v2.2.0

2.2.0 (2026-09-07)

Features

• beliefs: belief-aware serving lane with belief citations (#412) (5b754c6)
• beliefs: read API behind BELIEFS_API_ENABLED (#406) (dc99017)
• beliefs: semantic belief substrate + scene promotion (#405) (d76a9d6)
• beliefs: wire BELIEFS_FACT_DAMPING — demote fact lines contradicted by current beliefs (#440) (ec5cb00)
• compaction: per-tenant retention overrides + promotion corroboration floor + conflict guard (#377) (e62751a)
• consent: media/biometric consent tier — read_media scope, pack modality consent, fail-closed media PII gate (#380) (09972b0)
• deploy: enable answer conditioning in prod — broad-question coverage (#439) (9dc0e02)
• deploy: enable literal-harvest and belief-transition flags in prod (#427) (376d50a)
• deploy: enable memory-fitness fix-wave flags in prod (#420) (3420d00)
• deploy: enable mention-path conflict formation + transition classifier in prod (#447) (e93e7ac)
• deploy: enable state-verb harvest in prod; clarify scene-traces catalog default (#436) (b196826)
• deploy: enable the s07/k07 root-cause wave in prod (#458) (032ecdc)
• deploy: enable the temporal tiebreaker in prod (#466) (0f59f31)
• deploy: full production enablement wave — every default-off feature ON (#414) (7d79f3c)
• eval: code-memory battery — coding-agent corpus with pack vocab, transitions and serving checks (#441) (5476f77)
• eval: domain-pack battery — install→vocab→trace chain with multi-domain tracing (#434) (c26b89c)
• eval: first-person memory fitness harness (#411) (eb6dfe5)
• eval: state-transition eval battery — mechanical mutable-world-state checks (#425) (2d23275)
• eval: variation axis for the state-transitions battery — paraphrase and RU corpora (#463) (98416e0)
• evidence: fragment retrieval lane + fragment citations (#404) (8bf86fd)
• evidence: grounding status on claims — fail-closed capture, promotion + serving gates (#388) (c8d4e94)
• evidence: metadata-only evidence asset ingest (#400) (b6bea93)
• evidence: multimodal evidence substrate — assets, fragments, derived representations (0109) (#382) (7d346ac)
• evidence: port multimodal contract + lifecycle hardening (evidence blob GC, strict pack validation) (#392) (dafa9da)
• evidence: processing lifecycle — broker, idempotent runs, quarantine seams (#402) (8758e12)
• evidence: single raw-read gateway — gate ladder, signed URLs, access audit (#408) (def7ee8)
• evidence: split immutable assets from ownership grants (0122) (#401) (4a412c2)
• extraction: deterministic literal-harvest lane (EXTRACTOR_LITERAL_HARVEST, default off) (#423) (ed676dc)
• extraction: deterministic state-verb harvest lane (EXTRACTOR_STATE_VERB_HARVEST) (#429) (108e6f3)
• extraction: language-agnostic transition classifier (module only, not wired) (#430) (416a1cc)
• extractor: coding-domain verbs in the state-verb harvest lexicon (#437) (05da2dc)
• extractor: wire the transition classifier behind EXTRACTOR_TRANSITION_CLASSIFIER (#446) (f12ffde)
• facts: deterministic status landing for calendar-anchored artifact lifecycle claims (#464) (995468c)
• facts: mention-path conflict formation — competing pairs for extracted contradictions (#444) (3e8622d)
• facts: slot canonicalization — cross-predicate contradictions meet in one slot (#450) (036ddfc)
• fovea: confidence-gated L3 escalation depth (adaptive, static fallback, default-off) (#331) (3d2384f)
• fovea: evidence-capability verdict gate + outcome telemetry modality dimensions (0113) (#383) (dd7f243)
• fovea: focus-signal capture + per-class calibration foundation (serving-neutral, default-off) (#329) (558a155)
• fovea: L3 anchor independence — direct/segment/tempo...

v2.1.0

2.1.0 (2026-08-23)

Features

• auth: hierarchical scope-tag foundation — scope column + parity-proven visibility evaluator (default-off) (#316) (8e2af77)
• db: computed views for tenant counters behind STATS_VIEWS_ENABLED (95cf3bb)
• db: validate stack on SurrealDB 3.2.4, bump CI/dev pins, add prod cutover runbook (d5ee2a1)
• db: write-time derived-staleness event (0089) — closes the 0072 nightly-drain hole (9a8bcdf)
• provenance: char-span grounding quotes — deriver emit + mechanical anchoring + provenance API spans (#310) (4125f7b)
• search: trace-derived usage ranking factor — readCount as a bounded, default-off ranking signal (#314) (ee14fe6)
• security: memory-injection red-team suite + opt-in ingest unicode sanitization (#312) (4a05c5c)
• staleness: 0089 fact_staleness event — write-time derived-fact marking (f1b8cab)
• stats: 0088 computed count() views for tenant counters behind STATS_VIEWS_ENABLED (3bc1187)
• strategy: ReasoningBank-shape strategy-memory lane — separate store, k=1 advisory retrieval, distill + lifecycle cron (#313) (7a83ba4)
• synthesize: fact-lifecycle-gated answer cache — exact-match serving with check-on-read invalidation (#311) (51ebb53)
• synthesize: L3 confidence-gated escalation — full-session raw-context generation on verifier failure (#315) (f12f2b2)

v2.0.0

2.0.0 (2026-08-22)

⚠ BREAKING CHANGES

• deriver: atomic derive — staging namespace, per-(tenant,version) lease, DELETE-then-UPDATE flip (audit 2026-08-19 P1)

Features

• deriver,synthesize: DERIVER_DATE_RESOLVE + RETRIEVAL_ENUM_STRICT (default-off) (211db52)
• deriver: DERIVER_ASPECT_ROLLUPS — mechanical per-(entity, aspect) list-facts (default-off) (0640e21)
• deriver: DERIVER_DATE_AUDIT post-pass + reasoning-model call params (default-off) (0266294)
• deriver: DERIVER_DATE_RESOLVE — V12 §3 occurred_on anti-collapse rules (default-off) (b91c147)
• deriver: V13 write-side legs — date audit, aspect rollups, reasoning-model deriver (default-off) (d64e135)
• digest: per-user policy metadata on conversation_digest (V11 item 10) (64439ab)
• facts: fact read + provenance API behind FACTS_API_ENABLED (db65006)
• facts: fact read + provenance API behind FACTS_API_ENABLED (c4f46fd)
• multiworld: assistant lane v1.1 — exchange granularity (SeCom retrieval unit) (74ce256)
• multiworld: typed projections over one substrate — multi-pin read, typed derive, assistant lane, facts-as-keys (all default-off) (8b22c73)
• multiworld: typed projections over one substrate (multi-pin read, typed derive, assistant lane, facts-as-keys) (92ec440)
• retrieval: genre preset layer — measured defaults per RETRIEVAL_GENRE (84e60ae)
• search,synthesize: fact-level cross-encoder rerank + mention-date fact lines (default-off) (e0208b0)
• search,synthesize: fact-level cross-encoder rerank + mention-date fact lines (default-off) (d52cec2)
• search: genre preset layer for RetrievalProfile (4c35b32)
• synthesize: RETRIEVAL_ENUM_STRICT — §8 item 3 enumeration scope discipline (default-off); runner --guardrails override (b11abc4)
• users: rolling user profile API behind USER_PROFILE_API_ENABLED (dcf5843)
• users: rolling user profile API v1 (deterministic, no LLM calls) (c9c94bf)
• v13: ten default-off levers from the memory research pass — raw-window, event-time grounding, compose pass, scene traces, search loop, and answer-side frames (ec8f8ff)
• v13: ten default-off memory levers from the research pass (393cadb)

Bug Fixes

• audit-2026-08-19: secondary-search filter inheritance, ABAC projections, scoped-pool re-auth, digest lifecycle, V13 edge cases (208ac72)
• audit-2026-08-21 P0: mention ingest carries per-user scope end to end (40708d3)
• audit-2026-08-21: read-set lifecycle guard, scoped fail-closed, secondary DTO axes, lane budget + v1 revert, jest worktree scan (f2625f8)
• audit: per-user digest policy metadata, 0085 lifecycle suite, hermetic unit split (e8224b6)
• contracts: close the wire-contract tails — full retrieval-profile read-back, facts + user-profile in OpenAPI (d23604d)
• contracts: full retrieval-profile read-back + facts/user-profile OpenAPI coverage (9710942)
• deriver,search: fail-closed grounding scope, per-run staging fencing, trust band default off (5f6a9c3)
• deriver,search: fail-closed grounding scope, per-run staging fencing, trust band default off (53e4d48)
• deriver,synthesize: apply the /code-review 284 findings before the armK/armL runs (d0b27b5)
• deriver,users: audit importants — lease fencing, single-transaction flip, strict profile scope (f1ea1df)
• deriver,users: lease fencing, single-transaction flip, strict profile scope (fb93ea8)
• deriver: atomic derive — staging namespace, per-(tenant,version) lease, DELETE-then-UPDATE flip (audit 2026-08-19 P1) (63b5bc9)
• deriver: rollup group key separator — a stray NUL byte stood in for the delimiter (999a38d)
• deriver: staging namespace + leader lease + transactional flip for atomic world builds (audit P1) (04bfc0f)
• landing: the footer links that pointed nowhere (2f8ae2d)
• landing: the footer links that pointed nowhere (935995b)
• landing: the product declared its parent company instead of itself (90671a9)
• security,search: release blockers — derive user scope, retract ownership, rerank trust band (ae869f6)
• security,search: three release blockers — derive user scope, retract ownership fence, rerank trust band (e01f0af)
• synthesize: reasoning-model call params for the generator — SYNTHESIZE_MODEL=gpt-5-* no longer reads as 100% generator_error (fdc1124)

v1.1.0

1.1.0 (2026-08-15)

Features

• eval: false-premise scenarios + hallucination-resistance metric (a634e4d)

Bug Fixes

• deps: dedupe yaml@2.9.0 lockfile blocks left by textual dependabot merges (64d9172)
• deps: dedupe yaml@2.9.0 lockfile blocks left by textual dependabot merges (fe7b1c1)
• search: edge-expansion default OFF after measured-null ablation + alpha-0 parser fix (3f3cb56)
• search: edge-expansion default OFF after the measured-null ablation + alpha-0 parser fix (3a0ec1c)

v1.0.0

1.0.0 (2026-08-15)

⚠ BREAKING CHANGES

• extraction: S4 — one extraction pipeline profile + one write primitive
• engine: S3 — RetrievalProfile object + first-class Lane registry
• engine: S2 — fold the default-on winners into the single path
• engine: S1 — delete measurement-killed forks, code paths included

Features

• admin: aspect aggregate composer over per-entity facts (Lane C) (88b08ad)
• admin: DERIVER_DIGEST — rolling conversation digest, write side (V12 §2, graphiti saga port) (cc3c6d3)
• admin: DERIVER_MENTION_STAMP — per-fact mention anchor (V12 §1, graphiti reference_time port) (2c615c9)
• admin: topic-arc composer — summary_arc_* observations (V9 §3) (93b7ea2)
• admin: version-aware aspect aggregates for pinned derived worlds (R4) (328acfc)
• agent-qa: agent-in-loop QA — ReAct loop over memory search (/v1/answer) (fafc96e)
• agent-qa: escalation routing — one-shot first, loop only on weak answers (R3b) (da076de)
• agent-qa: sharper answer contract — aggregation, single-hop directness (d5bfb10)
• agent-qa: V2 tool set — masked search, timeline enumerator, transcript grep (R3) (f7b531d)
• derive: completion pass + truncation guard (deriver recall) (21a1696)
• derive: derived-world lifecycle (DERIVER_SLOT_SEMANTICS) + resolver NONE-fence (134b455)
• deriver: E3a assistant-content propositions (DERIVER_ASSISTANT_CONTENT) (90976be)
• derive: volume-neutral salience grading turn (DERIVER_SALIENCE_STAMP v2) (c3547f6)
• driver: surface 3 — projection registry + public rebuild verb (PROJECTIONS_API_ENABLED) (d919f71)
• driver: surface 4 — new-episode webhook push (EPISODE_SUBSCRIPTIONS_ENABLED) (5da6bb7)
• engine: V10 — grounded fixes from the V9 diagnosis set (8834593)
• engine: V4 carried fixes — derive failure propagation, W2/W4 read-path work, S5.2 shrink (77badab)
• engine: V9 ALL-IN on BEAM — lifecycle, mention-scan, topic arcs, abstention, salience v2 (04b0d5d)
• engine: verbatim-recall evidence + date/lexicon engine defaults (2026-08 wave) (9b1064b)
• entities: entity-name autocomplete over the edge-ngram prefix index (68ac370)
• episodes: public episodes API + NDJSON export (EPISODES_API_ENABLED) (2148631)
• eval: --persona-hint flag for first-person world axes (measured null on BEAM) (1be8c7f)
• eval: --sample-offset selects held-out LoCoMo conversation blocks (a3f8ad2)
• eval: BEAM official nugget judge (--nugget-judge) with protocol-bug fixes (0d0eb80)
• eval: BEAM scale-decay axis + resumable full-run harnesses (7bb6b36)
• eval: LongMemEval-S harness — the capacity axis + token accounting (6b57005)
• eval: offline BEAM nugget re-scorer — the V11 §1 calibration tool (d14ebb9)
• eval: offline tau_norm re-scorer + ladder results doc (B0 base, B1 loser) (23525bf)
• eval: paired McNemar + report summary tools for BEAM legs (c4db865)
• eval: V1 — self-describing report headers (git SHA + resolved profile) (31a9f48)
• extractor: E3b object normalization — clean value alongside the grounded span (1bfa08f)
• facts: fn::cascade_retract — atomic derivedFrom cascade as a stored fn (8a0790b)
• gates: S5.1 flag-budget gate — engine-behavior flags locked to a golden file (31eec33)
• gates: S5.2-6 — env boundary, boolean idiom, layering, dead exports, lane registry (8d8e7bf)
• ingest: contextual fact embedding (flag-gated, needs re-ingest) (8e98e7a)
• ingest: day-granular slot supersede + separate slot cosine gate — 0084 (V10 §1) (0c017e7)
• ingest: dialogue-mode extraction + batched fact resolution (d8ca7fe)
• ingest: event-time extraction — validFrom from the clause, not the message (206fa33)
• ingest: speaker coreference — attribute first-person facts to speaker (3ead6b7)
• locomo: LLM-as-judge scoring mode (391d733)
• locomo: official-protocol scoring (cat1-4 headline, cat5 abstention) (289ff4b)
• memory: derived worlds as forks — live-pin guard, atomic flip, residual GC (9ef07a2)
• memory: dialogue-mode new files — recompose, LIVE subs, facet routing, changefeed-row (81b0adf)
• memory: session-window deriver + versioned derivation namespaces (P3 v1) (acb5c0b)
• retrieval: V11 session — coverage-lane lexical OR-rewrite, KNN idiom fix, digest stack, edge-read fence (fd89653)
• scoring: importance/salience scoring — DERIVER_SALIENCE_STAMP + RETRIEVAL_SALIENCE_SCORING (#262) (39c48f4)
• search,synthesize: HNSW dense legs for the coverage scan lanes (V11 §5 scale gate) (fa3f085)
• search: BM25 match snippets via search::highlight (flag-gated) (01c9966)
• search: chatter demotion + fact-window shaping (flag-gated, default-safe) (d94a42e)
• search: combined vector+graph candidate-gen in one SurrealQL query (ad5c4c6)
• search: entity-expansion second retrieval (profile entityExpansion) ([95...

v0.8.1

0.8.1 (2026-07-17)

Bug Fixes

• docs: rename reserved mermaid node id 'graph' — README diagram failed to render (#220) (fa991ff)
• security: CodeQL-recognizable shapes — fromEntries summaries, typeof template guard (#219) (7a51da0)

v0.8.0

0.8.0 (2026-07-17)

Features

• admin-ui: packs, marketplace curation, and sources reputation panels (#210) (3bac9c4)
• admin-ui: static registry API key path for marketplace writes (#211) (415928f)
• auth: inite-auth vertical tightening — per-user memory, agent grants, ABAC delivery (#214) (b4e95c8)
• deploy: enable marketplace billing and MCP pack query tools in prod (#215) (bccaa72)
• mcp: pack-declared MCP tools — query tools over pack predicates + HMAC-proxied external tools (#204) (24c697a)
• packs: seed documents — packs ship knowledge through the document pipeline (#200) (8e51dba)
• registry: marketplace — featured curation, publisher profiles, paid packs via billing service (#202) (aee950f)
• sources: read-only trust-inputs API under brain:read (#199) (3fc702d)

Bug Fixes

• admin-ui: config/jobs panel drift + in-repo drift guards (#207) (f6755dc)
• auth: allow registry:curate on introspected operator keys (#216) (fe39a82)
• db: tolerate concurrent migration appliers racing the ledger insert (#203) (589c1e5)
• entities,app: real transaction-time axis for profile/timeline + timeline event rendering (#208) (67935a8)
• release: bump docs/openapi.json info.version in release PRs (#217) (d48b734)
• security: CodeQL backlog — linear email check, Map template dispatch, null-proto summaries; tolerant AI summary (#218) (4786648)

v0.7.0

0.7.0 (2026-07-16)

Features

• api: generated OpenAPI 3.1 spec for the platform surface (#195) (9b22f66)
• auth: per-pack binding for indexer:write keys (#192) (13576d1)
• documents: signed webhook push hints for external indexers (#193) (2b01184)
• documents: work-discovery pull API for external indexers (#181) (23ad966)
• observability: self-hosted monitoring stack (VictoriaMetrics + Loki + Tempo + Alloy + Grafana) (#165) (75d0952)
• ops: PROCESS_ROLE api|worker|all split with compose recipe (#190) (0bf8bf9)
• packs: pack:init scaffold + authoring quickstart docs (#185) (b372573)
• registry: download counters and verified-publisher badge (#186) (a14d56d)
• registry: pull-only cross-instance mirroring (REGISTRY_UPSTREAM_URL) (#196) (9123e64)

Bug Fixes

• db: shape-aware transaction return slot — 2.x answers without BEGIN/COMMIT slots (#175) (9bfe05f)
• deploy: stop routing /metrics publicly + point OTLP at the monitoring collector (#167) (c6a865b)
• jobs: audit wave P1 — reaper lease guard, missing indexes, catalogue drift (#176) (c5d7c62)
• jobs: point-read the lease record — end the leader_lease conflict storm (#169) (7610112)
• jobs: single-arg type::record in lease SQL — 2-arg form is a cast on SurrealDB 2.x (#170) (bde4a29)
• jobs: version-agnostic lease/claim deadlines — unblock background jobs in prod (#166) (ca45b36)
• search,mcp: audit wave P2 — flag parser sweep, MCP hardening, unified closure, hot-path (#177) (bf14a38)
• security: resolve CodeQL findings, dependency alerts, and workflow hardening (#198) (01f5b49)

Performance Improvements

• admin: move NLI intent classifier to a worker thread (#182) (e55296a)
• ai: local NER pipeline to a worker thread (#191) (09e7856)
• communities: offload label propagation to the job worker pool (#184) (ee4967c)
• dreams,documents: audit wave P3 — flag-gated pipeline fixes (#178) (e868254)
• jobs: bounded per-jobType poller concurrency with tenant and global caps (#183) (fc97d01)
• live: audit wave P4 — nightly refit batching, bounded reads, gauge fixes (#179) (7509116)
• search: offload tokenBudget counting to the worker pool with sync fallback (#189) (ccc6c59)

v0.6.2

0.6.2 (2026-07-11)

Bug Fixes

• documents: audit wave F3 — async run-ledger reliability + external provenance (#162) (fc54552)
• func: audit wave F1 — dead leases page, limit>20 cap, MCP pack parity, doc drift (#160) (140647b)
• ingest: audit wave F2 — detect_contradiction mirrors fn::resolve_fact (0055) (#161) (0c5c844)
• observability: audit wave F4 — corroborate backlog, rerank metric, config catalogue, docs (#163) (38cbdb7)

v0.6.1

0.6.1 (2026-07-11)

Bug Fixes

• hnsw: refuse create on a stale-dimension index + document drop-first recovery (#158) (efaa6ea)
• security: audit wave A — dead nightly cron + phantom-fence PII leaks + artifact scope (#154) (c32c4c8)
• security: audit wave B — feedback trust farming, source.meta bypass, entity scope collision (#156) (18fd8eb)
• security: audit wave C — ABAC behind-flag hardening (meta-union, resolver, windows, candidates) (#157) (7153a61)