ArchKeel 2.0.0 — ArchQ Explorer and exact permissions

Architecture checks for coding agents.

• ArchQ Explorer replaces the previous report navigation. The report opens
  with the new Explorer embedded. Fullscreen expands the same view; Restore
  preserves selection and zoom. Offline module and member pages share its controls.
• Find and explore recorded evidence. Search components, modules and rules;
  browse sortable Objects, inspect Health check, or highlight authorship, layer
  and evidence perspectives. Pointer zoom, keyboard shortcuts and SVG, Mermaid
  and link export support review. As-Is, Target and Diff retain the same recorded
  verdicts, UNKNOWNs and source links. No new runtime dependency is required.
  See the report guide and
  Explorer work.
• Exact native boundary permissions. Opt-in contract schemas 3.0–3.3
  add source-and-body-bound alias permissions, heterogeneous typed-map unions
  with exact key-alias proof, directly written literal map arms, and explicit
  bare-map permissions at exact DTO fields or registry parameters. Separate
  depth selectors accept only the supported native object leaves. Metadata
  fields, sibling findings and UNKNOWNs remain independently checked.
  See boundary rules.
• Compatibility stays explicit. Supported 2.1–2.3 contract schemas and
  serialization without the new bindings remain unchanged. Existing contracts
  are not rewritten; older readers reject unsupported opt-in schemas.
• Unproven alias bodies stay UNKNOWN. They do not justify body-dependent findings or
  grants. Proven literal findings remain; ordinary permissions cannot bypass
  uncertain alias proof by changing union order.
• Explicit Callable signatures. Proven stdlib argument lists and results use
  the existing boundary checks. SourceFacts 3.0.0 carries neutral TypeList
  facts; versions 1/2 retain exact round trips and reject that new shape.
• Direct stdlib TypedDict fields. Proven declarations check every key,
  including underscore keys. Broad fields fail; unproven providers remain UNKNOWN.
  Public model fields also retain proven type-name reach during validation.
• Full reports retain every recorded UNKNOWN. report --only architecture --full --json exports complete original records, including IDs, details and
  evidence references, even with a component filter. Full architecture output uses schema
  2.0.0, with command-result schema 7.0.0. Compact architecture output
  remains 1.0.0; published legacy 6.0.0 result schemas are unchanged.
  Empty and unavailable evidence remain distinct. See CLI reference.
• Static proof fixes. Supported quoted builtin annotations retain their
  original positions; proven stdlib overload re-exports expose all declared
  signatures; property setters retain their own local binding scope. Safe
  annotation carriers and nullable DTO paths preserve supported alias and field
  proof. Unsupported or ambiguous forms retain UNKNOWN.
• Review the exact permission. ArchQ Explorer distinguishes declared and applied
  permissions and links evidence to members. Reset and fit controls are labelled
  consistently; rejected offline routes retain the complete URL until explicit
  recovery.

Accepted native values remain opaque. These checks certify neither serialization,
materialization, type closure nor runtime correctness. Product listings use
ArchKeel and “Architecture checks for coding agents”.