Context Guard 0.2.1

Fixed

• Clarifications and session talk no longer pollute the contract. Bare progression phrases (继续, continue), meta questions (这个收尾具体要做什么, 是不是bug), and meta comments/objections are classified as session-layer talk and never become contract items — including as clauses inside otherwise actionable messages. Real instructions, prohibitions, and task titles are captured exactly as before; the classifier fails closed on uncertain phrasing.
• Rejected checkpoints no longer re-inject the same recovery packet. Recovery injection is content-deduplicated through a digest bound to the packet content, contract revision, and epoch. Resume, compaction, enablement transitions, new evidence, or a new contract revision still always re-remind.

Added

• /context-guard clear. Supersedes every pending requirement and acceptance under a CLEAR:<revision> sentinel (prohibitions are retained) and bumps the contract revision, so an empty-binding checkpoint can certify and Goal completion can proceed while the guard stays enabled. The command is replayed from the log like all other state.

Changed

• The Goal-completion gate is unchanged (no current certificate, no completion) and is now documented with its explicit remediation routes: /context-guard off after the user confirms completion, /context-guard clear, or a truthful update_goal(action=blocked).

See COMPATIBILITY.md for the supported grammar and LOCAL_ACCEPTANCE.md for release evidence and platform limits.

Context Guard 0.2.0

See the repository changelogs for the complete release record: CHANGELOG.md and CHANGELOG.zh-CN.md. This release adds cwd-attributed evidence subjects, expands the bounded certifiable command surface, improves recovery and checkpoint diagnostics, and preserves fail-closed handling for unsupported syntax.

dsh-context-guard 0.1.1

English

Highlights

• DSH Web foreground bash checks can now provide successful evidence when the pinned renderer completes cleanly without emitting an [exit code: 0] marker.
• Fail-closed boundaries are unchanged: background execution, negative terminal facts, unsupported command syntax, and the unverified generic shell alias still cannot certify completion.

Changes

• Clean foreground bash results are treated as success only when there is no error, timeout, sandbox denial, signal, interruption, or non-zero exit marker.
• Command parsing remains independent from execution outcome, so a successful unsupported command still receives no certifiable operation or subject.

Validation

• The release suite contains 106 tests, including 86 domain/core tests.
• The macOS candidate runtime replayed a genuine durable DSH Web log and certified the matching scope contracts; Windows native acceptance re-verified the existing bounded PowerShell write-plus-read model without expanding the Windows Bash claim.
• The exact release commit passed the full Ubuntu, macOS, and Windows CI matrix on Node.js 22 and 24 for both main and v0.1.1.

Full changelog

简体中文

重点

• 当前台 bash 检查在固定 DSH 渲染器中干净完成但没有输出 [exit code: 0] marker 时，DSH Web 现在也能派生成功证据。
• fail-closed 边界保持不变：后台执行、负面终端事实、不受支持的命令语法以及未经验证的通用 shell 别名仍不能认证完成。

变更

• 只有不存在 error、超时、沙箱拒绝、信号、中断或非零退出 marker 时，前台 bash 的干净结果才会判定为成功。
• 命令解析与执行 outcome 仍然分离，因此成功执行但语法不受支持的命令依旧不会获得可认证的 operation 或 subject。

验证

• 本版本包含 106 项测试，其中 domain/core 86 项。
• macOS 候选运行时重放了真实、durable 的 DSH Web 日志并认证匹配的 scope 合同；Windows 原生验收重新确认既有的受限 PowerShell 写入加独立读取模型，未扩张 Windows Bash 声明。
• 同一 release commit 在 main 与 v0.1.1 上均通过 Ubuntu、macOS、Windows × Node.js 22、24 的完整 CI 矩阵。

完整更新日志

dsh-context-guard 0.1.0

dsh-context-guard 0.1.0

The first public release of a task-contract and completion-certification layer for DeepSeek Harness.

Highlights

• Captures requirements, prohibitions, acceptance criteria, and later revisions with stable IDs.
• Derives bounded evidence from persisted DSH tool events and fails closed on unknown, stale, failed, or object-mismatched evidence.
• Requires method, operation, subject, surface, and independent state verification where the contract calls for them.
• Re-verifies certificates during replay and protects Goal completion and whole-task completion claims.
• Supports DSH resume, compaction recovery, HMR, slash commands, Code Mode dispatch evidence, and a bounded checkpoint tool.
• Uses an intentionally small, documented POSIX shell and PowerShell certification subset; unsupported syntax produces no certifying effect.

Verification

• 104 tests total, including 85 domain/core tests.
• GitHub Actions passed on Windows, macOS, and Ubuntu with Node.js 22 and 24 for both the release commit and annotated tag.
• Independent native real-model acceptance passed on macOS and Windows using clean public checkouts and isolated DSH homes.
• The accepted product implementation is ad8a610bf9b6b0fdee06a0fba5392d267d2ff327; the tagged successor ed8b25546158fcf695081fd2d554f80f2bdf8d31 changes release documentation only.

See the changelog, compatibility contract, and privacy boundary.

---

dsh-context-guard 0.1.0（简体中文）

这是面向 DeepSeek Harness 的任务合同与完成认证层的首个公开版本。

主要能力

• 使用稳定 ID 捕获 requirement、prohibition、acceptance criterion 及后续修订。
• 只从已持久化的 DSH 工具事件派生有界证据；未知、过期、失败或对象不匹配的证据均不能认证完成。
• 合同需要时，同时约束 method、operation、subject、surface 与独立状态验证。
• replay 时重新验证证书，并保护 Goal complete 与整任务完成声明。
• 支持 DSH resume、compaction recovery、HMR、slash command、Code Mode dispatch 证据和有界 checkpoint 工具。
• 只认证文档明确列出的精简 POSIX shell / PowerShell 子集；不支持的语法不产生可认证 effect。

验证

• 全项目 104 个测试，其中 domain/core 85 个。
• release commit 与注释 tag 均通过 Windows、macOS、Ubuntu × Node.js 22/24 的 GitHub Actions。
• macOS 与 Windows 均从公开仓库干净检出，在隔离 DSH home 中通过独立真实模型闭环验收。
• 已验收的产品实现为 ad8a610bf9b6b0fdee06a0fba5392d267d2ff327；tag 对应的 successor ed8b25546158fcf695081fd2d554f80f2bdf8d31 只更新发布文档。

详见 CHANGELOG、兼容性合同 与 隐私边界。