OCBrain v1.1.0 — Verifiable context from a fresh brain

OCBrain v1.1.0 — Verifiable context from a fresh brain

v1.1.0 makes a clean installation easier to prove, keeps hosted delivery
explicit, and strengthens the stable ocbrain.context.v1 contract without
adding a background service or hosted dependency.

Fresh-brain onboarding

• The tracked examples/hosted-context-demo manifest contains four public,
  synthetic OCBrain facts for a real context -> source acceptance turn.
• curated-apply verifies every named source hash before writing evidence,
  proposal, and approval events. It prevalidates the complete manifest and
  rolls the entire apply back if any fact fails.
• A manifest containing hosted_ok facts is refused atomically unless the
  operator supplies --allow-hosted-egress. Confidential and secret facts
  cannot use that policy.
• OpenClaw remains optional. Python 3.11+, Git, and one compatible local stdio
  MCP client are sufficient on macOS or Linux; WSL remains expected but is not
  part of the dated release-acceptance proof.

Retrieval and delivery

• Retrieval can combine FTS5 lexical matches with an optional local Ollama
  vector sidecar using reciprocal-rank fusion.
• The sidecar is derived and replaceable. Missing, stale, incompatible, or
  unavailable vectors fall back to deterministic lexical retrieval.
• Hosted-model delivery is selected by the MCP server, not by tool arguments.
  It excludes local_only, prohibited, confidential, and secret objects before
  ranking or packet construction.
• Coverage now reports mutually exclusive current-serving inventory counts for
  scope exclusions, delivery exclusions, and eligible objects without listing
  excluded hosted IDs or content. These exact, query-independent counts do
  disclose the cardinality of each category.
• Context packets are bounded to 32 KB, with bounded excerpts and source
  handles. Hosted source expansion uses ocbrain:// URIs rather than local
  filesystem paths.
• Explicit cross-scope retrieval now issues verifiable source handles under the
  same opt-in gate; source expansion still requires context matching the
  source's own scope.

Golden contract and public project hygiene

The public synthetic golden dataset drives real MCP brain.context and
brain.source calls across positive, negative, scope-isolation, cross-scope,
hosted-delivery, contradiction, source-hash, and wrong-scope-denial cases. CI
runs this focused contract before the complete test suite. It is explicitly a
test fixture, not harvested user data or training input.

This release also adds the contribution and security policies, pull-request
and issue templates, code ownership, public CI, a clone-to-first-smoke guide,
and clearer storage guidance. The SQLite core is owner-restricted but remains
plaintext at rest; use host or full-disk encryption when the threat model
requires encryption.

Unchanged authority boundaries

The core remains on demand and dependency-free at runtime. It starts no
scheduler, timer, watchdog, hosted judge, trainer, or background loop. Agent
ingest records evidence but cannot directly promote serving beliefs. Durable
authority remains the append-only event chain, explicit scope and provenance,
human decisions, retrieval receipts, source handles, feedback, and closeouts.