gentle-pi v2.3.0

gentle-pi v2.3.0

Carries the gentle-ai v2.5.0 binary, the first stable release of receipt-driven development. The package-local pin moves from v2.4.0 (the last published gentle-pi, 2.2.0) straight to it; the v2.5.0-rc.3 prerelease pin (2.3.0-rc.1) was never published to npm.

What's new

• Receipt-driven development is stable, and Pi speaks the stable contract. Pi negotiates gentle-ai.review-integration/v2 at capabilities v2.4 and decodes start/v4, status/v6, and consent/v3, with each minor carrying exactly the requirement set its provider contract defines (#487, #506, #527). RDD stays opt-in: gentle-ai review mode enable --scope global.
• A review that closes where proof ends. Pi relays the atomic lifecycle (#386), consumes last-event closure (#411), and reaches parity with the acknowledgement lifecycle: the approving capture returns one acknowledgement, Pi relays it, and only that exact invocation burns (#478, #490, #513). The delivery command gates are retired; delivery follows ordinary repository policy.
• Provider-issued continuations run verbatim. The start/v4 re-entry, correction status continuations, and the intended-untracked selection handoff execute exactly what the provider printed (#470, #534, #537).
• SDD Research and SDD status v2. The sdd-research executor and its pre-proposal gate (#423); the gentle-ai.sdd-status/v2 identity (#467); residual RDD pre-gates removed from SDD (#494); the Pi SDD-to-RDD path is continuous (#538).
• Native closed-choice selector and the Herdr bridge. Closed choices route through a native Pi selector (#452); RPIV questionnaire blocking bridges to Herdr (#461, #482); guarded commands emit a permission lifecycle and coalesce overlapping Herdr confirmations (#458, thanks @Andiveli).
• Quiet tools for Gentle AI commands. Bounded cards, Gentle AI redaction, the command lifecycle, composed commands, and every Gentle AI tool call render compactly (#393, #418, #425, thanks @decode2).
• Orchestrator edit surfaces. The parent supplies the worker's allowed edit surface and enforces it (#353, #454, #485).
• Themes. Gentleman-Sexy and Gentleman-Cute, with a hue-separated syntax palette (#410, #413, #434). The gentle-pi trademark policy is written down.

Breaking changes

• SDD slash commands carry the gentle-sdd- prefix (#526), matching the gentle-ai v2.5.0 rename.
• Approval is terminal. Once a review on v2.5.0 approves and its acknowledgement burns, there is no receipt to validate. Do not run a downgraded binary against a repository whose review authority v2.5.0 has written.

Upgrade notes

• Install with pi install npm:gentle-pi@2.3.0.
• After upgrading, restart the Pi process and run /gentle:install-sdd --force to refresh the installed agent assets; the SDD command rename retires the unprefixed files only on that refresh.

What was fixed

• Package-local Gentle AI pin bumped to v2.5.0: INSTALLER_VERSION, the four signed-archive asset digests and their extracted-binary digests, the Windows Go SumDB module checksum and source tag, and one NATIVE_CLI_CONTRACTS row ground-truthed against the published binary. Darwin and Linux are back on signed .tar.gz archives verified against the release's Minisign-signed checksums.txt; the raw-binary asset form and the gentle-pi mirror release exist only for prerelease pins.
• Consent is bound, not assumed. Consent choice agent bindings are validated (#496), stale consent recovers through native status (#450), stale bindings are named and admission refusals surface (#527), START diagnostics survive the consent round-trip (#489), and committed status selectors and reopened untracked selectors are preserved (#437, #495).
• Native RECOVER is separated from the legacy RESET challenge (#350); plain finalize advisory findings are accepted (#399).
• Host relay hardening. Restart parity, organic provider role vectors, bounded timeouts, and relative PATH normalization (#331, #374, #328, thanks @barbatdev; #368). On Windows, collect inputs serialize once, go install is bounded separately, and Pi launches through the host entry (#528).
• Model routing and SDD preflight. Saved model routing fails closed on invalid state (#398, #408, @decode2); SDD preflight resolves its choices before prompting (#403, @decode2).
• Skills and assets. Subagents no longer minify code to chase the review budget (#530); duplicate package discovery is prevented (#424); dangling rule sources are removed (#488, @barbatdev); the prompt budget is path-independent (#416).

Verification

• Exact release SHA 6c391ad9e6fc2e4ca5931a7c22eaf08b97412162.
• pnpm test on the release commit: 1163 tests, 1162 passing, zero failures, one expected skip; the provider contract mirror check and the runtime harness passed. The suite is now green on macOS as well as Linux (#542).
• Package verification passed with 162 required files and 68 exact byte-identical contract artifacts.
• node scripts/test-packed-runner.mjs: packed package E2E passed (gentle-pi 2.3.0; Gentle AI 2.5.0) — pack, npm install with postinstall from the real signed archive, and negotiation with the installed binary through the packed decoder.
• The v2.5.0 checksums.txt Minisign signature was verified out of band (trusted comment repo=Gentleman-Programming/gentle-ai;tag=v2.5.0); archive digests match it and binary digests were computed from the extracted executables.
• The release review disposition is disabled/unmanaged: no review receipt was issued, validated, or implied.

Full changelog: v2.2.0...v2.3.0