#1794
--ca-cert / SWAMP_CA_CERT are ignored when serve runs --auth-mode token — only DENO_CERT reaches the connection's TLS config (found validating #1748)
#1768
vault read-secret appends a newline to piped output
#1748
wss:// direct to serve's own TLS listener still fails on 20260817 — client ALPN lands on h2, WS-over-h2 unimplemented (follow-up to #1363)
#1771
pullChanged skips same-size updated files — size-only change detection ignores the index sha256
#1770
A run's terminal status reaches the shared datastore only when a later run happens to push it
#1769
workflow cancel --all on the serve host shuts down the serve process
#1766
Readability of tables in documentation
#1749
data prune still misclassifies live records as orphans on 20260820 (after #1396) — serve-minted token/grant records, and report data of every live workflow
#1747
Concurrent pushes to one namespace fail with HTTP 409 ConditionalRequestConflict — the conditional PUT is never retried
#1686
Support credentials in datastore config (vault-resolvable)
#1638