APXV v1.6.0

Added

• APXV Lab as the primary product surface — IDE shell: Library (Agents / Packs / Proofs), Pipelines canvas, Swarms, Runs · Trust, System, optional Chat
• Bound Agent loadout (packs + proof profile + pack_configs), Test under loadout, Bind API
• Official packs (v0.1): Redaction, Document Processing, AI Governance
• Proof catalog tiers (structural · attestation · zk · vertical:*) and honest fail-closed claims
• Swarm definitions API + Lab swarm run (sequential MVP)
• Pipeline compose, Save, Play → jobs; HITL when awaiting approval
• Lab tools · skills · MCP — sandboxed built-in tools, skill instruction bundles, local stdio MCP host with lab-echo smoke server (/api/v2/lab/*)
• Optional Ollama chat (local LLM; not required for pack/pipeline runs)
• Product health check: python -m scripts.verify_finish_complete
• Docs: LAB-USER-GUIDE.md, PACK-VERTICAL.md, MIGRATION-v1.6.md, BOUND-AGENT.md, SWARM.md

Changed

• Product center is Agent + Pack + Proof → Pipeline → Swarm (Lab-first IDE)
• Desktop installers remain the primary operator path; source tree is classic monorepo layout
• Independent verification treats prover result "VALID" as success
• Poseidon / apxv-zk binary resolution hardened for long-lived API servers
• Website and README aligned to Lab + Official packs v0.1 + tools/skills/MCP honesty
• Version strings and publish defaults updated to 1.6.0

Fixed

• Attest path reliability when provers are built (governance + entity Groth16)
• Agent studio Test with structural proof profiles (evaluation from run_trace)
• Multi-agent proof profile requirements when agents disagree on proofs
• Lab operator key load on packaged desktop: load from engine operator-key-hint (and Tauri filesystem fallback); no longer depends on Vite-only /api/local/bootstrap-key
• Desktop upgrade runtime refresh: on launch, re-sync agents/, scripts/, packs libraries, and provers from the installer bundle when .apxv-runtime-version changes — preserves managed/ (keys, store, audit). Fixes upgrades that left a new shell talking to an old API (missing Lab studio routes)
• Onboarding sign-in verifies the key against /api/v2/system/status before entering Lab (clear 401 guidance)

Notes

• Dual-track entity ZK via Official Redaction Pack (v0.1)
• Optional operator-owned keys: python -m scripts.apxv_bootstrap (doctor may report vendor keys / degraded until then)
• Structural Lab works without a full ceremony
• Docker / shared images may report health=degraded with vendor_vk_detected until the instance runs operator bootstrap — Lab and pack demos still run; sovereign status is honest, not cosmetic
• Windows MSI may require elevation for all-users install; per-user install: msiexec /i APXV_1.6.0_x64_en-US.msi ALLUSERS=2 MSIINSTALLPERUSER=1 — NSIS setup is the simpler per-user path
• Linux deb/AppImage built for 1.6.0 (WSL/Ubuntu amd64 packaging); GUI launch best verified on a Linux desktop session

Ship artifacts (when release is published)

• APXV_1.6.0_x64_en-US.msi, APXV_1.6.0_x64-setup.exe (Windows)
• APXV_1.6.0_amd64.deb, APXV_1.6.0_amd64.AppImage (Linux amd64)

APXV v1.5.0

Added

• Studio (/studio) — author Agents, Packs, and Proof Profiles; Save → Test → Promote
• Proof Studio — catalog predicates, intent compile, templates, promote to Workbench Proofs shelf
• universal-predicate-v1 Groth16 track — real prove/verify via apxv-zk when keys exist (scripts.setup_universal_zk)
• Workbench polish — freeform board, pan, resizable shelf/inspector, proof profile bind chip, linear order without wires
• Trust hub (/trust) — single entry to Verify, Audit, Governance
• Operator smoke: python -m scripts.smoke_operator_flow (Studio → promote → run + claim + fail-closed)
• UI e2e: e2e/endgame-full.spec.ts (nav, Studio, Workbench run, claim, Trust, Settings)
• Session restore banner on Workbench; Promote gate after successful Test (Force promote on error)
• Health banner: vendor-key degradation with copy-bootstrap + System health deep link
• docs/PROOF-STUDIO.md, docs/MIGRATION-v1.5.md, updated ui/docs/OPERATOR-GUIDE.md

Changed

• Product IA — Studio + Workbench + Runs + Artifacts + Trust + System + Settings (home redirects to Workbench)
• Pack wizard remains advanced at /packs?wizard=1; day-to-day authoring is Studio
• Jobs UI labeled Runs; empty states and CTAs point to Workbench
• Version strings and publish defaults updated to 1.5.0

Fixed

• Wrong “Open Studio” destinations (wizard vs Studio packs)
• Library CTAs that bounced without a pipeline id
• Shell page titles for Artifacts / nested Trust pages
• Workbench Run blocked by sticky status banner overlap
• Canvas freeform edges and kind-colored paths

Ship artifacts

• APXV_1.5.0_x64_en-US.msi, APXV_1.5.0_x64-setup.exe, APXV_1.5.0_amd64.deb, APXV_1.5.0_amd64.AppImage

APXV v1.4.0

Removed

• Legacy CLI shims — scripts/apx_*.py, scripts/run_apx.py, auditor/apx_verify.py, apx_demo.sh / apx_demo.ps1
• Pip entry points — run-apx, apx-serve, apx-ctl, apx-doctor, apx-verify-bundle, apx-onboard
• APX_* environment fallbacks — only APXV_* names are read (agents/env.py)
• Rust/Python compat aliases — resolve_apx_*, build_apx_*, resolve_apx_root, APXLocalServer
• Tauri legacy commands — start_apx_server, stop_apx_server, get_apx_server_status

Added

• docs/MIGRATION-v1.4.md — upgrade guide from v1.3.x
• Pack Studio authoring wizard — five-step flow (template → name → governance → activate → test run) at /packs?wizard=1
• Build your pipeline on-ramp — Dashboard and Pack Studio entry; copy notes full agent/step composer ships in v1.5
• Verify page — ?job= deep link from Jobs, recent completed jobs with artifacts, URL sync on artifact pick
• Integrity repair helpers — scripts/repair_integrity.py (audit chain rebuild + governance approval reconcile); branding migration for APX → APXV wording

Changed

• Operator docs, runbooks, and pack READMEs use canonical apxv_* / APXV_* only
• Default entity ZK bootstrap — normalization + threat removed from ENTITY_CIRCUITS, sovereign keygen, and shipped rust/apxv-zk/keys/ (6 entity circuits; attest path for official packs unchanged)
• docs/cryptography/CIRCUITS.md — documents deferred normalization / threat modules (Rust sources retained)
• Onboarding / setup — honor ?redirect= after connect; distinguish API unreachable vs missing operator key; health wait on browser onboarding; inline invalid-key feedback
• Jobs — status-filter empty states, list errors as alerts, stale job deep-link recovery
• BUILD-YOUR-FIRST-PACK links on Setup, Onboarding, Jobs, Pipeline, and Verify empty states
• QA / bug sweep — 401 session recovery, sidebar typed-route resets, pack deep links (?pack=), governance/system/proposal error states, onboarding redirect preserves search params
• Branding — user-facing product name is APXV only (no bare APX / APXV1 in UI shell or seed governance copy)
• Version strings and publish defaults updated to 1.4.0

Fixed

• Pack wizard Open Governance uses in-app navigation (no 404 against the API port)
• Governance seed and library markdown — "APX agent" / "APX-governed" → APXV wording
• LLM reasoner default system prompt uses APXV

Ship artifacts

• APXV_1.4.0_x64_en-US.msi, APXV_1.4.0_x64-setup.exe, APXV_1.4.0_amd64.deb, APXV_1.4.0_amd64.AppImage

APXV v1.3.3

Hotfix completing v1.3.2 desktop server lifecycle on Windows — start, stop, restart, and quit must leave a single predictable listener on :8741.

Fixed

• Windows Python discovery for desktop spawn — resolve_python_executable() probes py, %LOCALAPPDATA%\Python\..., and %ProgramFiles%\Python\... instead of falling back to a broken Store stub; bootstrap and apxv_serve use the same resolver.
• Orphan listener reclaim — start_apxv_server kills foreign processes on :8741 (e.g. after force-quit) before spawning a managed listener.
• Settings server controls — Start / Stop / Restart no longer pass a literal %LOCALAPPDATA% path; desktop resolves the real install root (same as auto-start on launch). Surfaces errors when Tauri commands fail; warns if port :8741 stays free after a start attempt.
• Windows lifecycle gate — scripts/pr2_server_lifecycle_verify.ps1 (parity with Linux pr2_server_lifecycle_verify.sh).

Changed

• Version strings and publish defaults updated to 1.3.3.

APXV v1.3.2

v1.3 series stabilization — operators on Windows and Linux can connect, run jobs, and read markdown artifact reports without fighting the API key, server lifecycle, or raw JSON.

Fixed

• Linux desktop jobs — runPipeline and createUpload use resolveFetch() (Tauri HTTP plugin) instead of browser fetch, fixing immediate "job failed" on pipeline submit.
• Server lifecycle — desktop server.rs kills process trees on stop/quit (Windows taskkill /T, Linux process groups + fuser), waits for :8741 to release, exposes managed vs external listener status, adds Restart server in Settings.
• Onboarding / API key — auto-discover OPERATOR-KEY-*.txt (desktop filesystem or /api/v2/system/operator-key-hint), auto-fill Connect step, copy/reload actions, inline Test connection on Setup.
• Jobs UI freshness — SSE events patch react-query cache directly (no refetch lag), optimistic queued row on pipeline submit, faster stream poll + reconnect backoff, 2s polling fallback when live stream unavailable.
• Artifact reports — new Report tab renders a markdown summary; optional Download report (.md) for the full artifact report.

Added

• Pack Studio on-ramp — “Build your first pack” panel with one-click Duplicate reference pack, create-from-template shortcuts (reference / minimal), tutorial and catalog links; reference pack detail warns against editing the official pack.
• APXV™ trademark notices — README, NOTICE, desktop window title, operator console branding, website hero/footer.
• Downloads hub — docs/DOWNLOADS.md, README Downloads section, website Download section — all pointing to releases/latest.

Changed

• Operator console polish — clearer Connect banner (Settings + retry actions), actionable API errors, Jobs empty state Run a pipeline CTA, structured server status in Settings, bootstrap step progress, About APXV™ in Settings.

APXV v1.3.1

Desktop connectivity hotfix — operators can Connect and use Jobs on Windows and Linux without manual API patching.

Fixed

• Linux desktop Connect — Load failed when pairing operator key; WebKitGTK blocks HTTPS UI → HTTP API (tauri.localhost → 127.0.0.1:8741). API calls now use tauri-plugin-http (Rust), bypassing mixed-content restrictions.
• Jobs live updates — SSE /api/v2/jobs/stream missing CORS headers; showed Connecting… · Failed to fetch while pipelines still ran.
• Windows server pile-up — duplicate apxv_serve on :8741 after relaunch; spawn real python.exe, skip start if port reachable, stop all listeners on Quit.
• Connect flow — setup navigation after Connect; visible Quit on setup; CORS origins for Tauri desktop webview.

Added

• scripts/patch_jobs_stream_cors.py — in-place patch for v1.3.0 runtime trees (SSE CORS only; Linux Connect still needs 1.3.1 desktop build).

Chore

• Ship artifacts: APXV_1.3.1_x64_en-US.msi, APXV_1.3.1_x64-setup.exe, APXV_1.3.1_amd64.deb, APXV_1.3.1_amd64.AppImage

APXV v1.3.0

[1.3.0] - 2026-07-09

Platform rename, sovereign local trust, desktop app, Pack Studio, and API v2. No Groth16 circuit semantic changes since v1.1.0 - each deployment runs its own trusted setup ceremony.

Added

• Sovereign bootstrap - python -m scripts.apxv_bootstrap; managed/config/install.json with sovereign_setup and vk_hashes (11 circuits)
• Desktop app - Windows MSI/NSIS and Linux deb/AppImage (Tauri); first-launch bootstrap wizard; system tray
• REST API v2 - /api/v2/* (Pack Studio, jobs SSE, governance, uploads); v1 endpoints retained with Deprecation: true, Sunset: v1.4
• Pack Studio - create, clone, activate, and run packs from the operator console
• Operator console - React + Tauri UI over API v2 (pipelines, artifacts, verify, governance)
• Production profile - Ollama + Vosk or explicit disable; no simulated LLM/voice on operator paths
• Install paths - install-full.ps1 / .sh (native sovereign), install-docker.* (binaries only, keys on volumes), INSTALL-USER.md for desktop
• Migration guide - MIGRATION-v1.3.md, SOVEREIGN-SETUP.md
• Vendor key guard - apxv_doctor rejects pre-v1.3 baked VK hashes (migration blocklist)
• Governance seed specs in desktop/Linux payloads (rule1, workflow1, knowledge1)

Changed

• Platform rename - apx -> apxv (Python package, CLI, Rust binaries, env vars APXV_*, SQLite apxv.db, agent IDs APXV-AGENT-*)
• Docker image - service apxv; ships prover binaries only (no baked proving keys)
• Legacy shims - apx_serve, apx_ctl, apx_doctor, run_apx warn and delegate to apxv_* (removed in v1.4)
• Verifier bundle - export name apxv-verifier-bundle (VK bytes unchanged since v1.1.0)
• Operator-facing docs and site aligned to v1.3 sovereign story; deprecated Control Plane branding removed from UI

Fixed

• Linux desktop build (WSL rsync/staging); governance seeds and docs/internal pruning in installer payloads
• install-docker.ps1: suppress Docker Compose v2 progress stderr on Windows
• Desktop smoke: localhost bind for apxv_serve during Tauri validation

Documentation

• New: SOVEREIGN-SETUP.md, INSTALL-USER.md; updated QUICKSTART, DOCKER, AIR-GAP, MIGRATION-v1.3, OPERATOR-GUIDE, GitHub Pages site
• Public-facing audit gate: 290+ parametrized checks (docs, web UI source, desktop payload when staged); 756 pytest tests (1 optional Vosk skip)

Chore

• Ship artifacts: APXV_1.3.0_x64_en-US.msi, APXV_1.3.0_x64-setup.exe, APXV_1.3.0_amd64.deb, APXV_1.3.0_amd64.AppImage
• macOS DMG deferred to follow-up release

v1.2.5

[1.2.5] - 2026-07-03

Final v1.2.x consolidation - operator polish and install reliability. No verifier VK or circuit changes since v1.1.0. No APX->APXV renames (planned for v1.3.0).

Fixed

• install-docker.ps1: suppress benign docker rm -f apx-v1 stderr on Windows when container already removed (F-018)
• Document pack demo: default batch uses explicit fixture list - stray files in examples/inputs/batch/ ignored
• verify_attestation --real-zk: suppress benign subprocess RuntimeWarning on Windows (exit code matches verification)

Added

• BYO ML backend: optional APX_DEV_WARNINGS=1 surfaces malformed entities[] at dev time (not ZK-proven)

Changed

• Linux/WSL docs and examples: canonical python3 / venv guidance; Windows contributor notes in CONTRIBUTING

Documentation

• RUNBOOK-OPERATIONS: expanded audit chain-break recovery steps
• DOCKER.md: Windows second-install behavior
• Install script banners and GitHub Pages site aligned to v1.2.5 (356 tests)

No verifier VK or circuit changes since v1.1.0.

APXV1 v1.2.2

[1.2.2] - 2026-07-02

Operator clarity and install parity patch. No verifier VK or circuit changes since v1.1.0.

Fixed

• install-docker.ps1 removes stale apx-v1 container before docker compose up -d (parity with .sh)

Added

• Audit integrity diagnostics: distinguish corrupt log lines vs hash-chain break in apx_doctor, apx_ctl integrity, and /health
• Upgrade runbook: recovering degraded health; API key hints for in-place upgrades from v1.2.0

Changed

• /health reports per-audit-log summary (chain_valid, corrupt_line_count) when integrity is degraded

Documentation

• QUICKSTART, LOCAL-API, DOCKER, BUILDING, RUNBOOK-UPGRADE, RUNBOOK-OPERATIONS, website, and CONTRIBUTING updated for v1.2.2

Chore

• GitHub release template (ASCII-only); verifier bundle asset on release
• Install script banners and GitHub Pages site aligned to v1.2.2 (352 tests)

No verifier VK or circuit changes since v1.1.0.

───

Verifier asset: attach apxv1-verifier-bundle-v1.1.0.zip (same VKs as v1.1.0 / v1.2.0 / v1.2.1).

APXV1 v1.2.1

APXV1 v1.2.1

Stability and operator-experience patch on v1.2.0. No verifier VK or circuit changes since v1.1.0 - existing verifier bundle assets remain valid.

Fixed

• Audit log file locking; corrupt-line tolerance (health degrades instead of crashing /status)
• API key hint files (managed/config/OPERATOR-KEY-*.txt)
• Hot-reload API keys without restarting apx_serve
• Docker install removes stale apx-v1 container automatically
• Configurable APX_LLM_TIMEOUT_SECONDS (default 120s)
• Document pack tests use isolated fixtures; API tests use ephemeral port

Changed

• datetime.utcnow() replaced with timezone-aware UTC in core agents, audit logger, and artifact provider

Documentation

• README, CHANGELOG, QUICKSTART, LOCAL-API, DOCKER, BUILDING, website, and examples updated for v1.2.1

Tests

343 passed, 1 skipped.

Quick start

./scripts/install.sh          # Windows: .\scripts\install.ps1
./scripts/apx_demo.sh --pack all

Docs: CHANGELOG | QUICKSTART | Site