Autonomous Run Governance v0.4.4

Autonomous Run Governance v0.4.4

This patch binds staged candidates completely to the Git index:

• rename inventory is collected without rename collapsing, so both the deleted source and added target must be intended;
• only regular stage-0 index entries (100644 or 100755) are accepted;
• staged symlinks, gitlinks, conflicted entries, and worktree/index type races fail closed.

The v0.4.3 historical-whitespace restrictions remain unchanged.

Validation:

• Bash and PowerShell evidence-integrity suites, including negative rename, index-only symlink, and gitlink fixtures: PASS;
• model-routing composition suite: PASS;
• Bash and PowerShell syntax validation: PASS;
• exact staged-candidate validation at release source: PASS;
• downloaded tag-ZIP SHA-256: 2478d5fe193abe677601a024f5fe18efae635e8a94bba66b50b59c4b34a8fd8d;
• release commit: f718c00d405260706709be2fd64f59aadfac9312.

Autonomous Run Governance v0.4.3

Autonomous Run Governance v0.4.3

This patch closes two historical-whitespace integrity gaps:

• pre-stage allowances now apply only to genuinely untracked intended files;
• exact staged-candidate validation binds newly added historical files to their index bytes while preserving every other git diff --cached --check failure.

The existing worktree interface remains compatible. Bash adds --staged; PowerShell adds -Staged. In staged mode, the repeated intended paths must exactly match the index candidate.

Validation:

• complete cross-shell evidence-integrity suite from the tag archive: PASS;
• model-routing composition suite from the tag-identical source in the existing twelve-preset composition: PASS;
• isolated model-routing archive run: expected fail-closed block because companion command speckit.intake-read is absent;
• fresh Specify 0.12.8 installation, list, info, template resolution, and Claude command generation: PASS;
• downloaded tag-ZIP SHA-256: 87e4367643210d48b515d47480be687eaca9078f08e53c8c251b420625e52659;
• release commit: b564e178b79193768649f8a4aadc5f3885d805cf.

Autonomous Run Governance v0.4.2

Patch release for exact immutable historical-whitespace allowances in autonomous delivery-set validation.

• Requires an explicitly authorized repository-relative path plus unchanged raw SHA-256.
• Requires the same file to be named in the intended delivery set.
• Rejects path, hash, content, duplicate, unnecessary, or unapproved allowance drift.
• Preserves default AEI007 trailing-whitespace rejection and read-only index/worktree proof.
• Adds cross-shell positive and negative regression coverage.

Autonomous Run Governance v0.4.1

English

This patch publishes the independently validated v0.4 evidence-integrity contracts with consistent release and installation guidance. It replaces stale candidate wording in v0.4.0. Runtime and authority semantics are unchanged.

Validated capabilities:

• complete intended delivery-set checks;
• semantic phase-result validation;
• lifecycle-bound PreMerge/PostMerge evidence;
• Bash and PowerShell parity;
• fresh twelve-preset composition.

Deutsch

Dieser Patch veröffentlicht die unabhängig geprüften v0.4-Verträge zur Evidence-Integrität mit konsistenten Release- und Installationshinweisen. Er ersetzt veraltete Kandidatenhinweise aus v0.4.0. Laufzeit- und Berechtigungsverträge bleiben unverändert.

Autonomous Run Governance v0.4.0

English

This release hardens autonomous Spec Kit delivery evidence after three independent field findings:

• validates the complete intended delivery set, including tracked, untracked, deleted, and unrelated paths;
• rejects semantically blocked phase results even when the worker process exits with code zero;
• binds PreMerge and PostMerge evidence into a non-recursive exact-head lifecycle.

It also documents explicit resume authority and adds Bash/PowerShell-parity tests. No remote, admin, provider, or secret authority is implied.

Deutsch

Dieses Release härtet die Evidence autonomer Spec-Kit-Läufe anhand von drei unabhängigen Feldbefunden:

• vollständige Prüfung des beabsichtigten Lieferumfangs einschließlich getrackter, unversionierter, gelöschter und fremder Pfade;
• Ablehnung fachlich blockierter Phasenergebnisse trotz Prozess-Exitcode null;
• nicht rekursive Exact-Head-Verknüpfung von PreMerge- und PostMerge-Evidence.

Zusätzlich werden explizite Resume-Autorität und Bash-/PowerShell-Parität nachgewiesen. Es entstehen keine impliziten Remote-, Admin-, Provider- oder Secret-Rechte.

Autonomous Run Governance v0.3.6

The model-routing Bash test wrapper now reports missing or outdated PowerShell 7 as a bilingual blocked prerequisite with test-only exit code 3. Runtime and authority contracts are unchanged.

v0.3.5

Corrects the managed-profile composition fixture to require all twelve routing catalogs. Runtime, state, and authority semantics are unchanged.

v0.3.4

Adds the provider-neutral model-routing catalog for composition with Model Routing Governance. Existing preset behavior remains unchanged.

v0.3.3

Backward-compatible learner and accessibility contract patch. Projects declare their own audience, language, prior-knowledge, terminology, and text-first requirements; the preset carries or validates that contract without granting execution or remote authority.

Autonomous Run Governance v0.3.2

Adds an optional hash-bound Intake Review Governance gate before feature creation and revalidates accepted intake evidence during resume. Projects without an active intake-review policy retain the previous behavior.