v0.8.0-alpha.7 — Safe Trial and Guided Governance
Pre-releaseWarning
Superseded by v0.8.0-alpha.8. Alpha.7 is retained for audit because its first Windows CI run exposed a canonical-path test expectation fixed in alpha.8.
v0.8.0-alpha.7 — Safe Trial and Guided Governance
Safe install lifecycle: PASS
Guided review scaffold: PASS
Real-process offline Governor demo: PASS
Local Researcher output probe: FAIL (honestly retained)
Goal Governor live E1: NOT RUN
Outcome value / multi-client portability: NOT PROVEN
This release makes the alpha safer and easier to evaluate without broadening
its product claims.
dsh-researcher install --dry-runperforms compatibility and target
preflight without writing installer-owned paths. Automatic detection may
still start externaldsh --version; use an explicit package binding when
that external process must be avoided.- Exact DSH
0.1.0-rc.7is required by default. Empty rc.7 CLI version output
can be verified through constrained@deepseek-ai/dshpackage metadata;
missing, wrong or untrusted metadata fails closed. backup,uninstallandrollbackpreserve both managed preset states in
content-hashed snapshots. Force upgrades and rollbacks create their own
recovery points.project-cognition quickstartcreates an external review workspace and
removes manual hash transfer. It cannot approve goals, install verifiers or
promote Project Cognition.npm run demostarts two real verifier child processes in an isolated
fixture. Assistant prose and exit code1do not end the goal; only the
matching captured exit code0reachesDONE. DSH envelopes remain an
explicitly simulated offline boundary.- The README now separates the currently trialable Project Research layer from
the experimental Goal Governor value claim.
Two local Project Research probes were also run through DSH Web. Qwen3 14B
reached SAFE but lost the task and misused git_read; local DeepSeek R1 14B
produced an unsupported report and was rejected by the terminal doctor gate.
No successful report is fabricated from these runs. They support runtime-gate
behavior and leave Researcher outcome value unproven.
The Live E1 audit found that the final run still requires a pinned readable
rc.7 module root, capture-only visible-tool evidence, an immutable run lock,
dedicated cost controls and owner input in a real interactive TTY. No Live E1
execution occurred; the readiness audit invoked no model or remote API, and no
synthetic bundle is presented as live evidence. The only model calls in this release cycle were the two local
Ollama Researcher probes above; no remote API or model fee was used.