v0.4.0 — Graph + governance foundation

AgentForge v0.4.0 — Graph + governance foundation

Released 2026-06-24. Coordinated release train (ADR-0015): every
workspace package bumps to 0.4.0 in lockstep.

The 0.4 train lands embedded, zero-ops graph storage and sharper GraphRAG;
an offline upgrade-drift report so consumers can see what a version bump
fixed; the first pillar of a governance spine (identity); and a data-loss
fix in agentforge upgrade. Two new packages ship: agentforge-memory-kuzu
and agentforge-governance. Additive and backward compatible — safe to
upgrade from 0.3.x.

---

Highlights

• feat-027 — embedded KuzuGraphStore. A zero-ops, file-backed,
  in-process graph store — path: .ckg and the store exists, no server (the
  graph analogue of the SQLite MemoryStore). It implements the locked
  GraphStore contract and passes run_graph_conformance, so it is
  swap-compatible with the Neo4j / SurrealDB drivers — and makes the whole
  graph + GraphRAG path testable offline. New agentforge-memory-kuzu
  package (driver: kuzu).

• enh-005 — directional GraphRAG expansion. retrieval.graph_expansion
  gains direction: in | out | any, so expansion follows asymmetric edges
  the right way — in for callers / who-cites-X / dependents, out for
  callees / what-X-cites. Defaults to any (the original behaviour), so
  existing agents are byte-for-byte unchanged. No ABC change.

• enh-006 — upgrade drift report. agentforge upgrade --notes [FROM..TO]
  prints which fixes — and the issues they close — a version range shipped, so
  a consumer can clean up workarounds a bump made removable instead of letting
  them linger. Works offline from a release_notes.json shipped in the wheel;
  a real agentforge upgrade also prints the summary for the range it crossed.
  Plus a @deprecated registry that warns and feeds the report.

• feat-029 — governance: identity (pillar 1). The foundation of a
  governance spine (ADR-0023): every agent gets a stable, portable Principal
  so every action has a name. New IdentityProvider contract + conformance in
  core; the existing Principal is widened additively (kind / owner) so
  one principal serves both auth and identity. New agentforge-governance
  package ships the offline local driver (HMAC-signed credentials, URN ids).
  governance.identity config. Registry / policy / audit pillars follow on
  the 0.5 train.

• bug-025 — agentforge upgrade data-loss fix. Upgrade was overwriting
  forked files and erasing agentforge:custom blocks; it now skips forked
  files and preserves the custom region via the three-section merge, and
  --dry-run prints a per-file plan. The (closes #NN) CHANGELOG convention
  was adopted in the same change.

Designs landed (build on the 0.5 train)

• feat-028 — durable execution + human-in-the-loop (spec): checkpoint-and-
  resume so a run survives process death, plus approval gates that suspend
  before irreversible tool calls — promoting the record/replay seam into a
  checkpoint seam.
• ADR-0023 + the governance epic architecture (identity shipped; registry /
  policy / audit specced).

Upgrade notes

• Additive across the board; no breaking changes from 0.3.x. The new packages
  (agentforge-memory-kuzu, agentforge-governance) are opt-in — installing
  the base agentforge-py is unaffected.
• After upgrading, run agentforge upgrade --notes 0.3.1..0.4.0 to see the
  resolved issues for the range.

Packaging

• Every workspace member (now 36 packages, incl. the two new ones) bumped
  to 0.4.0; cross-package pins refreshed to ~= 0.4.0.
• The packaged-wheel release gate now also exercises the Kùzu graph store, the
  governance identity provider, and the upgrade --notes artifact from the
  built wheels before publish.