v0.22.0

---

version: 0.22.0
date: 2026-06-10
headline: "Two new kernel rungs — the test-witness verdict and trailer ship stamps — plus the fleet cookbook and a launch-ready pipeline."
themes: ["testwitness", "stamp", "examples", "quickstart", "agent-view", "publish", "cli"]
highlights:

• "New test-witness verdict: dos test-witness rules whether the tests actually witnessed a change"
• "verify learns trailer-form ship stamps, so Conventional-Commits histories become verifiable"
• "Fleet-framework cookbook wires the referee into LangGraph, CrewAI, AutoGen, OpenAI Agents"
• "Quickstart demo gains the fleet act and a zero-install uvx path"
• "Agent-surface litmus tier AV1-AV6 pins the cold-clone defect classes in the suite"
• "Publication gate hardened end-to-end; the public seed cleared for the initial commit"

---

TL;DR — v0.22.0 lands two new kernel rungs (the test-witness verdict of docs/288 and
trailer-form ship stamps of docs/289), a runnable fleet-framework cookbook for adopters,
the agent-view cold-clone hardening, and the publication-pipeline pass that cleared the
public seed for launch.

testwitness — the test-witness verdict (docs/288 Phase 1)

• New kernel rung dos.testwitness + CLI verb dos test-witness — reverse-classical
  testing: did the test run actually witness the change, or pass around it?
  • Why: a green suite that never executed the changed code is consistency, not grounding.
  • How: src/dos/testwitness.py, pinned by an 18-test suite (shipped in c966591).

stamp — trailer-form ship stamps (docs/289)

• verify learns the Conventional-Commits tail — an end-of-subject (docs/NN Phase M)
  trailer now counts as a ship stamp (Phase 1, a326fcf).
• This repo declares the trailer rung in its own dos.toml — the kernel's own history
  becomes verifiable by its own truth syscall (Phase 2, 93f4656).
  • How: [stamp] trailer_stamp = true; grammar in dos.stamp.

examples — the fleet-framework cookbook

• New cookbook: wire the referee into LangGraph / CrewAI / AutoGen / OpenAI Agents at
  each framework's believe-the-agent seam (examples/fleet_frameworks/, aaadd96).
• Lifted into runnable recipes — executed seams pinned by the suite, not pasted
  output (f49e123).
• Routed from README, AGENTS.md, and the quickstart so fleet-framework adopters find
  it (6a8fb72, 8447b1f).
• Hermes hazard demos survive a WSL-launcher bash — relative sentinel + cwd fixes
  (b64ce1d, a0784c7).

quickstart — first contact gets cheaper and truer

• The default demo gains the fleet act — admit / redirect / refuse via the real
  arbiter, not a canned transcript (dad9fa2).
• Zero-install first contact — uvx runs the 60-second quickstart in one command,
  nothing left behind (8f626c4).

agent-view — the cold-clone agent surface (docs/290/291)

• Agent-surface litmus tier AV1–AV6 lands in the suite — the A/B defect classes from
  the agent-view episode, pinned as tests (d52454c, tests/test_agent_surface.py).
• Cold-clone fixes — truthful install/suite docs, the maintainer rig out of the
  committed settings (ca931a5); go-parity corpus regen keeps LF so running the suite no
  longer dirties a cold clone's tracked tree (05dc738).

publish — pipeline hardening that cleared the seed

• Authoring-time privacy routing enters the architecture contract — public-bound
  default, fail-closed report adjudication, the cross-link rule (9d48218).
• Scanner vocabulary hardened — escaping-depth-agnostic path matching (54fcab2),
  the serving-system name's case-form gap closed by a word-boundary regex + pin suite
  (b18530b), 16 residuals scrubbed and the re-gated seed cleared (a54a165, cf911b1).
• The public seed's CI is self-consistent — the leak-scan job no-ops green where the
  scanner is absent, since the seed excludes it (e5debd1); the test job sets up uv so
  the install-level tests run rather than skip (5b2b940).

cli — the operator surface reads cleaner

• Inline design prose moved out to docs/CLI.md — cli.py 10.8k → 8.9k lines, then
  13 more docstrings + 44 comment blocks (e46fdc4, 2fbd8aa).

fixes

• commit-audit — PowerShell/batch scripts count as source (d6827dc); a ci-scoped
  claim is witnessed by its CI config (be6d220).
• home index — reindex --prune is durable (compact roots.log, drop live temp
  rows, 788fb66); throwaway temp workspaces stay out of the machine-global index
  (346217c).
• paper/bench — audit passes correcting claim/provenance defects (533eac4,
  c38aee6, 93ce1bb); the F3 coordination A/B ported to Agent-Diff, two witnesses
  agree (179a4d6); classifier-comparison table regenerated deterministically (6440263).