vaultspec-core: v0.2.4

0.2.4 (2026-09-21)

Features

• firmware: carry the code boundary to the surfaces that write code (8e0382c)
• mcp: make the gateway child cancellable and name the server executable after its package (#539) (fee747a)

Bug Fixes

• ci: point the package managers at a release that exists (ff74a41)
• vault: rebuild the feature indexes the status changes invalidated (7ed3739)

Performance

• index and graph operations on large vaults (#537) (3c29056)

vaultspec-core: v0.2.1

0.2.1 (2026-09-10)

Bug Fixes

• binaries: build and prove the linux-x86_64 binary natively (#527) (916500b)
• ci: build and prove the linux-x86_64 binary on a hosted runner (2359b63)
• ci: stop the binaries guard poisoning the shared Linux workspace (5b011be)

vaultspec-core: v0.2.0

0.2.0 (2026-09-09)

Features

• agents: render Antigravity subagents to .agents/agents/ (#491) (163b104), closes #488
• binaries: bake a per-target distribution and gate it with --network none (#496) (6c56825)
• binaries: brand Windows executables (6945d4e)
• ci: move the snapshot where the version is true, and check the artifact (efbd86b)
• cli: record what the published surface was, so the difference is computable (d675211)
• dev: add the just init worktree initialization package (c8fc2c2)
• dev: annotate the diff with lint and type findings under CI (fb5e8eb)
• dev: give the harness a voice of its own (7901647)
• dev: report the population a test lane ran, and drop the reporters that never said anything (a6945a9)
• docs: generate the MCP tool table from the server that serves it (0e2d819)
• docs: give generated references a candidate-versus-published contract (#524) (5a432ab)
• docs: render the version caveat instead of writing it (a02e639)
• framework: clarify the framework contract (a777953)
• harness: size work by horizon, make the ledger the only execution artifact, and rewrite the corpus (#422) (f755314)
• justfile: make just init the worktree entry point (189071b)
• migrations: a safety net under every destructive migration (#473) (b7e0613)
• migrations: an authoring verb converges where its write lands, and nothing else (#495) (51a6063), closes #458
• spec: declare a managed-block opt-out where a teammate can read it (ce01c68)
• vault: warn about foreign files in .vaultspec/ and .vault/ (#484) (149469a), closes #450

Bug Fixes

• audit: align the dependency gate's exit codes with dev/exit_codes.py (cbb2c6e)
• audit: make the dependency gate multi-ecosystem and allowlist-driven (aa1738c)
• boundary: move the ADR linkage out of source and into the ADR (dd910e9)
• builtins: finish the reword the fallback sentence started (bab6b39)
• ci: prevent actionlint ShellCheck deadlock (0a0a0de)
• ci: the main sentinel closed its issue on a pending verdict (8e87193)
• cli: a printed next action that could not be run as printed (1e43af3)
• cli: epic intent show raised a traceback where its sibling reports an error (f0f6d5c)
• cli: exercise target source resolution under pytest (cbae972)
• cli: read --body-stdin as bytes, so a legacy byte survives the edit (082f97a)
• cli: read --body-stdin as bytes, so a legacy byte survives the edit (#520) (ff41aab)
• cli: status --json emits vaultspec.error.v1 on workspace/target failures (#448) (06bb09c)
• cli: the precommit row read as a promise that git would run the hooks (34afb5a)
• cli: the status hint promised vault checks that spec doctor does not run (5b3336e)
• coerce non-mapping frontmatter and load sync hooks from the target (#468) (4aacf6d), closes #460 #461
• core: refuse a symlinked destination instead of severing it silently (#438) (3f5c3ea), closes #413
• core: stop a read-only destination leaking the atomic-write temporary (#427) (7bf35b1), closes #412
• dev: give the init report an argument-typed dict (d0e3b29)
• dev: report complexity offenders, not the whole census (8df44ca)
• dev: speak UTF-8, so one accented character stops killing recipes (1d7caca)
• dev: state the shape of the foreign data the dev tooling reads (7b5a6bf)
• dev: stop audit all silencing the one dimension that gates (ea4d57b)
• docs,ci: say when provenance starts, and mint it in a job of its own (#493) (a8cf3a1)
• docs: name the entry point in the two bare spec-group references (#434) (b290d2a)
• docs: reflow the three files that broke main's markdown gate (#447) (928f734)
• doctor: a check that could not read the file reported it was fine (acf9775)
• doctor: an unprotected workspace was reported as information (6abae4a)
• doctor: precommit reported ok while no hook could run (68cb6d2)
• doctor: report that a check could not run, instead of that it passed (#435) ([19cb11b](https://github.com/neveni...

vaultspec-core: v0.1.73

0.1.73 (2026-08-30)

Features

• ci: acquire at the declared glibc floor, not only above it (#395) (8c84e70)

vaultspec-core: v0.1.72

0.1.72 (2026-08-30)

Features

• ci: acquire the aarch64 Linux binary, and derive that coverage (#392) (6b7c864)

vaultspec-core: v0.1.71

0.1.71 (2026-08-30)

Features

• binaries: build linux-aarch64 on a hosted ARM64 runner (#387) (2240f7e)

vaultspec-core: v0.1.70

0.1.70 (2026-08-30)

Bug Fixes

• acquisition: wait on the binary bootstrapping, not on a PyPI endpoint (#389) (50c7ca1)
• acquisition: wait on the index the installer reads, not the JSON API (#385) (a8d1d72)

vaultspec-core: v0.1.69

0.1.69 (2026-08-30)

Bug Fixes

• acquisition: give the Windows leg a profile the binary can actually use (#383) (7e9fd87)

vaultspec-core: v0.1.68

0.1.68 (2026-08-30)

Bug Fixes

• acquisition: wait for PyPI, which the binary needs in order to start (#380) (b65763a)
• channels: one channel root per product, and a guard that watches it (#373) (e420699)

vaultspec-core: v0.1.67

0.1.67 (2026-08-30)

Features

• acquisition: execute the Windows binary, closing the last platform (#376) (a55eea7)

Bug Fixes

• binaries: drop the Intel leg, derive the preflight selectors, host the guard (#372) (3cd128d)
• binaries: require every declared target, not any asset at all (#377) (778788c)
• release-please: dispatch binaries from main, not from the tag (#378) (e1b578a)