v1.3.0

What's Changed

• chore(deps): update astral-sh/setup-uv action to v8.3.1 by @renovate[bot] in #606
• chore(deps): update dependency uv to v0.11.27 by @renovate[bot] in #607
• chore(deps): update github actions by @renovate[bot] in #609
• chore(deps): update dependency uv to v0.11.28 by @renovate[bot] in #608
• chore(deps): update ollama/ollama docker tag to v0.31.2 by @renovate[bot] in #610
• chore(deps): update dependency bcgov/renovate-config to v2026.7.17 by @renovate[bot] in #612
• chore(deps): update dependency uv to v0.11.32 by @renovate[bot] in #613
• chore(deps): update ollama/ollama docker tag to v0.32.3 by @renovate[bot] in #614
• chore(deps): update actions/setup-python action to v7 by @renovate[bot] in #615
• chore(ci): fast track renovate config by @DerekRoberts in #617
• chore(deps): update astral-sh/setup-uv action to v9 by @renovate[bot] in #618
• chore(deps): update ollama/ollama docker tag to v0.32.4 by @renovate[bot] in #619
• chore(deps): lock file maintenance by @renovate[bot] in #616
• chore(deps): update ollama/ollama docker tag to v0.32.5 by @renovate[bot] in #620
• chore(ci): clearly point renovate config at main branch by @DerekRoberts in #622
• chore(agents): consolidate workspace rules and purge openspec by @DerekRoberts in #625
• chore(agents): remove redundant root tool symlinks by @DerekRoberts in #626
• chore(deps): update dependency uv to v0.11.33 by @renovate[bot] in #628
• chore(deps): update dependency uv to v0.12.0 by @renovate[bot] in #629
• chore(deps): update dependency uv to v0.12.1 by @renovate[bot] in #630
• fix(prompts): embed grievance form rules and direct PDF links into UNION_MANDATORY_RULES by @DerekRoberts in #631
• fix(ui): sanitize upstream 429 errors and send user notifications on rate limits by @DerekRoberts in #632
• fix(prompts): use canonical relative form links, add Manage mode guard, and use explicit form PDF allow-list by @DerekRoberts in #633
• fix(verification): eliminate static form link false-alarms, mandate forensic analysis before form links, and format clean chip labels by @DerekRoberts in #634
• feat(infra): parameterize Ollama host port mapping via OLLAMA_PORT by @DerekRoberts in #636
• feat(ui): replace bottom file chips with in-text reference document links by @DerekRoberts in #635
• refactor(ci): consolidate analysis into reusable workflow by @DerekRoberts in #637
• chore(deps): update ollama/ollama docker tag to v0.32.6 by @renovate[bot] in #639
• chore(deps): update dependency uv to v0.12.2 by @renovate[bot] in #638
• feat(privacy): add pseudonymous client UUID for PIPA-compliant analytics by @DM-co in #645
• chore(deps): update bcgov/actions action to v0.5.0 by @renovate[bot] in #640
• chore(deps): update dependency uv to v0.12.3 by @renovate[bot] in #646

Full Changelog: v1.2.0...v1.3.0

v1.2.0

What's Changed

• chore(deps): update dependency bcgov/renovate-config to v2026.7.0 by @renovate[bot] in #602
• chore(deps): update github actions by @renovate[bot] in #603
• feat(llm): gemma-4-31b-it, fastest provider routing by @DerekRoberts in #601
• fix(ci): patch anyio.get_current_task for Python 3.14 compatibility in ASGI middleware context by @DerekRoberts in #604

Full Changelog: v1.1.1...v1.2.0

v1.1.1

What's Changed

• chore(deps): update ollama/ollama docker tag to v0.30.11 by @renovate[bot] in #595
• chore(deps): update dependency uv to v0.11.25 by @renovate[bot] in #594
• chore(deps): update ollama/ollama docker tag to v0.31.0 by @renovate[bot] in #596
• chore(deps): update dependency uv to v0.11.26 by @renovate[bot] in #597
• chore(deps): update ollama/ollama docker tag to v0.31.1 by @renovate[bot] in #598

Full Changelog: v1.1.0...v1.2.0

v1.1.0

What's Changed

• chore(deps): update dependency uv to v0.11.15 by @renovate[bot] in #556
• chore(deps): update dependency uv to v0.11.16 by @renovate[bot] in #557
• feat(models): integrate flagship Qwen3.6-35B-A3B chat model by @DerekRoberts in #558
• feat(routing): default to dynamic Hugging Face Router policy by @DerekRoberts in #559
• feat(ui): add dynamic environment-aware model selector under settings gear by @DerekRoberts in #560
• feat(compose): relocate compose, drop run wrapper, update workflows by @DerekRoberts in #561
• fix(ci): catch results false positive by @DerekRoberts in #562
• chore(deps): update dependency uv to v0.11.17 by @renovate[bot] in #563
• chore(deps): update dependency bcgov/renovate-config to v2026 by @renovate[bot] in #564
• chore(deps): update infrastructure updates to v0.30.0 by @renovate[bot] in #567
• chore(deps): update python dependencies to v0.11.18 by @renovate[bot] in #566
• chore(deps): update infrastructure updates to v0.30.6 by @renovate[bot] in #568
• chore(deps): update python dependencies to v0.11.19 by @renovate[bot] in #569
• chore(deps): update github actions to v8.2.0 by @renovate[bot] in #570
• chore(deps): update infrastructure updates to v0.30.7 by @renovate[bot] in #572
• chore(deps): update infrastructure updates to v0.30.8 by @renovate[bot] in #573
• chore(deps): update python dependencies to v0.11.21 by @renovate[bot] in #574
• fix(ci): add retry fallback for huggingface spaces push by @DerekRoberts in #576
• fix(app): upgrade locked dependencies to resolve security warnings by @DerekRoberts in #577
• feat: environment variable based branding configuration by @DM-co in #571
• chore(deps): update infrastructure updates to v0.30.10 by @renovate[bot] in #578
• chore(deps): update python dependencies by @renovate[bot] in #579
• chore(deps): update github actions (major) by @renovate[bot] in #581
• chore(deps): update python dependencies by @renovate[bot] in #582
• ci(deploy): enhance robustness of test and prod HF deployments by @DerekRoberts in #584
• chore(deps): update github actions (major) by @renovate[bot] in #587
• chore(deps): lock file maintenance by @renovate[bot] in #588
• chore(deps): update python dependencies by @renovate[bot] in #586
• fix(security): enforce root-ownership of hf_cache by @DerekRoberts in #589
• fix(branding): env-var app name not applied to Chainlit title bar by @DM-co in #592
• fix(deploy): use /api/health to verify llm connectivity by @DerekRoberts in #590
• fix(rag): correct system prompt and dynamically align pdf page numbers by @DerekRoberts in #591

Full Changelog: v1.0.1...v1.1.0

v1.0.1

What's Changed

• chore(compose): pin stable ollama image version to 0.5.7 by @DerekRoberts in #546
• chore(deps): update ollama/ollama docker tag to v0.24.0 by @renovate[bot] in #547
• chore(deps): update github actions (major) by @renovate[bot] in #548
• chore(deploy): redirect Hugging Face Spaces target deployment to bcgeu by @DerekRoberts in #552
• chore(license): migrate project to GPLv3 and remove company branding by @DerekRoberts in #551
• fix(ci): rename token input to github_token in deploy workflows by @DerekRoberts in #554
• chore(ci): container build caching, unit test offline mocking, and Trivy cache optimizations by @DerekRoberts in #553
• refactor(ci): simplify oci auditing, remove fragile build-arg versions by @DerekRoberts in #555

Full Changelog: v1.0.0...v1.0.1

v1.0.0

Release v1.0.0

The official production release of Agreement Navigator (Vexilon). This launch establishes our secure, privacy-first vector search framework for BC GEU stewards, packed with compliance guidelines, optimized queries, and absolute data protection.

---

PIPA Privacy-by-Design Framework

• Pristine Root compliance: Features a physical, high-fidelity PIPA compliance document at /PRIVACY.md rendering beautifully on GitHub.
• Content-Blind Operations: Ephemeral chat mechanics—no persistent database layer, zero storage of steward queries, and completely anonymized rate-limiting metrics.
• Direct UI Reference: Seamless link integration inside the chat application interface pointing directly to our master compliance guidelines on GitHub.
• Hermetic builds: Clean directory separation preventing Docker parent context copy leaks.

Optimized RAG Streaming Pipeline

• Forensic PDF-to-Markdown Ingestion: High-fidelity pipeline preserving section, page, and table layouts from the official collective agreement documents.
• Perspectives Condensation: RAG pipelines powered by multi-perspective query expansion to handle fuzzy queries with steward terminology.
• Source-Grounded Verification: Optional AI reviewer checking synthesized answers directly against collective agreement sources to safeguard against hallucinations.

CI/CD & Cloud Infrastructure

• Automated Hugging Face Deployment: CI/CD pipelines configured to trigger on published GitHub releases, pushing directly to our production Hugging Face space under the DerekRoberts/vexilon namespace.
• Local Sandboxing: Standardized docker-compose setup for one-step local replication (./run dev) with live model loading.

---

Structural Verification

• Test Suite Parity: All 111 deployment integrity, unit, and E2E integration tests are completely green (verified in under 8.5 seconds).

---

Full Changelog: First official release! Welcome to Vexilon v1.0.0!

The official production release of Agreement Navigator (Vexilon). This launch establishes our secure, privacy-first vector search framework for BC GEU stewards, packed with compliance guidelines, optimized queries, and absolute data protection.

---

PIPA Privacy-by-Design Framework

• Pristine Root compliance: Features a physical, high-fidelity PIPA compliance document at /PRIVACY.md rendering beautifully on GitHub.
• Content-Blind Operations: Ephemeral chat mechanics—no persistent database layer, zero storage of steward queries, and completely anonymized rate-limiting metrics.
• Direct UI Reference: Seamless link integration inside the chat application interface pointing directly to our master compliance guidelines on GitHub.
• Hermetic builds: Clean directory separation preventing Docker parent context copy leaks.

Optimized RAG Streaming Pipeline

• Forensic PDF-to-Markdown Ingestion: High-fidelity pipeline preserving section, page, and table layouts from the official collective agreement documents.
• Perspectives Condensation: RAG pipelines powered by multi-perspective query expansion to handle fuzzy queries with steward terminology.
• Source-Grounded Verification: Optional AI reviewer checking synthesized answers directly against collective agreement sources to safeguard against hallucinations.

CI/CD & Cloud Infrastructure

• Automated Hugging Face Deployment: CI/CD pipelines configured to trigger on published GitHub releases, pushing directly to our production Hugging Face space under the DerekRoberts/vexilon namespace.
• Local Sandboxing: Standardized docker-compose setup for one-step local replication (./run dev) with live model loading.

---

What's Changed

• feat(ui): stabilize footer metadata and deep-link version by @DerekRoberts in #392
• fix(ui): correct GitHub package search parameter by @DerekRoberts in #393
• chore(deps): update aquasecurity/trivy-action action to v0.36.0 by @renovate[bot] in #394
• chore(ci): rename org by @DerekRoberts in #408
• docs: add contributor onboarding guide by @DerekRoberts in #405
• fix(ci): migrate semgrep from deprecated action to container-based execution by @DerekRoberts in #412
• feat: secure JSON migration for chunk storage by @DerekRoberts in #416
• chore(models): Hugging Face (prod), Ollama (dev) by @DerekRoberts in #402
• chore: rebrand core to Agreement Navigator (AgNav) by @DM-co in #415
• fix(deploy): hf deployment script by @DerekRoberts in #423
• feat: unify model architecture and optimize CI/CD with Docker Buildx by @DerekRoberts in #425
• fix(deps): update dependency python-multipart to v0.0.27 by @renovate[bot] in #428
• chore(ci): fix package name in merge jobs by @DerekRoberts in #431
• fix(deps): update dependency gradio to v6.14.0 by @renovate[bot] in #434
• chore(deps): update github actions (major) by @renovate[bot] in #437
• chore(deps): update dependency uv to v0.11.6 [security] by @renovate[bot] in #432
• chore(deps): lock file maintenance by @renovate[bot] in #454
• chore(deps): update dependency uv to v0.11.8 by @renovate[bot] in #453
• fix(ci): image tracker failing by @DerekRoberts in #440
• feat(llm): stabilize HF connectivity and Qwen 3 routing by @DerekRoberts in #459
• feat(ci): refactor compose for tiered testing and forensic integrity by @DerekRoberts in #460
• chore(deps): update dependency uv to v0.11.9 by @renovate[bot] in #462
• refactor: semantic test orchestration and parallel CI pipeline by @DerekRoberts in #461
• Fix license discrepancy by @DerekRoberts in #468
• fix(deploy): recover thin deployment by @DerekRoberts in #472
• chore: implement Agent Behavioral Discipline by @DerekRoberts in #470
• chore(ci): test renovate config straight from main by @DerekRoberts in #475
• chore(deps): update actions/cache action to v5 by @renovate[bot] in #473
• fix(prompts): restore Qwen3 formatting freedom and logic checks by @DerekRoberts in #474
• fix(ci): restore fast test_builder to unblock unit tests by @DerekRoberts in #476
• feat(rag): upgrade to Qwen3-14B and optimize chunk size by @DerekRoberts in #477
• chore(deps): update dependency setuptools to v82 by @renovate[bot] in #483
• chore(deps): update python dependencies by @renovate[bot] in #482
• chore(deps): update python dependencies by @renovate[bot] in #484
• chore(deps): update python dependencies by @renovate[bot] in #485
• fix(deps): update python dependencies by @renovate[bot] in #487
• chore(deps): update dependency pandas to v3.0.3 by @renovate[bot] in #488
• chore: openspec, agent workflows, dependency constraints by @DerekRoberts in #489
• Consolidated Agent Behavioral Discipline by @DerekRoberts in #493
• feat: Chiainlit UI base implementation by @DerekRoberts in #495
• chore: openspecs for stabilizing UI by @DerekRoberts in #497
• feat: PIPA Hardening & KB Structure Optimization by @DerekRoberts in #499
• refactor: keep iterating on Chainlit UI, container optimization by @DerekRoberts in #508
• feat(ui): save and load conversations by @DerekRoberts in #510
• feat(ui): save button, improve session restoration UX by @DerekRoberts in #512
• refactor(tests): isolate deploy integrity audits to dedicated compose service by @DerekRoberts in #515
• fix(deploy): ensure non-root runner owns app directory in Containerfile by @DerekRoberts in #514
• fix(tests): resolve cache validation failure by adding scripts, conftest, and updating manifest by @DerekRoberts in #518
• fix(verification): replace cl.run_task with asyncio.create_task by @DerekRoberts in #521
• fix(container): resolve chainlit permission blowouts and robustify verify deployment script by @DerekRoberts in #523
• feat: references cleanup, live privacy linking, and test fixtures refactoring by @DerekRoberts in https://github.com/MinionTech/vexilo...

v0.7.0

What's Changed

• chore(deps): update actions/upload-artifact action to v7 by @renovate[bot] in #345
• chore(deps): update python docker tag to v3.14.4 by @renovate[bot] in #344
• refactor: 1.0 vanilla-first UI migration and python deep-clean by @DerekRoberts in #343
• fix(ui): constrain chat window height with overflow-y scrolling by @DerekRoberts in #350
• fix(ui): optimize CSS scope and keyword detection by @DerekRoberts in #352
• feat: enable PWA (progressive web app) by @DerekRoberts in #353
• chore: Footer cleanup and abbreviated SHA by @DerekRoberts in #355
• fix: responsive viewport seal and fill_height by @DerekRoberts in #356
• fix: resolve infinite iframe growth via viewport locking by @DerekRoberts in #357
• fix: disable fill_height to resolve infinite growth loop by @DerekRoberts in #358
• feat(ui): implement verified responsive chatbot height by @DerekRoberts in #362
• fix(ui): use native Gradio min_height/max_height for chatbot layout by @DerekRoberts in #363
• fix(ui): implement pure native gradio layout without tabs by @DerekRoberts in #364
• feat(ui): minimal native layout reset, resources restoration by @DerekRoberts in #369
• feat(ci): decouple app from mandatory tests in compose by @DerekRoberts in #373
• fix(ui): stabilize chatbot height, shorten version SHA by @DerekRoberts in #374
• fix(ui): resolve Gradio 6 history NoneType and JS event lock by @DerekRoberts in #378
• fix(ui): resolve Gradio 6 input regressions and history type-safety by @DerekRoberts in #379
• feat(ui): remove recurring share/delete/copy buttons by @DerekRoberts in #380
• fix(ui): implement responsive iframe-aware height constraints by @DerekRoberts in #381
• chore: require explicit space name in deployment by @DerekRoberts in #388
• fix(ui): restore resource access via native buttons and reinstate backend logic by @DerekRoberts in #389
• fix(ci): relax prod deployment tag check and fix notification labels by @DerekRoberts in #390

Full Changelog: v0.6.0...v0.7.0

v0.6.0

What's Changed

• feat: implement collaborative refinement loop (Issue #143) by @DerekRoberts in #311
• chore: container architecture hardening, build-time manifests by @DerekRoberts in #313
• feat: resolve backlog issues and modernize CI by @DerekRoberts in #314
• feat: reconcile PR feedback and finalize binary migration by @DerekRoberts in #315
• chore: implement FAISS cache validation and manifest generation (fixes #239) by @derekrobertsbot in #317
• feat: integrate BCGEU area office contacts for grievance handoff (fixes #232) by @derekrobertsbot in #318
• fix(ci): fix image resolution for squash merges by @DerekRoberts in #316
• chore(deps): update actions/setup-python action to v6 by @renovate[bot] in #320
• feat: WCAG 2.1 AA accessibility compliance (fixes #233) by @derekrobertsbot in #319
• feat: optimize RAG Pipeline (#323, #324, #325) by @DerekRoberts in #326
• feat: Autonomous Review & Persona Consolidation (#327) by @DerekRoberts in #327
• feat: implement Manager Mode (Secret Diplomat) persona by @DerekRoberts in #328
• chore: Hardening Infrastructure & CI Optimizations by @DerekRoberts in #329
• chore(infra): stabilize semantic cache and harden production dependencies by @DerekRoberts in #332
• feat(ui): modernize RAG interface with floating overlay and slim header by @DerekRoberts in #331
• chore: cleanup and renovate optimization by @DerekRoberts in #333
• chore: optimize compose configuration with modular anchors by @DerekRoberts in #334
• feat: integrate security auditor and reporting artifacts by @DerekRoberts in #336

Full Changelog: v0.5.0...v0.6.0

v0.5.0

What's Changed

• feat: OHS and Workers Compensation Act Integration by @DerekRoberts in #249
• fix: increase token/input limits and add truncation warnings #215 by @DerekRoberts in #251
• fix: remove sensitive logging and content-heavy prints #215 by @DerekRoberts in #252
• feat: optimize memory usage, startup serialization, limits by @DerekRoberts in #255
• feat: add privacy notice about no persistent storage by @DerekRoberts in #254
• feat: Remove merit-gating from grievance process (#203) by @DerekRoberts in #259
• feat: PIPA privacy principles (#216) by @DerekRoberts in #257
• feat: UI overhaul, persona hardening, and privacy compliance by @DerekRoberts in #260
• chore(deps): lock file maintenance by @renovate[bot] in #262
• feat: optimize container build caching (#247) by @DerekRoberts in #261
• fix: docker-compose volumes and context optimization by @DerekRoberts in #263
• feat: fix Gradio 6.0 UserWarning in app.py by @DerekRoberts in #264
• fix: stabilize chatbot height to prevent layout overflow by @DerekRoberts in #265
• fix(ci): fix case-sensitive Hugging Face status check (#272) by @DerekRoberts in #266
• chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.3 by @renovate[bot] in #268
• feat: optimize CI build caching and parallel execution #265 by @DerekRoberts in #267
• feat: final architectural hardening and performance optimizations by @DerekRoberts in #269
• feat: bcgov/actions/diff-triggers master-gate & heritage builder anchor by @DerekRoberts in #273
• feat: split grievance form into 4 parts and add PDF indexing support by @DerekRoberts in #275
• fix(ui): capture for Enter-to-submit keydown listener by @DerekRoberts in #277
• fix(ci): restore version provenance build arg by @DerekRoberts in #283
• fix(ui): restore app title to BCGEU Steward Assistant by @DerekRoberts in #282
• feat: link to exact container image in footer by @DerekRoberts in #284
• feat: optimize bootstrap by offloading hashing to build-time by @DerekRoberts in #289
• chore(ci): use actions pointing to main FOR TESTING ONLY by @DerekRoberts in #290
• test: fix persistence test flaky failure by @DerekRoberts in #293
• feat: multi-perspective retrieval for complex topics (#132) by @DerekRoberts in #292
• chore(ci): fix rebuild triggers and complete multi-perspective retrieval (#132) by @DerekRoberts in #294
• fix: add critical deadlines checkpoint for grievance guidance by @DerekRoberts in #296
• feat: standardize RAG Tokenizer requirements (#285) by @DerekRoberts in #298
• chore: regenerate uv.lock for Python 3.14 support by @DerekRoberts in #305
• chore: regenerate uv.lock with Python 3.14 by @derekrobertsbot in #306
• perf: optimize Containerfile layers for CI build cache hits by @DerekRoberts in #299
• feat: index build integrity, structured logging by @DerekRoberts in #307
• feat: harden CI gates to prevent merging failing tests by @DerekRoberts in #310

New Contributors

• @derekrobertsbot made their first contribution in #306

Full Changelog: v0.4.0...v0.5.0

v0.4.0

What's Changed

• feat: add nexus test as secondary source and support markdown indexing by @DerekRoberts in #156
• feat: workflow optimizations (#138) by @DerekRoberts in #157
• chore: harden trivy gate and fix image casing by @DerekRoberts in #158
• feat: enhance Direct Advice Mode with strategic framing and Millhaven audit (#154) by @DerekRoberts in #159
• chore(ci): Trivy fs scan by @DerekRoberts in #160
• feat: extensible 'Test/Doctrine' Registry (#160) by @DerekRoberts in #161
• feat: Case Builder Mode (#152) by @DerekRoberts in #162
• feat: BC Labour Relations Code as primary statute by @DerekRoberts in #166
• chore(security): prompts availability, immutable-root arch by @DerekRoberts in #172
• refactor: hierarchical knowledge base directory structure #167 by @DerekRoberts in #171
• chore: increase generation token limits by @DerekRoberts in #173
• chore(deps): update ghcr.io/astral-sh/uv docker tag to v0.11.2 by @renovate[bot] in #199
• chore(deps): lock file maintenance by @renovate[bot] in #200
• feat: Markdown-first RAG migration, Gradio 6 stabilization, and test suite hardening by @DerekRoberts in #174
• feat: Priority fixes and Steward Resources (Forms & Guides) by @DerekRoberts in #201
• feat: harden persona architecture and elevate UI aesthetics by @DerekRoberts in #202
• feat: fix massive deployment lag and stabilize container startup by @DerekRoberts in #238
• fix: resolve infinite build hang and restore read-only cache security by @DerekRoberts in #240
• fix: sync README metadata to resolve HF status-sync lag by @DerekRoberts in #242
• feat: add startup heartbeat to confirm build health by @DerekRoberts in #243
• fix: HF status sync and new deployment integrity tests by @DerekRoberts in #244
• fix: deploy fallback for metadata-only PRs and Docker metadata cleanup by @DerekRoberts in #245
• fix: fetch-depth for merge image walk-back by @DerekRoberts in #246
• fix: lowercase GHCR image URL in deploy-prod by @DerekRoberts in #248

Full Changelog: v0.3.0...v0.4.0