Releases: noctem-o/cogitator
Release list
Cogitator v2.2.2 — Apache-2.0
Contributors
Assets 2
2.2.1
What's Changed
- Sync Cargo.lock root package version to 2.2.0 by @noctem-o in #91
- Sync Cargo.lock root package to 2.2.0 by @noctem-o in #90
- Add Apache-2.0 NOTICE attribution by @noctem-o in #92
- Harden verifier path confinement and witness transcript validation by @noctem-o in #93
- Harden bundle path confinement and transcript totality recompute checks by @noctem-o in #94
- Use bundle-relative filenames in generated witness manifests by @noctem-o in #95
- docs: repair witness protocol spec, tighten docs tests, and rewrite README by @noctem-o in #96
- docs: polish README discoverability and verification navigation by @noctem-o in #97
- Refactor TUI view API, clarify ordeal fixture language, and add canonical-json conformance tests by @noctem-o in #98
- release-readiness: harden conformance subprocess assertion by @noctem-o in #99
- release: prepare v2.2.1 by @noctem-o in #100
Full Changelog: 2.2.0...2.2.1
Contributors
Assets 2
Cogitator v2.2.0 — Apache-2.0 release
Cogitator v2.2.0 — Apache-2.0 release Latest
Cogitator v2.2.0 — Apache-2.0 release
Cogitator is now released under Apache-2.0.
This release prepares the project for broader public adoption while preserving the core witness, replay, verifier, and canonicalization behavior.
Highlights
Relicensed the Cogitator implementation from BUSL-1.1 to Apache-2.0.
Updated crate metadata to use license = "Apache-2.0".
Reworked the README for a clearer, more restrained project introduction.
Removed the old ASCII logo from the README.
Added concise project badges for CI, license, Rust, releases, and the protocol spec.
Added a clear “What it is / What it is not” section to avoid overclaiming.
Preserved the protocol specification under Apache-2.0.
Removed stale commercial/BUSL wording from public-facing docs.
Added regression coverage for stable witness-domain labels so future branding changes do not accidentally alter protocol bytes.
What Cogitator provides
Tamper-evident witness bundles with BLAKE3 witness roots.
Canonical JSON commitments for stable verification.
Deterministic replay and verify workflows.
Pre-call policy interception.
Phantom entries for blocked or observe-only tool calls.
Drift demos and CI checks for witness-root stability.
What this release does not claim
Cogitator is not a compliance product by itself. It does not prove that a run originally occurred unless the witness root is externally anchored, and it is not a substitute for security, legal, or regulatory review.
Validation
The release-readiness sweep passed:
cargo fmt --check
cargo clippy --locked --all-targets -- -D warnings
cargo test --locked
deterministic drift demo
witness bundle verification
recomputed witness-root verification
deterministic smoke run comparison
ordeal witness-root golden check
CI release dry-run
security audit
Cogitator v2.1.0 — Apache-2.0 release
Cogitator v2.1.0 — Apache-2.0 release
This release prepares Cogitator for broader public adoption under Apache-2.0.
Highlights
- Relicensed the implementation from BUSL-1.1 to Apache-2.0.
- Refreshed the README for a clearer, less promotional project introduction.
- Removed the ASCII logo from the README.
- Added concise project badges and adoption-oriented quick-start examples.
- Clarified what Cogitator is and is not:
- tamper-evident AI-agent execution records;
- deterministic replay and verification workflows;
- pre-call policy interception;
- not a compliance product by itself;
- not proof of original occurrence unless roots are externally anchored.
- Preserved witness-root, verifier, and canonicalization semantics.
- Added regression coverage for stable witness-domain labels after the branding cleanup.
Validation
The release-readiness sweep passed:
cargo fmt --checkcargo clippy --locked --all-targets -- -D warningscargo test --locked- deterministic drift demo
- witness bundle verification
- recompute witness-root verification
- deterministic smoke run comparison
- ordeal witness-root golden check
License
Cogitator is now licensed under Apache-2.0.
COGITATOR 2.0.0
COGITATOR 2.0.0
The headline feature of 2.0.0 is pre-call policy interception -- an observation and enforcement layer that sits between the agent's intent and tool execution, committing every decision into the tamper-evident witness chain.
What's new
Pre-call policy interception
Every tool call is now evaluated against a declarative TOML policy before dispatch. The agent cannot observe the difference between a real response and a synthetic blocked response -- but the witness chain records exactly what was attempted and why it was blocked.
Three-way verdict system
allow-- tool dispatched, real outcome recordedblock-- tool not dispatched,PhantomEntry(Blocked)committed to chainphantom-- tool not dispatched,PhantomEntry(Phantom)committed to chain
Call history guards
Rules can condition on cumulative call history within a run -- e.g. block trade.* after more than 2 calls. Blocked calls count against the budget, preventing circumvention.
Policy digest in witness root
The SHA-256 digest of the policy file is committed into the witness root. Any third party can verify not just what the agent did, but under exactly which policy constraints it was operating.
COGITATOR Witness Protocol 1.0
The wire format is now specified as a standalone document at spec/COGITATOR_WITNESS_PROTOCOL.md under Apache 2.0 -- free to implement, cite, and build on independently of this implementation.
Schema version 4
TOOL_TRANSCRIPT_SCHEMA_VERSION bumped from 3 to 4. Fully forward-compatible -- 1.0 readers handle bundles without phantom entries gracefully.
Licence change
COGITATOR 2.0.0 is released under the Business Source License 1.1. Free for non-production use. Commercial production use requires a licence. Converts to Apache 2.0 on 2029-04-09.
The protocol specification is separately licenced under Apache 2.0.
COGITATOR 1.0.0
docs: link to witness protocol spec from README