v0.10.0

Added

• A verify entry can prove an absence, instead of proving its opposite (T-0239)

Changed

• The protocol names its two exits, and two guards make them observable (T-0237)

v0.9.2

Changed

• The record graph keeps following links quoted in code, and now says why

Fixed

• Doc links read balanced parentheses and the angle-bracket form
• The scope guard stops prompting you about your own claim
• The stale-filename warning names the scoped fix, not the workspace-wide one

v0.9.1

Fixed

• A re-wrapped scope: no longer makes a card unclaimable (T-0225)

v0.9.0

Added

• A card says whether a person reported it or an agent derived it (T-0210)
• CI runs the checks a card declares and records what they proved (T-0189, T-0161)
• Every kind of record can be read in sequence, not only cards (T-0207)

Changed

• Every doctor finding says which module produced it (T-0218, T-0223)

Fixed

• An explicit --root is checked the way a discovered one always was (T-0160)
• The scope guard sees two agents that share an actor (T-0219)
• The MCP byte ceiling stops overwriting a tool's own truncation flag (T-0147)
• The hosted demo matches a search the way a real workspace does (T-0202)
• The record views' filters survive a reload (T-0201)

Security

• A trailing strip over an uncapped body no longer backtracks (T-0224)
• search-local runs on onnxruntime-web, clearing four high advisories it used to ship (T-0221, ADR-0021)

v0.8.1

Added

• Documentation trees can declare that their links are routes (T-0217)

Fixed

• --help lists every flag a subcommand accepts (T-0215)
• Patching a body keeps the blank line under the frontmatter (T-0216)

v0.8.0

Added

• workfile ui gains --read-only and --allowed-host, so a board can be published for reading

v0.7.0

Added

• A criterion can name the command that proves it, and stops being yours to check (T-0185)
• done records how it was proved, and a card can only run what the project permits (T-0186, T-0187, T-0188, T-0203)
• The filter every view had behind it now has a control in front of it (T-0195)
• The footer's claim count opens into the claims it was counting (T-0196)

Changed

• A card's context bundle carries the memory that is about that card
• A forced transition records which gate it walked past, and why (T-0184)
• Accepted decisions past the context limit are listed by title instead of dropped
• Archiving a card records who filed it and when
• Frontmatter holds one level of nesting, and refuses the rest by name (T-0200)
• init says when it applied the defaults instead of asking (T-0171)
• A collapsed sidebar says where each icon goes, and settings have a home (T-0198)

Fixed

• A card body write reaches everything below the protocol sections (T-0157, ADR-0011)
• A duplicate id heals for every kind of record, not only for cards (T-0199)
• A generated file that lost its trailing newline can be repaired
• A note quoting a trail entry is no longer filed as one
• A record body can no longer stall the doctor or choose a link scheme
• A record with no id is reported, not fatal (T-0204)
• A regex search pattern can no longer hang the process
• init --dry-run counts what init creates (T-0173)
• The acceptance gate stops mistaking a heading it does not know for a card with nothing to prove
• The demo film opened on a skeleton, and every still was two minor versions old (T-0163, T-0164)
• claude check compares the generated JSON instead of counting the file (T-0177)
• The hooks reach the package in a workspace that does not carry it (T-0178)
• The MCP server and the hooks run the same copy of the package
• A filter strip scrolls under your thumb, and the controls agree on a size (T-0193, T-0194)
• Every filter bar is shaped the same, and the controls in it agree on a corner (T-0211, T-0212)
• Leaving a document no longer opens an empty inspector over the list (T-0192)
• Reading a changelog fragment no longer covers the fragment (T-0197)
• The board names who moved a card, and claiming from it no longer locks you out
• The Workflow view applies the filters it draws (T-0191)

Removed

• The protocol surface is English everywhere, and config.language stops meaning anything

v0.6.0

Added

• A card declares which record it came out of (T-0154)
• A record shows what it came out of and what it produced (T-0155)
• A Workflow view draws the record graph, with a filter per relationship (T-0156, ADR-0010)

Changed

• A graph edge says which field declared it, and a pair can hold several (T-0159)

Fixed

• The CLI reference names every command and alias the binary accepts (T-0151)
• The security policy links a threat model that exists (T-0149)
• The spec names the MCP tools and the API that actually ship (T-0150)
• The MCP guide states the registration the install actually writes (T-0153)

Removed

• The schema stops offering a ui.defaultView nothing ever read (T-0152)

v0.5.4

Added

• The README carries the Glama score and card badges

Changed

• Every MCP tool declares its parameters, its defaults and its reply shape

v0.5.3

Fixed

• The edit guard names the tools that write the record it stopped (T-0144)