RelayPact 0.1.2 Public Preview

Fixed

• Replaced raw Git index byte identity with a canonical semantic fingerprint
  over staged path, conflict stage, mode, object ID, assume-unchanged,
  skip-worktree, and intent-to-add state. Read-only Git stat-cache refreshes no
  longer invalidate an otherwise unchanged pending review or terminal decision.
• Kept HEAD, refs, objects, hooks, configuration, worktree controls, filesystem
  evidence, and actual staged/index-flag tampering fail-closed.

Compatibility

• v0.1.2 is the latest published release. npm publication remains out of
  scope; installation uses the versioned GitHub release tag.
• Tasks prepared by v0.1.1 lack the new preparation-time semantic index
  baseline and remain ineligible for migration or terminal decision under
  v0.1.2. Prepare a new task instead.

RelayPact 0.1.1 Public Preview

RelayPact 0.1.1 — Public Preview

RelayPact 0.1.1 is a focused update to the controlled, human-reviewed
Codex-to-Codex Public Preview.

RelayPact lets a coordinating Codex Agent delegate bounded engineering work to
an independent codex exec executor without delegating scope control,
evidence review, risk judgment, or final acceptance.

Changed

• Clarified read-only task authority: a read-only file belongs in
  readablePaths, is omitted from writable allowedPaths, and must not also
  match forbiddenPaths. Contradictions now fail before worker launch with an
  actionable diagnostic.
• Added bounded relaypactPromptBytes, relaypactResultSchemaBytes, and
  relaypactDeclaredInputBytes review metrics, kept separate from selected
  context bytes and provider-reported token usage. Prompt and result-schema
  measurement each fail closed above a 4 MiB input bound; the three integers
  are HMAC-bound to private lifecycle state so terminal review preserves them.
• Made Agent-first installation verify the checked-out commit against the
  peeled annotated release tag and explained that shallow-clone warning text
  alone is not the success signal.

Compatibility

• Codex-to-Codex remains the only active Public Preview route.
• Pi remains experimental, optional, and inactive at root Plugin activation.
• The review metrics are additive.
• No provider, model, router, credential, dependency, or execution-authority
  requirement changed.

Requirements and support boundary

• Node.js 20 or later
• Git
• Codex CLI 0.147.0 or later with codex exec

This preview requires human review and is not intended for unattended or
production-critical execution. RelayPact is not an operating-system security
sandbox. Windows support is not yet claimed.

Installation is from the annotated v0.1.1 GitHub tag through the packaged
local marketplace. npm publication is not part of this preview.

Documentation

• README
• 简体中文 README
• Agent-first tutorial
• Manual configuration and CLI reference
• Security policy and threat boundary
• Changelog

RelayPact 0.1.0 Public Preview

RelayPact 0.1.0 — Public Preview

RelayPact 0.1.0 is the first controlled, human-reviewed Public Preview prerelease for experienced Codex, Node.js, and Git users.

RelayPact lets a coordinating Codex Agent delegate bounded engineering work to an independent codex exec executor without delegating scope control, evidence review, risk judgment, or final acceptance.

Highlights

• Agent Plugins 1.0 root plugin with the $relaypact Skill and Agent-first setup guidance.
• Codex-to-Codex delegation that preserves the Codex harness across supported routes.
• Explicit readable, writable, and forbidden task scope.
• Sanitized task capsules, bounded context planning, host-observed evidence, and identity-bound corrections.
• Credential-aware result and patch handling with explicit accept, reject, or abandon decisions.
• A privacy-safe doctor command for Node.js, Git, Codex CLI, codex exec, marketplace, plugin, and Skill readiness.
• English and Simplified Chinese onboarding, examples, and manual configuration guidance.
• Apache-2.0 licensing.

Support boundary

• codex-codex is the active Public Preview route.
• codex-pi is experimental, optional, and inactive at the root Skill.
• Pi, OpenCode CLI, OpenCodex, a third-party provider, and a particular model are not prerequisites for the default route.
• Installation is from this versioned GitHub tag through the packaged local marketplace; npm publication is not part of this preview.

Requirements

• Node.js 20 or later
• Git
• Codex CLI 0.147.0 or later with codex exec

No separate executor package or second Codex installation is required.

Important limitations

• This preview requires human review and is not intended for unattended or production-critical execution.
• RelayPact is not an operating-system security sandbox.
• Windows support is not yet claimed.
• External provider and experimental route availability depends on user-owned configuration and service reliability.
• Executor completion is never final acceptance, and RelayPact never automatically applies, commits, pushes, tags, publishes, or deploys a candidate.

Documentation

• README
• 简体中文 README
• Agent-first tutorial
• Manual configuration and CLI reference
• Security policy and threat boundary
• Changelog