v0.3.1

0.3.1 (2026-08-02)

Features

• authority: the gate learns the new shape before anything is written in it (#556) (327bd72)
• backup: a 35-day erasure horizon, and a route by which live GitOps may change (#544) (8ef9627)
• backup: a finite retention window, before there is anything to prune (#535) (da8cc40)
• conformance: add the company-conformance suite — the immutable fan-out target (#510) (fcb1a4c)
• conformance: build the company and job_position types — 4/12 (#514) (8a671bc)
• conformance: build the employment type — 11/12 (#515) (c066e23)
• conformance: open the declaration seam the suite shipped without (#512) (7527a03)
• erasure-ledger: an append-only record of what was erased, and what it cannot survive (#541) (b0d836e)
• gate-integrity: adjudicate H-1..H-4 by execution, and fix the 422 a gate found (#533) (f41cc84)
• ontology: an audited writer for object policy, and the six reads it gates (#525) (5330914)
• ontology: derive declared attributes at writeback — the suite reaches 12/12 (#516) (1d74dc8)
• ontology: give the object-type schema FSM an HTTP surface (#521) (a80605e)
• ontology: move the attach capability to the audited command credential (#526) (a9e51e7)
• ontology: project declared property references into live graph edges (#513) (f5910b8)
• payroll: a 급여명세서 draft that refuses to look finished (#558) (ac57410)
• payroll: make a golden case executable, so a signed figure can fail (#536) (bec30ab)

Bug Fixes

• app: drop the openapi_drift helper orphaned by the client-test removal (#504) (42e9e1c)
• authority: a passing verdict was self-assertable by declaring no reviewer (#548) (03cbcee)
• authority: ten unresolved merge markers sat in the program ledger, and the count grew per merge (#542) (2f640fd)
• authz: six cross-branch read and write defects in registry and identity (#554) (4d9c3d5)
• buck: pull the pinned PostgreSQL image explicitly, with bounded retry (#532) (dbae035)
• ci: assert the route-source contract against HEAD, not the orphaned candidate (#507) (8b7899d)
• ci: make six false-green gates fail closed (#506) (d9848ad)
• ci: resolve Buck targets by reading BUCK blobs, never by running Buck2 (#508) (294f023)
• ci: the local CI mirror was red on main, and its guard ran nowhere (#555) (e1509f5)
• lanes: one writer per lane, commit as you go, and a probe that checks itself (#517) (451591e)
• lanes: route agents to lane worktrees, wire the build cache, unbreak the workflow scripts (#511) (93bac45)
• openapi: document the authentication ten operations already require (#528) (18a21d7)
• opentofu: a missing tfvars planned away the one node that cannot be rebuilt (#561) (9200e87)

Performance Improvements

• lanes: sccache never saw a single compilation (#560) (f264689)