assent 0.1.0

v0.1.0 - 2026-08-05

Chores

• 🎉 chore: scaffold repository — vision, ADRs, C4, meta-plan, specs skeleton, Go module, examples
• build(deps): bump actions/setup-go from 5.6.0 to 7.0.0
• build(deps): bump actions/checkout from 4.4.0 to 7.0.1
• 🔧 chore: gitignore session .worktrees/ (agent-loop-local lanes)
• build(deps): bump actions/setup-node from 5.0.0 to 7.0.0
• build(deps): bump github.com/google/cel-go from 0.29.2 to 0.30.0
• build(deps): bump github/codeql-action/upload-sarif
• build(deps): bump mkdocs-material from 9.7.6 to 9.7.7 in /docs
• build(deps): bump github.com/zclconf/go-cty from 1.16.3 to 1.19.0
• build(deps): bump github/codeql-action/init from 4.37.3 to 4.37.4
• build(deps): bump github/codeql-action/analyze to 4.37.4 to match init
• build(deps): bump golang.org/x/text from 0.39.0 to 0.40.0

Documentation

• 📝 docs: design round 2 — effects/routing/modes/config/ports ADRs, Apache-2.0, walkthrough, naming
• 📝 docs: ADR-0014 adopter test format + D-010 TDD/90% coverage gate (Taskfile-enforced)
• 📝 docs: architecture review cycle — ADR-0013 (CEL hybrid), ADR-0015 (trust boundaries), security amendments, GUIDELINES, OSS hygiene
• 📝 docs(adr): onFail branches, per-firing points, content-keyed facts, finding lifecycle + stale-consent, lint hard-errors, scan confusion matrix
• 📝 docs: D-012 adoption-gated scope, D-013 second-review record, new OQs, meta-plan adoption gate
• 📝 docs: D-014 public repo created with security settings; OQ-1 residual narrowed to domain
• 📝 docs(adr): ADR-0016 presentation theming — tiered customization, CEL messages, PresentationModel contract (D-015)
• 📝 docs(adr): ADR-0017 contract model — obligations, merge-result pinning, require-review, EntryRef, typed facts (D-016)
• 📝 docs: D-016, OQ-23..25, Phase-3 contract-fixture gate, README scope aligned to D-012
• 📝 specs: Phase-1 epics P1-E1..E4 — corpus, archetype inventory, forge dossier, prior art (full stories + REQs)
• 📝 specs: Phase-2 epics P2-E1..E5 — CEL/e2e/provider/secure-setup spikes + ADR acceptance (full stories + REQs)
• 📝 specs: Phase 3-5 epics — contracts, walking skeleton, E1-E9 + locked E10-E13 (D-012)
• 📝 planning: named-consumer disposition (D-017) — compat review folded in, OQ-19/20/21/23 re-scoped
• 📝 specs: P2-E6 Spike D — Kubernetes CRD/CR validation feasibility (D-017 B11)
• 📝 specs: P3-E4 lifecycle + P3-E5 publication protocol; E11/E12 unlocked, E14 added (D-017)
• 📝 docs: D-018 operator ratifications — reference-use-case wording, Spike D deferred to Phase-3 window, named obligations confirmed
• 📝 planning: operator inbox round — D-018/D-019 ratifications, reference-use-case wording, Spike D deferred, P1-E1 sources provided
• 📝 docs(planning): prior-art review — eight tools + implications table
• 📝 docs(examples): pin OSS corpus and resolve OQ-16 (P1-E1-S02)
• 📝 docs(planning): author rule-archetype inventory (P1-E2-S01)
• 📝 docs(examples): archetype base/head fixtures (P1-E2-S02)
• 📝 docs(planning): define success metric and close OQ-25 (P1-E2-S03)
• 📝 docs(planning): add GitLab forge dossier — threads, approvals, merge preconditions, tiers (P1-E3-S01/S02)
• 📝 docs(planning): add GitHub parity dossier for the Forge-port seam (P1-E3-S03)
• 📝 docs(planning): choose Premium secure-setup topology and draft doctor checklist (P2-E4 / OQ-24)
• 📝 docs(spike): Spike C report — contract, isolation evidence, maxAge defaults
• 📝 docs(e2e): Spike B measurements — CI default is testcontainer (OQ-6)
• 📝 docs(p2-e5): consolidate ADR acceptance evidence matrix
• 📝 docs(specs): add P3-E1 schema fixture stories
• 📝 docs(specs): add P3-E2 versioning compat stories
• 📝 specs(p3-e5): author publication reconciliation protocol stories
• 📝 docs(specs): add P3-E3 pack-migration stories
• 📝 docs(provider): freeze maxAge defaults table for P2-E5
• 📝 docs(publication): freeze marker grammar for P3-E5-S01
• 📝 docs(specs): amend P3-E2-S01 verify paths off internal/core (D-016)
• 📝 docs(decisions): log D-021/D-022 for roast P1-1/P1-2 schema fixes
• 📝 docs(schemas): soften residual 'exact is the safety default' phrasing (review F1)
• 📝 docs(decisions): close D-016 Phase-3 exit gate; log D-023/D-024
• 📝 docs(decisions): reframe D-016 gate as STAGED, not closed (F1/F3/F4)
• 📝 docs(publication): freeze reconciliation state table for P3-E5-S02
• 📝 docs(decisions): confirm D-016 Phase-3 exit gate CLOSED on main (D-025)
• 📝 docs(decisions): record D-026 operator bulk-ratification
• 📝 docs(publication): freeze duplicate-repair + one-publisher topology for P3-E5-S03
• 📝 docs(adr): author ADR-0019 publication marker reconciliation (P3-E5-S04)
• 📝 docs(rego): document escape-hatch quarantine marker (P3-E3-S03)
• 📝 docs(planning): document phase transitions and lint no-implicit-enforce-phase
• 📝 docs(api): publish API_STABILITY.md and do-not-generalize catalog
• 📝 docs(policy): document profile precedence and single-writer lint
• 📝 docs(usage): migrate walkthrough and sample READMEs to prove vocabulary (P3-E3-S04)
• 📝 docs(planning): register archetype golden corpus as assent test seed manifest (P3-E3-S04)
• 📝 docs(adr): author ADR-0018 policy lifecycle phase profile comparison (P3-E4-S04)
• 📝 docs(decisions): record D-027–D-032 inbox answers and accept ADR-0018/0019
• 📝 docs(planning): decompose P4-E1 walking skeleton into INVEST stories (autonomous vs infra-gated)
• 📝 docs(decisions): record D-033–D-036 (S01 pins, S05 placeholder, S10/S11 park, gitleaks fix)
• 📝 docs(decisions): record D-037 gitlab.com assent-lab + GITLAB_TOKEN location
• 📝 docs(decisions): record D-039 (P4-E1 autonomous slices complete) + D-040 (provider -race deadline)
• 📝 docs: record D-012 adoption SATISFIED (P4-E1-S11) + S10 live-green (D-041/D-042) with evidence
• 📝 docs: decompose Phase 5 E1 into 8 INVEST stories (canonical change model)
• 📝 docs: reconcile audit doc-drift findings D-02/D-03/D-04
• 📝 docs(spec): decompose Phase-5 E2 (decision engine + CEL backend) into INVEST stories (P5-E2)
• 📝 docs(spec): scope E2-S01 to loader-only, move run.go re-seat + policy.go retire to S02 (P5-E2-S01)
• 📝 docs(spec): scope E2-S02 to per-change eval primitive beside skeleton; move run.go re-seat to S04 (P5-E2-S02)
• 📝 docs(site): add branded MkDocs publishing
• 📝 docs(backlog): add SonarCloud maintainability remediation plan (4 lanes)
• 📝 docs: log D-045 security/OpenSSF hardening; mark P4-CODEQL + P4-SEC-OSSF done
• 📝 docs(backlog): record reference-repo coverage findings + example candidates (C1-C8, fact-provider gaps)
• 📝 docs(spec): decompose Phase-5 E3 (assent lint + rule catalogue) into 8 INVEST stories + lane C
• 📝 chore: log D-047 (lint decide-and-log) + extend TestCorePurity to internal/lint (E3-S01 review)
• 📝 docs(spec): defer REQ-E3-S07-03 deprecation metadata to OQ (no v1alpha1 lifecycle field)
• 📝 chore: log D-050 (lint controlling-provider reinterpretation, E3-S05 review)
• 📝 chore: log D-052 (topic-registry fileEvents gap — document-mode whole-file-delete non-destructive)
• 📝 docs(spec): decompose P5-E6 adopter-test harness spec-first (assent test + compare seed)
• 📝 docs(spec): add REQ-E6-S02-07 — full-entry reconstruction fail-safety (Part-A review F2)
• 📝 docs(spec): decompose P5-E-FILEEVENTS spec-first (whole-file add/delete match domain)
• 📝 docs(spec): mark REQ-E2-S01-03 superseded by EFE-S01 + repoint stale pin-test references (TestExamplesPacksKnownBlockers -> TestTopicRegistryLoadsAndLintsClean)
• 📝 docs(decisions): D-063 operator-confirmed — REVIEW default for ungoverned whole-file delete
• 📝 docs(decisions): D-064 — governed means enforce-effective only (not observe)
• 📝 docs(spec): decompose P5-E5 provider host + builtins spec-first
• 📝 docs(spec): E5 — maxAge exceed rejects (not clamps); argv hygiene REQ; seed sync
• 📝 docs(spec): E5-S02 — omit maxAge is load-time error (provider-contract)
• 📝 test(catalogue): include topic-registry in exitgate after D-052 close
• 📝 docs(decisions): defer E5-S09 ownership-file (D-070)
• 📝 docs(decisions): close E5-S10 exit gate (D-071/D-072)
• 📝 docs(openspec): add P5-E4 GitLab forge INVEST spec
• 📝 docs(openspec): tighten E4-S06 arming + checkout composition
• 📝 docs(openspec): add P5-E7 E2E conformance INVEST spec
• 📝 docs(openspec): E7-S03 catalog-index E4 pipeline arming
• 📝 docs(openspec): mark E7 autonomous slice closed (D-087)
• 📝 docs(e8): add renderer tier-0 INVEST spec
• 📝 docs(e8): address spec review on dependencies and summary port
• 📝 docs(decisions): close D-073 summary-comment slot
• 📝 docs(openspec): mark E8 autonomous complete (D-098)
• 📝 docs(e9): add distribution & release INVEST spec
• 📝 docs(e9): address review — deps, S07 split, counts
• 📝 docs(e9): restore E8 marker + changelog drift REQ
• 📝 docs(e9-s11): log OQ-2 GitLab mirror defer (D-105)
• 📝 docs(release): align install.md Go version with go.mod
• 📝 docs(e9-s11): mark OQ-2 resolved like peer rows
• 📝 docs(docs): product-only MkDocs nav + install page (E9-S08)
• 📝 docs(readme): maturity table + alpha status (E9-S09)
• 📝 docs(pcs): PolicyComparisonSuite full runner epic spec (D-057)
• 📝 docs(pcs): fix spec review — purity, catalogue extraction, D-112/115
• 📝 docs: refresh internal package map and PCS decision rows

Features

• ✨ examples: onFail branches — one predicate, both outcomes, quota case explained (P1-7)
• ✨ feat(spike): typed provider request/response schemas (P2-E3-S01)
• ✨ feat(schemas): add policy v1alpha1 authored schemas
• ✨ feat(schemas): add decision v...