dsh-plan-lattice v0.3.0

Adds a configurable pre-execution contract and dynamic reframing for long tasks.

• Adds intakeMode: off | adaptive | guided with an 8-step default threshold. off preserves fully autonomous behavior; adaptive lets the user choose guided clarification or autonomous execution per task.
• Uses Harness's real user-question seam, limits guided intake to high-impact unknowns, requires exact contract approval, and persists a session/step/digest-bound intake receipt.
• Records boundary, horizon, desired outcome, facts, decisions, assumptions, unknowns, invariants, changeable forms, directional forces, and minimal causal variables before decomposition.
• Adds lattice_reframe for material facts discovered during execution. It renews the human policy, bumps the graph revision, and preserves existing nodes for explicit reconciliation.
• Fixes context-tool presentation so the model sees the exact copyable receiptId and expectedRevision. A real-model run exposed the missing receipt as an execution blocker.
• Adds a public three-arm real-model evaluation protocol and grader. The first valid smoke scored 100/100 for native sparse, native full, and Plan Lattice guided; this is non-regression evidence, not an uplift claim.

Validation: 20 tests, strict TypeScript, build, publint, diff check, zero-finding staged TruffleHog scan, a 100,000-node scale proof, and real DeepSeek Harness execution. The guided run completed all 7 graph nodes, made 39 lattice calls with zero lattice errors, generated 57 passing fixture tests, and scored 100/100 externally.

Artifact proof: the attached tarball installed through dsh plugin --profile web add into a fresh DSH_HOME. Both default and adaptive Web profile boots returned HTTP 200. SHA-256: 22782f506264b93c177c10bb1eb0ec2c8b0939a1c8e8ebb157cc2a4aa7e4c2fc.

Exact source commit: fc55e593c03f99c0ef62ba5948d3e4f719059cdc.

dsh-plan-lattice v0.2.4

Fixes the model-facing contract boundary and adds safe contract-set adoption.

• Corrects the Harness output renderer signature so lattice_open and context refresh responses place the complete declared document bodies in final model-visible tool content.
• Adds lattice_adopt_context for newly required decision or architecture documents. It requires a fresh old-contract receipt, rejects active leases, reads all additions before durable mutation, and returns the complete new contract with a revision-bound receipt.
• Includes real Context + ToolRuntime coverage for final rendered content, adoption, failed addition atomicity, and cross-session lease protection.

Validated with 14 tests, strict TypeScript, build, publint, diff check, exact-diff TruffleHog, and a fresh Harness Web profile install/HTTP 200 boot.

v0.2.3: contract-change fence

Contract-change fence

A Plan Lattice lease is now bound to the complete project contract that was last rendered to the model. Immediately before each configured guarded write enters its side-effect pipeline, v0.2.3 recomputes the bounded contract digest. If a declared document changed, disappeared, became unsafe, or exceeded the configured budget, the write is denied until lattice_refresh_context renders the current contract again.

The real Harness ToolRuntime proof covers a requirement change after checkout and another after a checkpoint: both deny the next write, then permit it only after the new document body is rendered. The suite also retains the real compaction lifecycle, child reconciliation, and valid 100,000-node restart/status coverage.

This detects contract state at authorization time; it does not replace a host filesystem lock for an arbitrary concurrent third-party writer. Validation: 11 tests, strict TypeScript, build, publint, exact-diff secret scan, packed-profile boot, and loopback HTTP 200.

v0.2.2: compaction-safe contract refresh

Compaction-safe contract refresh

Harness session compaction can replace model-visible history while an agent still holds a clean Plan Lattice lease. This release introduces a conservative compaction fence: after a committed compaction/summary, the plugin invalidates the session receipt and blocks the next guarded write until lattice_refresh_context rereads and renders the full declared contract.

Verification covers the real SessionStore compaction lifecycle with CompactionInvariant and ToolRuntime, complete tests, strict TypeScript, package linting, exact-diff secret scanning, and clean-profile loopback boot.

v0.2.1: validate scale within branch limits

This is a verification-correction release. Runtime behavior from v0.2.0 is unchanged.

The 100,000-node recovery and bounded-status test now builds a graph that satisfies the plugin default shape: exactly two roots and no node with more than five children. It still proves snapshot-plus-ledger restart, 65 subsequent mutations, and a real lattice_status(maxNodes: 3) ToolRuntime response below 5 KB.

Exact source commit: 6a6a0a452c0dfe0c543f84f724d1e8fb91a5efcf

Validation: pnpm test (10 passed), pnpm run check, publint, git diff --check, staged TruffleHog, package inspection, and fresh DSH Web-profile install/HTTP 200.

Asset SHA-256: 9ed2e5c41ae2b79f8da2bc140430e326198affb188e14c6e6024ae298e7d8dd3.

v0.2.0: bounded durable ledger

Fractal Ledger v0.2.0 hardens long-horizon plan execution.

Highlights:

• structural mutations now consume their context receipt, so the next mutation requires an explicit full context refresh rendered to the agent;
• lattice_status returns a bounded actionable frontier or focused child view instead of serializing the whole durable graph;
• the store uses a revision marker and materialized cache, invalidates cross-instance state correctly, and rejects revisionless mutations;
• default snapshot cadence is 1,024 deltas.

Verification on commit 7e6885fa5ac1ce52aa58b21b6566ec1c28506560:

• pnpm test: 10 tests passed, including a real ToolRuntime proof that restores and advances a 100,000-node graph while keeping lattice_status(maxNodes: 3) under 5 KB;
• pnpm run check, publint, git diff --check, and staged TruffleHog passed;
• a fresh DeepSeek Harness web profile installed the release tarball and booted to HTTP 200.

Asset SHA-256: 60260795dbb990bd3859fc42ed720a5925793402711a0f187b7961599de97a0d.

dsh-plan-lattice v0.1.1

Documentation correction

This patch clarifies the storage boundary without changing the runtime protocol.

• .dsh/plan-lattice/v1/ stores lattice structure, evidence references, timestamps, context paths, and digests, not source-document bodies.
• The lattice_open and lattice_refresh_context responses render complete context to the agent. Harness session persistence may retain those normal model-visible tool outputs, so declared documents must be treated as session-visible data.

The exact v0.1.1 tarball was packed from commit c6795b8, installed into a new DSH_HOME Web profile, and booted on loopback.

dsh-plan-lattice v0.1.0

Fractal Ledger

First public release of an evidence-gated recursive work graph for long-horizon DeepSeek Harness agents.

Included

• Full context-contract reads with revision-bound SHA-256 freshness receipts.
• Recursive nodes with small branching limits, durable snapshots, delta replay, and append-only audit history.
• Leaf execution leases for configured write tools.
• Mandatory evidence checkpoints after every successful guarded action.
• Parent completion only after child evidence has reconciled.

Verified

• 7 local tests, including a real Harness Context + ToolRuntime pipeline.
• A write is denied before checkout, allowed for a current leaf, then denied again until a checkpoint.
• Context refresh cannot bypass a missing checkpoint.
• A tracked document change invalidates the old receipt.
• The packed artifact was installed into a new DSH_HOME Web profile, booted on loopback, and registered all 9 lattice_* tools from the installed package.

Boundary

This release prevents stale lattice state from silently advancing. It does not claim to guarantee model reasoning quality at arbitrary task scale, schedule agents, or classify arbitrary shell commands as writes. strictBash: true deliberately gates every bash invocation when that trade-off is appropriate.