v2.3.0 — The RC That Held

v2.3.0 — The RC That Held

v2.3.0 is the exact v2.3.0-rc.3 candidate promoted to stable after community testing. Community feedback validated the candidate and made the release boundary clear.

Provenance: the v2.3.0 tag peels to RC3 SHA d299eb8a4009f770a605174410b0cbacc5c7524f. This stable release contains those RC3 bytes only, not later changes on main.

Upgrade now

brew upgrade gentle-ai

Run gentle-ai sync after upgrading. Replacing the binary does not refresh the managed runtime assets already installed for your agents.

What the RC3 evidence proved

SDD runs the role you assigned

The executor contract is now stated before any delegation instruction in all nine delegate_only skills. An SDD phase agent no longer commits to delegating before learning that the executor exception applies to it.

Review results scale and retain their meaning

• Reviewer context for large candidates is prepared once and reused. Candidates beyond the evidence limit now receive a bounded refusal that names the real limit and actionable next step.
• An approved receipt survives the staged-to-commit representation change when the base tree, candidate tree, changed paths, and digest are identical. Overlay reviews remain deliberately separate.
• Negotiated STATUS can forecast the current step beside its transition, replacing an avoidable try, error, fix, retry loop with an explicit forecast.

Runtime behavior matches the environment

• OpenCode-bound review starts now record the real OpenCode runtime identity in their consent envelope.
• WSL rejects Windows npm shims when resolving CodeGraph, and installation rollback includes the affected plugin state.
• Engram resolves the correct project identity from linked worktrees, so observations remain attached to the intended project.
• A maintainer-authorized provider recovery remains authorized instead of being overwritten by defect handoff.
• Windows reliability improved through the plugin rollback fix and a split for the oversized test shard.

Known issues in these exact RC3 bytes

These are the limitations recorded for the promoted RC3 candidate. They describe release scope, not the current state of every linked issue or every runtime.

• Native admission can still reject some non-empty reviewer findings (#2482) and two of four lenses on scope_changed successors (#2618).
• sdd-verify-validate rejects every requirements value against an Engram store (#2500).
• The managed OpenCode permission profile can deny review.start (#2615) and still references an undo-checkpoint operation that does not ship (#2595).
• On Windows, a NUL attributes-file quirk can block review start before any mutation (#2358).
• A corrupted authority edge still has no sanctioned quarantine path (#2014). The repository-wide blocking it originally caused is fixed; the stuck edge remains a design question.
• HIGH-tier corrections can dead-end after conflicting evidence (#2623).
• Claude Code has unit and conformance coverage but no organic terminal-review proof. #2692 and #2566 remain the evidence boundary for that path.

Install and integrity

For an existing Homebrew installation, use the upgrade command above. For a first Homebrew install:

brew install gentleman-programming/tap/gentle-ai

If Homebrew is not your path, install the tagged Go module and then refresh the managed assets:

go install github.com/gentleman-programming/gentle-ai/v2/cmd/gentle-ai@v2.3.0

The release includes four Darwin/Linux .tar.gz archives: darwin_amd64, darwin_arm64, linux_amd64, and linux_arm64. checksums.txt contains their SHA-256 digests, and checksums.txt.minisig is the detached Minisign signature for that manifest. Verify the signed checksum manifest before using a raw archive.

The Windows stable binary is intentionally omitted under the existing Authenticode policy.

Community evidence

This stable release is the RC3 candidate that community testing held to account. Keep reporting real runs, especially full reviews in the runtime you use. Evidence is how the next release gets better.