--- title: "Release 2026-08-14 - Changelog" url: "https://nsta1.github.io/Orleans.Lattice/changelog/2026-08-14.html" source: "https://github.com/NSTA1/Orleans.Lattice/blob/release/9.9/CHANGELOG.md?plain=1#L1664-L1699" documents: "Orleans.Lattice 9.9.0 (release line 9.9)" built: "2026-10-04" all-pages: "https://nsta1.github.io/Orleans.Lattice/llms.txt" --- # Release 2026-08-14 Part of the [changelog](../CHANGELOG.md). Coordinated family major release - every package in the family advances in lockstep to `9.0.0`. This major consolidates a whole-tree administration control plane, completes the convergent-type primitive catalogue, and re-gates the highest-blast-radius tree operations behind a dedicated capability. The full, per-entry detail of every change is preserved in the v8.x archive's `## Unreleased` section ([`CHANGELOG.old.v8.md`](https://github.com/NSTA1/Orleans.Lattice/blob/release/9.9/CHANGELOG.old.v8.md)); the headlines follow. Two companion packages debut in this line but are **not yet published to NuGet** (build from source today): `Orleans.Lattice.Api.Mcp.RepoContext` and `Orleans.Lattice.Storage.File`. A same-day per-package patch advances `Orleans.Lattice` to `9.0.1` (see Fixed); all other packages remain at `9.0.0`. ## Breaking - **The destructive and structural whole-tree operations now require the new `TreeLifecycle` capability instead of `Admin`.** The public `ILattice` soft-delete, recover, hard-purge, online reshard, online resize, and undo-resize verbs move behind a dedicated `LatticeOperation.TreeLifecycle` bit that `Admin` never confers, so an operator must additionally grant `TreeLifecycle` to any subject that must retain destructive tree-lifecycle authority. ([#1375](https://github.com/NSTA1/Orleans.Lattice/issues/1375), [#1448](https://github.com/NSTA1/Orleans.Lattice/issues/1448)) ## Added - **A whole-tree administration control plane: `Orleans.Lattice.Api.TreeAdmin` and its gRPC binding `Orleans.Lattice.Api.TreeAdmin.Grpc`.** A new transport-agnostic control facade that composes the existing single-responsibility facades and surfaces the full whole-tree administration surface - create, configure, and resolve aliases; inspect and diagnose; soft-delete, recover, and purge; online reshard, resize, and snapshot; restore and revert; streamed resumable bulk-load; WAL placement audit and online partition move; materialised-view and tag-index management; shard compaction; and history retention - over gRPC and as a fail-closed, capability-scoped MCP `treeadmin` tool group. ([#1368](https://github.com/NSTA1/Orleans.Lattice/issues/1368), [#1377](https://github.com/NSTA1/Orleans.Lattice/issues/1377), [#1375](https://github.com/NSTA1/Orleans.Lattice/issues/1375), [#1376](https://github.com/NSTA1/Orleans.Lattice/issues/1376), [#1370](https://github.com/NSTA1/Orleans.Lattice/issues/1370), [#1371](https://github.com/NSTA1/Orleans.Lattice/issues/1371), [#1372](https://github.com/NSTA1/Orleans.Lattice/issues/1372), [#1374](https://github.com/NSTA1/Orleans.Lattice/issues/1374), [#1378](https://github.com/NSTA1/Orleans.Lattice/issues/1378), [#1380](https://github.com/NSTA1/Orleans.Lattice/issues/1380)) - **New convergent (CRDT) primitives completing the catalogue.** A grow-only counter (`GCounter`), a grow-only set (`GSet`), a remove-wins observed-remove set (`RwSet`), and a monotone directional register pair (`MaxRegister` / `MinRegister`), each replicated end to end and surfaced through the data facade, its gRPC binding, and paired typed MCP tools. ([#1418](https://github.com/NSTA1/Orleans.Lattice/issues/1418)) - **New capability bits and data-plane verbs.** A dedicated `BulkLoad` capability with a streamed, resumable, idempotency-keyed tree-creation protocol ([#1367](https://github.com/NSTA1/Orleans.Lattice/issues/1367)); a resilient `DeleteRangeAsync` range-delete that drains a whole key range across a transient enumerator loss ([#1443](https://github.com/NSTA1/Orleans.Lattice/issues/1443)); and authorization-posture surfacing with opt-in cluster-wide all-trees grants and delegable access administration ([#1349](https://github.com/NSTA1/Orleans.Lattice/issues/1349), [#1342](https://github.com/NSTA1/Orleans.Lattice/issues/1342)). - **Two new companion packages (build from source, not yet on NuGet).** `Orleans.Lattice.Api.Mcp.RepoContext`, an opt-in MCP package giving an AI agent durable, conflict-free code context and memory over the CRDT tree, with semantic search over windowed file passages and a structural per-symbol model ([#1437](https://github.com/NSTA1/Orleans.Lattice/issues/1437), [#1451](https://github.com/NSTA1/Orleans.Lattice/issues/1451), [#1470](https://github.com/NSTA1/Orleans.Lattice/issues/1470)); and `Orleans.Lattice.Storage.File`, a durable local-disk write-ahead-log backend for single-node and containerized deployments ([#1434](https://github.com/NSTA1/Orleans.Lattice/issues/1434)). ## Security - **Membership JWT hardening.** Audience validation now fails closed on misconfiguration ([#1410](https://github.com/NSTA1/Orleans.Lattice/issues/1410)), and the JWT authenticators can pin the accepted token signature algorithms as defense-in-depth against audience/token confusion and algorithm-confusion ([#1154](https://github.com/NSTA1/Orleans.Lattice/issues/1154)). ## Changed - **CRDT read-path optimisations.** `OrSet`, `OrMap`, and `Rga` liveness and read paths skip redundant per-element tombstone probing on append-only state, and `Rga` serves `Count` / `IsEmpty` in O(1). ([#1406](https://github.com/NSTA1/Orleans.Lattice/pull/1406), [#1407](https://github.com/NSTA1/Orleans.Lattice/issues/1407), [#1408](https://github.com/NSTA1/Orleans.Lattice/issues/1408)) ## Fixed - **WAL retention and same-silo copier hardening.** The durable leaf-materialiser pin is now an authoritative WAL retention barrier that survives graceful shutdown, so a write-once derived tree can no longer wedge with `LeafProjectionStaleException` ([#1453](https://github.com/NSTA1/Orleans.Lattice/issues/1453), [#1464](https://github.com/NSTA1/Orleans.Lattice/issues/1464)); the repo-context enumeration paths recover from a transient enumerator loss instead of truncating ([#1460](https://github.com/NSTA1/Orleans.Lattice/pull/1460)); and every `[GenerateSerializer]` exception deriving from a BCL exception subclass now survives a same-silo deep-copy ([#1445](https://github.com/NSTA1/Orleans.Lattice/issues/1445), [#1446](https://github.com/NSTA1/Orleans.Lattice/pull/1446)). - **The WAL GC no longer trims a low-HLC / high-offset tombstone-compaction reap past a lagging materialiser leaf's checkpoint.** A tombstone-compaction reap envelope reuses the reaped entry's older (lower) hybrid-logical clock but is appended at a higher WAL offset, which breaks the HLC-monotonic-in-offset assumption the HLC trim floor relied on: the reap's low HLC was trim-eligible under any positive cursor, so the GC could reclaim it before a lagging leaf applied it, tripping the offset-space fall-off detector (`LeafProjectionStaleException`) and wedging the affected consumer's ingest (observed as a repocontext semantic index that never populated, so search silently degraded to keyword mode). The durable materialiser pin store now records each leaf's applied checkpoint offset alongside its frontier, and the WAL GC floors its trim so it never reclaims an entry above the lowest durably-applied leaf checkpoint offset. The floor only ever retains more WAL, so healthy trees are unaffected, and consumers with no WAL-replay dependency (never-checkpointed block pins and in-memory-seeded split siblings) are excluded so steady-state trimming is unchanged. (`Orleans.Lattice` 9.0.1, [#1482](https://github.com/NSTA1/Orleans.Lattice/pull/1482)) Newer release: [Release 2026-08-15](../changelog/2026-08-15.md). Contents: [Changelog](../CHANGELOG.md).