v3.63.0

What's Changed

• feat(privacy): refuse personal data and secrets before they reach history by @HeadronLayer in #451
• fix(land): replay before the push, catch a moved split early, keep fixtures off the repo by @HeadronLayer in #452
• fix(impact,verify): keep the impact store under its cap, keep lessons and field records honest by @HeadronLayer in #453
• fix(receipt): keep fixtures off the real store, lead with the current verdict by @HeadronLayer in #454
• fix(verify): a status word is not an alarm, so a failed gate blames its real line by @HeadronLayer in #455
• fix(mind): a pass rate counts only receipts that verify by @HeadronLayer in #456
• fix(land): a merged lane drops its rescue tags by @HeadronLayer in #457
• claude/receipt time proves by @HeadronLayer in #458
• fix(init): install the commit hook that init promises by @HeadronLayer in #459
• claude/report to proof by @HeadronLayer in #460
• docs(entry): state what Headron is, needs and writes before any step by @HeadronLayer in #461
• feat(receipt): a receipt can name who wrote it by @HeadronLayer in #462
• fix(gates): a project's own tool runs before a global one by @HeadronLayer in #463
• claude/go tables by @HeadronLayer in #464
• feat(data): a schema can pin a file's exact bytes by @HeadronLayer in #465
• feat(agents): Gemini CLI, goose, Zed, Aider and Devin CLI enter here by @HeadronLayer in #466
• fix(bench): the handoff arm is told what each place proves by @HeadronLayer in #467
• claude/native names by @HeadronLayer in #468
• feat(examples): pinned toolchains install through one tested path by @HeadronLayer in #469
• claude/compact assets by @HeadronLayer in #470
• claude/module map by @HeadronLayer in #471
• refactor(ci): the pre-push hook installer moves into the tool, with its first test by @HeadronLayer in #472
• fix(orphans): a file name in a comment is a pointer, and an absent one fails by @HeadronLayer in #473
• chore(docs): one repeated sentence folds into its heading by @HeadronLayer in #474
• perf(check): repeated reads and repeated parsers leave the contract check by @HeadronLayer in #475
• refactor(pointers): every name in the contract that points at something is a row by @HeadronLayer in #476
• refactor(reflex): one reading of what a forbidden-call row covers by @HeadronLayer in #477
• chore(entry): two rosters the entry repeats leave the agent's first read by @HeadronLayer in #478
• perf(check): one settled read per file, and two forbidden-call rows keep it by @HeadronLayer in #479
• docs(edit-route): name the one child process the edit route starts by @HeadronLayer in #480
• perf(check): one walk, one sort by class, and the scanner refused as blind by @HeadronLayer in #481
• test(edges): every enforcer has a case naming it, and the ceiling is zero by @HeadronLayer in #482
• fix(check): a file that does not load is reported, not a traceback by @HeadronLayer in #483
• fix(shell,mind): shell files pass their own gate; swallowed errors narrowed by @HeadronLayer in #484
• fix(gates): per-project runners run in their project; polyglot benchmark on 8 repositories by @HeadronLayer in #485
• fix(gates): a formatter runs where the repository adopts it, and a tool skips a dialect it cannot read by @HeadronLayer in #486
• feat/claim graph by @HeadronLayer in #487
• feat(adaptations): a change that says it made Headron better carries its proof by @HeadronLayer in #488
• fix(check): a consumer checkout is not failed on Headron's own contract by @HeadronLayer in #489
• docs/compact entry by @HeadronLayer in #490
• fix(gates): a compile writes nothing into the checkout, and a file a build names is left to that build by @HeadronLayer in #491
• feat(propose): a loop drafts the revision outside the tree, and a forbidden_calls row keeps it from landing by @HeadronLayer in #492
• fix(propose): the read-only route drafts nothing, and the README names the belief verbs by @HeadronLayer in #493
• docs(ledger): sync published field ledger to 940 verifications and 394 landings by @HeadronLayer in #494
• feat(adapters): add Cline and Windsurf runtime adapters and tighten entry paths by @HeadronLayer in #495
• feat(graph): add distance reasoning, runtime adapter nodes and robust build-isolation enforcement by @HeadronLayer in #496
• docs(mcp): clarify private hosted Mind MCP endpoint alongside local stdio server by @HeadronLayer in #497
• fix: strengthen graph links and replay scheduling by @HeadronLayer in #498
• perf: split mutation guards into isolated shards by @HeadronLayer in #499
• fix: clarify optional linter diagnostics by @HeadronLayer in #500
• Fix no-reply domain boundary in privacy guard by @HeadronLayer in #501
• codex/github topic alignment by @HeadronLayer in #502
• Remove duplicate receipt summary mapping by @HeadronLayer in #503
• Reject ambiguous keys in receipts by @HeadronLayer in #504
• Keep consumer verification and entry guidance current by @HeadronLayer in #505
• Name Headron-Harness in product guidance by @HeadronLayer in #506
• Keep MCP session alive after invalid JSON values by @HeadronLayer in #507
• Correct consuming guide for agent setup by @HeadronLayer in #508
• Correct root test guidance and atlas metadata by @HeadronLayer in #509
• Support multilingual lexical lesson matching by @HeadronLayer in #510
• Add localized machine entry guides by @HeadronLayer in #511
• Harden model bundle verification and public metadata by @HeadronLayer in #512
• Clarify MCP tool discovery by @HeadronLayer in #513
• codex/consumer evidence by @HeadronLayer in #514
• Require a base commit for passing receipts by @HeadronLayer in #515
• Run complete verification for GitHub App checks by @HeadronLayer in #516
• feat(actions): add Headron Agentic Code Verification GitHub Action by @HeadronLayer in #517
• Route Python dependents of deleted consumer files by @HeadronLayer in #518
• Scope plugin skill mutation probes by @HeadronLayer in #519
• Make MCP refusals actionable and reuse search counts by @HeadronLayer in #520
• feat(agents): support isolated task-scoped handoffs by @HeadronLayer in #521
• fix(actions): never glob-expand the action's args input by @HeadronLayer in #522
• feat(action): activate hosted Mind planning with a Mind key by @HeadronLayer in #523
• fix: finish action and verification review findings by @HeadronLayer in #524
• docs: document the GitHub Action and the hosted MCP's public and keyed tools by @HeadronLayer in #526
• fix/locked interpreter by @HeadronLayer in #527
• feat/datakit formulas by @HeadronLayer in #528
• ledger: record host-environment, masked-count, model-claim and handshake shapes by @HeadronLayer in #529
• headron-mcp: answer initialize with a JSON-RPC error on a bad root by @HeadronLayer in #530
• Release Headron 3.63.0 by @HeadronLayer in #531

Full Changelog: v3.62.0...v3.63.0

v3.62.0

Reuse now sees the interpreter, its prefix and each gate's declared environment, so half a shard's PASS is never reused as the whole suite. Unpinned uvx specs and malformed env names are refused.

Install: pip install headron-software==3.62.0

Full changes: v3.61.0...v3.62.0

v3.61.0

What's Changed

• docs: place Headron title beneath banner by @HeadronLayer in #371
• feat(mind): implement Director pattern with embedded instant search and MCP tools by @HeadronLayer in #372
• Refresh README banner artwork by @HeadronLayer in #373
• Refine Headron banner framing by @HeadronLayer in #374
• Cache retrieval vectors for repeated searches by @HeadronLayer in #375
• fix(ci): use resolved runner for temporary venv in ci-local by @HeadronLayer in #376
• Enforce repository cache hygiene by @HeadronLayer in #377
• Release Headron 3.61.0 by @HeadronLayer in #378

Full Changelog: v3.60.1...v3.61.0

v3.60.1

What's Changed

• claude/state graph reland by @HeadronLayer in #342
• enforce: check files on a thread pool; THEA_ENFORCE_WORKERS=1 is the serial path by @HeadronLayer in #343
• ci: cidrift names every script CI runs as a done-set gate or a CI-only script by @HeadronLayer in #344
• enforce: pytest runs with its cache off, so a check does not write into the tree by @HeadronLayer in #345
• feat: headless runner with explicit isolation mode by @HeadronLayer in #346
• verify: a gate reuses its PASS while its declared inputs are unchanged by @HeadronLayer in #347
• fix(gates): accurate 675 planted count, enforce parallel litter, and slot inheritance by @HeadronLayer in #348
• docs: update companion runtime reference to thea-desktop by @HeadronLayer in #349
• chore(identity): align repo URLs to HLIntel/TheaSoftware and normalize companion runtime to TheaOS by @HeadronLayer in #350
• chore(packaging): align package and PyPI references to TheaSoftware and modernize metadata by @HeadronLayer in #351
• fix(ci): repair mutation suite pins, verifyrun runner, and agent budget cases by @HeadronLayer in #352
• perf/clean annotations and strengthen edges by @HeadronLayer in #353
• fix(app): prepare checked-out heads before verify by @HeadronLayer in #354
• docs(ledger): record patch operation conflict by @HeadronLayer in #356
• fix(harness): pin GitHub App checkout case by @HeadronLayer in #355
• fix: harden consumer readiness harness by @HeadronLayer in #357
• fix: align mutation shard case pins by @HeadronLayer in #358
• build(deps): bump the github-actions group with 2 updates by @dependabot[bot] in #359
• feat(mind): implement Mind orchestration API and integrate CLI commands by @HeadronLayer in #360
• feat(verify): streamline parallel execution with micro-shredding, divergent spacing, and live telemetry by @HeadronLayer in #361
• fix: restore CI type checks and receipt gathering by @HeadronLayer in #362
• fix: refuse forced pushes during landing by @HeadronLayer in #364
• fix: refresh search cache after index rebuild by @HeadronLayer in #363
• headron migration by @HeadronLayer in #367
• feat(identity): redesign proof flow to navy aesthetic, update banner, fix CI and PyPI packaging by @HeadronLayer in #368
• fix(release): prepare Headron package release by @HeadronLayer in #369
• fix(release): use valid SBOM action and retry workflow by @HeadronLayer in #370

Full Changelog: https://github.com/HLIntel/Headron/commits/v3.60.1

v3.60.0

What's Changed

• docs: refine README hero by @HeartlandIntel in #273
• fix: rename HeartlandIntel → HLIntel across server.json and README.md by @HeartlandIntel in #274
• feat(verify): connect changed impact evidence by @HeartlandIntel in #275
• docs(agents): standardize Claude and IDE delivery roles by @HeartlandIntel in #277
• feat(verify): runtime test-impact map; verify --changed runs only reached groups by @HeartlandIntel in #278
• feat(onboarding): merge onboarding into main by @HeartlandIntel in #281
• feat(onboarding): add one-command repository setup by @HeartlandIntel in #279
• feat: rename TheaOS integration to Thea Desktop by @HeartlandIntel in #276
• docs: add HD Thea workspace hero by @HeartlandIntel in #282
• ci: stage expensive validation jobs by @HeartlandIntel in #283
• Config/relax thea verify gate by @HeartlandIntel in #284
• Update README.md by @HeartlandIntel in #285
• docs/readme badges verification by @HeartlandIntel in #286
• docs: hero shows Thea Desktop banner; header hierarchy and green Desktop mark by @HeartlandIntel in #287
• Add decision engine, pipeline, reflex modules and update contract by @HeartlandIntel in #288
• Byte-budget thea's own state and caches by @HeartlandIntel in #289
• Add deterministic agent proof records by @HeartlandIntel in #290
• ledger: a_hook_that_runs_a_deleted_script 3rd sighting (default path left behind by a clone move) by @HeartlandIntel in #291
• docs: README overhaul (Thea Desktop preview, proof flow, failures) by @HeartlandIntel in #292
• docs: README hero shows the Thea Desktop engineering banner by @HeartlandIntel in #295
• mcp: prompts/get refuses a missing required argument (-32602) by @HeartlandIntel in #301
• docs: failures-caught wording reads for a consumer by @HeartlandIntel in #298
• readme: top-to-bottom rewrite; drop contested A/B figures by @HeartlandIntel in #300
• claude/thea mcp marketplace by @HeartlandIntel in #296

Full Changelog: v3.59.0...v3.60.0

v3.59.0

What's Changed

• Clarify public productization rights and private operational boundaries by @HeartlandIntel in #261
• Consolidate release ownership and harden worktree cleanup by @HeartlandIntel in #262
• codex/pr263 push by @HeartlandIntel in #267
• Speed example exercises with bounded parallelism by @HeartlandIntel in #263
• docs: add last updated timestamp to README.md by @HeartlandIntel in #265
• build(deps): bump github/codeql-action/upload-sarif from 4.38.3 to 4.39.0 in the github-actions group by @dependabot[bot] in #268
• Merge HeartlandIntel-patch-1: Banner image and script updates by @HeartlandIntel in #270
• agents/add impact instrument and ratelimit failure mode by @HeartlandIntel in #272
• Merge codex/streamline-enhancements: Rename TheaOS to Thea Desktop by @HeartlandIntel in #271

Full Changelog: v3.58.0...v3.59.0

v3.58.0

What's Changed

• feat(declcheck): every path a workflow, hook or plugin executes must exist (3.58.0) by @HeartlandIntel in #260

Full Changelog: v3.57.1...v3.58.0

v3.57.1

What's Changed

• fix(release): zip the chat skill from models/chat (3.57.1) by @HeartlandIntel in #259

Full Changelog: v3.57.0...v3.57.1

v3.56.0

What's Changed

• feat(core): runtime-independent verification + GitHub App scaffold (consolidation) by @HeartlandIntel in #244

Full Changelog: v3.55.0...v3.56.0

v3.55.0

What's Changed

• land: a lane of this atlas re-execs its own branchstate, never judged as a consumer by @HeartlandIntel in #221
• slot: replace an inherited -p= in GOFLAGS, never append by @HeartlandIntel in #223
• slot: hand the command the caller's THEA_ROOT, not this install's by @HeartlandIntel in #225
• entry: a hosted agent or chat (thea tool attached) calls it and skips the first reply by @HeartlandIntel in #226
• readme: one "Measured, not claimed" section; refresh field figures by @HeartlandIntel in #228
• Trim outside tools: heavyidle.mjs and vaultlinks.py leave the repo by @HeartlandIntel in #219
• claude/compact root by @HeartlandIntel in #224
• atlas: theaos consumes thea per turn — brief, host calls, per-turn budget by @HeartlandIntel in #230
• slot: a second machine suite slot (THEA_SLOTS, default 2) by @HeartlandIntel in #227
• slot: size the machine slot by cores, withhold extras under load by @HeartlandIntel in #229
• claude/thea benchmarks product 709226 by @HeartlandIntel in #231
• claude/ci local by @HeartlandIntel in #222
• claude/upstream port line by @HeartlandIntel in #232
• agentbench: a task test runner that cannot start is NOT RUN, never 0 solved by @HeartlandIntel in #233
• knowledge: one JSON envelope and one flatten for both ledger sides (B08) by @HeartlandIntel in #234
• README headline proof; GitHub controls refreshed to measured state by @HeartlandIntel in #235
• hooks and gates: gitleaks, actionlint and zizmor in the done set; edit guard for generated files; lock drift in the edit hook; a refused gate seals a ledger row by @HeartlandIntel in #236
• Harden thea-mcp and verify: refuse slot, bound output, read undecided exits as NOT RUN by @HeartlandIntel in #237
• A second failure shape needs its own id (3.55.0) by @HeartlandIntel in #243

Full Changelog: v3.54.0...v3.55.0