v7.0.1

First published v7 release. The v7.0.0 candidate stopped at the macOS package gate before publication; its tag remains unchanged.

Fixed

• Resolve temporary smoke environments to physical paths, including macOS /var, so strict private-state symlink protection remains enabled during distribution checks. Copy packages explicitly when temporary environments and the cache use different filesystems.

Breaking changes

• Replace the Go implementation with one typed Python package and the fkf command. Python 3.14 or newer on Linux or macOS is required; install with uv tool install --python 3.14 'fkf==7.0.1'.
• Use one current base format: fkf.yaml, authored projects/, wiki/ and tasks/, immutable normalized records/, and disposable .fkf/ and indexes/. Preserve a v6 base and executable separately; there is no in-place migration or compatibility command.
• Remove bundled provider integrations, presets, harness installation, execution approval registries and learning proposal machinery. Bases own collectors, schedules and knowledge editing. Reusable Markdown skills and three source examples are maintained separately from the Python distribution.
• Require an explicitly built, ready cache for indexed retrieval. Missing, stale or corrupt caches name the fkf build recovery command; direct authored and capture-file reads remain available.

Added

• Explicit update with a side-effect-free dry-run, per-source refresh policy and durable successful automatic checkpoints. Failed windows stay due, manual collections do not move automatic progress, and build --if-stale skips a ready index.
• Base-qualified exact evidence references, explicit source structure and membership filters, current versus historical capture retrieval, and authored section references.
• OKF v0.2 wiki structure validation, provenance and asserted verification signals, lifecycle filters, and resumable task folders with inputs and outputs.
• A runnable fictional base with a credential-free collector and retrieval acceptance cases; focused fkf-use, fkf-learn, fkf-maintain and repository-local fkf-contribute skills.

Changed

• Keep CLI and the three read-only MCP tools on shared services. Context includes the complete JSON and final newline within four UTF-8 bytes per budget unit; MCP also counts its response wrapper.
• Match literal lexical terms with case and diacritic folding, explicit identities and authored-note preference. Keep event-time filtering separate from capture recency and decision validity.
• Confine filesystem access, bound subprocess output and runtime, sanitize collection environments, and preserve atomic immutable evidence and a tested rebuild/recovery path.
• Publish a documented installation and upgrade path, complete command reference, skill setup example, and contributor release checklist. Remove obsolete implementation proposals from the current tree.