v0.1.62

Matrix v0.1.62: measured store footprint and honest verification verd…

v0.1.61

Matrix v0.1.61 — shared immutable agent artifacts and regenerable sof…

v0.1.60

Matrix v0.1.60: verified tools-free ACP roles and honest permission d…

v0.1.59

Governed typed run input

• Preserve inline text and PNG/JPEG images through the governed run/session/router path.
• Reject unknown/noncanonical JSON fields, duplicate keys and extra documents, including nested input.
• Bound image bytes, aggregate size, MIME and pixel dimensions; no URL fetch or filesystem attachment access.
• Hash the full payload and source metadata for idempotency; replay performs no new capability probe.
• Keep content admission inside run deadlines, terminal failure and cleanup. Manifests contain hashes and sizes, not image bytes.
• Native synthetic visual tests passed through Matrix → OpenCode → direct DeepSeek, with provider-confirmed model and strong cleanup.

Changed contracts are tested natively on Linux, macOS and Windows. Existing Windows workspace ownership/grant and drive-path projection limits are documented in the release ledger; they are not declared qualified by these tests.

No Vault schema change or data migration. External Hub/VPS consumer qualification remains separate.

v0.1.58

Readiness correction

• matrix doctor and matrix readiness now authenticate the local runtime probe with the existing SSOT matrix_api_key through the governed network contract. Authentication stays enabled; wrong credentials and unsupported backends remain visible, without anonymous retries.
• Credential-bearing JSON requests cannot forward their headers across origins through redirects. Same-origin redirects and credential-free fetching retain their expected behavior.
• Removes duplicate CLI report setup and exposes the existing header capability as a neutral public contract.
• Adds native network/runtime-check regressions to PAL on Linux, macOS and Windows.

No Vault migration or storage-schema change. Gemini availability is a local installation prerequisite; this release does not bundle or automatically install third-party agents.

v0.1.57

Protocol alignment

• ACP stable wire 1, schema 1.26.0: live notices and context compaction with detached neutral snapshots, ordered updates and explicit clear operations.
• Negotiated ACP v2 draft alpha.9: insertion acknowledgements, explicit foreground completion, partial-output failures, entity metadata patches and session-info clearing propagated to Matrix mirrors. Draft support is validated against subprocess fixtures; commercial v2 agent support is not implied.
• Validate filesystem, process and permission values before side effects. Malformed file writes cannot truncate existing content; approvals select only offered options. Provider extensions cannot override Matrix evidence identity.
• A2A specification 1.0.1, Go SDK 2.7.0: version checks, application/a2a+json negotiation, MIME input validation, trailing-JSON rejection, UTC timestamps, canonical ProtoJSON scopes and corrected native terminal-task errors.

A2A caller update

Raw HTTP callers must send A2A-Version: 1.0. JSON-RPC methods use the current PascalCase names (for example SendMessage); retired 0.3 aliases such as message/send are removed. Matrix SDK clients negotiate the version from discovery.

No Vault migration. Linux, macOS and Windows remain supported. Optional gRPC ingress, ACP Streamable HTTP/MCP-over-ACP and JWS signing/trust services are not advertised.

See protocol coverage for upstream pins, evidence and limits.

v0.1.56

Matrix v0.1.56: bounded lossless ACP text delivery

v0.1.55

Matrix v0.1.55: reliable ACP final delivery

v0.1.54

v0.1.54: correct asynchronous CLI submission and shell home output

v0.1.53

Matrix v0.1.53: portable sandbox capacity semantic filesystem and OTLP