What changed
Agent Swarm 2.10 adds model-group CRUD and seeded tiers, a native tool-hook endpoint, resumable background user merges and per-session cost records for SystemOne decisions. Script-card actions now use a content-pinned allowlist, and the release updates agent-fs to 0.18.24.
Why it matters
Routing groups, tool hooks, identity merges and decision-cost records all change the control plane around multi-agent execution. The release makes these boundaries more inspectable, but it also creates new policy, migration and accounting state that must remain consistent during failure.
What to do
Pin 2.10.0 in staging; deny one tool hook, interrupt and resume a synthetic user merge, change one model-group member and reconcile session cost records. Verify immutable actor identity, allowlist enforcement, one final user and rollback before promotion.
Caveat
The signed release is maintainer evidence, not an independent security or reliability assessment. Hook enforcement, merge resumption, model routing and cost attribution depend on deployment identity, database and provider configuration.