PlzDo Local v0.3.0 - Harness source preview

This prerelease updates the provider-free PlzDo harness. The core runs locally without an LLM or provider account.

• Preserve valid approval reuse and bind new P5 writes to the approved repository profile.
• Keep authenticated legacy status and rollback paths, with stronger file and state handling.
• Preserve Python 3.9+ core support. The fixed read-only parent adapter requires Python 3.11+ and does not execute models or providers.
• Clarify the harness-only source setup and internal-use policy boundary.

Verified commit: e72a8b87c4ba2202f0697e816b8b43d48499e0a8.

The exact-commit local gate and exported-source checks passed on macOS with Python 3.12.3 and 3.9.6. Source privacy, manifest and reachable Git-history checks passed. The repository supplies its local verification scripts; hosted CI is not required.

This is a harness source preview. Use the checked-in bin/plzdo wrapper and the README instructions. Local-model runtime, external AI integrations, model weights and a wheelhouse are not included. The reserved local package extra is not part of this preview. This release does not certify live inference or OS isolation, and it was not tested on another Mac.

Existing core MIT notices are retained. Obtain and use the source through channels approved by your organization. Downloading this source does not modify existing personal configuration, model services or provider accounts.

PlzDo Local v0.2.2

Highlights

• Makes the checked-in local gate authoritative for changes and releases.
• Removes the bundled hosted-CI workflow and remote status-check dependency.
• Adds restricted-environment setup using only repository-owned skills and agents.
• Adds exact-commit pull-request evidence and reviewer-local verification.
• Fixes first-time managed resource installation and hardens missing-root creation against symlink replacement.
• Keeps Git remotes as explicit operator-owned collaboration surfaces rather than runtime dependencies.

Verification

• Exact release commit: f58dafd02d1a57aed273d6fe1a432f90fcc6b994
• Local acceptance: 5/5 on the final commit
• Python: 3.9.6 and 3.12.3
• Publication history and private-denylist audit: passed
• Package downloads, hosted CI, external AI, MCP, browser automation, daemon, and telemetry: not required

PlzDo Local 0.2.1

PlzDo Local 0.2.1

This hardening release keeps the runtime local while tightening public-release safety and making contributor workflows easier to run.

• Pin GitHub Actions to immutable commit SHAs.
• Separate contributor checks from maintainer-only privacy and release procedures.
• Scan Git-free exports with an external private denylist before publication.
• Keep release state in VERSION, Git, and GitHub rather than task files.
• Generate product-specific requirements and technical design while retaining safety policy in AGENTS.md.
• Add executable template/example parity and release-document separation checks.

Run ./scripts/verify after cloning. No provider credentials, private denylist, local paths, or private review artifacts are included.

PlzDo Local 0.2.0

PlzDo Local 0.2.0

The first full local release of the PlzDo control plane.

Included

• Deterministic project routing, formalization, context packs, bounded state, local memory, findings, metrics, and manual monitoring.
• Repository-owned skills and agent role files, local review preparation/import, static reference catalogs, and portable local state roots.
• A default-disabled real-apply workflow with exact planning, operator authorization, backup, verification, and rollback evidence.
• Bounded Git-object publication auditing plus privacy, portability, contract, negative-test, and release gates.

Safety boundary

PlzDo Local does not include provider transports, credentials, browser automation, telemetry, package downloads, hooks, daemons, schedules, auto-update, or Obsidian integration. Local-only behavior is an application contract, not an operating-system firewall.

Verification

• Five complete local integrated-gate runs passed on the frozen release bytes.
• A fresh clone passed the integrated gate and publication-history audit.
• GitHub Actions passed on Python 3.9 and 3.12 for both main and v0.2.0.
• Release manifest SHA-256: 220167da4535cd22c9c425ade4202074bd226fc1af20a922385128ee3e0b17f9.

See README.md, SECURITY.md, and CHECKS.md for installation, threat-model, and verification details.

PlzDo v0.1.0

Initial public release: local-first agent control-plane template, proof gates, release leak checks, and optional Codex skills.