ProofOfTechOrg · gcharang · Aug 15, 2026 · Aug 15, 2026
diff --git a/.changeset/gate-structured-output.md b/.changeset/gate-structured-output.md
diff --git a/.changeset/quiet-fleet-terminal-reentry.md b/.changeset/quiet-fleet-terminal-reentry.md
diff --git a/packages/agent-starter/CHANGELOG.md b/packages/agent-starter/CHANGELOG.md
@@ -1,5 +1,13 @@
 # anchorage-agent-starter
 
+## 0.0.13
+
+### Patch Changes
+
+- Updated dependencies [37175fa]
+  - @proofoftech/breakwater@0.12.0
+  - @proofoftech/flowsafe@0.17.0
+
 ## 0.0.12
 
 ### Patch Changes

diff --git a/packages/agent-starter/package.json b/packages/agent-starter/package.json
@@ -1,6 +1,6 @@
 {
   "name": "anchorage-agent-starter",
-  "version": "0.0.12",
+  "version": "0.0.13",
   "private": true,
   "description": "Production-shaped Cloudflare Workers starter for durable, approval-gated Anchorage agents",
   "type": "module",

diff --git a/packages/breakwater/CHANGELOG.md b/packages/breakwater/CHANGELOG.md
@@ -1,5 +1,17 @@
 # @proofoftech/breakwater
 
+## 0.12.0
+
+### Minor Changes
+
+- 37175fa: Fail closed on structured-output coverage gaps. `createGuardedAgent()` rejects structured output before model execution because Mastra exposes parsed values to messages, persistence, and observability hooks before a post-generation wrapper could inspect them. It also rejects object-only policies that no supported guarded invocation can cover.
+
+  Processor-visible object chunks are validated as JSON, evaluated through their canonical serialization, and replaced with the same canonical clone. Standalone object-only policies abort when an invocation exposes no object to the processor. Policy lists and decision-driving descriptors are snapshotted at construction, evaluator callables retain their original receiver, and per-stream audit metadata stays bounded by configured policies and channels.
+
+  Flowsafe recognizes the new guarded-agent host protocol and rejects structured output on durable stream, generate, and prepare before Mastra can bypass the narrow handle. Durable entry points snapshot data-property call options before validation and delegation, reject accessors, and use the same snapshot for later run registration. Both packages pin their tested `@mastra/core` 1.50.0 contract.
+
+  Hold-back cost under large streams is measured by opt-in evidence tests (`BREAKWATER_PERF=1`) and recorded in the policy-engine design guide.
+
 ## 0.11.1
 
 ### Patch Changes

diff --git a/packages/breakwater/package.json b/packages/breakwater/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@proofoftech/breakwater",
-  "version": "0.11.1",
+  "version": "0.12.0",
   "publishConfig": {
     "access": "public"
   },

diff --git a/packages/fleet-control/CHANGELOG.md b/packages/fleet-control/CHANGELOG.md
@@ -1,5 +1,13 @@
 # @proofoftech/fleet-control
 
+## 0.3.2
+
+### Patch Changes
+
+- 8028605: Delete an already-decommissioned fleet ledger row without emitting a duplicate decommission event mislabeled as forced.
+- Updated dependencies [37175fa]
+  - @proofoftech/flowsafe@0.17.0
+
 ## 0.3.1
 
 ### Patch Changes

diff --git a/packages/fleet-control/package.json b/packages/fleet-control/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@proofoftech/fleet-control",
-  "version": "0.3.1",
+  "version": "0.3.2",
   "publishConfig": {
     "access": "public"
   },

diff --git a/packages/flowsafe/CHANGELOG.md b/packages/flowsafe/CHANGELOG.md
@@ -1,5 +1,17 @@
 # @proofoftech/flowsafe
 
+## 0.17.0
+
+### Minor Changes
+
+- 37175fa: Fail closed on structured-output coverage gaps. `createGuardedAgent()` rejects structured output before model execution because Mastra exposes parsed values to messages, persistence, and observability hooks before a post-generation wrapper could inspect them. It also rejects object-only policies that no supported guarded invocation can cover.
+
+  Processor-visible object chunks are validated as JSON, evaluated through their canonical serialization, and replaced with the same canonical clone. Standalone object-only policies abort when an invocation exposes no object to the processor. Policy lists and decision-driving descriptors are snapshotted at construction, evaluator callables retain their original receiver, and per-stream audit metadata stays bounded by configured policies and channels.
+
+  Flowsafe recognizes the new guarded-agent host protocol and rejects structured output on durable stream, generate, and prepare before Mastra can bypass the narrow handle. Durable entry points snapshot data-property call options before validation and delegation, reject accessors, and use the same snapshot for later run registration. Both packages pin their tested `@mastra/core` 1.50.0 contract.
+
+  Hold-back cost under large streams is measured by opt-in evidence tests (`BREAKWATER_PERF=1`) and recorded in the policy-engine design guide.
+
 ## 0.16.1
 
 ### Patch Changes

diff --git a/packages/flowsafe/package.json b/packages/flowsafe/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@proofoftech/flowsafe",
-  "version": "0.16.1",
+  "version": "0.17.0",
   "publishConfig": {
     "access": "public"
   },

diff --git a/packages/showcase/CHANGELOG.md b/packages/showcase/CHANGELOG.md
@@ -1,5 +1,13 @@
 # showcase
 
+## 0.0.19
+
+### Patch Changes
+
+- Updated dependencies [37175fa]
+  - @proofoftech/breakwater@0.12.0
+  - @proofoftech/flowsafe@0.17.0
+
 ## 0.0.18
 
 ### Patch Changes

diff --git a/packages/showcase/package.json b/packages/showcase/package.json
@@ -1,6 +1,6 @@
 {
   "name": "showcase",
-  "version": "0.0.18",
+  "version": "0.0.19",
   "private": true,
   "description": "Anchorage showcase — six runnable workflows and seven guardrail scenarios behind one React frontend",
   "type": "module",