Release v7.3.2

[7.3.2] - 2026-05-08 (Public release prep)

Added

• Apache 2.0 license: replaces the previous proprietary license; added NOTICE file with third-party attributions (engineering playbooks from addyosmani/agent-skills, MIT).
• pyproject.toml metadata: explicit license, authors, and project URLs (Homepage, Changelog, Issues).
• GitHub templates: PULL_REQUEST_TEMPLATE.md and .github/ISSUE_TEMPLATE/config.yml (private security advisories + Discussions surfaced from the new-issue page); refreshed bug_report.md to ask for VIKI-specific environment info.
• Engineering playbooks & coding workflow: 20 production playbooks under viki/skills/playbooks/engineering/, plus engineering_playbook and coding_workflow skills exposed as lazy-loaded builtins.
• Eval harness: scripts/evals/{harness,run_all,humaneval_plus,livecodebench,gaia,swe_bench_verified,agentbench,datasets}.py with execution-graded suites and a Benchmarks GitHub Actions workflow (PR fast-evals + weekly full run).
• Frontier wiring: MCP integration (viki/integrations/mcp_client.py + viki/config/mcp_servers.yaml), real SSE streaming endpoint, WebSocket /ws for mission/sub-agent events, LSP bridge for pyright / typescript-language-server, OmniParser-V2 ONNX adapter for computer-use grounding, best-of-N worktree runner, planner / sub-agent / mission-graph modules, capability index with SHA-256 provenance, persistent traces, vector memory, sandbox, patch-verify, self-healer, preference forge, dynamic skills (AWS, Kubernetes, SQL).
• Coding persona: viki/config/personas/coding.yaml for a coding-focused subset of skills.

Changed

• Branding & contacts: documentation now uses neutral "VIKI Project Contributors" framing; contact channels point to GitHub Discussions and private security advisories instead of personal email.
• README: updated badge to Apache 2.0 license, refreshed CI badge, restructured License/Contributing footer.
• .gitignore: ignore workspace/, FOCUS/, data/eval_results/, data/eval_fixtures/cache/.
• CONTRIBUTING.md: full rewrite with development setup, PR checklist, conventional-commits guidance, lint/test commands.

Security

• Rotated default VIKI_API_KEY: the historical REDACTED-OLD-KEY-ROTATE-VIKI_API_KEY placeholder is invalid. The repository's git history was rewritten to scrub the string; every operator must generate their own key with python -c "import secrets; print(secrets.token_urlsafe(32))".
• SECURITY.md: now documents the GitHub private-vulnerability-reporting flow with response SLAs, and the dead-default-key policy.
• Resolved merge conflict in viki/core/controller.py (now registers the new EngineeringPlaybookSkill and CodingWorkflowSkill lazy proxies).

Migration

• Operators upgrading from 7.3.1 must:
  1. Generate fresh VIKI_API_KEY and VIKI_ADMIN_SECRET and update their .env.
  2. Re-fetch their fork (history was rewritten — git fetch --all && git reset --hard origin/main).
  3. If consuming the package metadata, note the license is now Apache-2.0.

---

[7.3.1] - 2026-02-17 (First public pre-release)

Release v7.3.1

[7.3.1] - 2026-02-17 (First public pre-release)

Added

• Docker support: Dockerfile and docker-compose for running the API in containers; FLASK_HOST env for binding; DOCKER.md and README section.
• File upload: Chat API accepts multipart form (message + files); uploads saved to data/uploads; controller accepts attachment_paths; UI attach button and file chips.
• Pre-release flow: PRE_RELEASE.md checklist; GitHub Actions release workflow on tag push; README pre-release notice and docs link.

Changed

• UI: ChatGPT-style layout, custom alert/confirm, sidebar menu when closed, Dashboard (System, Skills, Models, Brain, World, Missions), hologram sidebar gap.

---

[7.3.0] - 2026-02-17 (Security Focus)

The Connectivity & Branding Sync (Orythix001 Edition)

This release focuses on stabilizing the connection between the VIKI Core and the Hologram Dashboard while standardizing the project's identity under the Orythix001 brand.

🔧 Core Connectivity & Security

• Enforced CORS Governance: Implemented a robust manual CORS header system as an after_request filter to ensure reliable browser-to-server connectivity regardless of the UI port (5173/5174).
• Unified Authentication: Synchronized shared VIKI_API_KEY across both backend and frontend environments to eliminate 401/403 errors.
• Robust Auth Validation: Added hidden character stripping (.strip()) to API key comparisons to prevent environment-specific newline issues.
• Process Management: Optimized server startup logic to prevent port-clash and background process leakage.

🧠 Cognitive & Branding Refactor

• Brand Alignment: Successfully migrated all project contributors and designer references to Orythix001.
• Self-Reflection Update: Updated internal "Curiosity" and "Recall" themes to match the new organizational identity.
• Memory Search Overhaul: Corrected memory search example strings to ensure accurate retrieval patterns for the new brand.

📈 SEO & Discoverability

• Search Engine Optimization: Injected high-value keywords (Cognitive Architecture, Sovereign Intelligence, Orythix) into README and UI metadata.
• Social Preview Ready: Standardized OpenGraph and Twitter card metadata for professional project sharing.

📁 Project Structure

• Worktree Consolidation: Merged all development worktrees (jih, khb, kqo, rnt) into the main branch and decommissioned secondary worktrees for a cleaner repository structure.

---

Full Changelog: v7.2.0...v7.3.0