## mckinsey/agents-at-scale-ark — v0.1.70-rc…v0.1.70-rc.1

_34 commits._

### Features
- **feat(dashboard): read only sessions view (#3642)** (b1846d3)
- **feat(controller): make Query service-account impersonation opt-in and per-Query authorised (#3240)** (e7bb93f)
- **feat(ark-api, ark-landing-page): per-user read-only via RBAC; rename namespace demo to landing-page labels (#3561)** (8e91347)
- **feat(dashboard): incremental workflow node log loading (#3611)** (35c3244)
- **feat(eventing): migrate to events.k8s.io/v1 recorder API (#3543 part 2) (#3618)** (793b6d1)
- **feat(ark-broker): add a NetworkPolicy template to the chart (#3620)** (b1d4e10)
- **feat: remove the broker purge-all delete routes (#3592)** (65acf95)

### Fixes
- **fix(dashboard): repair workflow node log viewer defects from #3611 (#3664)** (6fec568)
- **fix(ark-sdk): close the Kubernetes client created by with_ark_client (#3661)** (d929af7)
- **fix(controller): stop ark-apiserver crash-looping on cold start; fix flaky Query TTL/broker tests (#3683)** (fdbdd73)
- **fix: bump sharp, @modelcontextprotocol/sdk and source-map-js for Xray… (#3682)** (43795ce)
- **fix(completions): replace Anthropic 60s client timeout with context-aware backstop (#3654)** (c5280c1)
- **perf(controller): trim cached Query objects via a cache transform (#3518)** (53c5676)
- **fix(completions): terminate tool no longer fails the query (#489) (#3663)** (f717b5f)
- **fix(ark-broker): Postgres cross-replica message/event streams (#3569)** (2a56671)
- **fix(completions): make keepalive-tolerant SSE decoder apply on every streaming path (#3656)** (7904ead)
- **fix(ark-dashboard): preserve MCP secret header keys on edit (#3631)** (4180300)
- **fix(dashboard): distinguish load errors from empty state in list sections (#3524)** (77a4911)
- **fix: dashboard goes to default namespace on first load when using namespace param (#3489)** (9b3ab77)
- **fix(perf): query reconcile amplification (#3643)** (5e43e4e)
- **fix(ark-dashboard): stop chat stream on terminal query phase (#2862) (#3633)** (1365d36)
- **perf(dashboard): cache resource lists + detail via React Query (#3586)** (50c41f5)
- **fix: address CVEs from issue #3644 (#3645)** (c686b26)
- **fix(broker): always-armed idle timeout for stream subscribers (#2862) (#3625)** (110d360)
- **perf(dashboard): trim list-page payloads (teams N+1, agents summary view) (#3545)** (f411763)
- **fix(ci): pin argo CLI version in ark-tools image (#3614)** (dc2cf00)

### Tests
- **test(ark-broker): pin Reset memory against the sessions read model (#3610)** (60f8ada)

### Docs
- **docs: document ark-broker as required for dashboard streaming chat (#3647)** (2ac9418)

### Chore
- **chore(main): release 0.1.70-rc.1 (#3619)** (599da16)
- **refactor(eventing): route Team controller events through the eventing abstraction (#3617)** (6d904bd)
- **chore: Consolidate Dependabot updates (#3603)** (3ca40bf)
- **chore: Consolidate Dependabot updates (#3503)** (63e35ec)
- **refactor(api): migrate scheme.Builder to apimachinery builder (#3543 part 1) (#3590)** (e2a183c)
- **chore(deps): bump k8s.io/* to 0.37.0 and controller-runtime to v0.25.1 (#3544)** (cf2985d)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/mckinsey/agents-at-scale-ark?utm_source=github-action)._