Threadforge v0.4.6 - Local Session Learning, Mancode Workflow Cutover, Copilot SDK Hooks, and Source-Bound Domain Verification v2

Threadforge v0.4.6 — Local Session Learning, Mancode Workflow Cutover, Copilot SDK Hooks & Source-Bound Domain Verification v2

Threadforge v0.4.6 introduces automated local session learning, comprehensive Mancode immutable workflow archive cutover and trajectory sequence hashing, official GitHub Copilot SDK memory and telemetry hooks with shell plan-gate defenses, source-bound domain verification v2 with signed cutover attestations, and portable adapter CLI packaging.

---

What's New in v0.4.6

1. Local Session Learning & Memory Lifecycle Evolution

• Learning from Captured Local Sessions (5aae48e): Added capability to extract and propose project memory items directly from locally captured agent sessions without external network transmission.
• Distinct Feedback Task Reporting (64cc788): Extended memory outcome feedback telemetry to report distinct task counts and outcome breakdowns.
• Cross-Harness Memory Continuity (1f362d9): Full test coverage of the cross-harness retrieval lifecycle between Codex CLI and OpenCode.
• Session Revalidation Before Resume (f2dc72b): Strengthened handoff safety by re-verifying session stores and revision tokens prior to resume operations.

2. Mancode Migration Engine & Immutable Workflow Archive

• Immutable Workflow Archive Migration (2b0dbce, 3a4fa6e): Added native importers and cutover composition for legacy Mancode immutable workflow archives and source sets.
• Trajectory Sequence Hashing & Plan Structure Hints (e3cc1a2, abbd40d): Cryptographically hashes coding trajectory tool sequences and provides plan structure hints to guarantee verifiable migration integrity.
• Workflow Evidence Binding (52c8594, 4ced105, d5c9aea, 15f343b): Binds referenced workflow evidence, imports source artifacts, captures Devin Desktop hooks, and detects Beacon Cline plugins.

3. GitHub Copilot SDK Telemetry, Memory & Plan Gate Hardening

• Copilot SDK Telemetry & Memory Hooks (a6d90e9, 7771694): Added first-class Copilot SDK telemetry hooks and prompt-time memory hooks.
• Unscoped Task Side-Effect Gating (4fea33e, 56c10ae): Hardened preToolUse task-plan gates to intercept unscoped shell executions and tool calls outside confirmed task plan scopes (copilot-cli-plan-gate-smoke-v2).
• Project Memory MCP Fallback (12c447d, f0530f0, abecc15): Seamless project memory retrieval fallback via MCP when CLI hooks are disabled or unconfigured.

4. Source-Bound Domain Verification v2 & Signed Cutover Attestations

• Source-Bound Domain Verification v2 (549f77f, c087935): Introduced v2 domain verification with source-bound validation contracts.
• Signed Cutover Evaluation Attestations (af859dd): Signed evaluation receipts for cutover assessments, reinforced with strict JSON decoding (4230735), duplicate evidence key rejection (805c4a3), and trusted JSON parsing (8c372a2).
• AnyJev Authenticated Local Serving Endpoint (8309cc7): Enforced local authentication for decision serving endpoints.

5. Portable Adapter CLI & Ecosystem Version Alignment

• Portable Host CLI & Package Export Surface (1ce9017, c19a663, cfedbb5, 541a378): Packaged portable host CLI entrypoints, recognized npm bin symlinks, and finalized adapter export surfaces.
• Goose Procedure Materialization (2cfba77): Materialized approved procedures into .goosehints targets.
• Version 0.4.6 Alignment: Synchronized version 0.4.6 across Go CLI, MCP server, Python packages (pyproject.toml, uv.lock, anyjev), TypeScript adapter contracts, browser extension, and OpenClaw plugin.

---

Commit Changelog (v0.4.5..v0.4.6)

• a5b9e73 chore(release): bump version to 0.4.6
• 56c10ae test(copilot): verify shell plan-gate callback
• 4fea33e fix(copilot): gate unscoped task side effects
• 5aae48e feat(memory): learn from captured local sessions
• 1f362d9 test(memory): cover Codex-to-OpenCode retrieval lifecycle
• e3cc1a2 feat(migrate): hash coding trajectory tool sequences
• 3a4fa6e feat(migrate): compose Mancode source sets for cutover
• 78dd169 test(migrate): cover Mancode coordination CLI workflow
• 2b0dbce Add Mancode immutable workflow archive migration
• abbd40d feat(migrate): add Mancode plan structure hints
• d5c9aea feat(migrate): import Beacon Devin Desktop hooks
• 64cc788 feat(memory): report distinct feedback task counts
• 8309cc7 fix(anyjev): authenticate local serving endpoint
• f2dc72b fix(handoff): revalidate sessions before resume
• a6d90e9 feat(adapters): add Copilot SDK telemetry hooks
• 7771694 feat(adapters): add Copilot SDK memory hook
• d897113 docs: clarify Mancode continuity parity
• c55d2f8 docs(migration): document Devin Desktop import gap
• 541a378 fix(adapters): compile package export surface
• cfedbb5 fix(adapters): add explicit packaged CLI entry
• c19a663 fix(adapters): recognize npm bin symlink entry
• 1ce9017 feat(adapters): package portable host CLI
• 00b6c73 test(cli): bind v2 split roles to Python contract
• c087935 fix(cli): validate domain verification v2 responses
• 549f77f feat(rrsi): add source-bound domain verification v2
• af859dd feat(cutover): add signed evaluation attestations
• f0530f0 test(hosts): verify Copilot project memory instructions load
• 39cc05e docs(hosts): record installed smoke coverage refresh
• 52c8594 feat(migration): bind referenced Mancode workflow evidence
• 4ced105 feat(migration): import Mancode source artifacts
• 15f343b feat(migration): capture Beacon Cline plugin presence
• 2cfba77 feat(goose): materialize approved project procedures
• 8c372a2 fix(cutover): share strict JSON trust parsing
• 4230735 fix(cutover): strictly decode top-level report
• 805c4a3 fix(cutover): reject duplicate evidence JSON keys
• abecc15 fix(copilot): disable unsupported CLI memory hook
• 12c447d test(copilot): verify project memory MCP fallback

---

Release Assets

Asset	Target OS / Arch	SHA-256 Digest
threadforge_0.4.6_windows_amd64.zip	Windows (amd64)	2e7ec7ff57fc122bb8628cb99b055e86b34d5213f25ba92644946418daa702e7
threadforge_0.4.6_linux_amd64.tar.gz	Linux (amd64)	1f981670013f6352d740ec810109380f854206ebd199b9b34db1fdff1a02f72a
threadforge_0.4.6_darwin_arm64.tar.gz	macOS (arm64 / Apple Silicon)	222aa57c9c1dd7d139e0434c8d0f0aa2a76afbae5fe9e91996d82c19f823f827
threadforge_0.4.6_darwin_amd64.tar.gz	macOS (amd64 / Intel)	e676c53dc3d1650735c5cb48924b04ac625f5059c7a8d342a8a1cce8d1e3072f
checksums.txt	All platforms	Included in release

Full Changelog: v0.4.5...v0.4.6

Threadforge v0.4.5 - Task-Scoped Retrieval Receipts, Task-Aware Memory Installers, Cline Plan Gate, and Linux Installer

Threadforge v0.4.5 — Task-Scoped Retrieval Receipts, Task-Aware Memory Installers, Cline Plan Gate & Linux Installer

Threadforge v0.4.5 delivers task-scoped memory and procedure retrieval receipts across CLI, hooks, MCP, and /v2/context, task-aware memory installers and selectors across all supported harnesses, an optional Cline CLI task-plan gate plugin, a rootless checksum-verified Linux amd64 installer, and large-file migration backup verification fixes.

---

What's New in v0.4.5

1. Task-Scoped Retrieval Receipts & Memory Outcome Feedback

• Retrieval Receipts (8193b8a, aff1a75, 88c0159, af4e79b): Recorded bounded local retrieval receipts across project-memory reads, procedure reads, unified /v2/context & MCP queries, and prompt-time host hooks whenever an explicit or discovered task scope is active.
• Memory Outcome Feedback (36d8465, cb93d40): Documented and schema-validated local memory outcome feedback workflows (docs/memory-feedback.md, schema/memory-feedback-*.json).

2. Task-Aware Memory Installers & Task Resume Context

• Host Task Selectors (2ce5a60, cf9b7b3, 5349170, cd4535c, 55346ae, e61ed20): Added explicit --task-id, --session-id, and --discover-active-task selectors to memory hook installers and bootstrap managers for Claude Code, Codex CLI, Gemini CLI, Qwen Code, and GitHub Copilot CLI, verified with live installer smoke suites (2195d48, a9fb360, 8561d9a).
• OpenCode Task Resume Injection (c480818, 85b155c): Added opt-in task resume context injection to the OpenCode plugin adapter and reconciled continuity parity status.

3. Cline Task-Plan Gate & Verified Linux User Installer

• Cline Task-Plan Gate Plugin (4284104): Added an optional deny-only CLI task-plan gate plugin for Cline covering editor and apply_patch file mutations outside confirmed task scopes.
• Rootless Linux amd64 Installer (4782194): Added packaging/linux/install.sh and docs/linux-install.md with SHA-256 checksum verification, single-member archive validation, and atomic binary replacement with version-check rollback.

4. Migration Hardening & Ecosystem Version Alignment

• Large Repository Backup Verification (030bb51): Fixed migration backup verification for large repository files.
• Version 0.4.5 Alignment: Synchronized version 0.4.5 across the Go CLI, MCP server, Python package (pyproject.toml, uv.lock, anyjev), Node adapter contracts, browser extension, and OpenClaw plugin.

---

Commit Changelog (v0.4.0..v0.4.5)

• 8561d9a test(codex): verify task-aware memory installer smoke
• a9fb360 test(gemini): verify task-aware memory installer smoke
• 2195d48 test(claude): verify task-aware memory installer smoke
• 030bb51 fix(migration): verify large repository backup files
• af4e79b feat(memory): record task-scoped hook retrieval receipts
• 55346ae feat(copilot): add task selectors to memory installer
• e61ed20 feat(memory): add task selectors to bootstrap hosts
• 2ce5a60 feat(claude): add task selection to memory installer
• cf9b7b3 feat(codex): add task selection to memory installer
• 5349170 feat(gemini): add task selection to memory installer
• cd4535c feat(qwen): add task selection to memory installer
• 85b155c docs(parity): reconcile OpenCode and Cline continuity status
• c480818 feat(opencode): add opt-in task resume injection
• 4284104 feat(adapters): add Cline task-plan gate plugin
• 4782194 feat(install): add verified Linux user installer
• 88c0159 feat(mcp): receipt unified context retrieval
• aff1a75 feat(memory): add project-memory retrieval receipts
• 8193b8a feat(memory): record task-scoped procedure retrieval receipts
• cb93d40 docs(memory): add memory feedback documentation, schemas, and tests
• 36d8465 Document local memory outcome feedback

---

Release Assets

Asset	Target OS / Arch	SHA-256 Digest
threadforge_0.4.5_windows_amd64.zip	Windows (amd64)	f496d18fa1643e9641ab3f1dc9c8417bd75547e0b3ac0a7d4a033ae6c3b25085
threadforge_0.4.5_linux_amd64.tar.gz	Linux (amd64)	05055a25e8c7285ba43bb8a7d7bf1873886ee03be7a61b5a50d1c8930dc638cc
threadforge_0.4.5_darwin_arm64.tar.gz	macOS (arm64 / Apple Silicon)	9594ca55f6f174b4b08c2d3fefe0f80cb1e15f666e4810e1b32bb72a553a260c
threadforge_0.4.5_darwin_amd64.tar.gz	macOS (amd64 / Intel)	175a9aa94499bbbb7412c03ecc7fc80f2727678ed507b82c75f0e0ab81ec634a
checksums.txt	All platforms	Included in release

Full Changelog: v0.4.0...v0.4.5

Threadforge v0.4.0 - E-ink Banner, MCP Ecosystem Expansion, and Vercel AI Telemetry

Threadforge v0.4.0 — E-ink Banner, MCP Ecosystem Expansion, Memory Feedback & Vercel AI Telemetry

Threadforge v0.4.0 introduces an e-ink visual style redesign, multi-harness MCP bootstrap expansions (DeepSeek Harness, ZCode, OpenHands, Kimi Code, Qoder), Vercel AI SDK v7 telemetry integration, structured local memory feedback tracking, signed Mancode legacy plan review paths, and cross-platform runtime reliability improvements.

---

What's New in v0.4.0

1. Visual Identity & Documentation Overhaul

• E-ink Style Poster: Redesigned the primary project banner (assets/threadforge-banner.png) to a clean, minimalist monochrome e-ink / e-paper aesthetic with technical linework.
• Modernized Documentation: Restructured README.md with responsive visual badges, executive ASCII architecture flowcharts, and a comprehensive 20+ harness capability matrix.

2. Agent Harness MCP & Adapter Expansions

• DeepSeek Harness MCP Patch Renderer (6b5a99e): Added deterministic MCP patch rendering and format validation for DeepSeek Harness.
• ZCode & Qoder MCP Bootstrap (6b09693, 15a6755): Added project-scoped MCP bootstrap installers for ZCode and Qoder CLI environments.
• OpenHands & Kimi Code Adapters (98fbe6d, d41b9d0): Added OpenHands global MCP configuration manager and Kimi Code project MCP bootstrap.
• Aider Procedure Integration (363712a): Supported explicit, privacy-audited procedure loading for Aider.

3. Agent SDK Observability & Telemetry

• Vercel AI SDK v7 Telemetry (6069cf1, 209bb45, 3a1bbb8, 80d3cfd): Added telemetry instrumentation for Vercel AI SDK v7 with strict prompt/completion body suppression and loopback export validation.
• Metadata-Only OTel Span Processor (2167583): Added generic span processor ensuring local privacy scrubbing before local ingestion.

4. Governed Memory Feedback & Task Continuity

• Local Memory Feedback Subsystem: Introduced threadforge memory feedback commands with append-only revision logging and JSON Schema validation (schema/memory-feedback-*.json).
• Copilot CLI & OpenCode Injection (d5f7c27, c3ad668): Added prompt-time approved memory injection for Copilot CLI prompts and OpenCode user queries.
• Qwen Task Resume Context (95b299e): Enabled opt-in task continuity resume context for Qwen Code.

5. Migration Gating & Cutover Safeguards

• Signed Review for Mancode Plans (3d95f84, 61255a6): Enforced cryptographic attestations and plan verification before allowing cutover of legacy Mancode plans.
• Safe Artifact & Evidence Validation (d18cf15, 547af42, 3496d60): Validated legacy migration paths and protected references to external artifacts.

6. Cross-Platform Hardening & Test Isolation

• Windows Hardlink Fallbacks: Added atomic creation fallbacks in procedure/project stores and distillation caches when hardlinks fail under restricted Windows tokens.
• Loopback & Cleanup Probes: Enhanced cleanup for Git object directory trees and added graceful environment probes for AppContainer loopback socket testing.

---

Commit Changelog (v0.3.5..v0.4.0)

• 8ebf919 feat: bump version to 0.4.0, update banner to e-ink style, and apply cross-platform fixes
• 6b5a99e Add DeepSeek Harness MCP patch renderer
• 6b09693 Add ZCode project MCP bootstrap
• 98fbe6d Add OpenHands global MCP adapter
• d41b9d0 Add Kimi Code project MCP bootstrap
• 15a6755 Add Qoder project MCP bootstrap
• 80d3cfd Verify Vercel AI SDK context privacy
• 3a1bbb8 Add reproducible Vercel AI SDK v7 span smoke
• 209bb45 Document Vercel telemetry privacy version floor
• 6069cf1 Update Vercel AI SDK v7 telemetry adapter
• 3d95f84 Add signed review path for Mancode legacy plans
• 95b299e Add opt-in Qwen task resume context
• 61255a6 Block cutover for unbound Mancode legacy plans
• c009fd2 Test Mancode V2 history snapshot retention
• 27540e6 Include Python lock graph in dependency inventory
• 36be99d Include pip in locked Python test environment
• b91a181 Lock Python extras and enforce in CI
• 363712a feat(adapters): add explicit Aider procedure loading
• 547af42 Support safe Mancode referenced text formats
• d18cf15 Bind Mancode legacy artifact references safely
• 3496d60 fix(migration): validate legacy evidence paths
• 6420e06 feat(cline): add advisory project memory rule
• 2167583 feat(adapters): add metadata-only OTel span processor
• d5f7c27 feat(memory): add Copilot CLI prompt-memory injection
• c3ad668 feat(opencode): add opt-in current-query memory injection
• 28bfe99 docs: modernize and structure README for professional presentation

---

Release Assets

Asset	Target OS / Arch	SHA-256 Digest
threadforge_0.4.0_windows_amd64.zip	Windows (amd64)	5d49e271d354924a4d78f168e77f91677cf43df18572c294c6567cba8163ba5a
threadforge_0.4.0_linux_amd64.tar.gz	Linux (amd64)	7e92e56ab9c5169e98bbbb9006fdadca9ca23ab0d626652341657aa52eda7aeb
threadforge_0.4.0_darwin_arm64.tar.gz	macOS (arm64 / Apple Silicon)	861a96714b576620b928871c5e9f46e8f4aba1454f80c01267c69dd2ca3efe11
threadforge_0.4.0_darwin_amd64.tar.gz	macOS (amd64 / Intel)	b7a232209a11078089a2d529a72465852a2478a4a4ed0d1cdebe5edc7ef8f20d
checksums.txt	All platforms	Included in release

Full Changelog: v0.3.5...v0.4.0

Threadforge v0.3.5 - Mancode Ref Migration, Cline MCP Bundle, and OpenCode Injection

Threadforge v0.3.5 — Mancode Ref Migration, Cline MCP Bundle, OpenCode Memory Injection & Live Monitoring

Threadforge v0.3.5 delivers comprehensive Mancode legacy git-ref authority binding and state preservation, portable Cline plugin discovery and global MCP integration, OpenCode memory injection tooling, privacy credential scan performance gating, and live M8ven runtime inspection verification.

---

What's New in v0.3.5

1. Mancode Migration, Ledger Preservation & RRSI Tool-Call Sequences

• Git-Ref Authority & Privacy Snapshots: Added policy screening for Mancode git-ref imports, task bundle intake, and privacy-safe authority transition summaries (3c18b95, 797148d, b24eabf, 789ef7c, 63695d6).
• State & Artifact Preservation: Preserved legacy Mancode requirements, review states, verification summaries, plan artifacts, workflow ledgers, cached statuses, and team policy workspaces (8e6b7e2, d0a4560, 1063358, 516f1e1, b87ed00, 9c177b7, 90f86ae, 8e2c985).
• RRSI Tool-Call Sequence Preservation (482411c): Maintained deterministic ordering and continuity for legacy RRSI tool-call sequences across migration checkpoints.

2. Cline Integration & Portable Plugin Bundles

• Cline Global MCP Manager (0ee7798): Added cross-platform manager for configuring and mounting Threadforge tools into Cline's global MCP configuration.
• Portable Plugin Bundle & Skill Inventory (2b73291, a294941): Delivered portable CLI plugin distribution and automated discovery for project-scoped skill inventories.

3. OpenCode Memory Injection & Adapter Tooling

• threadforge memory inject-opencode: Added first-class CLI subcommand and transform hooks (adapters/src/opencode-plugin-config.ts) to inject Threadforge context and memory directly into OpenCode agent runs.

4. Privacy Scanning Performance

• Gated Credential Regex Scans (42bec34): Optimized runtime intake with fast heuristic pre-filtering before running heavy credential redaction regular expressions.

5. Verification & Live Monitoring

• Live M8ven Runtime Monitoring: Integrated live-monitored server verification badge and security posture tracking into README.md.
• Ecosystem Version Synchronization: Aligned version 0.3.5 across Go CLI, MCP server, Python SDK, Node adapters, browser extension, and OpenClaw plugin.

---

Commit Changelog (v0.3.0..v0.3.5)

• 22b1051 docs: update M8ven score badge to live monitor URL
• d81d555 feat: bump version to 0.3.5 and add M8ven badge to README
• 482411c feat(migrate): preserve RRSI tool-call sequences
• 42bec34 perf(privacy): gate credential regex scans
• 8e2c985 feat(migrate): bind Mancode team policy workspace
• 90f86ae feat(migrate): bind legacy workflow cached statuses
• 9c177b7 feat(migrate): bind legacy Mancode workflow ledgers
• b87ed00 feat(migrate): preserve legacy Mancode plan artifacts
• 516f1e1 feat(migrate): preserve legacy Mancode verification summaries
• 1063358 feat(migrate): preserve legacy Mancode review state
• d0a4560 feat(migrate): preserve legacy Mancode requirements
• 8e6b7e2 feat(migrate): summarize legacy Mancode workflows
• a294941 feat(cline): verify project skill inventory discovery
• 2b73291 feat(cline): add portable CLI plugin bundle
• 0ee7798 feat(adapters): add Cline global MCP manager
• 797148d feat(migrate): screen Mancode git-ref imports by policy
• 3c18b95 feat(migrate): summarize Mancode authority transitions
• b24eabf feat(migrate): import Mancode git-ref privacy snapshots
• 789ef7c feat(migrate): import Mancode git-ref task bundles
• 63695d6 feat(migrate): import local Mancode git-ref summaries

---

Release Assets

Asset	Target OS / Arch	SHA-256 Digest
threadforge_0.3.5_windows_amd64.zip	Windows (amd64)	715a32f19a9ef71e9f20ffdde350b290f5144ef107ea22f5e1d138b4603d9a66
threadforge_0.3.5_linux_amd64.tar.gz	Linux (amd64)	1584fd42f09aff480d54e2de6dc6849d0c4cae54688ab31bfbe5753430244d99
threadforge_0.3.5_darwin_arm64.tar.gz	macOS (arm64 / Apple Silicon)	c3905b24f9802ccfece212491a9fd4f59efaa0d3e8eddd1278ccc8a18e021e1b
threadforge_0.3.5_darwin_amd64.tar.gz	macOS (amd64 / Intel)	7cd523c3ed75bd7546c390a02d284d4465d283419e602d074d75625c3e739610
checksums.txt	All platforms	Included in release

Full Changelog: v0.3.0...v0.3.5

Threadforge v0.3.0 - SDK Observability, MCP Resources and Handoffs, Ranked Memory, and Backup-Verified Migration

Threadforge v0.3.0 — SDK Observability, MCP Resources & Handoffs, Relevance-Ranked Memory & Backup-Verified Migration

Threadforge v0.3.0 introduces first-party SDK observability wrappers (OpenAI, Anthropic, Claude Agent SDK, and Vercel AI SDK), MCP resource and paginated task-handoff surfaces, relevance- and module-ranked memory retrieval, source-bound learned procedures, Copilot IDE prompt & OpenCode planning profiles, privacy-safe Wazuh helpers, and backup-verified migration gates.

---

What's New in v0.3.0

1. Agent SDK Observability (@threadforge/adapter-contracts)

• OpenAI & Anthropic SDK Observers (ca1a12e): Added local loopback telemetry wrappers that capture model-call metadata, token usage, latency, and error signals with digest-first privacy defaults.
• Claude Agent SDK Query Stream Observer (45d67ad): Added non-mutating async-iterable query stream instrumentation with bounded digest-first event emission to local intake.
• Vercel AI SDK Telemetry Settings (05a2962): Added safe experimental_telemetry configuration helpers with prompt/response capture disabled by default and loopback-restricted export.

2. Memory Ranking, Source-Bound Learning & MCP Resources

• Relevance & Module-Scope Context Ranking (b726683): Ranked /v2/context and MCP context retrieval by query relevance and repository module/path scope while preserving freshness and conflict withholding.
• Source-Bound Learned Procedures (6ff69dc, b05e80a): Bound threadforge memory learn proposals to applicable repository-relative source files and verified deterministic proposal identity and persistence.
• Metadata-Only Freshness-Aware Procedure Listing & Redaction (e543178, d0092d7): Made procedure index/list operations metadata-only and freshness-aware, and redacted private trace references from agent-facing memory reads.
• Advisory Memory via MCP Resources (8fa4226): Exposed approved, freshness-verified project memory and procedures as read-only MCP resources alongside existing MCP tools.

3. Cross-Harness MCP Handoffs, Copilot IDE Prompts & OpenCode Profiles

• Paginated Task Handoffs over MCP (3272e60, e4997f9): Added paginated, read-only task-handoff MCP queries and verified cross-harness handoff reads across OpenCode and Codex CLI.
• Copilot IDE Prompt Installer & CLI Plan-Gate Smoke (da042f8, adb3d36): Added digest-gated .github/prompts/*.prompt.md installer for reviewed procedures and expanded installed GitHub Copilot CLI task-plan denial smoke coverage.
• OpenCode Read-Only Planning Agent Profile (fb67a2e): Added reversible project-scoped read-only planning profile installation for OpenCode.
• Antigravity Smoke Diagnostics (8c24ad4, 7ba7e70, 58be770): Made Antigravity hook transport tests deterministic and distinguished unexercised smoke probes from tool-exposure diagnostics.

4. Backup-Verified Migration, Wazuh Helpers & RRSI Split Classification

• Mancode Git-Ref Authority & Retained Backup Verification (3c69bfb, a58002b): Blocked unreconciled Mancode Git-ref authority during migration and required verified, intact source backup snapshots before threadforge migrate apply can proceed.
• Privacy-Safe Wazuh Validation & Dashboard Helper (cad98f7): Added synthetic metadata-only validation and field-mapping helpers to the Wazuh endpoint pack without reading raw runtime traces.
• EngDesign v1 Split Classification (15e448a): Classified EngDesign v1 as an out-of-distribution (OOD) evaluation surface rather than an in-distribution holdout.

---

Commit Changelog (v0.2.0..v0.3.0)

• 3c69bfb fix(migration): block unreconciled Mancode git-ref authority
• a58002b feat(migration): verify retained source backups before apply
• b726683 feat(memory): rank context by relevance and module scope
• 05a2962 feat(adapters): add safe Vercel AI telemetry settings
• 45d67ad feat(adapters): observe Claude Agent SDK query streams
• ca1a12e feat(adapters): observe OpenAI and Anthropic SDK calls
• 8fa4226 Expose advisory memory through MCP resources
• fb67a2e Add OpenCode read-only planning agent profile
• e4997f9 Verify MCP handoff reads across OpenCode and Codex
• 3272e60 Expose paginated task handoffs over MCP
• cad98f7 Add privacy-safe Wazuh validation and dashboard helper
• adb3d36 Expand Copilot CLI plan-gate smoke coverage
• da042f8 Add reviewed Copilot IDE prompt installer
• b05e80a Verify learned proposal persistence and identity
• 6ff69dc Bind learned procedures to applicable source files
• 8c24ad4 Make Antigravity hook transport tests deterministic
• 15e448a Classify EngDesign v1 as OOD, not ID holdout
• 7ba7e70 Diagnose Antigravity plan-gate smoke tool exposure
• 58be770 Distinguish unexercised Antigravity smoke probes
• e543178 Make procedure list metadata-only and freshness-aware
• d0092d7 fix(memory): redact private trace refs from agent reads

---

Release Assets

Asset	Target OS / Arch	Description
threadforge_0.3.0_windows_amd64.zip	Windows (amd64)	Standalone threadforge.exe CLI binary + LICENSE & NOTICE
threadforge_0.3.0_linux_amd64.tar.gz	Linux (amd64)	Standalone threadforge CLI binary + LICENSE & NOTICE
threadforge_0.3.0_darwin_arm64.tar.gz	macOS (arm64 / Apple Silicon)	Standalone threadforge CLI binary + LICENSE & NOTICE
threadforge_0.3.0_darwin_amd64.tar.gz	macOS (amd64 / Intel)	Standalone threadforge CLI binary + LICENSE & NOTICE
checksums.txt	All platforms	SHA-256 digests for all v0.3.0 release archives

Full Changelog: v0.2.0...v0.3.0

Threadforge v0.2.0 - Cross-Harness Task-Plan Gates, Windsurf Skills, and Multi-OS CI

Threadforge v0.2.0 — Cross-Harness Task-Plan Gates, Windsurf Skills, Freshness Smokes & Hosted Multi-OS CI

Threadforge v0.2.0 expands task-plan boundary guards, project skill targets, cross-harness procedure freshness verification, Mancode privacy migration coverage, and cross-platform CI stability across Ubuntu, Windows, and macOS.

---

What's New in v0.2.0

1. Task-Plan Boundary Gates Across Gemini CLI, Cursor & Antigravity

• Gemini CLI (2fe7bf5): Added project-scoped BeforeTool deny-only task-plan guard for direct write_file and replace operations, plus installed-CLI denial smoke coverage.
• Cursor (2fe7bf5): Added opt-in deny-only task-plan hook configuration and boundary enforcement for out-of-scope file writes while preserving sibling Cursor hooks.
• Antigravity (1d4a792): Added opt-in deny-only task-plan gate and hook lifecycle management for direct file writes outside a confirmed governed_execution task scope.

2. Windsurf Project Skills & Cross-Harness Procedure Flows

• Windsurf Project Skills (a7d769a): Added digest-gated project skill installer (windsurf skills install|uninstall) with exclusive ownership markers, SHA-256 verification, and neighboring-file preservation.
• Cross-Harness Procedure Flow & Stale Cursor Injection (b85988c, d71677a): Verified end-to-end cross-harness procedure learning/publication/retrieval flows and confirmed that stale source-bound procedures are withheld during Cursor session-start injection.

3. Migration Hardening & Source Readback Reconciliation

• Mancode Privacy Migration Coverage (f4a6cb6): Hardened Mancode privacy/redaction record conversion and snapshot verification during local pending-review migration.
• Migration Source Reconciliation (9f8c21b, 62c856a): Refreshed legacy source readback evidence and reconciled migration coverage reporting.

4. Cross-Platform Path Canonicalization & Hosted CI Verification

• Multi-OS GitHub Actions Matrix (f8a3ba6, b417888, 51b47ca): Verified hosted Ubuntu, Windows, and macOS CI runs across Go, Python, TypeScript adapters, and Playwright Chromium/Firefox browser-extension suites.
• Cross-Platform Path & Alias Handling (e807ec0, b0f312d, a6279ce, b535373): Canonicalized Windows/macOS path aliases (such as /private/var and Windows 8.3 short paths) across TypeScript adapter tests, installed-skill smoke scripts, and Python distribution checks.

---

Commit Changelog (v0.1.0..v0.2.0)

• b85988c test(memory): verify cross-harness procedure flow
• f4a6cb6 Harden Mancode privacy migration coverage
• 9f8c21b docs(migration): refresh source readback evidence
• d71677a test(memory): cover stale Cursor injection
• a7d769a feat(adapters): add Windsurf project skills
• f8a3ba6 docs: record hosted CI verification
• e807ec0 fix: canonicalize cross-platform adapter paths
• b0f312d fix: handle cross-platform adapter path aliases
• 51b47ca fix: pin Python lint rules for CI
• a6279ce fix: harden Python paths and fixture portability
• b535373 fix: preserve smoke config and Windows path aliases
• b417888 fix: make hosted test matrix cross-platform
• 1d4a792 feat: add Antigravity task plan gate
• 62c856a docs: record current migration source reconciliation
• 2fe7bf5 feat: add Gemini and Cursor task plan gates

---

Release Assets

Asset	Target OS / Arch	Description
threadforge_0.2.0_windows_amd64.zip	Windows (amd64)	Standalone threadforge.exe CLI binary + LICENSE & NOTICE
threadforge_0.2.0_linux_amd64.tar.gz	Linux (amd64)	Standalone threadforge CLI binary + LICENSE & NOTICE
threadforge_0.2.0_darwin_arm64.tar.gz	macOS (arm64 / Apple Silicon)	Standalone threadforge CLI binary + LICENSE & NOTICE
threadforge_0.2.0_darwin_amd64.tar.gz	macOS (amd64 / Intel)	Standalone threadforge CLI binary + LICENSE & NOTICE
checksums.txt	All platforms	SHA-256 digests for all v0.2.0 release archives

Full Changelog: v0.1.0...v0.2.0

Threadforge v0.1.0 - Local-First Agent Memory, Continuity, and Evolution

Threadforge v0.1.0 — Initial Public Release

Threadforge is a local-first memory, task continuity, calibrated typed decision, and regularized harness evolution platform for AI coding agents. It unifies the core capabilities of Beacon, Mancode, AnyJev, and RRSI into a single loopback-confined runtime.

---

Highlights

1. Beacon Telemetry, Threat Scanning & Source-Freshness Memory

• Loopback OTLP & MCP Service (threadforge serve): Binds OTLP/HTTP (127.0.0.1:4318), OTLP/gRPC (127.0.0.1:4317), and read-only /dashboard/, /v2/context, /v1/tasks, and /v1/security/scan endpoints strictly to loopback interfaces.
• Procedure Graph v1 & Project Memory v2: Directed, typed procedure graphs and immutable .threadforge/memory/records/ files with SHA-256 history chaining, local source-file freshness re-hashing, and conflict withholding.
• 25+ Host Adapter & Session Poller Slices: TypeScript adapter contracts (@threadforge/adapter-contracts) and digest-first hooks/plugins/pollers across Claude Code, Codex CLI, Cursor, Gemini CLI, OpenCode, Antigravity, GitHub Copilot CLI, Cline, Qwen Code, Command Code, Devin, Goose, Kimi Code, Kiro, Muse Code, Oh My Pi, Senpi, OpenHands, OpenClaw, Factory Droid, Vercel fx, Pi, Prime Agent, Hermes Agent, ZCode, DeepSeek Harness, and Qoder CLI, plus an opt-in MV3 browser extension for Claude.ai and ChatGPT Web.
• CEL Security Scanner & 11 SIEM Forwarding Packs: Vendored Beacon CEL threat-rule engine (threadforge security scan) and inert, explicit-consent metadata-only packs for S3, GCS, CloudWatch Logs, Splunk HEC, CrowdStrike Falcon HEC, Elasticsearch, Datadog, Sumo Logic, Rapid7 InsightIDR, Wazuh, and Microsoft Sentinel.

2. Mancode Task & Session Continuity

• CAS Revision-Checked Continuity (threadforge task / session): Local SQLite store for tasks, acceptance criteria, sessions, checkpoints, handoffs, reviews, and verification digests.
• Requirements & Scoped Task Plans: Append-only clarification Q&A (task requirements ask|answer|finalize) and repository-relative include/exclude task plans (task plan template|revise|confirm) with optional defense-in-depth PreToolUse / BeforeTool direct-write guards.
• Cross-Harness Session Handoffs (threadforge handoff): Read-only discovery across 14 native session stores, redacted brief export, and confirmation-gated session resume.
• Ed25519 Team Sync (threadforge team): Out-of-band-pinned trust policies, Ed25519-signed shared procedures, Git-ref CAS sync (team sync pull|push), scope freeze/restore lifecycle, and append-only audit verification.

3. AnyJev Calibrated Typed Decisions

• Multi-Level Calibration (threadforge decision): L0 cyclic-shift prior debiasing, L1 temperature scaling, and L2 closed-form hidden-state heads over threadforge.python.v1 JSON-over-stdio.
• Distillation & Serving Benchmarks: Model block truncation (decision model truncate), checkpoint fingerprinting, multi-stage distillation (decision distill pipeline), and loopback vLLM depth benchmarks (decision benchmark pipeline).

4. RRSI Regularized Harness Evolution

• Screen, Critic & Bounded Repair (threadforge evolution): Inventory-aware leakage screening (v3), critic feedback loop, and score/noise-band/token-cost candidate selection (evolution select) persisted as pending_human_review.
• Pinned Task-Set Commitments & Paired Bootstrap Evaluation: Source-committed split verification for Terminal-Bench 2.1, SWE-bench Verified, Harvey LAB, JobBench, and EngDesign-Open / v1, plus paired bootstrap evaluation (v1/v2).

---

Release Assets

Asset	Target OS / Arch	Description
threadforge_0.1.0_windows_amd64.zip	Windows (amd64)	Standalone threadforge.exe CLI binary + LICENSE & NOTICE
threadforge_0.1.0_linux_amd64.tar.gz	Linux (amd64)	Standalone threadforge CLI binary + LICENSE & NOTICE
threadforge_0.1.0_darwin_arm64.tar.gz	macOS (arm64 / Apple Silicon)	Standalone threadforge CLI binary + LICENSE & NOTICE
threadforge_0.1.0_darwin_amd64.tar.gz	macOS (amd64 / Intel)	Standalone threadforge CLI binary + LICENSE & NOTICE
checksums.txt	All platforms	SHA-256 digests for all release archives

---

Verification & Cutover Note

Threadforge v0.1.0 is an early preview release (0.1.0-dev). All-or-nothing legacy cutover (threadforge cutover assess) remains intentionally blocked until full feature parity, migration reconciliation, live installed-host verification, and evaluator-signed held-out benchmark trials are completed. See docs/feature-parity.md and docs/cutover.md.