chore(main): release 1.267.3

[coreplane-infra]

🤖 I have created a release beep boop

1.267.3 (2026-09-29)

Bug fixes

• dispatcher: ground review targets and trace door decisions (#2443) (e47313c)
• dispatcher: keep PR replies on their original Ship unit (#2459) (0c35919)
• dispatcher: keep review replies on their Ship unit (#2463) (13f8d81)
• process: attribute slow memory Worker requests (#2457) (e38ad51)
• resident: fence cold fallback after ownership loss (#2464) (1337e3d)
• resident: stop ended runs from blocking deploys (#2454) (75c40cf)
• sandbox: allow public Git toolchain clones (#2460) (19165a2)
• ship: let clean coding children open pull requests (#2461) (268f18b)
• ship: qualify spent-cap advice for merged pull requests (#2462) (048021e)

---

This PR was generated with Release Please. See documentation.

[github-actions]

What merging this release deploys

Deploy targets for 5b9bd0f: 4 of 4 Workers — memory, bot, resident, sandbox

Worker	Decision	Judged against	Why
memory	deploy	live 08956af	deploy/cloudflare-memory/testDiagnostics.ts deploy/cloudflare-memory/testDiagnosticsProtocol.ts deploy/cloudflare-memory/testDiagnosticsReporter.ts deploy/cloudflare-memory/testFetch.ts deploy/cloudflare-memory/worker.ts src/agents/registry.ts (imported by deploy/cloudflare-memory/worker.ts) src/core/budgets.ts (imported by deploy/cloudflare-memory/worker.ts) src/core/runEvents.ts (imported by deploy/cloudflare-memory/worker.ts) … +6 more
bot	deploy	live 08956af	src/agents/registry.ts src/channels/adminTraceLog.ts src/channels/githubDoor.ts src/core/budgets.ts src/core/codingPrPostStep.ts src/core/dispatch/authorize.ts src/core/dispatch/commandRun.ts src/core/dispatch/operator.ts … +28 more
resident	deploy	live 0d833cc	deploy/cloudflare-resident/runRegistration.ts deploy/cloudflare-resident/worker.ts src/core/budgets.ts (imported by deploy/cloudflare-resident/worker.ts) src/core/trace/attrs.ts (imported by deploy/cloudflare-resident/worker.ts) src/core/trace/tracer.ts (imported by deploy/cloudflare-resident/worker.ts) src/core/trace/types.ts (imported by deploy/cloudflare-resident/worker.ts) src/core/trace/workerTrace.ts (imported by deploy/cloudflare-resident/worker.ts)
sandbox	deploy	live 0d833cc	deploy/cloudflare-sandbox/worker.ts src/core/budgets.ts (imported by deploy/cloudflare-sandbox/worker.ts) src/core/trace/attrs.ts (imported by deploy/cloudflare-sandbox/worker.ts) src/core/trace/tracer.ts (imported by deploy/cloudflare-sandbox/worker.ts) src/core/trace/types.ts (imported by deploy/cloudflare-sandbox/worker.ts) src/core/trace/workerTrace.ts (imported by deploy/cloudflare-sandbox/worker.ts) src/execution/seedPlan.ts (imported by deploy/cloudflare-sandbox/worker.ts)

Unclassified paths: none.

Judged per Worker against the commit it is serving right now. Re-rendered by the release-please workflow on every merge to main; merging this PR runs deploy all --affected and deploys exactly the Workers marked deploy.

[coreplane-infra]

🤖 Created releases:

• v1.267.3

🌻