v0.12.0

Changelog

• 0e2b46f Fix safe Vault CLI error classification (#583)
• 901c4fd chore(browse): resync intake from upstream main (#569)
• e98c856 chore(deps): bump actions/cache from 4.2.4 to 6.1.0 (#676)
• 0912030 chore(deps): bump the actions-minor-patch group across 1 directory with 2 updates (#610)
• e8b083b chore(deps): bump the actions-minor-patch group across 1 directory with 2 updates (#675)
• 17d7a18 chore(deps): bump the go-minor-patch group across 1 directory with 8 updates (#609)
• 7ea853d chore(evidence): committed standalone+rollback evidence for the CoreKit released-consumer gate (#657)
• 21011be chore(managed): bump symcockpit/symdesk/symvault to latest pinned releases (#577)
• 71dc1ee chore(release): complete v0.12.0 changelog for post-freeze PRs (#680)
• a92385d chore(release): v0.12.0 (#661)
• a7002cc chore(repo): untrack cursor and phase0-evidence tooling paths (#651)
• 804f30f docs(migration): close #626 with evidence and record two rejected skills-runner attempts (#642)
• 14f9d0e docs(migration): promote MCP/GW rows on verified fixtures, record the skills-runner rescue (#643)
• 15d4bba docs(migration): record the #639 verification and promote the CLI/SEC-005 rows (#641)
• 787e48a docs(migration): record the merge and the oracle-portability class (#633)
• d9aff45 docs(migration): record the resume state and correct the guard-doctor oracle claim (#637)
• c933094 feat(cli): make vault approval passthrough discoverable and testable (#586) (#590)
• ec62263 feat(consolidation): complete credential generation and reviewed intake workflows (#574)
• baa9006 feat(consolidation): refresh optional modules and wire direct native routing (#573)
• cabed52 feat(guard): port capability token primitives to Rust (#542)
• 5911a1a feat(guard): port sequence repetition detector slice (#533)
• 97cdbe7 feat(managed): opt-in optional modules via existing manifest/config machinery (#537)
• 9d7054e feat(modules): consolidate Browse/Operate/Scope as buildable, replaceable Brain modules (#592)
• f9a52c3 feat(rust): close the CLI parity residual — sync, guard doctor, oracle portability (#636)
• 2f5a586 feat(rust): continue the incremental CLI and store migration with frozen Go oracles (#628)
• 1ee25ba feat(rust): freeze secret-reference resolution from Go and match it natively (SEC-001 slice 1) (#652)
• 6f13a19 feat(rust): integrate guard decide port, init CLI port and review repairs (#603)
• 6200918 feat(rust): pin secret redaction with Go-generated leak probes
• 85d528c feat(rust): port guard decision/grant/audit-chain bytes behind the Go oracle (SEC-002) (#650)
• 5c12f12 feat(rust): port guard doctor fully — 5 of 7 frozen oracle cases native (#639)
• d6f81c9 feat(rust): prove the skillsrunner port — defaults, error bytes, timeout and oracle provenance (#644)
• fadfdab feat(rust): run skills natively in sync instead of deferring to Go (#647)
• e996376 feat(usage): match OpenCode workspace discovery with Go oracle
• 8065b17 feat(vault): add human credential edit and delete (#570)
• 51a1ed5 feat(vault): add reviewed native approval management (#588)
• 5406549 feat(vault): add secure human secret creation (#567)
• 9c0e2b2 feat: Rust migration phases 1+2+3 — CLI subcommands, skills MCP gateway, FETCH-002 wire gate (#611)
• 101918f feat: add executable Rust Guard core slice (#528)
• c342286 feat: complete native Guard doctor oracle diagnostics (#677)
• f27c097 feat: intake Browse as optional Brain package (#555)
• 11531e7 feat: intake Operate as optional Brain package (#552)
• feb55b2 feat: intake Scope as optional Brain package (#551)
• 5608965 feat: integrate approved native app icons (#512)
• 337e921 feat: register independently optional Scope and Operate capabilities (#550)
• 0ccb0fe fix(broker): accept any published MCP spec revision, not just the exact requested version (#539)
• 2b54c38 fix(browse): preserve Go flow-list JSON envelope (#664)
• 2de1c89 fix(browse): restore native browser profile discovery (#665)
• fe7cc85 fix(build): batch fmt-check paths (#607)
• 48568ae fix(ci): batch release gofmt check (#608)
• b688d3a fix(config): make configuration edits previewable and recoverable (#585)
• a89b4db fix(deps): update rustls past security advisory
• 972a657 fix(guard): stop pinning go.mod and go.sum in the scan oracle (#634)
• a09de89 fix(modules): restore source setup and lifecycle fallback (#593)
• c4c323c fix(operate): resync vendored copy and restore strict CI stderr check (#575)
• 2235911 fix(oracles): re-pin the guard and init Go oracles to a reachable revision (#623)
• 170523d fix(rust): link installed skills at the render dir so the layout matches Go (#646)
• ffce208 fix(rust): regenerate profile-remove oracle fixtures (#591)
• 9115302 fix(rust): resolve legacy symskills roots in sync like Go (refs #621) (#655)
• 918f9eb fix(scripts): replace the fake symvault shell script with a compiled helper (#656)
• 6686eec fix(security): avoid false positives in vault payload scan (#564)
• 459c8cd fix(security): preserve Rust guard parity and scanner safety
• 6b70dc9 fix(skills): run native Windows gate and handle optional overlays (#670)
• 2c7eac6 fix(skills): support native Windows capability roots (#672)
• 9988f07 fix(usage): reject non-UTF-8 secret subprocess output
• f72a5b3 fix(vault): bound Brain credential plaintext lifetimes (#562)
• f021c2d fix: complete Rust handover parity after identity correction (#544)
• 4837a10 fix: make oracle freshness squash-stable (#548)
• 7c262b4 fix: stabilize descendant probe fixtures (#549)
• 525edf2 test(guard): bind raw-byte parity to frozen Go oracle (#604)
• a02adef test(managed): exclude optional cores from Fix mismatch selection (#595)
• 1501fc1 test(memory): isolate contextassembler database state (#530)
• 734cc25 test(operate): verify device-free permission intake (#572)
• ead03d0 test(optional): verify absent module doesn't break an adjacent server (#576)
• b8668f3 test(rust): freeze the on-disk result of a real skillsrunner run, symlink targets included (#645)
• b866592 test(skills): build the project-scope expectation from the resolved root (#638)
• cad9a99 test(usage): make provider timeout test deterministic (#568)
• 6d89e41 test(vault): cover reviewed intake state transitions (#578) (#579)

v0.11.0

What's changed

Features

• #443 Read Claude's OAuth token from the macOS Keychain
• #449 Detect manifest pin drift against upstream releases — closes #447
• #451 Add symdesk as a third managed core — closes #446
• #452 Report cross-core link health in symbrain doctor, not just binary presence — closes #448
• #453 Ship a foreign-server example profile and surface the readOnlyHint gap — closes #444
• #435 Give the memory HTTP sync API a production entrypoint (symbrain memory serve) — closes #426
• #439 Extend symbrain doctor to check the embedded memory and skills stores — closes #425
• #433 Audit in-process memory and skills tool calls in the gateway — closes #422

Changed

• #450 Refresh stale symvault and symcockpit managed-core pins — closes #445
• #434 Parallelize AI usage provider fetches with per-provider timeouts — closes #429
• #431 Consolidate the audit package's four overlapping tail readers — closes #428
• #436 Unify the memory and skills XDG path conventions — closes #427
• #432 Harden managed-core cosign verification and pin checksums — closes #423

Fixes

• #437 Compute per-asset checksums in bump-core.yml instead of a single scalar hash
• #438 Correct checksum asset name, Windows extension, and pin installs to tag
• #441 Parse the Codex and Copilot usage payloads as they are today
• #430 Fix stale help text and hints left over from the core absorption — closes #424

Chores

• #440 Bump the actions-minor-patch dependency group (3 GitHub Actions updates)

Closed Issues

• #422 Audit in-process memory and skills tool calls
• #423 Harden managed-core cosign verification
• #424 Stale help text and hints from the core absorption
• #425 Extend doctor to check memory and skills stores
• #426 Memory HTTP sync API needs a production entrypoint
• #427 Unify memory/skills XDG path conventions
• #428 Consolidate overlapping audit tail readers
• #429 Parallelize AI usage provider fetches
• #444 Ship a foreign-server example profile
• #445 Managed runtime pins are stale
• #446 Add symdesk as a managed core
• #447 Detect manifest pin drift
• #448 Doctor proves cores are installed but never that they can talk to each other

Full Changelog: v0.10.0...v0.11.0

v0.10.0

Changelog

• 25d2117 chore(release): prepare v0.10.0
• 651fcf2 feat: integrate memory and skills as cores, replace the gemini harness with antigravity (#417)
• fe90b62 fix(app): correct harness presentation on the Dashboard and Harnesses screens (#418)

v0.9.1

Changelog

• d3f3173 Adopt shared secret references across Brain (#408)
• e38ebbf Fix CodeQL crypto and allocation findings (#410)
• 6dab3ff chore(release): prepare v0.9.1 (#411)
• aa3390a fix(ci): make race tests fail loudly and isolate fixtures (#413)
• 14d1959 fix(release): isolate XDG paths in pre-release tests (#415)
• 47d4d00 fix: annotate registered MCP tools (#407)

v0.9.0

Changelog

• 36b8b5d chore(release): prepare v0.9.0 (#403)
• 6547344 feat(cli): add memory list and search (#393)
• d85963b feat(memory): add bounded activity store (Refs #385) (#395)
• 629add4 feat: add bounded activity read API (Refs #386) (#396)
• dce75a0 feat: import Codex activity memories as staged facts (#394)
• 970a1bb fix: harden memory trust boundaries (#389)
• 812572b perf: prefilter memory candidates before hydration (#391)
• 8dbd377 refactor: unify harness capabilities (#390)
• 545392e test(managed): seed supported binary for platform skip (#392)

v0.8.0

Changelog

• 4d0f653 Bump symaira-corekit to v0.14.0 (#322)
• 247177e Dissolve the guard module and make profiles the MCP control point (#340)
• 50039e9 Extend managed runtime to symcockpit and add harness transport detail + health (#328)
• 4de312c chore(deps): bump the actions-minor-patch group with 2 updates (#323)
• fef40d1 chore(version): bump release status to v0.8.0 (#329)
• 5c69f3b fix: count only attempted cores in managed install/repair failure reports (#343)
• 2c7cc6a fix: native ollama calls must target the scheme+host root (#325)
• 749b889 fix: protect the skip-path entries append in harness health with the probe mutex (#330)
• e7f018e refactor: replace internal/memory/llm with corekit/llmkit (#324)

v0.7.3

What's Changed

Features

• #313 Derive the macOS app version from git tags instead of a hardcoded stale value — closes #311

Fixes

• #315 Accept double-dash flags in the CLI so the app's --json calls work end-to-end — closes #307 (Dashboard and Harnesses render the doctor report again)
• #314 Enforce a minimum window size and replace the inert segmented tab strip — closes #308, closes #309
• #312 Persist the Sync Dry Run toggle symmetrically — closes #310
• #317 Bump symaira-corekit to v0.13.0

Closed Issues

• #307 Doctor-backed screens fail on every launch: CLI rejects --json
• #308 Window collapses to a remnant rendering other apps' content
• #309 Clicking the Rules tab does nothing
• #310 Sync screen persists the unsafe Dry Run-off state
• #311 MARKETING_VERSION stays 0.6.0 across releases

Full Changelog: v0.7.2...v0.7.3

v0.7.2

What's changed

Features

• #302 In-process skill sync and remote memory sync — closes #300 #301. symbrain sync now runs skill rendering/installation in-process (no archived symskills binary needed), and symbrain memory sync --remote replaces the archived symmemory runtime workflow with pull/push/token/encrypted-relay modes.
• #303 Canonicalize the symbrain mcp command and rename the app bundle to "Symaira Brain" — closes #295 #296. serve stays as a deprecated alias (stderr-only notice); a thin config get/set/path command is added; the macOS app bundle and DMG are renamed.
• #305 Publish the SymBrain GUI as a Homebrew cask — closes #294. Every release now ships Casks/symbrain.rb in the tap at the same version as the CLI formula.

Docs

• #304 Bring the README onto the shared Symaira structure — closes #299.

Chore

• #298 Stop tracking internal working artifacts.

Closed Issues

• #300, #301, #295, #296, #299, #294

Full Changelog: v0.7.1...v0.7.2

v0.7.1

Changelog

• 2dbd6d9 Define the symbrain usage output contract (#291)
• 78515fb feat(gateway): embed symmemory in-process (step 4 P2b) (#266)
• 88fef5f feat(gateway): register symskills tools directly (step 4 P2a) (#265)
• 74fb8c6 feat(usage): symvault-backed credentials and get_ai_usage MCP tool (#293)
• b7b4714 feat: absorb symaira-guard as nested module (step 7) (#268)
• bb090ac feat: absorb symaira-memory + symaira-skills internal packages (step 4 P1) (#264)
• 34b90e7 feat: accept symvault:// as canonical secret URI scheme (#288)
• 442288c feat: expose harness configuration inventory (#281)
• d39df56 feat: port the remaining usage providers (Claude, Codex, Copilot, Cursor, Kimi, OpenCode, Antigravity) (#292)
• 87282eb fix(ci): raise pre-release race-test timeout to 30m (#297)
• e2b3725 fix(ci): restrict core release bumps to symvault (#286)
• 8c3fbaa fix(doctor): stop advertising the absorbed cores as sibling binaries (#273)
• 1b7aecb fix(security): mark archive extraction guards for CodeQL (#284)
• 0b2952d refactor(audit): persist entries through corekit/auditkit sink (#271)
• bb044c6 refactor(guard): audit chain primitives onto corekit/auditkit (#270)
• 52d7d92 refactor(guard): migrate discovery onto corekit/mcpcfgkit (#269)
• 3682b2a refactor: remove embedded core binary plumbing (#283)
• 981edc4 refactor: rename recipes to patterns (#282)

v0.7.0

Changelog

• 40b9b5d Add a tool that reads button names the way VoiceOver does (#233)
• 8bb6c4e Audit improvements: redaction, scanner fix, --json flag (#235, #236, #237) (#246)
• 735446c Bound the Memory list so AppKit stops re-entering its row-height cache (#230)
• 335cfbb Name the component behind each version number, and label every button for assistive tech (#229)
• 0818ec0 Replace the Memory list instead of diffing it when a search changes the rows (#232)
• 35d30cb chore(deps): bump github.com/danieljustus/symaira-corekit (#224)
• d29b81a chore(deps): bump the actions-minor-patch group with 2 updates (#225)
• a0f06f5 chore(deps): bump the actions-minor-patch group with 2 updates (#253)
• bc50569 feat(ci): auto-bump PRs for managed core releases (#247) (#252)
• 3185c5d feat(cli): passthrough subcommands for vault/memory/skills (#243) (#250)
• 2cc5be7 feat(gui): unified runtime availability + async audit reader (#239, #240, #241) (#249)
• 3662a4f feat(managed): managed core runtime — setup, doctor --fix, resolution order (#251)
• c7775b8 fix(ci): bump Go toolchain to 1.26.7 to resolve govulncheck advisory (#263)
• 31c2054 fix(ci): pin release job checkout to SHA (#244)
• 57f8e5c internal/managed: make Install/downloadAndVerify testable without hit... (#256)
• ccdd188 refactor(gui): extract shared module view model skeleton (#248)
• c55dff1 release: v0.7.0 (#262)
• 5c78f71 session/20260820 132351 (#261)