aDNA v7.0 (Governance) — Flat repo, node.aDNA, publish-skill rewrite

aDNA Governance v7.0

Major Governance bump. Standard track unchanged (stays at v2.2).

This is the first release ratified under the explicit semver discipline ADR (ADR-011). Two-track Major.Minor-only — see the Version Policy section in CHANGELOG.md for the full rules.

What's in v7.0 (highlights)

Breaking changes (two migration steps required):

• Repo flatten: .adna/ IS the git repo. The two-level adna/.adna/ structure is gone. New clone target: git clone https://github.com/LatticeProtocol/aDNA.git .adna. Existing operators run the in-place migration documented in the upgrade guide. (Per ADR-006 + ADR-007.)
• Publish-skill family rewrite: vault publish now uses standard git push origin main via the new skill_vault_publish. The legacy .publish-clone/ rsync workaround is retired. Each vault runs skill_git_remote_setup (one-time per vault for any vault without a configured remote) + skill_deploy (idempotent pre-push hook installer). (Per ADR-010.)

New patterns (additive, opt-in — adopt at your own pace):

• node.aDNA/ opt-in pattern: local-node operational inventory vault (Hestia persona). Per-machine inventory for software, compute resources, credentials, and change history. Forward-reference to aDNA.aDNA/how/campaigns/ per ADR-004.
• HOME.md template + skill_node_bootstrap_interview: workspace-router HOME page with 19+ placeholder substitution points, served by a 19-question interview skill that fills MANIFEST.md + who/identity/identity_node.yaml + what/inventory/inventory_*.yaml + CHANGELOG.md + HOME.md {{VARS}} from operator answers. (Via M-LWX mini-campaign.)
• 5 graduated node_operations skills: skill_inventory_refresh + skill_node_credentials_audit + skill_node_health_check + skill_update_all_vaults + skill_node_bootstrap_interview. Each carries provenance frontmatter (graduated_from + graduated_at + graduated_via).
• skill_iii_setup: consumer-onboarding skill for adding an iii/ wrapper (III.aDNA framework federation) to any vault. Federation_ref schema + kind: enum walkthrough + downstream-safety check; backed by 6 live consumer wrappers.
• Airlock template stub at /.adna/how/airlock/AIRLOCK.md — vault-agnostic cross-vault coordination surface. Adoption is opt-in per vault (per ADR-008).
• Naming convention codified (ADR-009): <name>.aDNA/ directory ↔ <name>.aDNA.git GitHub repo isomorphism. Existing non-conformant repos are grandfathered (4 hyphen-flat + 1 path-style + 7 no-remote + 2 external-partner-namespaced); no forced renames. New vaults default to the canonical pattern via skill_project_fork.md warnings.
• Workspace router template template_workspace_claude.md extracted from the legacy outer wrapper per ADR-007. Directly installable to ~/lattice/CLAUDE.md.
• Cross-project routing hook in .adna/CLAUDE.md §Startup Checklist — vault session-start agents check for node.aDNA/ presence and route through the per-node operational vault before project-specific routing.

Pull-based changes (just git pull your .adna/ clone when you're ready):

• GitHub repo renamed LatticeProtocol/Agentic-DNA → LatticeProtocol/aDNA (per ADR-006, amended 2026-05-18 to canonicalize mixed-case form matching realized GitHub state and the <name>.aDNA/ directory-suffix convention). URL forwarding preserves existing clones; new clones use the canonical mixed-case URL.
• deploy_manifest.yaml moved to .github/deploy_manifest.yaml with simplified post-flatten sync_includes: paths.
• CI workflow caller-usage URLs updated to LatticeProtocol/aDNA in 3 reusable workflows.
• Template-root .gitignore created with the v7.0 exclusion set (deploy/, what/local/, how/local/, who/operators/, dist/, .publish-clone/, .publish-clone.bak/, private/, *.dryrun.log, *.tar.gz).
• Stale Standard footer at adna_standard.md line 1483 corrected (v2.0 → v2.2; the title at line 3 was always canonical at v2.2).

Security:

• Pre-push sanitization hook (LAYER_CONTRACT §4 v0.1): 7 rules (path leakage / secret patterns / filename patterns / large binaries / frontmatter confidential / frontmatter draft / operator deny list). Installed via skill_deploy. Self-test fixtures shipped (3 PASS-path + 5 FAIL-path); --self-test mode upgraded to real validation logic. Bypassable with --no-verify (operator-discretionary; not recommended).

Migration

→ See how/docs/upgrade_v6_to_v7.md.

The upgrade guide ships in the v7.0 template so operators have actionable migration steps the moment they pull. Per-vault coordination memos have been delivered to active ecosystem vaults; partner-affiliated vaults receive coordinated drafts at their respective operator gates.

Existing clones: GitHub URL forwarding works indefinitely. To update to the canonical URL:

git remote set-url origin https://github.com/LatticeProtocol/aDNA.git

Validation runbook: 10-row table in §6 of the upgrade guide — command + expected output + failure pointer for each post-migration check.

What did NOT change

• Standard track stays at v2.2. No changes to triad structure, object schemas, FAIR envelope, or RFC 2119 conformance rules. Existing v6.0-conformant vaults remain fully conformant under Standard v2.2.
• The latlab CLI registry skill (skill_lattice_publish.md) is unchanged — light path-drift edits only; scope unchanged.
• Existing .aDNA projects continue to operate. You can stay on v6 indefinitely — v7.0 is non-coercive. The successor campaign campaign_adna_v3_ecosystem_compliance handles per-vault v7.0 application at each operator's pace.

ADRs ratified at this tag

• ADR-006 — GitHub repo rename (accepted at P0→P1 gate; amended 2026-05-18 at M06 S2 to canonicalize mixed-case aDNA URL slug)
• ADR-007 — Outer wrapper → workspace template (accepted at P0→P1 gate)
• ADR-008 — Airlock template stub (ratified at M03 phase gate)
• ADR-009 — Naming convention (accepted at P0→P1 gate)
• ADR-010 — Publish-naming family (ratified at M05 S1)
• ADR-011 — Semver discipline (this release is the first governed by it; ratified at M06 S2 phase gate)

All ADRs live in what/decisions/ of the campaign vault aDNA.aDNA.

Full changelog

CHANGELOG.md v7.0 entry.

Acknowledgments

Coordination across the active ecosystem made this release possible. Particular thanks to the Spacemacs.aDNA / Daedalus collaboration that filed the original skill_publish_lattice git-fix backlog idea — that surfaced as ADR-010 and the publish-skill family rewrite that this release ships.