: capture bounded raw context (issueText/prTitle/prBody/diff) in linked_issue_scope_mismatch's fired-event metadata #8129) (feat(review): capture bounded raw context in the linked_issue_scope_mismatch fired signal #8132) (66a026f)
• feat(review): capture bounded raw context in configured-blocker fired events, permanently excluding secret_leak (calibration: capture bounded raw context for the remaining isConfiguredGateBlocker codes, excluding secret_leak #8130) (feat(review): capture bounded raw context in configured-blocker fired events, permanently excluding secret_leak #8135) (028079e)
• feat(review): backtest confidence-threshold changes against real signal history in ORB's live gate (feat(review): backtest confidence-threshold changes against real signal history in ORB's live gate #8142) (9258836)
• feat(api): add installation-scoped bulk agent pause/dry-run endpoint (feat(api): add installation-scoped bulk agent pause/dry-run endpoint #8144) (b3cb3c9)
• feat(ci): backtest logic/regex detection changes against recorded history in a dedicated CI job (feat(ci): backtest logic/regex detection changes against recorded history in a dedicated CI job #8147) (fec8f12)
• feat(tooling): pure issue-drafting core + CLI to expand a loose prompt into a gate-ready draft (tooling: maintainer CLI to expand a loose issue prompt into a gate-ready contributor issue #8103) (feat(tooling): pure issue-drafting core + CLI to expand a loose prompt into a gate-ready draft #8148) (8b62071)
• feat(tooling): feed recorded drafting misses back into every issue draft as a pre-publish checklist (Capture drafting-quality feedback: feed post-merge gaps back into #8103's issue-drafting tool #8118) (feat(tooling): feed recorded drafting misses back into every issue draft as a pre-publish checklist #8150) (f31ab7e)
• feat(api): weekly rule-calibration trend endpoint over fired/override history and backtest runs (Feed rule/AI-judgment calibration data into an accuracy trend view #8113) (feat(api): weekly rule-calibration trend endpoint over fired/override history and backtest runs #8156) (a6362d5)
• feat(gate): config-driven backtest-regression gate mode, default advisory (Decide + implement whether a REGRESSED backtest verdict should ever gate a merge (Phase 2) #8105) (feat(gate): config-driven backtest-regression gate mode, default advisory #8162) (9c303a6)
• feat(review): backtest-gated autonomous loosening of the satisfaction confidence floor (Epic: validated auto-loosening for auto-tune.ts's tuning advisor, gated on a clean backtest #8121 narrow start) (feat(review): backtest-gated autonomous loosening of the satisfaction confidence floor #8163) (ba93111)
• feat(calibration): schedule the satisfaction-floor loosening tick with a one-shot apply alert (calibration: schedule the satisfaction-floor loosening evaluation on the cron tick, with an apply alert #8158) (feat(calibration): schedule the satisfaction-floor loosening tick with a one-shot apply alert #8175) (689d3e0)
• feat(review): surface backtest-cleared loosening proposals in the tuning advisor (calibration: surface backtest-cleared loosening proposals in the tuning advisor with evidence payloads #8160) (feat(review): surface backtest-cleared loosening proposals in the tuning advisor #8177) (a41206a)
• feat(calibration): operator visibility for the satisfaction-floor loosening loop (calibration: operator visibility for applied loosenings — live floor + history on the internal calibration surface #8161) (feat(calibration): operator visibility for the satisfaction-floor loosening loop #8180) (d89698d)
• feat(review): detect successor-superseded reversals for the one-shot close culture (feat(review): detect successor-superseded reversals for the one-shot close culture #8188) (06ebd53)
• feat(calibration): bounded loosenable-knob registry generalizing the backtest-gated loosening (calibration: generalize backtest-gated loosening into a bounded knob registry beyond the satisfaction floor #8159) (feat(calibration): bounded loosenable-knob registry generalizing the backtest-gated loosening #8190) (46d7877)
• feat(calibration): self-host Postgres parity for every calibration surface + pg-capable maintainer CLIs (feat(calibration): self-host Postgres parity for every calibration surface + pg-capable maintainer CLIs #8191) (f5993e8)
• feat(calibration): consume the ai_review_close_confidence override and flip the knob to live (feat(calibration): consume the ai_review_close_confidence override and flip the knob to live #8197) (3539934)
• feat(mcp): add admin tools to read/write a self-hosted instance's own private config (feat(mcp): add admin tools to read/write a self-hosted instance's own private config #8198) (ec3d5e2)
• feat(review): pure config-drift evaluator over the loosenable-knob registry (feat(review): pure config-drift evaluator over the loosenable-knob registry #8232) (5bf6efe)
• feat(selfhost): host-companion redeploy trigger via MCP admin tool (feat(selfhost): host-companion redeploy trigger via MCP admin tool #8209) (8017db1)
• feat(review): capture fired signals + reversal mapping for the slop and quality gate scores (feat(review): capture fired signals + reversal mapping for the slop and quality gate scores #8239) (ba08cd1)
• feat(public-stats): measured per-rule precision + reproducibility freeze point on /v1/public/stats (feat(public-stats): measured per-rule precision + reproducibility freeze point on /v1/public/stats #8241) (0a596ca)
• fix(retention): dedup the contributor-intelligence snapshot types — 2026-07 recurrence of obs(selfhost): monitor Cloudflare D1 database size and add bounded dedup retention for signal_snapshots #3810 (fix(retention): dedup the contributor-intelligence snapshot types — 2026-07 recurrence of #3810 #8240) (3b1d5ad)
• feat(control-plane): deliver a bootstrap secret into hosted tenant containers (Deliver secrets/env vars into a running hosted tenant container (OrbTenantContainer/AmsTenantContainer) #8202) (feat(control-plane): deliver a bootstrap secret into hosted tenant containers #8253) (151bad8)
• feat(calibration): config-drift section in the maintainer recap (calibration: config-drift section in the maintainer recap #8214) (feat(calibration): config-drift section in the maintainer recap (#8214) #8256) (8e34212)
• feat(calibration): per-repo knob overrides — storage scheme, resolution seam, status listing (calibration: per-repo knob overrides — storage scheme, resolution seam, and full settings wiring #8216) (feat(calibration): per-repo knob overrides — storage scheme, resolution seam, status listing #8259) (180cef7)
• feat(calibration): nightly config-drift sentinel — stale config becomes a push alert (calibration: nightly config-drift sentinel — cron wire + one-shot stale-config alert #8213) (feat(calibration): nightly config-drift sentinel — stale config becomes a push alert #8261) (78aeb1c)
• feat(calibration): reliability curves beside the ladder — knobs status + advisor surfacing (calibration: surface reliability curves in the advisor + trend, and evaluate ladder replacement #8227) (feat(calibration): reliability curves beside the ladder — knobs status + advisor surfacing #8262) (c571afd)
• feat(calibration): per-repo loosening loop — repos earn overrides on their own evidence (calibration: per-repo loosening evaluation — repos earn overrides on their own evidence #8217) (feat(calibration): per-repo loosening loop — repos earn overrides on their own evidence #8264) (264f26a)

[superagent-security]

Superagent didn't find any vulnerabilities or security issues in this PR.