Context Continuity v0.2.0-beta.2

Context Continuity v0.2.0-beta.2

Release date: 2026-09-01
Status: public prerelease; tagged multi-OS CI gate passed

What changed

• Aligned the frozen adjacent-product contract with Execution Fidelity Guard
  0.2.2 and the separate unofficial DeepSeek Harness Guard adapter
  0.1.0-alpha.2.
• Recorded the Guard provider envelope and exact seven-field intent projection,
  immutable contract identity rules, and current wire-version boundaries.
• Clarified that Guard does not load the reserved Continuity snapshot and that
  no live Intent Loop or Continuity bridge ships.
• Clarified Codex requires_user behavior and that a DSH native ask authorizes
  only the exact pending call without mutating Intent or Continuity state.
• Refreshed installation pins and source-bound lifecycle/package receipts for
  the beta.2 source tree.
• Corrected the real lifecycle verifier so receipts record the tested Codex
  version dynamically instead of a historical fixed label.
• Bound all six Codex receipts to the resolved executable digest; the four
  lifecycle receipts also bind App Server identity.
• Added first-use guidance for product boundaries, DSH profiles,
  off/reset/delete semantics, ledger corruption, and default-path candidates.
• Hardened lock acquisition and real-path validation against transient
  removal races, including Windows EPERM, without masking real permission
  failures.

What did not change

The recovery algorithm, state schema, privacy caps, exact user confirmation
protocol, Codex Hook surface, and DeepSeek Harness adapter contract remain
unchanged from beta.1. The shared core adds the path-race hardening above.
This remains a continuity plugin, not a memory platform or execution guard.

Compatibility

Surface	Version	Evidence boundary
Context Continuity for Codex	0.2.0-beta.2	Real Windows manual/automatic lifecycle plus tagged Windows/macOS/Linux code/package CI
Context Continuity for DSH	0.2.0-beta.2, Harness 0.1.1-rc.2	Published Host API lifecycle and isolated package; CLI profile and engine auto-compaction pending
Adjacent Codex Guard contract	0.2.2	Read-only contract alignment; no live Continuity bridge
Separate DSH Guard adapter	0.1.0-alpha.2, Harness 0.1.2-alpha.2	Separate plugin; no automatic integration with Context Continuity

Important limits

This prerelease does not prove reduced context drift, rework, or recovery time.
The frozen three-arm real-task study has not run. Authenticated real Mac Codex
manual/automatic compaction, DSH CLI profile installation, and DSH
engine-generated automatic compaction also remain unverified.

Install

Pin v0.2.0-beta.2 using the Codex or DeepSeek Harness commands in the root
README. Review Hook or profile changes before installation and retain a removal
path. The project is opt-in and does not require a maintainer-side local install.

Public verification

• Tagged cross-platform CI: https://github.com/rrrrrredy/context-continuity/actions/runs/33466096941
• Release commit: 5b4dd8d
• Asset SHA-256: 36543a869ce31d1fb7ef242dc9878b524985d847353fce75f48a766ec55cda6e

Context Continuity v0.2.0-beta.1

Published after the tagged Windows, Ubuntu, and macOS Node 20/22 CI matrix passed: https://github.com/rrrrrredy/context-continuity/actions/runs/33368640167

Context Continuity v0.2.0-beta.1

Release date: 2026-08-31
Status: release candidate; publish only after the public multi-OS CI gate passes

What changed

• Added a DeepSeek Harness adapter for the published 0.1.1-rc.2 plugin
  contract.
• Reused the same ledger, invariant model, confirmation protocol, privacy caps,
  and recovery rules across Codex and DSH.
• Added host-bound DSH user provenance so models cannot supply task, workspace,
  or authority-source identifiers.
• Added durable DSH compaction observation and bounded recovery through the real
  pre-step waterfall.
• Added isolated DSH package verification and published-host API lifecycle
  receipts.
• Added macos-latest to the complete Node 20/22 CI matrix.
• Added macOS installation, removal, support, and verification-boundary
  documentation.
• Made core and DSH test entry points Node 20/22 compatible and release digests stable
  across LF/CRLF text checkouts without changing unknown binary bytes.
• Updated the three-product integration contract to remain read-only and
  single-owner.

Compatibility

Host	Supported release	Level
Codex	Plugin/Hook builds compatible with the v0.1 lifecycle contract	Public beta
DeepSeek Harness	0.1.1-rc.2	Developer-preview beta
Windows	Node 20/22 CI and real Codex lifecycle receipts	Verified beta
macOS	Node 20/22 CI for core, package, Hook, MCP, eval, and DSH adapter	Public CI required; real Codex automatic lifecycle pending
Linux	Node 20/22 CI for core, package, Hook, MCP, eval, and DSH adapter	Verified code/package beta

Important limits

This release does not copy the full transcript, provide long-term memory, plan
the task, grant permission, or block host execution. It does not claim proven
reductions in drift or rework before the frozen three-arm study is complete.

DeepSeek Harness CLI profile installation and engine-generated automatic
compaction were not locally exercised. An authenticated real Mac Codex
automatic-compaction run was also unavailable. These limits are explicit release
conditions, not inferred passes.

Install

Codex and DeepSeek Harness commands are in the project README. This is a
prerelease: pin v0.2.0-beta.1, inspect Hooks or profile changes, and retain a
recovery path before using it on important work.

Context Continuity v0.1.0

Context Continuity v0.1.0

Context Continuity is a local-first Codex plugin that preserves and verifies a
small source-aware task projection around context compaction, resume, clear,
and subagent handoff.

Highlights

• Strict append-only, task-scoped hash-chain ledger with provenance,
  supersession, event allowlisting, generation control, and pre-read size caps.
• Real PreCompact, PostCompact, and compact/resume recovery integration.
• Readable, generation-bound exact user confirmation for normalized authority;
  natural-language paraphrases, quotes, or stale prompt events cannot mint it.
• Old next actions become stale at every lossy boundary and must be rederived
  before execution.
• Explicit conflict and uncertainty instead of summary-created consensus.
• Bounded recovery context: 800-token default and 1,500-token hard ceiling.
• Candidate-only imported handoffs and subagent results.
• Eight-tool public MCP with bounded responses and no model-visible provider
  credential, external binding, or verified-evidence minting path.
• Read-only execution-guard interchange shape, with no claim of a live bridge.
• Local-only storage, no telemetry, no transcript parser, and no runtime
  dependencies.
• Two-stage exact confirmation for off, on, reset, and delete; strict namespaced
  task references; human-readable challenge recovery; archive-aware deletion;
  and fail-open host behavior.
• Opaque hashed host identifiers, 24 KiB success/error wire bounds, and
  symlink/junction containment for task, snapshot, archive, lock, and deletion
  paths.
• The read-only execution-guard view excludes stale and unverified next actions;
  reset clears obsolete lifecycle pointers while preserving audit history.

Verification gates

• 87 automated tests on the hardened release candidate.
• A six-turn independent installed-candidate user flow with silent ordinary
  behavior and first-call success for protect, exact record, show, and off.
• One real manual and at least two consecutive real automatic compactions from
  both the source checkout and the byte-identical installed cache package.
• A fresh ephemeral Codex process discovers and calls the installed MCP.
• Installed-package persistence, redaction, Skill/license equality, bounded wire
  behavior, two-stage deletion, post-delete byte scans, and exact uninstall are
  required before the release is published.
• Validation receipts bind both the source tree and plugin package digests.

Important beta limits

The real-task three-arm efficacy study has not run. This release does not claim
measured reductions in target drift, rework, or recovery time. Real resume,
parent/subagent round-trip handoff, broader operating-system coverage, other
Codex versions, other Agent adapters, and lower-cost explicit protection remain
future verification work.

See README.md, docs/prd.md, docs/release-readiness.md, and SECURITY.md before
installing.