UADS v0.12.1 - Release titles now derive from the authoritative changelog.

[0.12.1] - 2026-09-08

Highlights

• Release titles now derive from the authoritative changelog.

Fixed

• The release publisher now supplies the current changelog section to generic
  title derivation, preventing the 0.12.0 partial-publication failure.
• Added regression coverage for future-version title derivation and fail-closed
  handling of missing or malformed title sources.

Verification

• This corrective patch preserves the immutable annotated v0.12.0 tag at
  da05b3ecdeec5febf3ffdfd65c008ea311ccb8b3.
• No GitHub Release exists for v0.12.0; this patch remains pending
  independent audit and protected merge.

Review Evidence

• Commit SHA: 312e329
• CI run ID + conclusion: 34223969886 + success
• Direct-review workflow run ID: 34224587242
• Test summary: 49 test files; 409 passed; 0 failed
• Eval summary: orchestrator: 9/9 passed; execution: 9/9 passed; context: 19/19 passed; fault: 18/18 passed; cost: 27/27 passed; modelRouting: 22/22 passed; specialistRouting: 26/26 passed; adapters: 40/40 passed; assurance: 22/22 passed; faultInjection: 32/32 passed
• npm audit: clean (0 high-or-greater)
• Release run ID: 34226145216
• Direct-review artifact: uads-direct-review-312e32946798eb3abbb49a79af08e13efb7719dc
• Direct-review evidence SHA-256: ec36c8c61516135d2b9000db4e37988eb333e66d1a51792b6489c72091a62684
• GitHub review index: github-review-index.json

UADS v0.11.1 - Release Security Proof

[0.11.1] - 2026-09-05

Fixed

• Bound corrected release authorization to reconstructable exact-SHA CodeQL and Scorecard proofs plus exact-SHA or same-tree PR Dependency Review proof.
• Added fail-closed security-proof identity/digest validation and adversarial RG1-RG14 regression coverage without changing validated runtime subsystems.
• Completed the Correction 05 event/ref and merged-PR binding closeout, including RG15-RG22 security-proof regression coverage.

Verification

• Published as an immutable GitHub prerelease after all required post-merge gates passed for exact main SHA db904219a691dea9509f04ff44ac9e8dff5563fa and tree 0a4ef8e7e8354d4a90d8fc3db6fe19d70734c42f.
• Foundation CI run 33969035968 passed with 48 test files, 351 tests, 0 failures, and npm audit reporting 0 vulnerabilities.
• CodeQL run 33969035966 passed for the exact final SHA.
• OpenSSF Scorecard run 33969035984 passed from push on main for the exact final SHA/tree.
• Dependency Review proof run 33967128218 passed for merged PR #14 using same-tree provenance: reviewed source 5c924602... and final main db904219... share tree 0a4ef8e....
• Linux and Windows Node 20 compatibility run 33969242069 passed for the exact final SHA/tree.
• Canonical Direct Review run 33969337749 passed with finalVerdict=PASS.
• Release workflow run 33969445797 passed publication, final evidence verification, and the supported attestation step.
• The completed security-proof regression family is RG1-RG22. The immutable v0.11.0 release and tag remain unchanged.

Review Evidence

• Commit SHA: db904219a691dea9509f04ff44ac9e8dff5563fa
• Final tree SHA: 0a4ef8e7e8354d4a90d8fc3db6fe19d70734c42f
• Merged PR: #14
• CI run ID + conclusion: 33969035968 + success
• CodeQL run ID + conclusion: 33969035966 + success
• Scorecard run ID + conclusion: 33969035984 + success
• Dependency Review run ID + conclusion: 33967128218 + success (same-tree PR #14 proof)
• Compatibility run ID + conclusion: 33969242069 + success (Linux and Windows Node 20)
• Direct-review workflow run ID + verdict: 33969337749 + PASS
• Direct-review artifact: uads-direct-review-db904219a691dea9509f04ff44ac9e8dff5563fa
• Direct-review base evidence SHA-256: 02cd263a35e7cf09a47463d83d1cd52412495f9d2b1c18eadfb059631b3b2f5f
• Release run ID + conclusion: 33969445797 + success
• Test summary: 48 test files; 351 passed; 0 failed
• Eval summary: orchestrator 9/9; execution 9/9; context 19/19; fault 18/18; cost 27/27; modelRouting 22/22; specialistRouting 26/26; adapters 40/40; assurance 22/22; faultInjection 32/32
• Security-proof regression: RG1-RG22, 22/22
• npm audit: clean (0 high-or-greater)
• Published assets: 10 expected release assets, including CI binding, canonical/final Direct Review evidence and checksum, review index, release manifest, SHA256SUMS, SPDX SBOM, tarball, and validation report

UADS v0.11.0 - Assurance & Stabilization

[0.11.0] - 2026-09-04

Highlights

• Hardened assurance integrity with a central deterministic policy, bounded review packets, AS1–AS16 assurance evals, and FI1–FI16 adversarial fault-injection evals.
• Added exact-SHA Linux and Windows Node.js 20 compatibility proof with isolated global-install smoke coverage.

Fixed

• Implementer role/session, stale digest, evidence identity, contradictory verdict, cross-role, duplicate-session, and current FAIL/BLOCKED bypasses now fail closed at record and finalize seams.
• CI receipts, Direct Review evidence, release validation, and release notes now include the assurance/fault-injection gates and compatibility statuses.

Verification

• Release publication remains gated on the complete local validation matrix, exact-SHA CI/compatibility/Direct Review evidence, CodeQL/Scorecard, and maintainer independent review.

Review Evidence

• Commit SHA: d5cb361
• CI run ID + conclusion: 33941376858 + success
• Direct-review workflow run ID: 33941625387
• Test summary: 47 test files; 329 passed; 0 failed
• Eval summary: orchestrator: 9/9 passed; execution: 9/9 passed; context: 19/19 passed; fault: 18/18 passed; cost: 27/27 passed; modelRouting: 22/22 passed; specialistRouting: 26/26 passed; adapters: 40/40 passed; assurance: 22/22 passed; faultInjection: 32/32 passed
• npm audit: clean (0 high-or-greater)
• Release run ID: 33941708415
• Direct-review artifact: uads-direct-review-d5cb361274cb19f70c8bd02dd023b596b8babf13
• Direct-review evidence SHA-256: 7e27b3738ddf74ac335a63301bf56c199b2bdfa765c83c9f952d857e1981b562
• GitHub review index: github-review-index.json

UADS v0.10.4 - Made host adapter target-root identity filesystem-safe by preserving ...

[0.10.4] - 2026-09-04

Highlights

• Made host adapter target-root identity filesystem-safe by preserving path case and introducing root-binding v2.

Fixed

• Case-distinct roots no longer collide in ownership digests, preventing case-only cross-root replay on case-sensitive filesystems.
• v0.10.3 binding states remain readable as legacy weak bindings but cannot authorize current or destructive operations until explicit, non-destructive v2 adoption.
• Host Dispatch Bundle currentness and release evidence continue to use privacy-safe v2 root digests without persisting raw host paths.

Verification

• T57–T64, AD37–AD40, all existing tests/evals, and the complete exact-SHA validation chain are required before v0.10.4 publication; v0.10.3 and earlier tags remain immutable.

Review Evidence

• Commit SHA: 0936f81
• CI run ID + conclusion: 33883929350 + success
• Direct-review workflow run ID: 33884266278
• Test summary: 46 test files; 322 passed; 0 failed
• Eval summary: orchestrator: 9/9 passed; execution: 9/9 passed; context: 19/19 passed; fault: 18/18 passed; cost: 27/27 passed; modelRouting: 22/22 passed; specialistRouting: 26/26 passed; adapters: 40/40 passed
• npm audit: clean (0 high-or-greater)
• Release run ID: 33884409867
• Direct-review artifact: uads-direct-review-0936f818ba8dc938b1b2ad41ffab0450c8fb30eb
• Direct-review evidence SHA-256: cfbfaa45a422fd7f34f8761b1f90b4f94c31dd19ef2fef573b380925ec84c0d7
• GitHub review index: github-review-index.json

UADS v0.10.3 - Bound host adapter ownership to a privacy-safe target-root digest so ...

[0.10.3] - 2026-09-04

Highlights

• Bound host adapter ownership to a privacy-safe target-root digest so identical bytes at different canonical roots cannot replay as trusted ownership.

Fixed

• Added rootBinding to persisted adapter state and hostTargetRootDigest to Host Dispatch Bundles; cross-root replay, tampered binding, and stale bundles now fail closed.
• Legacy v0.10.0–v0.10.2 unbound states remain readable but block destructive uninstall until an explicit install/update safely adopts binding without overwriting user bytes.

Verification

• T49–T56, AD33–AD36, all existing tests/evals, and the complete validation matrix are required for the exact release SHA; v0.10.0–v0.10.2 remain immutable.

Review Evidence

• Commit SHA: f0ab15e
• CI run ID + conclusion: 33871531618 + success
• Direct-review workflow run ID: 33871839963
• Test summary: 45 test files; 314 passed; 0 failed
• Eval summary: orchestrator: 9/9 passed; execution: 9/9 passed; context: 19/19 passed; fault: 18/18 passed; cost: 27/27 passed; modelRouting: 22/22 passed; specialistRouting: 26/26 passed; adapters: 36/36 passed
• npm audit: clean (0 high-or-greater)
• Release run ID: 33871954628
• Direct-review artifact: uads-direct-review-f0ab15e0b00834f3ca2f0ed3d72f193d579741b0
• Direct-review evidence SHA-256: 06cf27487bb3cc628e811bbd5a4092abedd9f4a95e4d0117daa7d191113adab7
• GitHub review index: github-review-index.json

UADS v0.10.2 - Adapter Root Identity Hardening

[0.10.2] - 2026-09-04

Highlights

• Made host adapter root override semantics unambiguous so supported configuration cannot produce duplicated .cursor/.cursor, .codex/.codex, or .agents/.agents segments.

Fixed

• Synthetic user-home overrides now reject already-suffixed adapter paths with stable DOUBLE_ADAPTER_ROOT_REJECTED reason codes.
• Added explicit adapterRoot override support and deterministic environment semantics (UADS_* synthetic home, CODEX_HOME adapter root, AGENT_SKILLS_HOME not auto-consumed).
• Detection, install, status, explain, and prepare now share one canonical root resolver with privacy-safe root identity metadata.

Verification

• T41–T48, AD29–AD32, all existing tests/evals, and the complete validation matrix are required for the exact release SHA; v0.10.0 and v0.10.1 remain immutable.

Review Evidence

• Commit SHA: 3aa81ac
• CI run ID + conclusion: 33839863227 + success
• Direct-review workflow run ID: 33840672437
• Test summary: 44 test files; 306 passed; 0 failed
• Eval summary: orchestrator: 9/9 passed; execution: 9/9 passed; context: 19/19 passed; fault: 18/18 passed; cost: 27/27 passed; modelRouting: 22/22 passed; specialistRouting: 26/26 passed; adapters: 32/32 passed
• npm audit: clean (0 high-or-greater)
• Release run ID: 33840727002
• Direct-review artifact: uads-direct-review-3aa81ac53f9c6b3b31dcb216e2eb8210d3fb3d21
• Direct-review evidence SHA-256: 8238976afaaf0dc19ee22493fc6377bb33cd49a1f69cd5d4555852daf60052b4
• GitHub review index: github-review-index.json

UADS v0.10.1 - Runtime Adapter Hardening

[0.10.1] - 2026-09-04

Highlights

• Hardened runtime adapter target integrity so Codex and Generic Agent Skills resolve under fixed ~/.codex and ~/.agents roots instead of bare user home.
• Made host detection truthful for missing adapter roots and extended adapter installation rollback to include canonical ~/.uads/agents synchronization.

Fixed

• Default Codex/Generic installs no longer write to ~/agents or ~/skills; explicit override semantics always append the fixed adapter root segment.
• Failed adapter installs now restore canonical UADS agent copies transactionally alongside host resources and sidecar state.
• Legacy v0.10.0 wrong-target Codex/Generic state migrates safely when ownership is exact, or blocks without deleting ambiguous bytes.
• GitHub release titles are version-aware and no longer hard-coded to the Prompt 007 increment.

Verification

• T31–T40, AD23–AD28, all existing tests/evals, and the complete validation matrix are required for the exact release SHA; v0.10.0 and earlier tags remain immutable.

Review Evidence

• Commit SHA: 6210ed2
• CI run ID + conclusion: 33832273677 + success
• Direct-review workflow run ID: 33833053498
• Test summary: 43 test files; 296 passed; 0 failed
• Eval summary: orchestrator: 9/9 passed; execution: 9/9 passed; context: 19/19 passed; fault: 18/18 passed; cost: 27/27 passed; modelRouting: 22/22 passed; specialistRouting: 26/26 passed; adapters: 28/28 passed
• npm audit: clean (0 high-or-greater)
• Release run ID: 33833080599
• Direct-review artifact: uads-direct-review-6210ed235f0e0c0742fbba15e6a909b3d7bed8f0
• Direct-review evidence SHA-256: 63d604c4a870f82abde8300623020b3c3f0f449cfc0a4d3c7c0b8dc5638c64f9
• GitHub review index: github-review-index.json

UADS v0.10.0 - GitHub Release Engineering

[0.10.0] - 2026-09-03

Highlights

• Added one provider-neutral runtime adapter contract with fixed Cursor, Codex, and Generic Agent Skills adapters.
• Added deterministic read-only host detection, conservative adapter Runtime Capability Snapshots, ownership-safe global installation/uninstallation, and sidecar-only Host Dispatch Bundles.
• Added uads adapters list|detect|status|explain|install|uninstall|prepare.

Fixed

• Adapter preparation now reconstructs and validates current UADS Work Order, Routing Decision, Specialist Selection Plan, Model Execution Plan, runtime, Context/Impact, and execution identities before creating a bundle.
• Unmanaged or modified host resources, traversal, symlink/junction escape, stale/tampered state, and cross-project replay fail closed without touching the managed project.
• Unknown host capabilities no longer imply subagents or parallelism; Generic Agent Skills uses sequential role cycling and adapters can only narrow UADS execution.

Verification

• AD1–AD22, 42 test files / 286 tests, all existing eval suites, eval:adapters, exact-SHA CI, Direct Review, CodeQL, Scorecard, checksums, SBOM, and release provenance are required for this release.
• Historical v0.9.1 and earlier tags remain immutable.

Review Evidence

• Commit SHA: 86f7f17
• CI run ID + conclusion: 33811486933 + success
• Direct-review workflow run ID: 33812049074
• Test summary: 42 test files; 286 passed; 0 failed
• Eval summary: orchestrator: 9/9 passed; execution: 9/9 passed; context: 19/19 passed; fault: 18/18 passed; cost: 27/27 passed; modelRouting: 22/22 passed; specialistRouting: 26/26 passed; adapters: 22/22 passed
• npm audit: clean (0 high-or-greater)
• Release run ID: 33812237247
• Direct-review artifact: uads-direct-review-86f7f1767f40ecfee3afd49aadef4f4e63b51fda
• Direct-review evidence SHA-256: 2b83a2beed52fec9a3cc987cd4ae18f889a52c3c5eccc49b1c16779a151fc4f3
• GitHub review index: github-review-index.json

UADS v0.9.1 - GitHub Release Engineering

[0.9.1] - 2026-09-03

Highlights

• Specialist gate and required-evidence obligations are now authoritative selection coverage, with inspectable required, covered, and unmet obligation records.
• Dispatch and resume semantically revalidate Specialist Selection against the current Work Order, Routing Decision, registry, and Context/Impact identity.

Fixed

• Gate-driven finance, Web3, migration/rollback, architecture, release, security, and performance routing now selects proven specialist coverage or fails closed.
• Previously digest-only gate, affected-area, and dependency routing signals are operational only through deterministic contracts, exact tokens, and structured impact/dependency signals.

Verification

• SR1–SR26 and the full validation matrix are required for the exact release SHA; v0.9.0 remains an immutable historical release.

Review Evidence

• Commit SHA: f306109
• CI run ID + conclusion: 33771975881 + success
• Direct-review workflow run ID: 33772315113
• Test summary: 41 test files; 273 passed; 0 failed
• Eval summary: orchestrator: 9/9 passed; execution: 9/9 passed; context: 19/19 passed; fault: 18/18 passed; cost: 27/27 passed; modelRouting: 22/22 passed; specialistRouting: 26/26 passed
• npm audit: clean (0 high-or-greater)
• Release run ID: 33772556383
• Direct-review artifact: uads-direct-review-f3061091a801ab98325e1dcfe70beaa123b0fc17
• Direct-review evidence SHA-256: 913e82e19f2fff0065c480f98511128163ae42d333d0b713a4d679011567bd88
• GitHub review index: github-review-index.json

UADS v0.9.0 - GitHub Release Engineering

[0.9.0] - 2026-09-02

Added

• Global-first Specialist Registry with 25 bounded built-in profiles: 11 core roles, 14 domain specialists, and distinct security, performance, and reliability assurance.
• Deterministic specialist selection plans with profile, registry, policy, Work Order, routing, impact, change, and gate-contract digests; minimum-sufficient greedy coverage; stable reason codes; rejection/conflict evidence; and bounded dependency/parallel groups.
• Zero-project-footprint specialist sidecars under ~/.uads/registry/specialists/ and ~/.uads/workspaces/<project-id>/specialist-routing/, plus uads specialists list|status|explain|select.
• SR1–SR20 specialist-routing evaluation suite, adversarial registry/identity tests, and the required CI/Direct Review eval-specialist-routing gate.

Security / Scope

• Specialist profiles are closed, bounded, deterministic, provider-neutral, and screened for secrets, absolute paths, commands, hooks, unknown fields, duplicate IDs, and unsafe combinations. Disabled/experimental profiles never silently satisfy required coverage; stale or cross-project selection state blocks dispatch.

Verification

• The release is bound to exact-SHA CI, specialist-routing evidence and policy/catalog digests, independent Direct Review, CodeQL/Scorecard status, immutable release identity, checksums, and a privacy-minimized Review ZIP.

Review Evidence

• Commit SHA: 8f697f0
• CI run ID + conclusion: 33691077423 + success
• Direct-review workflow run ID: 33691351918
• Test summary: 40 test files; 262 passed; 0 failed
• Eval summary: orchestrator: 9/9 passed; execution: 9/9 passed; context: 19/19 passed; fault: 18/18 passed; cost: 27/27 passed; modelRouting: 22/22 passed; specialistRouting: 20/20 passed
• npm audit: clean (0 high-or-greater)
• Release run ID: 33691400413
• Direct-review artifact: uads-direct-review-8f697f09c16c0bcea7ee5007a813b96421d0f054
• Direct-review evidence SHA-256: 02b198848f0aaf8b116232e5829d2dfc676799dc6797d1e1268ef500ccce7938
• GitHub review index: github-review-index.json