v0.9.0 — feat: drawing-probe audit — L16/L18/L20 + source/tbd layer tags

抓假探测（错题集 2026-08-14：13 断层从答案键搬运、仅 2 TBD 过门票）：

• L16 ✏️零产出（MINOR）：断层全标阅读层 = 探测疑似未开机，旧格式同报逼升级
• L18 层-型匹配（MAJOR）：📄 断层命中图结构词且无 落图: 声明 → 伪装阅读层
• L20 TBDn-核销对应（MAJOR）：✏️ 占位须在 alignment-log 有核销留痕

层标注 schema：

• gaps 加 source（📄/✏️）+ tbd（✏️必带图内坐标）+ ref/landing
• ✏️ 无 tbd 拒收；📄 带 tbd 软归一（忽略+警告）；缺省 📄 向后兼容

重构：豁免词表单源提升到 models.DRAFT_NO_DIAGRAM_RE（manager/lint 共用）。

v0.8.0 — DeepSeek Harness Support

Highlights

• DeepSeek Harness 全量接入：intent-gate install --target dsh 一键接线——cordis.patch.yml 合并不覆盖、幂等可重复，uninstall 只拆自己的线
• Skills 分发：5 个 skills 装入 $DSH_HOME/skills/；因 dsh-mcp-client 只桥接 MCP 工具不桥接 prompt，playbook 以 doc-analysis-playbook skill 形态一并安装
• 修复 wheel 缺资源：force-include 改整目录映射，pipx 安装态 install --target dsh 不再崩
• 修复 Windows GBK 崩溃：CLI 强制 UTF-8 输出，emoji 注入文本不再 UnicodeEncodeError
• 测试：155 个单测全绿（新增 15 个 dsh 安装器测试 + GBK 回归测试）

Install

pipx install intent-gate-mcp
intent-gate install --target dsh   # 或 cursor / codex

intent-gate v0.7.0 — the diagram is the instrument, not a deliverable

intent-gate v0.7.0

Dual-layer intent alignment — the diagram is the instrument, not a deliverable:

• Playbook Step 0.5 rewritten: reading-layer text sweep + drawing-layer hard-draft
  in the FIRST turn; un-drawable nodes/edges become TBDn placeholders, never guesses
• Placeholders may only be cleared by code evidence or a human ruling
• Resolve/confirm gate: no mermaid draft (or no-diagram declaration), no settlement
• Lint L13: placeholder residual in delivered diagrams → CRITICAL;
  L13b: draft placeholder with no open question → MINOR
• New constraints: lint severity constitution (no CRITICAL for error-prone rules)
  • MINOR acknowledgment discipline

contract-coding skill: coding-phase addendum — code generated FROM the mermaid
contract, drift stops the line; layers over your own coding skills, never replaces.

Docs: showcase fully desensitized (smart-locker scenario); per-agent install
guide + support matrix (Cursor/Codex beta).

intent-gate v0.6.0 — closes three blind spots caught by a red-team run

intent-gate v0.6.0

Lint enforcement (L10–L12) — closes three blind spots caught by a red-team run:

• L10: data-model section with empty table-matrix → CRITICAL (existence, not just consistency);
  explicit "no new table / reuse existing" declaration downgrades to MINOR for review
• L11: complexity: complex frontmatter with untagged state-machine edges → CRITICAL
• L12: prose-only mapping anchors (no §x.y / BR-n) → MAJOR

Multi-agent support (beta)

• intent-gate install/uninstall --target cursor|codex — wires session-start discipline
  injection into non-Claude agents (merge-only, idempotent, dry-run)
• Pure-Python hook emitter (intent-gate hook session-start), no bash/plugin-dir dependency
• Per-agent install guide (Cursor/Windsurf/Gemini/Kimi CLI/VS Code/Codex) + support matrix

Fix: version surfaces synced (plugin.json/init now locked to pyproject by test)

intent-gate v0.5.0 — lint contract disclosure + L9 path-isolation gate

Highlights

• Lint contract disclosure: lint_summary reports now embed a "mechanical judgment contract" section, interpolated directly from the lint constants (L1 keyword list, L4 anchor regex, L6 write/read vocab, L7 mapping-row format, L9 rules) — no more trial-and-error guessing at what the gate checks.
• New L9 path-isolation gate (CRITICAL): DDL (CREATE TABLE) embedded inside summary.md is rejected, and declaring a sql/ path with no SQL files on disk is blocked. The "SQL only lives in project-root sql/" rule finally has a mechanical half (previously L6 silently went blind when sql/ was empty).

Rule fixes (from red-team review)

• L1: success-terminal keyword list extended with 已完结 / 已通过 (e.g. 放款中 --> 已完结 --> [*] now passes); bare 完成 / 结束 intentionally not accepted.
• L4: anchor regex no longer swallows / § () 、 as keyword tails — §3.2 / §5.1 multi-anchor cells parse independently; contiguous §3.2/§5.1 no longer merges/leaks.
• L6: write vocab gains 保存 新增, read vocab gains 读取 获取; case-insensitive matching; CREATE TABLE detection now optional-backtick and case-insensitive.
• L7: mapping-table first column accepts both bare numbers and Q-prefixed (Q1) forms.

Playbook

• §3.4: explicit 🔴 rule — DDL statements must not be embedded in summary.md, only in project-root sql/.

Tests

• ContractDisclosureTests: asserts the report contract section is interpolated from the live constants (anti-drift).
• New antibody tests for L1/L4/L6/L7 fixes and the L9 path-isolation cases (embedded DDL, empty sql/, mysql/ false-positive guard).