V3.1.3 "Maia" — Production platform

The production-platform release: the machinery around running, upgrading, and trusting an ATLAS install.

Highlights

• Staged upgrade & rollback — atlas upgrade records a restore point (tag + image digests + .env backup), verifies cosign signatures on the target images, waits for readiness, runs a smoke check, and automatically restores the previous release if any step fails. atlas rollback returns to the restore point on demand; atlas diagnostics collect produces a shareable, secret-filtered support bundle.
• SQLite state store (ADR 0007, core implementation from #128 by @HarshalPatel1972) — the lens's pattern cache, co-occurrence graph, router posteriors, task queue, and metrics now live in one WAL-mode SQLite file on the lens-state volume. The Redis service and its configuration are gone; one less dependency, and state backup is a single file.
• Signed artifact manifests — atlas artifact verify | snapshot | rollback: SSH-signed provenance manifests over lens/ASA bundles with per-file SHA-256 verification, plus one-generation bundle rollback.
• Observability — structured JSON logs (ATLAS_LOG_FORMAT=json) with X-ATLAS-Request-ID correlation across proxy → llama/v3/lens/sandbox; a stable error-code taxonomy and OpenAPI 3.1 spec for the proxy surface; command-execution trust modes (ATLAS_TRUST_MODE).
• Interactive permissions & sessions — destructive tool calls prompt for approval in default/accept-edits modes; the TUI saves sessions and atlas --continue / --resume picks them back up.
• Typed configuration — atlas config validate | migrate: schema-checked .env with forward migration (deprecated keys, including the removed ATLAS_REDIS_*, are cleaned up automatically).
• Install trust — release-pinned installs: ATLAS_BOOTSTRAP_REF=v3.1.3 pins the checkout to this signed tag and the images to the matching cosign-signed digests. A review-before-running variant is documented beside the one-shot install.
• Two adversarial review sweeps fixed 33 confirmed bugs across the proxy, CLI, services, and CI — including a trust-mode bypass, several restore-path failures, and CI gates that could never fail.

Upgrading

atlas upgrade --to v3.1.3

Existing installs: the Redis container and redis-data volume are no longer used after this upgrade (docker volume rm <project>_redis-data reclaims the space). Learned lens state starts fresh in SQLite and rebuilds through use.

Full details in CHANGELOG.md.