v1.2.18

The release that stops the cockpit guessing. v1.2.17 made Linux a first-class citizen. This one makes the surfaces you actually type into fast, readable on every theme, and honest about what they know — with three P0s in the ACE composer, a War Room that opens 36× faster, and a sweep of the reader class that used to answer "I could not tell" as "no".

The ACE composer, fixed where you live

• Enter sends again. With the #3260 keyboard enhancements on, the block composer had no send key at all — the message you typed had nowhere to go (#5501).
• The composer no longer goes deaf. After a duplicate-paste extraction it stopped accepting Enter entirely; the fix keeps sending through that path (#5454).
• Ctrl+V always pastes into the composer — no more silently landing somewhere else (#5438).
• Selection belongs to the terminal. There is no v mode competing with it, and the full-screen copy view scrolls, so a long answer can be copied whole (#5439).
• The rail stops re-rendering on every keystroke. Typing no longer repaints the entire conversation (#5440).

Readable on every theme, not just the dark ones

• The rail's markdown was white on white on every light theme — unreadable, and only if you used one (#5437).
• Twelve library themes marked "unusable" are repaired at the registry door, and the omarchy mirror rows the picker merely listed now actually load (#5442).
• Green, yellow and red are pinned as theme-invariant status tokens across the ACE context zone and the Kanban board. A status colour that changes meaning with your theme is not a status colour (#5436).
• The Gantt paints its status colours and drops the zebra that fought them (#5444).
• Theme repaints route through one chokepoint, so a change lands everywhere or not at all (#5479).

Speed you can feel

• The War Room opens 36× faster — and follows the Fleet palette, with zebra on by default (#5441).
• Desktop input-to-paint: 58 ms → 23 ms. The lever turned out to be GPU selection, not the WebKit flag everyone reaches for first (#5478).

The review pipeline stops asserting what it did not observe

• An unreadable signal can no longer ship as a negative one. "I could not tell" and "no" are different answers, and conflating them is how a gate quietly inverts (#5482).
• The silent fail-open reader class is swept, converted and walled — the same defect shape, found everywhere it lived rather than one site at a time (#5468).
• Three distinguishable verdict states, and the actual grant actor recorded. The ledger stops naming things nobody observed (#5477).
• A MINOR-only VERIFY:FAIL no longer blocks, and an unreadable stamp no longer poisons the run — the §7.4 term is decided once, in one place (#5481).
• The review vehicle fires off the durable done-claim, not the attention flag, so a clean finisher no longer waits forever (#5467, #5466).
• The reviewer crew width is a real Settings dial — 2 · 4 · 6 · 8 · 10 — and it writes (#5425).
• The compare fallback encodes its refs, and --strategy merge no longer needs the probe it existed to avoid (#5476).

Cockpit plumbing

• A worktree-launched cockpit gets its own instance identity, and every teardown is walled — so one cockpit can no longer reach into another's state (#5465).
• The crash artifact is keyed per instance, so a restart can never destroy a prior crash you had not read yet (#5463).
• Tab / Shift+Tab work on Settings again, and selecting a tab no longer enters it (#5457).
• The delivery mix is classified from the PR title, with the pie-chart shortcut confirmed (#5443).
• tickets.synced_issue lands as ff-0069 — with the tenant-safe key the shipped contract did not have (#5447).
• Three operator artifacts that existed only on the founder's machine are committed (#5451), and ADR-0128 says RATIFIED, which it already was (#5487).