clawock v0.1.4

Install from PyPI:

python -m pip install clawock==0.1.4

Fixed

• Harness-agnostic examples and the clawock-dsh skill now match the real
  validator. The tutorial taught --artifact decision=..., a six-field
  decision shape and a fixed .clawock/work/request.json path; the validator
  requires the artifact to be named decision.json, nine top-level fields
  (schema_version / workflow / decision_id / as_of / subject / evidence /
  debate / thesis / decision) and the <run_id>-scoped request file
  prepare actually writes. The examples were rewritten against the pack's
  decision.example.json and the whole prepare → decision.json → publish
  loop is verified end-to-end. (clawock-dsh npm package bumped to 0.1.4.)
• No more double-writer races on a missing brief. The 09:05 watchdog no
  longer queues a local re-run and the off-host fallback at the same time —
  two LLMs writing the same artifacts produced duplicate WeChat/Telegram
  pushes. The re-run is now evidence-gated (a run that ended OK today does not
  stack another queue entry).
• Report delivery gaps are now named. When a postflight sender dies
  mid-send (claim present, no completion marker), the watchdog says "WeChat
  delivery unconfirmed" out loud instead of silently only mirroring Telegram.
• User risk overrides settle the ledger. An overridden risk_rule cut is
  settled (execution.status=overridden_by_user) instead of accumulating as
  unknown forever and flooding the open queue when the override TTL expires.
• The 30-bar data-quality gate is restored. The short-history fallback now
  requires a registry listing_date within 45 days, so a mature name with a
  partial feed can no longer enter the universe with half a signal set.

Changed

• The AI watch list (智谱 / 迅策) now rides the brief's market bundle — the
  model boundary can actually read it — and its thresholds
  (opportunity_near_pct, early_no_chase_zscore) moved into
  add-alpha-policy.json as a single source shared with the intraday radar.
• Intraday slots fetch each code once per slot instead of three times
  (~540 → ~180 requests/day).
• Intraday push gating: opportunity/early-trend sub-state flips around a price
  threshold no longer retrigger a full push every slot.

npm

clawock-dsh@0.1.4 published to npm.

clawock v0.1.3

Install from PyPI:

python -m pip install clawock==0.1.3

Added

• Harness-agnostic decision contract. The workflow is files + CLI, so the
  same decision run works from a pure CLI, an OpenClaw skill, a Claude Code
  instruction, a Codex AGENTS.md, or a DeepSeek Harness agent — see
  examples/harness-agnostic/ (each runnable, executed by release.yml).
• clawock-dsh skill package on npm. DSH users install one command:
  dsh plugin --profile web add clawock-dsh. A pure dsh.skills package (no
  Node code) that walks the agent through prepare → decision.json → publish.
• README rewritten around the live record. First-line hook (90 days live,
  −15.95%, every loss on the page), four-line scorecard reconciliation
  (ledger / directional hit / shadow portfolio / real account), reproducible
  auditing (clawock audit-resettle), and the influencer radar (Trump /
  Musk) now documented in both languages. Live numbers are maintained by
  ops/growth/refresh_readme_metrics.py placeholders, refreshed weekly by CI.
• ops/publish/publish_dsh_plugin.sh — single entry point for publishing the
  npm side of a release, shared by release.yml and manual bumps.

Changed

• README.zh.md and README.md now share a locked 12-section structure (CI
  parity tests); the information-layer tables are checked against
  config/information-layers.json and the per-run block counts against the
  preflights themselves.

npm

clawock-dsh@0.1.3 published to npm.

clawock v0.1.2

Install from PyPI:

python -m pip install clawock==0.1.2

Mostly documentation and repository policy. It is a release because README.md
is shipped verbatim as the PyPI long_description, and a published page cannot
be re-rendered — the same reason 0.1.1 existed.

Fixed

• The numeric provenance advisory now recognises %, pp, x/× and σ, and
  matches context per unit rather than against one flat set of numbers, so a
  figure like 2.3x is no longer waved through by a match on an unrelated
  quantity. The intraday insights sidecar is normalised before publication:
  model-owned narrative is kept, the generated_at stamp is the harness's own
  UTC clock, and a missing or malformed sidecar stays warn-only so report
  delivery is not held hostage to it. (#485)
• The README's widest claim about the system — "26 fetch and compute modules
  across 8 layers" — had no artifact behind it and had survived #429, which
  moved every module it counted. The catalog is now
  config/information-layers.json: every packaged command sits in exactly one
  layer or on an exclusion list with the reason it is not information
  collection, and the tables in both READMEs are checked against it. The
  partition covers both distributions' command registries, so nothing counted
  can be typed by hand. Re-derived, the count is 39, and two layer names that no
  longer described their members were corrected. (#476)

Added

• SECURITY.md naming GitHub private vulnerability reporting — now enabled on
  the repository, so the channel it points at exists — a
  CONTRIBUTING.md stating which parts of the repository can accept a patch
  (the package can; the live book cannot), and a bug-report issue template.
  Installable packages need a disclosure channel; a repository someone only
  reads does not. (#477)
• The runtime-coupling ratchet now also enumerates shell entry points naming the
  live host, against a per-file allowlist with a reason each. Its Python count
  stays 0, and the claim now states what it covers. (#478)

clawock v0.1.1

Install from PyPI:

python -m pip install clawock==0.1.1

Fixed

• The PyPI project page rendered six broken images, including the logo and the
  hero card — the first two things a visitor saw. pyproject.toml ships
  README.md verbatim as long_description, and PyPI has no repository to
  resolve a relative path against. Every asset and document reference in the
  README is now absolute. An already-published version cannot be re-rendered, so
  this needed a new release rather than a fix in place. (#468)
• The instance package restated its version as a literal, so the 0.1.1 build
  would have announced 0.1.0. It reads importlib.metadata now, and the two
  distributions' versions are checked against each other. (#469)

clawock v0.1.0

Install from PyPI:

python -m pip install clawock==0.1.0

First release. pip install clawock gets the runtime-neutral decision-workflow
package: the lifecycle CLI (clawock init → run prepare → run publish),
packaged workflows installable as Agent Skills, the context/tool contracts,
generation-pinned artifact publication with receipts, and the deterministic
portfolio, market-data, decision and evidence domains.

Published through GitHub trusted publishing, with no API token. Before it
uploads, the release job installs the exact artifact into a clean virtualenv
under env -i — no checkout, no runtime, no workspace, no inherited
environment — and completes one full run. (#436, #379)