holt 0.4.7

Holt 0.4.7: keep active sessions and source work safe

Install the signed, version-pinned GitHub release artifact:

npm install -g https://github.com/Raed2180416/holt/releases/download/v0.4.7/holt.tgz

The bare holt npm registry name is not an official distribution. Do not use
npm install -g holt; use the exact GitHub release URL above.

A clean worktree can still be in use. Sessions can now claim ownership before editing, renew it
while working, hand it off, and release it when finished with the workspace:

holt ownership claim my-worktree --owner session-123
holt ownership heartbeat my-worktree --owner session-123
holt ownership release my-worktree --owner session-123

Gate and clean retain claimed worktrees; landing plans defer them. Context, agent briefings, MCP,
the TUI, and the graph show the same ownership evidence. Expiry requires owner release or an
explicit reviewed takeover. An interrupted internal operation releases its mutex while preserving
the session claim. This coordinates participating sessions locally; it does not detect arbitrary
running agents. See the ownership guide.

When a worktree contains only a manifest-backed ignored dependency install, Holt now reports that
as generated residue instead of allowing it to crowd out actual source work in holt status,
holt risk, or the MCP summary. It is an explanation, never a cleanup permission: an install can
contain local patches or data, so the worktree remains non-disposable. Mixed, unexplained, and
secret-bearing ignored paths remain ordinary work at risk.

The README also puts the disposable first-look example before the own-repository check, and the
website provides a direct GitHub entry point for source, releases, and feedback.

This release does not claim customer adoption, productivity gains, universal host enforcement, or
zero filesystem risk. Holt's cleanup decisions still require the relevant evidence and explicit
authority.

Verify this exact artifact

After downloading holt.tgz and the release assets:

gh release verify v0.4.7 --repo Raed2180416/holt
gh release verify-asset v0.4.7 holt.tgz --repo Raed2180416/holt
gh attestation verify holt.tgz --repo Raed2180416/holt
holt audit --require-signature

Each command verifies a different boundary. Do not infer provenance if the attestation query does
not succeed.

---

Holt is part of Contrare Research. Product and research queries:
research.contrare@outlook.com.