Project Corpus 2.1.0

Project Corpus 2.1.0 adds optional local, read-only source-aware discovery through the Runtime CLI and stdio MCP.

• Deterministic full-text search over policy-scoped corpus artifacts
• Timestamp-backed timeline views
• Safe artifact show/read

Discovery remains explicitly non-authoritative and adds no Protocol V2, network, database, or write-dependency changes.

v2.0.1

Full Changelog: v2.0.0...v2.0.1

Project Corpus v2.0.0

Project Corpus v2.0.0

Project Corpus V2 is a Markdown-first, vendor-neutral protocol for persistent
project memory across AI sessions. The protocol remains usable manually without
installation; the optional reference Runtime implements the protocol without
defining it.

Highlights

• Separates the Project Corpus Protocol from the optional Project Corpus
  Runtime.
• Uses role-separated canonical Markdown state: PROJECT.md for logical
  identity and STATUS.md for current operational state.
• Keeps physical-root authority in an external owner trust grant rather than
  portable project content.
• Applies declarative project policy under a four-way authority intersection:
  Runtime hard limits, external owner trust, project policy, and the
  session/client capability subset.
• Provides expected-hash transactions with managed-writer serialization,
  journal, backup, publication readback, audit, and deterministic recovery.
• Uses native filesystem confinement and fail-closed path handling.
• Qualifies controlled mutation on local Windows NTFS, Linux ext4, and macOS
  APFS only, with the documented platform-specific durability and metadata
  limits. Network, removable, FUSE, and unknown filesystems are not qualified
  for mutation.
• Includes a controlled CLI and an optional local stdio MCP adapter. Project
  content and MCP arguments cannot expand Runtime authority.
• Preserves V1 templates and manual Markdown workflows, with read-only planning
  and controlled non-destructive migration to a separate V2 destination.

Qualification

• The complete 93-test suite passed on Windows, Ubuntu, and macOS with Python
  3.11 and 3.12.
• Confinement, negative path handling, concurrency, transaction failure,
  recovery, migration, CLI, and stdio MCP behavior were tested on the qualified
  local filesystems.
• Release history security gate passed with owner-reviewed narrow exceptions
  and no detected credentials, tokens or private keys.

See docs/security/platform-guarantees.md for exact guarantee levels and
platform limitations, and CHANGELOG.md for the complete release summary.