Release mnw-server v0.11.4
Ships GCK rotation on group member removal. The rotate route and the
sync_group_grants table landed in 9a8bf2b3 with the client half in
synckit@5e88f2d, but prod runs 0.11.3 from an older sha, so on the live server
removing a group member revokes access without rotating the key. This release is
what closes that.
Carries migration 183 (synckit_group_grant_generations), so the promote is
one-way: rollback restores the binary and release_contents, never the schema.
Promoted with bears_migration set, which forces the operator confirm that
acknowledges it.
Green on run 30 at 56389f66, the first build to pass all nine host gates — most
of which had never executed before today, having sat configured in the repo and
absent from /etc/sando.
Co-Authored-By
Claude Opus 5 (1M context) <noreply@anthropic.com>
Author: Max Johnson <me@maxj.phd> · 2026-08-03 21:15 UTC