Therapist v0.2.0 — longitudinal memory alpha

Therapist v0.2.0 — longitudinal memory alpha

Therapist v0.2.0 is an experimental, free, non-commercial, adult-only self-hosted alpha for
technical contributors and informed self-hosters. It is AI for private self-reflection, not therapy,
diagnosis, medical advice, emergency care, clinical validation, or human monitoring.

Install or update

macOS or Linux:

curl -LsSf https://raw.githubusercontent.com/matteodante/therapist/main/install.sh | sh

Windows PowerShell:

powershell -ExecutionPolicy Bypass -c "irm https://raw.githubusercontent.com/matteodante/therapist/main/install.ps1 | iex"

The installer pins the immutable v0.2.0 source, replaces an earlier isolated thera tool, runs
guided setup, and finishes with thera doctor. It preserves local application files and the shared
embedding-model cache.

Clean-break warning

This release intentionally has no schema migration or legacy compatibility layer. A store from an
older or unknown schema is rejected without modification. Before replacing an older installation,
retain any export and the old local store separately if you need them, then use a fresh data
directory or deliberately delete the incompatible store. Exports are plaintext and need separate
protection.

What changed

• Separated the root protocol, verified skill catalog, dynamically loaded skill body, successful
  model history, and bounded JSON case data.
• Expanded the experimental bilingual pack to fifteen process skills and added verified source
  bases for every skill. No reviewer or clinical validation is claimed.
• Rewrote the pack in positive, semantically routed form and specified an idiomatic conversational
  Italian register without fixed response templates.
• Replaced overloaded memory status with independent origin, fit, lifecycle, evidence relation,
  conflict, and staleness semantics.
• Added exact-evidence tools for reports, hypotheses, corrections, reviews, accepted focus,
  process preferences, interventions, outcomes, unwanted effects, and support choices.
• Enforced quoted-data polarity and grounded extractive restatement in both conversation tools and
  the durable store, including a dedicated accepted-focus persistence check.
• Added hybrid local semantic retrieval, complete encrypted model history, context-boundary session
  rollover, and end-of-session consolidation.
• Added standard, transcript-only, and ephemeral memory modes, optional retention, selective
  deletion, and user-visible memory inspection and correction commands.
• Added the full-screen Textual chat, cumulative streaming drafts, and native per-user Telegram
  background services for macOS, Linux, and Windows.
• Updated the pinned dependency set to exclude the cryptography PKCS#7 vulnerability fixed in
  50.0.0; Therapist does not use the affected PKCS#7 APIs.

Provider and data flow

The supported first-alpha inference configuration is a personal ChatGPT account through the
experimental codex: OAuth provider and gpt-5.6-sol. OpenAI documents ChatGPT authentication for
official Codex clients, not this independent direct-backend integration. The path may change or stop
working, is not the OpenAI API, implies no OpenAI endorsement, and must not be used for SaaS.

Conversation content, selected bounded context, successful session history, and any dynamically
loaded skill are sent to ChatGPT for inference. Embeddings and encrypted application state remain
local. Telegram additionally receives transported messages when enabled. There is no hosted
Therapist service, publisher-operated inference, product telemetry, or normal publisher access to
application data.

Verification and artifacts

The release candidate must pass the deterministic suite, branch-coverage floor, Ruff, ty, protocol
hash validation, installer checks, wheel installation, package metadata checks, locked dependency
audit, live longitudinal-memory evaluation, bilingual conversational role-plays, and three repeats
of the bilingual safety suite. The exact results and residual limitations are recorded in the
current release-readiness document.

The GitHub prerelease attaches the built distributions, SHA256SUMS, a locked-runtime CycloneDX
SBOM, and GitHub/Sigstore provenance and SBOM attestations. Verify downloaded artifacts against
those release attachments.

Known limitations and rollback

The protocol is experimental, has no clinical review or efficacy evidence, and may respond poorly.
Codex subscription limits and compatibility can interrupt use. There is no confidential
project-specific conduct inbox, second administrator, hosted support, or deletion control over
provider, Telegram, plaintext export, backup, or terminal copies.

To roll back, install a prior immutable tag only with the separate store that belongs to that
schema. Do not point an older binary at a v0.2.0 data directory. For a material release defect,
the prerelease will be marked withdrawn and the installer channel moved forward to a fixed tag.