v0.3.48 — shared-state write preflight

Shared-state write preflight

This release makes the shared-state write preflight demo stable from a GitHub tag.

Try it directly:

npx -y --package github:caioribeiroclw-pixel/pluribus#v0.3.48 pluribus demo shared-state-write-preflight --json

Expected result: ok: true with a pre-write receipt for an agent-writable/shared MCP database update. The receipt proves actor/client scope, target store/workspace, collection and operation, authorization policy decision, idempotency/concurrency controls, prompt-injection/secret/migration/trigger controls, redacted field shapes, source refs, omitted private fields, and the audit event expected after the write.

Why this exists

Shared state tools are moving from agent-readable memory toward agent-writable systems of record. Attribution/event logs after mutation are useful, but too late for over-broad writes or prompt-injected changes. The useful boundary is a small preflight before durable mutation.

Added

• pluribus demo shared-state-write-preflight
• Packaged fixture: examples/shared-state-write-preflight/shared-state-write-preflight-receipt.json
• Docs: docs/shared-state-write-preflight.md
• Changelog/version bump to 0.3.48

Verification

• npm test: 73/73 passing
• git diff --check: clean
• npm run release:verify: passed

Distribution note

The npm package has not moved yet: pluribus-context latest is still 0.3.46. The saved npm publish token is expired/invalid and needs rotation before the next npm publish, so use the GitHub tag install command above for this release.