claude-ops v3.11.0

claude-ops 3.11.0 changes what your agents may do without you. Messages leave only through your host's approved outbound gate, archives need your approval and a read-back, and releases merge only on matching proof.

Before, typing ok in ops-leadgen wrote a one-shot token file, and the send ran once that file existed. Now ops-desk, ops-inbox and ops-leadgen hand each draft to your host's approved outbound gate, which shows the exact recipient and the full text. Only your yes on those bytes sends it. ops-inbox also loses its direct Gmail, WhatsApp and iMessage send tools.

ops-desk used to archive finished items straight away, without asking. Now a reader agent's archive tag is only a recommendation, and the item is archived only once you approve it. Items marked already done or info only close in your task tracker, and your mailbox and chats stay as they are.

ops-inbox now reads the actual invoice or PDF before it states an amount or a due date, and an unreadable attachment keeps the item open. After an archive, it reads the archived flag back for each of the contact's WhatsApp identities, on the right account. A missing or failed read-back means you aren't at inbox zero.

The daemon gains a monitor-only flag. In this mode it doesn't start your configured services, run their health checks or cron jobs, invoke an agent, or send notifications. Every 30 seconds it writes a health file marked monitor only, with actions disabled. Without the flag, it works as before unless you set up the persistent macOS mode.

$ bash scripts/ops-daemon.sh --monitor-only --run-once

The AWS audit flags access keys older than your rotation limit. Its old date helper turned any timestamp it couldn't parse into zero, so the key's age counted from 1970. Now Python parses the timestamp and insists on a time zone, and the new test gets the same age in three time zones. An unreadable date reports age unknown. The audit now needs python3.

ops-release now fails closed. Open pull requests against main stop the run, where the old sweep had an agent review and merge them. The merge needs a Copilot review, every review thread resolved, and all six required checks passing on the exact head commit. A skipped check no longer counts. If tagging fails, it says merged, not tagged, and prints the recovery command.

ops-release: v3.11.0 merged, NOT tagged: …
ops-release: recover with: git … tag -a v3.11.0 … && git push origin v3.11.0

To upgrade, run plugin marketplace update for ops-marketplace, then update the ops plugin. Then check that every channel you send on has an approved outbound gate on your host. Where it doesn't, ops-desk, ops-inbox and ops-leadgen keep the draft pending with a diagnostic. That's claude-ops 3.11.0, where sends, archives and releases wait for proof.

/plugin marketplace update ops-marketplace