apmx 0.5.0

EXPERIMENTAL prerelease. Native notices and exact downloaded bytes are gated; this is not production certification.

Standalone apmx 0.5.0; candidate commit 6f9e7e4f444451c2dc810c13fef5c2016517177d.

Changes in v0.5.0

• Run a five-stage source factory that captures the consumer project implicitly and delivers checked code and documentation patches without per-file workspace declarations.
• Opt in to bounded repair with fixed inputs and checks, a shared deadline and retained rejected attempts; contracts without a budget remain single-attempt.
• Run the same source factory through the native OpenCode 1.2.24 profile as well as native Copilot.
• Every COMPLETE run delivers an unsigned receipt (CycloneDX 1.5, in-toto/SLSA and Test Result evidence) under receipt/, formerly evidence/. Receipt export failure returns command exit 23 without changing the recorded COMPLETE outcome.
• Verify a receipt with apmx audit <receipt-dir>, delegated to the bundled APM. audit is now a reserved word; run a directory named audit as ./audit.
• Bundle official APM 0.33.0, which fails preparation before any producer launches when a packaged contract's publisher ref is unavailable or incompatible with a consumer pin.
• Default run output and --plan are compact: long check excerpts and harness stderr lines are condensed, and full details remain under --verbose and in the retained transcript.
• The five-stage software-factory example can repair out-of-profile patches and documentation link mistakes within declared build and documentation budgets.
• Ctrl+C during a POSIX agent run is a cooperative stop that still confirms cleanup only once the process group is gone.
• apmx's internal Git operations no longer start Git's background maintenance, which could change a captured .git while it was copied and halt the run.

See the v0.5.0 changelog.

What's new since v0.2.0

• Run a factory directory without writing orchestration: APMX derives execution order from the contracts' declared file dependencies.
• Deliver multiple output files together. Handoffs require every declared file, complete passing checks and an intact recorded inventory; the aggregate artifact view retains admitted outputs and the original required inputs/checks.
• Export real patches from private source edits with the bounded artifact tools, without changing the original checkout.
• Discover selected imported skills through native Copilot skill discovery, with clearer package-preparation progress and bounded terminal evidence.
• Try the software-factory example with optional Gherkin/Behave acceptance checks and separate regression checks. Its standalone checker now supports deeply nested Windows file paths with child-only Git configuration.

Compatibility and migration

BREAKING: imported skill metadata. Previously accepted imported skills can now fail admission without a nonempty name and description in SKILL.md. Names must be 1-64 lowercase letters/digits separated by single hyphens, with no leading or trailing hyphen. Selected context names must not collide case-insensitively; unsupported activation metadata is rejected.

Update the authored source package (for example, name: handoff-style with description: Write concise handoffs.), then select its updated revision through the normal dependency workflow, keeping apm.yml and its lock coherent. Do not patch generated apm_modules copies or edit lock digests by hand. Migration guide.

Leaf records use apm-contract-run/0.3 and factory records use apmx-contract-chain/0.2, separating execution from native assurance. Historical records are not rewritten and cannot authorize new handoffs.

Factory execution asks for consent interactively. Automation must pass --allow-host-access --allow-unproven-inputs; these flags do not admit failed or incomplete handoffs. Native execution is not a sandbox. Complete validated and finalized execution yields COMPLETE (0), not isolation or certification. Incomplete work remains UNPROVEN (21); rejection 20; halt 22.

Installation and assurance limits

Five native onedir archives include the runtime, LICENSE, NOTICE, release metadata, and the pinned official APM 0.33.0 backend with its complete runtime under libexec/apm. Extract the complete archive; do not move the executable out of its runtime directory.

Git, Copilot CLI, and contract-declared checker tools are external prerequisites. The CI actor is an explicitly hermetic Copilot JSONL protocol fixture, NOT live inference. Complete validated and finalized execution yields COMPLETE (0), not isolation or certification. Incomplete work remains UNPROVEN (21); rejection 20; halt 22.

No trusted publisher signature or Apple notarization is provided. macOS may carry PyInstaller's local ad-hoc signature; it is not publisher identity. Checksums prove byte integrity, not publisher authentication. Do not disable platform security to run these binaries.