kujo-workflows v0.6.0

Route explicit media generation/import through the shared production runtime while preserving offline fixture separation. Select Workcell user identity from the observed daemon security profile. The live rootful Colima gate passed with AppArmor and seccomp, host UID mapping, no-new-privileges, read-only root, dropped capabilities, no network, and no Docker socket. The default Docker context was unchanged.

Validation: Release-readiness and clean-checkout checks passed (27 unit tests, 12 environment skips), alongside native validation and real Workcell execution. Synthetic rootless identity tests do not claim live rootless verification.

Live provider scope: ElevenLabs TTS passed in the companion runtime; Sound Effects rejected the saved key as unauthorized, and Free-plan music was blocked locally. No media publication or account upgrade is included.

Merged commit: 09a95d197c266df186adc602f9aa80a4d649d4d7.

Kujo Workflows v0.4.0

Kujo Workflows v0.4.0 adds the low-touch Publishing House Operator and completes the eleven-stage Publishing House lifecycle.

Highlights:

• Publication-profile-driven SourcePack intake, StoryDesk plan import, daily ticks, resumability, approval routing, and exception-only notifications.
• Live phase-adapter contracts with checksum-bound receipt validation, bounded retries, blocked-item resume, and readiness diagnostics.
• Owned Agent Project lifecycle proof, refreshed WebOps platform guidance, and canonical Watchdog v2 workflow evidence.
• 38 cataloged local-first workflows with clean-checkout release validation.

See CHANGELOG.md for the complete release record.

Kujo Workflows v0.3.0

[0.3.0] - 2026-08-14

Added

• Eight composable Publishing House workflow kits covering daily routing,
  commissioning, evidence, primary and asset production, editorial revision,
  checksum-bound human approval and publication, and post-publication learning.
• Versioned Publishing House transport contracts, exact tool compatibility
  records, role bindings, deterministic fixtures, and an all-eight integration
  proof with bounded revision, pause/resume, idempotency, and no-network gates.
• A locked local installer and Kujo-native doctor that verify the runtime and
  ten pinned dependencies before running the complete offline fixture.

Changed

• Expanded the active workflow catalog from 26 to 34 workflows.
• Documented the Publishing House live-adapter and human-approval boundaries
  separately from the verified offline installation contract.