minius_codex_lab 1.0.0-beta.2

minius_codex_lab 1.0.0-beta.2

This is a corrected beta pre-release for third-party testing with synthetic
data. It supersedes v1.0.0-beta.1, whose tag and assets remain unchanged
for reproducibility but must not be used for legal work.

minius_codex_lab is an independent open-source project. It is not an
official product, system, service, or position of the Ministry of Justice of
Ukraine, OpenAI, or another government body. It does not guarantee legal
correctness. Every legally significant document requires qualified human
review and approval.

Install

Download both assets:

• minius_codex_lab-workspace-v1.0.0-beta.2.zip
• minius_codex_lab-workspace-v1.0.0-beta.2.zip.sha256
• minius_codex_lab-workspace-v1.0.0-beta.2.spdx.json (deterministic SPDX 2.3 SBOM)

Verify before extraction:

sha256sum -c minius_codex_lab-workspace-v1.0.0-beta.2.zip.sha256

On macOS:

shasum -a 256 -c minius_codex_lab-workspace-v1.0.0-beta.2.zip.sha256

On PowerShell, compare Get-FileHash with the first value in the checksum
file. Extract into a new standalone folder outside another Git repository,
then follow the extracted README.md. The first gates are:

python3 scripts/validate_workspace.py --mode runtime
python3 scripts/check_repo_safety.py --profile workspace-local
python3 scripts/init_workspace.py --memory-mode untracked

Corrected in beta.2

• all 12 skills now have strict, portable YAML frontmatter;
• validator uses PyYAML safe loading, duplicate/type checks, and exact skill
  and role inventories;
• clean-install initializer creates a safe local Git history with no remote;
• three explicit matter/memory storage modes replace ambiguous .gitignore
  guidance;
• onboarding distinguishes project trust from hook trust and requires factual
  /hooks, /skills, role, and rules checks;
• synthetic lifecycle now covers clean ZIP, init, matter, session branch,
  handoff, HTML, DOCX, links, hashes, and negative evidence fixtures;
• Linux, macOS and Windows Python/Git lifecycle gates are documented and run
  in CI;
• verifiable-document builds are warning-strict by default and reject absolute
  paths plus unverified material/OCR evidence.

Known limitations

• Use only synthetic data until the local Codex smoke-test succeeds.
• Project trust and exact hook trust are user decisions and cannot be inferred
  from file presence or CI.
• Windows CI validates Python/Git/HTML/DOCX generation, not interactive Codex,
  Microsoft Word rendering, or legal sufficiency.
• Existing workspaces require manual upgrade; do not overwrite matters,
  memory, logs, artifacts, or locally modified managed files.
• The tag is annotated but may be unsigned because no maintainer signing key
  was available; verify release SHA-256 and the GitHub artifact attestation.
• Technical validation never establishes legal authority, currency,
  applicability, or correctness.

After publication, verify workflow provenance with:

gh attestation verify minius_codex_lab-workspace-v1.0.0-beta.2.zip \
  --repo sergeionlyart/minius_codex_lab