Skip to content

Holoself v0.6.0

Choose a tag to compare

View all tags
@smota smota released this 24 Aug 11:58
· 15 commits to main since this release
v0.6.0
970f011
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.
  • Adds optional private <data-root>/lenses/*.json custom-lens registries with strict v1 definitions, deterministic hashes, hard-error semantic validation, exact document grants, explicit sensitivity access, and read-only lens list|show|validate commands.
  • Advances context packets to schema v2 with normalized lens resolution and registry hash, and indexes to schema v4/privacy-policy v3 so registry changes invalidate freshness without migrating Markdown or links.
  • Separates read access (access_lenses), public reuse (disclosure), handling classification (sensitivity), and policy/evidence/content behavior (document_role). Untagged canonical documents fail closed; legacy visibility metadata remains conservatively supported.
  • Ensures publishing resolution includes governing policy while excluding unapproved evidence and employer-confidential non-policy content. Context packets and search results expose publication eligibility explicitly.
  • Replaces blanket native-adapter claims with capability evidence fields and clarifies startup adapters, packet formatters, metadata links, snapshots, and legacy live mounts.
  • Adds canonical metadata and adapter capability schemas plus end-to-end privacy/capability tests.
  • Adds task selectors and explicit compensation, third-party, recruiter, employer, and application sensitivity categories with fail-closed lens defaults and post-resolution leakage checks.
  • Upgrades deterministic index to schema v4/privacy-policy v3 with input/config/registry freshness hashes, automatic stale rebuild for search, and persisted include/exclude build assertions.
  • Adds restricted-host packet generation with bounded expiry, packet ids, source hashes, validation metadata, and honest snapshot-only adapter documentation.
  • Hardens Windows live activation by normalizing CRLF public skills before managed-section parsing.
  • Preserves legacy folded/literal proposal text, preference_update records, and terminal audit archives while retaining strict containment for pending proposals.
  • Adds activated read-only project links: link add detects agent platforms, generates a neutral bootstrap/runtime manifest, injects bounded startup pointers after confirmation, and supports activate/deactivate/repair/doctor lifecycle commands.
  • Adds lens/task/privacy-aware context resolution with provenance and Pi, Claude Code, Codex, generic, and Obsidian packet adapters.
  • Adds non-mutating overlap/conflict/stale reports and confirmed proposal approval/rejection/defer workflow.
  • Adds local deterministic indexing, changed/rebuild/status commands, and provenance-preserving federated search. Markdown remains source of truth; SQLite/FTS remains optional acceleration, not dependency.
  • Adds visibility, link, proposal, provenance, duplicate-claim, broken-reference, and generated-view validation plus public JSON schemas.
  • Security hardening validates proposal UUIDs/containment/schema/provenance, uses realpath containment for activation writes, preflights and transactionally rolls back adapter changes, protects unmanaged skill shims, detects managed-block drift, cleans markers despite missing runtime metadata, fails closed on malformed control/canonical YAML, conservatively salvages project privacy fields, excludes agent/config/generated trees, preserves metadata collisions, blocks legacy export overwrite, and applies privacy policy to index/search.
  • Adds Antigravity activation through ANTIGRAVITY.md detection.
Assets 2
Loading