v0.23.0

0.23.0 (2026-07-16)

Features

• add durable continuation checkpoints (#231) (dcf27c5)
• add first-class semantic language (#232) (87db724)
• add governed hosted secret handoff (0b26187)
• add guarded semantic unit mutation (#241) (34bd057)
• add hardened K3s bootstrap (ebecf2e)
• add hosted credential security authority (7194bae)
• add hosted platform and cell charts (ab525a9)
• add hosted platform operations gates (68bc982)
• add human-readable memory citation guidance (cf67623)
• add semantic unit context packs (#242) (e889196)
• complete hosted runtime packaging contract (1b91db4)
• complete isolated hosted tenant runtime (f451d8a)
• complete the hosted private multi-tenant beta (def4d4b)
• compose hosted runtime security (73a4875)
• expose process media product action (eaea4b7)
• expose semantic recall and creation review (#240) (818bb6f)
• freeze immutable hosted release unit (89c97b9)
• hosted: complete integrated durability plane (dbabc6e)
• hosted: complete platform operations composition (d304997)
• hosted: complete private multi-tenant beta infrastructure (61eec3f)
• hosted: harden the owner-canary deployment path (#235) (5700254)
• hosted: implement live provider lifecycle (48dd56b)
• implement durable hosted provisioner core (8dd1b08)
• implement hosted runtime operator and restore (719ba29)
• implement hosted transfer v2 runtime (5b39c7d)
• implement split-state hosted foundation (c24420a)
• process media with timestamped transcripts (1e44642)
• reconcile governed media artifacts (f228434)
• retain actionable media job state (32369ba)
• scaffold hosted infrastructure delivery (2d4c450)
• wire automatic media reconciliation (014fbf1)

Bug Fixes

• accept browser safelisted upload preflights (c255ffb)
• align memory citation link guidance (ac2a692)
• bind Windows batch timestamps to file handles (5377ce6)
• bound rotating media discovery (82aa88f)
• ci: canonicalize Terraform validator path (1fe3cb9)
• ci: create validator install directory (c985145)
• ci: install pinned Trivy release artifact (657ef1c)
• classify hosted command admission per invocation (d925642)
• clean Windows batch stages after failed replace (6031060)
• close automatic media recovery gaps (4116aa9)
• close hosted admission escape hatches (6898181)
• close hosted platform review blockers (f9a3cca)
• close hosted runtime admission escapes (14ecbbf)
• close provisioner PostgreSQL safety gaps (a8fa7ff)
• close supersession staging cleanup gaps (78ef2c7)
• compare transcript sidecars by raw bytes (8bd4532)
• constrain provisioner trusted proxies (3a78353)
• derive lease selector defaults from leaves (cafee99)
• emit scheduler failures on transport errors (f4edfa2)
• freeze pod spec during job finalization (1b4ed16)
• guard explicit media retries (d679b29)
• harden automatic media reconciliation (ff1b7fb)
• harden hosted Helm deployment boundary (42d4bf9)
• harden hosted platform operations (32c56ab)
• harden hosted restore lifetime ownership (596a138)
• harden hosted secret handoff (6f719a0)
• harden media processing outcomes (13a796b)
• harden media reconciliation convergence (bb9a512)
• harden provisioner fencing and leases (2ea5603)
• harden writer fencing and supersession atomicity (4c21edf)
• heal orphan lexical index rows (bc56ff0)
• hosted: distinguish expired export requests (9e27b4c)
• hosted: harden provider lifecycle boundaries (0c5c29e)
• hosted: tighten integrated release validation (0915135)
• ignore private batch workspaces during retrieval (7e81131)
• include project registration in supersession batch (7274ad1)
• keep frontmatter cache content-fresh (80eb668)
• keep frontmatter cache content-fresh (c0efb69)
• keep hosted runtime import-safe on Windows (b085814)
• keep pending sidecar CAS in text hash domain (cb3167a)
• lock hosted platform admission policy (95c3c24)
• make export release cleanup replay-safe (54618b9)
• make supersession atomic (a423fc0)
• persist actionable stale transcription failures (4614964)
• preserve and govern automatic media processing (0fbf6de)
• preserve completed transcripts on media failure (2c96a66)
• preserve concurrent transcripts during stale recovery (3b81a29)
• preserve full index retry ledger (ba69f9c)
• preserve legacy completed media (48a4534)
• preserve user ACL inheritance for Windows service writes (a7cd43a)
• prevent uv lockfile drift (#239) (b16e8d4)
• probe selected hosted protocol (6472367)
• reconcile aggregate media retries (c7c8911)
• reconcile malformed completed provenance (59b8037)
• reject abbreviated Ansible secret overrides (4b83b74)
• reject legacy credentials in v2 cells (278dae6)
• retry stable transcript commits and surface sidecar conflicts (4b2cc59)
• scope writer lease to write operations (7454be5)
• support guarded batch writes on Windows (f5fad5a)
• verify Windows media identity consistently (026b552)

Performance

• index media discovery lookups (9d463fa)