v1.5.0

What's Changed

• Human view: honest medulla card, pastel-per-class letter boxes, and an English clarity pass by @maxkle1nz in #302
• docs: add AGENTS.md — vendor-neutral working guide for coding agents by @maxkle1nz in #303
• test(m1nd-ui): neutralize personal paths in captured fixtures by @maxkle1nz in #304
• build(m1nd-ui): add ESLint 9 flat config and clear the lint backlog by @maxkle1nz in #305
• chore: registry-derived tool counts in docstrings + atlas, and the async-agent close-out policy by @maxkle1nz in #307
• fix(mcp): reconnect wire-session rebind on collapsed caller_root + case-insensitive bare-name mailbox routing by @maxkle1nz in #308
• Human View v2 — the complete spec package: PRD, screen book, UML with thirteen state machines, F0 technical amendment, and the F0 code pre-work by @maxkle1nz in #310
• F0a: the SystemBlock contract in code + the twelve-block skeleton, ratified v1 by @maxkle1nz in #311
• docs(readme): add GitRooms room badge by @maxkle1nz in #309
• F0a slice 2: the skeleton becomes a living organ — sidecar store, OCC verbs, evidence anti-poison by @maxkle1nz in #312
• F1: the Build Map — the Human View's new front door, rendering the ratified skeleton live by @maxkle1nz in #313
• F2: Show Code + Copy Packet — a block becomes something you point an agent at by @maxkle1nz in #314
• F0a slice 3: the reconciliation engine — the map reacts to new files without lying by @maxkle1nz in #315
• F3b: the map shows reconciliation — real unmapped tray, boundary badges, the reconcile gesture, and a brain-aware Build Map by @maxkle1nz in #317
• A Build Map door in the top bar — the missing tree-to-map affordance by @maxkle1nz in #318
• F2.5: the write mode arrives — the ratified amendment, the mission-letter contract and its laws, and the fixed mission tray by @maxkle1nz in #319
• docs(pathos): F2.5 pre-work — write-mode runner proven, mailbox transport recon by @maxkle1nz in #316
• F2.5c+d: the runner daemon and the human gesture — the write mode is complete by @maxkle1nz in #320
• mission_post refuses a mis-routed brain_ref — the silent wrong-box trap dies by @maxkle1nz in #321
• README: how this repo is built — the log is the demo by @maxkle1nz in #323
• runnerd: the spawned candidate carries complete execution identity — the human can land it by @maxkle1nz in #322
• PATHOS checkpoint 14 — the loop ran with real hands by @maxkle1nz in #324
• F0c: skeleton_candidate — any repo gets a proposed map the human ratifies by @maxkle1nz in #325
• scan/reconcile resolve the code root — a hosted brain's store dir is never the repo by @maxkle1nz in #326
• scan: DIR-FIRST anchoring — a sparse graph yields a human-scale map by @maxkle1nz in #327
• PATHOS checkpoint 15 — any repo gets a map; F11 ratified by @maxkle1nz in #329
• mission_post refuses a letter naming a non-existent block by @maxkle1nz in #328
• F11: candidate editing with minimum human friction — the verb, the naming wire, the screen by @maxkle1nz in #330
• naming: size the owner batch budget to a real CLI runner by @maxkle1nz in #331
• ingest: refuse minting an overlapping project brain unless allowed by @maxkle1nz in #332
• ingest: route REST project_root bootstraps through the guarded seam by @maxkle1nz in #333
• curation: the letter posts to the resolved hosted brain by @maxkle1nz in #334
• docs: stamp the shipped marks on ladder rungs R2, R3, R5, R6 by @maxkle1nz in #335
• tray: the mission tray is an in-flow column, never a fixed overlay by @maxkle1nz in #336
• era-coherence: every agent-facing surface teaches the write laws by @maxkle1nz in #337
• vital sign: the brain screams when it wears a foreign skeleton by @maxkle1nz in #338
• docs: checkpoint 16 — the organism defends itself by @maxkle1nz in #339
• guard: skeleton write verbs refuse an uncovered caller root by @maxkle1nz in #340
• docs: F12 — the curation lane (propose-apply), owner-ratified by @maxkle1nz in #341
• ARC-1: proof-system integrity — the spool fence, receipt coherence, and the two mechanical guards by @maxkle1nz in #342
• F12: the curation lane — propose-apply, in the image of /name by @maxkle1nz in #343
• docs: checkpoint 17 — the hand curates by @maxkle1nz in #344
• registry: a brain's instance entry is stable — opening a brain never duplicates its card by @maxkle1nz in #345
• north: the orientation packet rings the landing bell by @maxkle1nz in #346
• fix(ui): the scan wait becomes an honest loading state machine by @maxkle1nz in #347
• voice: human_view v1 — the served human card in the north packet by @maxkle1nz in #348
• voice: slice 2 — the pulse signature, the map fact, and the cockpit verb by @maxkle1nz in #349
• scan: the server narrates its real phases on the SSE channel by @maxkle1nz in #350
• docs: burst curation — atlas re-grounded, checkpoint 18, root cleaned by @maxkle1nz in #351
• fix(mcp): file_view reads the brain's code root, not its store dir by @maxkle1nz in #352
• security: receipt_import gains the human-origin gate (stamp arc, step 0) by @maxkle1nz in #353
• reader: slice 1 — the code reader with the map on the wall by @maxkle1nz in #354
• gardener v1: the organism moves when seen — per-brain daemon, fail-open vigils, yielding auto-reconcile by @maxkle1nz in #355
• organism-inside: P0 — the ratified PRD lands and work runs INSIDE by @maxkle1nz in #356
• fix(ingest): the workspace_root flip — the #326 family's 3rd member by @maxkle1nz in #357
• fix(daemon): the auto-tick fires on every transport seam (G1) by @maxkle1nz in #358
• presences: the P1 server — sidecar, collision law, cockpit 8th slot, /api/presences by @maxkle1nz in #359
• presences: the Hall strip — the owner sees the team (P1 gate-material) by @maxkle1nz in #360
• docs: era-coherence — trust-first, the charter grammar, presences on every agent surface by @maxkle1nz in #361
• fix: the CI port flake dies and the vigil sees untracked files (G2) by @maxkle1nz in #362
• test: guard the charter-persistence invariant (no bug — the guardian misread the disk) by @maxkle1nz in #363
• ci: cut Actions spend without blinding coverage by @maxkle1nz in #366
• receipt-import: human-touchid joins the origin allow-list (the gesture now exists) by @maxkle1nz in #365
• retrieval: the truth battery + the recall fix (claim bodies were invisible to seek) by @maxkle1nz in #364
• F2.5e: archive a superseded receipt — the honest set-aside by @maxkle1nz in #367
• docs: honest front door — onboarding truth and receipts-first positioning by @maxkle1nz in #368
• feat: ambient shim opens with the north voice card when a served owner is live by @maxkle1nz in #369
• fix: served owner binding immune to foreign local runs by @maxkle1nz in #370
• feat: the Universe landing surface, /api/universe aggregate, and the Landing queue by @maxkle1nz in #371
• fix: honest doors and exits — confirm on reconcile, owner alerts land, stagnant heads dismissible, panels close by @maxkle1nz in #372
• fix: read panoramas never queue behind graph work by @maxkle1nz in #373
• feat: hash router — deep links, a real back, one navigate() by @maxkle1nz in #374
• feat: the living map — graph_changed covers block verbs, the map subscribes by @maxkle1nz in #376
• fix: write doors check identity and sanity by @maxkle1nz in #375
• fix: candidate Build Map keeps its panel open through live refresh by @maxkle1nz in #377
• M1ND-10: fail-closed candidate boundary, first reviewed candidate freeze by @maxkle1nz in #379
• fix(g4): close residual Windows directory-fsync sites; diagnose the macOS recovery flake by @maxkle1nz in #383
• G9 Path-B: Secure Enclave single-host custody floor (amendment G9-A1) by @maxkle1nz in #384
• feat(g9): enclave open/sign/dup-guard (delivered) + custody_floor threading (blocked on frozen canon) by @maxkle1nz in #386
• feat(g9): thread custody_floor through the M1ND-10 gate and autonomy receipts by @maxkle1nz in #387
• fix: deterministic Windows failures in the actor family + A2 path-semantics security tightening by @maxkle1nz in #391
• fix(mcp): declare top-level type object on service tool schemas by @maxkle1nz in #389
• fix(mcp): honest recovery playbook + legacy snapshot adoption at boot by @maxkle1nz in #390
• release: prep 1.5.0 (HUMAN_GATED; organism dormant) by @maxkle1nz in #388
• release: ship 1.5.0 for macOS + Linux (drop Windows binary, phase-2) by @maxkle1nz in #393
• fix(release): let the update smoke find cosign in a trusted path by @maxkle1nz in #394
• M1ND-10: re-freeze the PRD at the cleaned-canon digest (owner-ratified) by @maxkle1nz in #395
• fix(release): extract exact crates outside the repo workspace tree by @maxkle1nz in #396

Full Changelog: v1.4.0...v1.5.0