Rootloom Personal Core 3.3.0
Rootloom Personal Core 3.3.0 is a Core Reset: it reduces persistent governance, clarifies optional capability boundaries, and closes the remaining 3.2 reviewability defects without introducing another Evidence schema version.
Highlights
- Define the everyday Core as Change, Review, and Guidance; keep Autonomy and Evidence opt-in, Project Memory experimental, and the preserved Assurance branch archived.
- Make SessionStart project-guidance detection read-only; repository guidance is written only through an explicit seed request.
- Remove committed one-time plans and release records, compact global and repository guidance, and keep release facts in GitHub.
- Position Rootloom as an inspectable, bounded personal engineering workflow rather than a verified-quality or content-aware secret-scanning system.
Reliability and security
- Require exact integer component-policy
version: 1and fail closed for missing, malformed, zero, string, or future versions. - Separate historical Baseline v4 wire validation from current execution policy; incompatible old declarations return
reintake-requiredbefore content capture. - Report honest policy and captured-file provenance, add strong PEM private-key names, and cap Reviewable Paths at 64.
- Pin
actions/setup-nodev6.4.0 by full commit SHA so CI uses the supported Node 24 action runtime.
Compatibility
- Public presets are
skills-only,guidance, andpersonal;engineeringandcommand-safetyremain accepted input aliases. - Baseline v4 and Summary revision 5 remain the current formats; this release adds no Baseline v5 or Summary v6.
Verification
- Local
make check: 184 tests passed with 2 environment-dependent skips. - Local Codex CLI 0.144.2 compatibility smoke passed without install side effects.
- PR #10, PR #11, and merged-main CI run 29461951922 each passed all seven Linux, macOS, Windows, and Codex jobs.
Full details are in CHANGELOG.md and the accepted Personal Core product-boundaries decision record.