Skip to content

CMI v0.12.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 12 Aug 02:35
· 49 commits to main since this release
v0.12.0
623d659
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Feature release adding Evidence-Anchored Rule Intelligence so CMI can connect reviewed rules and findings to concrete source locations without promoting source matches into product truth.

Added

  • Added structured evidence anchors that can carry project-relative file paths, line ranges, symbols, features, and commit references.
  • Added portable evidence syntax for source:, symbol:, feature:, and commit: references, plus bounded extraction from existing finding evidence and related files.
  • Added explicit finding verification semantics: suspected → observed → established, while durable resolved remains the lifecycle resolution state.
  • Ambient Intelligence now tells agents to inspect affected source and capture line/symbol/feature/commit evidence when reviewed project rules are relevant to a task.
  • Closing Intelligence now carries and renders evidence anchors and verification state, and violationEstablished is tied to established verification rather than reviewed-rule relevance alone.
  • Extended the findings registry schema additively with optional verificationState and evidenceAnchors fields while retaining schema version 1 compatibility.
  • Added focused evidence-anchor tests and docs/EVIDENCE_ANCHORED_RULE_INTELLIGENCE.md covering the trust boundary and intended lifecycle.

Evidence limits

  • Source or static evidence can establish that code exists at a cited location; it does not by itself prove a runtime-visible, user-visible, design, architecture, or policy violation.
  • established requires verification appropriate to the rule, such as a test, runtime/browser observation, or explicit human review; reviewed-rule relevance remains advisory until then.
  • Line ranges can drift as source changes, so CMI pairs them with symbol/feature/commit context where available; this is not compiler-grade symbol tracking.
  • This release does not add an autonomous generic rule scanner and does not hard-code any Project 001-specific rule or detector.
  • No productivity, time-savings, universal-agent, or v1-readiness claim is established by this release.
Assets 2
Loading