Repository navigation
Releases: tamld/g8s
Releases · tamld/g8s
Release list
v0.22.0
🚀 g8s v0.22.0 (The Gatekeepers)
Zero-CGO pure-Go process execution and capability harness for AI subagents.
📦 Downloads & Platform Matrix
| Platform | Architecture | Binary / Archive |
|---|---|---|
| macOS (Apple Silicon) | darwin/arm64 (M1/M2/M3/M4) |
g8s_0.22.0_darwin_all.tar.gz |
| macOS (Intel) | darwin/amd64 (x86_64) |
g8s_0.22.0_darwin_all.tar.gz |
| Linux | linux/amd64 |
g8s_0.22.0_linux_amd64.tar.gz (also .deb, .rpm, .apk) |
| Linux | linux/arm64 |
g8s_0.22.0_linux_arm64.tar.gz (also .deb, .rpm, .apk) |
| Windows | windows/amd64 |
g8s_0.22.0_windows_amd64.zip |
🔒 Verification
Verify artifact integrity against published SHA-256 hashes:
sha256sum -c checksums.txt🔄 Changes in this Release
Changelog
- e7e11c7 chore: release 0.22.0
- 806494d chore: update coverage baseline to 82.21% [skip ci]
- c6c9a80 chore: update coverage baseline to 82.32% [skip ci]
- 34d1707 chore: update coverage baseline to 82.39% [skip ci]
- c926f0e chore: update coverage baseline to 82.40% [skip ci]
- 62593ee chore: update coverage baseline to 82.49% [skip ci]
- 71ecacd chore: update coverage baseline to 82.50% [skip ci]
- 00618db chore: update coverage baseline to 82.55% [skip ci]
- 202f1fb chore: update coverage baseline to 82.55% [skip ci]
- fd23b4c chore: update coverage baseline to 82.56% [skip ci]
- 80dab8b chore: update coverage baseline to 82.57% [skip ci]
- 40a1fac chore: update coverage baseline to 82.58% [skip ci]
- 81cf5b6 chore: update coverage baseline to 82.67% [skip ci]
- 71ec238 chore: update coverage baseline to 82.71% [skip ci]
- a41a374 chore: update coverage baseline to 82.72% [skip ci]
- 9a45337 chore: update coverage baseline to 82.73% [skip ci]
- e784365 chore: update coverage baseline to 82.73% [skip ci]
- ad14301 chore: update coverage baseline to 82.86% [skip ci]
- 6578e9f chore: update coverage baseline to 83.30% [skip ci]
- 1f15a55 ci(nightly): scheduled full-battery workflow + gofumpt tree parity (#701)
- c303e7d ci(secrets): triage-verified gitleaks allowlist for full-history scan (#709)
- a0a30c3 docs(adr): ADR-0037 reach layer (PROPOSED — co-sign pending) (#706)
- ab5c45f docs(handoff): mesh interop shipped + reach campaign in flight (session handoff) (#708)
- 27cbf23 docs(handoff): reach S1 merged — S4 + agy S2/S3 next (session handoff) (#711)
- 8d17566 docs(handoff): zcode → agy — S3 to release v0.22.0 + D-09 + audit reports (#715)
- 00cd7ed docs(offer): record aegis v0.1.0 & v0.2.0 sovereign graduation and #694-#697 sync in SCORECARD
- f6293d4 docs(offer): record aegis v0.4.0 graduation (DELTA-13..15, 9/9 VERIFIED_LIVE, 10-gate public CI) in SCORECARD.md
- ad4af48 docs(offer): record aegis v0.5.0 (DELTA-16..17, 3D Web Spatial Physics & Quantitative Aesthetic Telemetry) in SCORECARD.md
- 28c2b99 docs(release): v0.22.0 roadmap Done + CHANGELOG + 3-team CI/CD audit synthesis (#717)
- e2f6028 docs(roadmap): v0.22.0 row — multi-coordinator native interop ledger + RT-MESH v1 (#703)
- caeaf9d docs(roadmap): v0.22.0 scope + reach layer release gate (#704) (#705)
- bc5117a docs(scorecard): record aegis v0.3.0 graduation (DELTA-10..12, 8/8 VERIFIED_LIVE)
- f3ced6a docs(scorecard): record aegis v0.6.0 covenant ratchet, 5d causal memory, 5-stage cognitive loop & turnkey packaging sync
- b47ff3a feat(fsops,memory,verifier): add JIT Baton-Passing & Canonical Toolbox engine with 12-dimension stress suite (#693)
- 6e3ce85 feat(memory,vault,fsops,contextpack,cli): self-contained Memory-to-Knowledge Vault lifecycle, AST tier read, atomic batch edit, and fleet gc
- df2b7fc feat(mesh): coordinator interop ledger + RT-MESH v1 (Codex/AGY/ZCode experiment) (#700)
- 631f1ef feat(reach): S1 core — in-code channel registry, ordered fallback chain, g8s reach CLI (#710)
- 553ee61 feat(reach): S2 health ledger + owned paths + automatic chain reorder (#713)
- 6a04baf feat(reach): S3 Context Broker WorldSnippets + vault promotion (#716)
- abdb733 feat(reach): S4 machine-artifact reach citations enforced by DoR floor (#712)
- 500b98f feat(reflex,memory,featuremap,fsops): RRF recall, Jev memory gate, H2 rule re-awakening, feature audit & ACI diagnostics (#684, #685, #686, #687)
- 15fa6c1 feat(supervisor,memory,cli): Coordinator Cognitive Intake, Experiential Autopsy Loop & Exponential Mastery Engine (#688, #689, #690)
- 3d4c5b9 feat(verifier,memory,supervisor): port Aegis PlanDiffVerifier, TestAssertionGuard, Sudden-Death CrashAutopsy, ROI Pruning & TrajectoryMonitor (#694, #695, #696, #697)
- 1ef241a fix(debt-34): whitespace-only layer exemption (RT-MESH v1.1 A6) (#702)
- 5eed521 test+ci: CI/CD depth wave — gitleaks wire, nightly parity, red-test suites, property tests (#707)
- 04cdb08 ⚡ Bolt: Zero-allocation string truncation (#692)
- 5b65986 🛡️ Sentinel: [CRITICAL] Fix silent error swallowing in AgyWorker file write (#691)
⚡ Quick Update
If you already have g8s installed, check your version anytime with:
g8s version --check-updatev0.21.0
🚀 g8s v0.21.0 (The Gatekeepers)
Zero-CGO pure-Go process execution and capability harness for AI subagents.
📦 Downloads & Platform Matrix
| Platform | Architecture | Binary / Archive |
|---|---|---|
| macOS (Apple Silicon) | darwin/arm64 (M1/M2/M3/M4) |
g8s_0.21.0_darwin_all.tar.gz |
| macOS (Intel) | darwin/amd64 (x86_64) |
g8s_0.21.0_darwin_all.tar.gz |
| Linux | linux/amd64 |
g8s_0.21.0_linux_amd64.tar.gz (also .deb, .rpm, .apk) |
| Linux | linux/arm64 |
g8s_0.21.0_linux_arm64.tar.gz (also .deb, .rpm, .apk) |
| Windows | windows/amd64 |
g8s_0.21.0_windows_amd64.zip |
🔒 Verification
Verify artifact integrity against published SHA-256 hashes:
sha256sum -c checksums.txt🔄 Changes in this Release
Changelog
- 6b1c2ca chore(deps): bump modernc.org/sqlite from 1.60.1 to 1.61.0 (#676)
- 7dfad92 chore(mcp): bump MCP server provenance version to 0.21.0
- 2b94f3d chore(release): bump version to v0.21.0
- ec45669 chore(repo): purge tracked foreign agent configs, scratch files, and stale plans
- 6fce534 chore: update coverage baseline to 83.30% [skip ci]
- 4aa27d7 chore: update coverage baseline to 83.31% [skip ci]
- 28d1bff chore: update coverage baseline to 83.31% [skip ci]
- f6658a6 chore: update coverage baseline to 83.34% [skip ci]
- 5188f97 chore: update coverage baseline to 83.35% [skip ci]
- 562750a chore: update coverage baseline to 83.39% [skip ci]
- d9c576f chore: update coverage baseline to 83.39% [skip ci]
- f43308e chore: update coverage baseline to 83.40% [skip ci]
- 8018efa chore: update coverage baseline to 83.40% [skip ci]
- 960c262 chore: update coverage baseline to 83.47% [skip ci]
- 6148536 chore: update coverage baseline to 83.48% [skip ci]
- 9b642a6 chore: update coverage baseline to 83.50% [skip ci]
- 7e039bd chore: update coverage baseline to 83.51% [skip ci]
- d7c02ee chore: update coverage baseline to 83.51% [skip ci]
- c94ea0e chore: update coverage baseline to 83.64% [skip ci]
- 59b82fc chore: update coverage baseline to 83.68% [skip ci]
- 93f8785 chore: update coverage baseline to 83.81% [skip ci]
- 3dbc674 chore: update coverage baseline to 83.82% [skip ci]
- 4a1d5e7 feat(charter): implement Orthogonal Stratum Federation and epoch-fenced charter store (DELTA-33)
- b531d29 feat(cli): wire cursor provider into llm-call, providers discover, and worker (#683)
- 3619f66 feat(cli): wire g8s charter CLI, S1 submit firewall, ADR-0035, DELTA-33, and feature map
- b1f3550 feat(cli,docs,spec): expose g8s audit list CLI (#441) and synchronize v0.20.0 SSoT roadmaps & living domain specs
- cd0339c feat(cli,featuremap,spec): surface contract v2, F0/scorecard CLI, living domain specs, DELTA-45 (#677 #678 #679 #680)
- fb0910f feat(cli,scorecard,spec): generative printUsage, deliver telemetry, reciprocal domain_href & inherits_spec_kit (#677 #678 #679 #680)
- 745a458 feat(contextpack,verifier,provider,mcp): pure-Go AST+Knapsack context compressor, 6-stage AI QA pipeline, and exclusive DeviceLeasePool (DELTA-36, DELTA-37, DELTA-38) (#671)
- aeebccc feat(controlplane,worker): implement transactional access_audit log (#441) and F1/F2 capability-scoped skill/MCP hydration
- 41f604a feat(lifecycle,featuremap,premise,conformance): implement DELTA-40..43 and Lesson #23 quota guard
- a03d7c5 feat(mcp,harness,brief,routing): implement DELTA-34/35 skill hydration, 10-role taxonomy, and pre-execution research/debate gate
- 5645dc6 feat(offer,ci): scaffold .g8s/feature-map.yml v2 with inherits_spec_kit in g8s offer init & per-commit layer check (#682)
- 78464f8 feat(provider,conformance,windows): wire commandcode & qwen CLI agents, record live free-tier conformance, and fix Windows internal test paths
- a455449 feat(provider,routing,mcp,orchestrator): add CLI agent providers, free-tier routing, and dogfooding fixes (#672)
- f857839 feat(provider,worker): add CursorProvider and diff firewall template (#683)
- 4caea59 feat(routing): add continuous model quality scorecard, dynamic quarantine, and session handoff
- c2ccb42 feat(security,docs,packaging): editorial SVG diagrams, OWASP Agentic/SLSA/SBOM matrix & fail-closed installer (#639) (#673)
- 76db9a3 feat(vault,f0,llm-call,fsops): multi-repo vault grounding, fail-closed T3 lineage, non-Markovian loop rollback & verify-cmd DLP (#661, #662, #663, #664)
- c4fdefc feat(worker,openspec): implement DELTA-39 worktree diff firewall and CLI templates (closes #672)
- b34c43e fix(cmd/g8s): register qwen in runWorker builtin platform_dispatch fallback
- 19d37f4 fix(featuremap,docs): enforce bidirectional DAG symmetry & sync v0.20.0 CLI/MCP/SRS surface (#665, #666)
- 086d8cb fix(release,ci): install syft for GoReleaser SBOM and sync packaging v0.21.0
- 32020e8 fix(test): drain os.Pipe concurrently in f0_scorecard_test to prevent 4KB Windows pipe buffer deadlock
- f4396b4 fix(worker,provider): fail closed on CLI agent [API Error and prune failed-attempt worktrees (#678)
- ca3f42d perf(contextpack): precompute lowercase strings in BM25F scoring (#681)
- 750d4fe perf: optimize model routing prefix checks with zero-allocation EqualFold (#674)
- 97d2457 test(cli): normalize Windows backslash path check in TestRunUninstallDryRunAndApply
- 135901a ⚡ Bolt: Hoist regexp.MustCompile out of loops/hot paths (#667)
- 547554b 🛡️ Sentinel: [HIGH] Fix command option injection in Git calls (#675)
⚡ Quick Update
If you already have g8s installed, check your version anytime with:
g8s version --check-updatev0.20.0
🚀 g8s v0.20.0 (The Gatekeepers)
Zero-CGO pure-Go process execution and capability harness for AI subagents.
📦 Downloads & Platform Matrix
| Platform | Architecture | Binary / Archive |
|---|---|---|
| macOS (Apple Silicon) | darwin/arm64 (M1/M2/M3/M4) |
g8s_0.20.0_darwin_all.tar.gz |
| macOS (Intel) | darwin/amd64 (x86_64) |
g8s_0.20.0_darwin_all.tar.gz |
| Linux | linux/amd64 |
g8s_0.20.0_linux_amd64.tar.gz (also .deb, .rpm, .apk) |
| Linux | linux/arm64 |
g8s_0.20.0_linux_arm64.tar.gz (also .deb, .rpm, .apk) |
| Windows | windows/amd64 |
g8s_0.20.0_windows_amd64.zip |
🔒 Verification
Verify artifact integrity against published SHA-256 hashes:
sha256sum -c checksums.txt🔄 Changes in this Release
Changelog
- b258adf chore(release): prepare v0.20.0 version sync across manifests and installers
- 9779457 chore: release 0.20.0
- 6a70fbc chore: update coverage baseline to 83.90% [skip ci]
- edc477f chore: update coverage baseline to 83.91% [skip ci]
- c06d0ae feat(v0.20.0): add bounded agentic loop, F1->F2 subtask containment, fleet status gate, and monotonic Jev routing (DELTA-32)
- 7b58db9 fix(f0): initialize test git repo before overriding PATH in TestVerifyT3Command_CLI
- a57ff48 fix(routing): include served models in Jev provider criteria to prevent cross-provider rejection (#518)
⚡ Quick Update
If you already have g8s installed, check your version anytime with:
g8s version --check-updatev0.19.1
🚀 g8s v0.19.1 (The Gatekeepers)
Zero-CGO pure-Go process execution and capability harness for AI subagents.
📦 Downloads & Platform Matrix
| Platform | Architecture | Binary / Archive |
|---|---|---|
| macOS (Apple Silicon) | darwin/arm64 (M1/M2/M3/M4) |
g8s_0.19.1_darwin_all.tar.gz |
| macOS (Intel) | darwin/amd64 (x86_64) |
g8s_0.19.1_darwin_all.tar.gz |
| Linux | linux/amd64 |
g8s_0.19.1_linux_amd64.tar.gz (also .deb, .rpm, .apk) |
| Linux | linux/arm64 |
g8s_0.19.1_linux_arm64.tar.gz (also .deb, .rpm, .apk) |
| Windows | windows/amd64 |
g8s_0.19.1_windows_amd64.zip |
🔒 Verification
Verify artifact integrity against published SHA-256 hashes:
sha256sum -c checksums.txt🔄 Changes in this Release
Changelog
- 839fe2b chore(ci): wire Feature Map & Verification Skills gates into doc-contract check and fix f0 hook goroutine cleanup
- 7a49540 chore(skills,offer): bump g8s-supervisor v4.4.0, align MECE domains, and prep v0.19.1 changelog
- d36e0de chore: release 0.19.1
- 4292fce chore: update coverage baseline to 83.86% [skip ci]
- 35fa371 chore: update coverage baseline to 83.90% [skip ci]
- ee4fac2 chore: update coverage baseline to 83.91% [skip ci]
- b39847f feat(cli,openspec): wire claim affinity, receipt-export CLI, DoD verify tests, and register DELTA-26..31 (#648, #655, #656, #657, #658, #659)
- 274660e fix(verifier): normalize Windows slash/backslash paths in DoD artifact verification (#648)
- 7e41030 fix(worker,verifier,server,controlplane): enforce DoD mechanical binding, Draft-7 output schema, fail-closed isolation, claim affinity, receipt export status, and remote bind auth (#648, #655, #656, #657, #658, #659)
- cfc672e perf: Hoist regexp.MustCompile to package level to avoid dynamic recompilation (#654)
- a3c8cc9 ⚡ Bolt: hoist verifier regex variables (#647)
⚡ Quick Update
If you already have g8s installed, check your version anytime with:
g8s version --check-updatev0.19.0
🚀 g8s v0.19.0 (The Gatekeepers)
Zero-CGO pure-Go process execution and capability harness for AI subagents.
📦 Downloads & Platform Matrix
| Platform | Architecture | Binary / Archive |
|---|---|---|
| macOS (Apple Silicon) | darwin/arm64 (M1/M2/M3/M4) |
g8s_0.19.0_darwin_all.tar.gz |
| macOS (Intel) | darwin/amd64 (x86_64) |
g8s_0.19.0_darwin_all.tar.gz |
| Linux | linux/amd64 |
g8s_0.19.0_linux_amd64.tar.gz (also .deb, .rpm, .apk) |
| Linux | linux/arm64 |
g8s_0.19.0_linux_arm64.tar.gz (also .deb, .rpm, .apk) |
| Windows | windows/amd64 |
g8s_0.19.0_windows_amd64.zip |
🔒 Verification
Verify artifact integrity against published SHA-256 hashes:
sha256sum -c checksums.txt🔄 Changes in this Release
Changelog
- ac75851 chore: release 0.19.0
- 3bcca92 chore: release 0.19.0
- 60b49eb chore: update coverage baseline to 83.87% [skip ci]
- 6fa4b92 chore: update coverage baseline to 83.90% [skip ci]
- 82565bf chore: update coverage baseline to 83.93% [skip ci]
- 77345b5 chore: update coverage baseline to 83.94% [skip ci]
- b46b043 chore: update coverage baseline to 83.95% [skip ci]
- 4f96241 docs(scorecard): record TuneFlow Deep Vertical Phase 2 Feature Map & 3-Layer Blind Verification metrics (Closes #648, Closes #649, Closes #650, Closes #651, Closes #652)
- e1963bc feat(platform): Multi-root F1->F2 delegation, depth-2 telemetry, perimeter anti-theater, and doctor capability matrix (#643, #644, #645) (#646)
- 66d44ce feat(soc): provider-agnostic CLIProxyAPI/default_model, blind T3 failover & 14-node Feature Map (#648, #649, #650)
- 6a4e91b feat(v0.19.0): Universal Config-Driven LLM Call Consumer, 16-Tool MCP, Offer v0.19.0, Single MIT License & Pedagogical Docs (#636, #637, #638) (#640)
- b842728 feat(verifier): add 3-Layer Blind Verification Loop engine (Holdout, BlindReviewPacket, CanaryCheck) (Refs #650)
- e19d3fd feat(verifier,feature-map,skills): Wave 1 DoD trust fix, T3 CLI wiring, feature-map DAG, and verification skills suite (Refs #648, #649, #651)
- 0accf2b feat(verify): wire --feature, --holdout-dir, --blind-packet, and --canary-mutant CLI flags (Refs #649, #650)
- d1e868d fix(ci): normalize Windows slash paths in DeriveAllowedPaths and handle canary restore error
- f84f0e3 fix(worker): expose tool_policy_evidence through submit -> worker -> get (Closes #653)
- f25af84 security(codeql,ci): resolve all 15 Code Scanning alerts, bump Go to 1.26.10, and add --context-files (#641) (#642)
⚡ Quick Update
If you already have g8s installed, check your version anytime with:
g8s version --check-updatev0.18.0
🚀 g8s v0.18.0 (The Gatekeepers)
Zero-CGO pure-Go process execution and capability harness for AI subagents.
📦 Downloads & Platform Matrix
| Platform | Architecture | Binary / Archive |
|---|---|---|
| macOS (Apple Silicon) | darwin/arm64 (M1/M2/M3/M4) |
g8s_0.18.0_darwin_all.tar.gz |
| macOS (Intel) | darwin/amd64 (x86_64) |
g8s_0.18.0_darwin_all.tar.gz |
| Linux | linux/amd64 |
g8s_0.18.0_linux_amd64.tar.gz (also .deb, .rpm, .apk) |
| Linux | linux/arm64 |
g8s_0.18.0_linux_arm64.tar.gz (also .deb, .rpm, .apk) |
| Windows | windows/amd64 |
g8s_0.18.0_windows_amd64.zip |
🔒 Verification
Verify artifact integrity against published SHA-256 hashes:
sha256sum -c checksums.txt🔄 Changes in this Release
Changelog
- 5912a36 chore(manifest): sync v0.17.0 release commit SHA and date
- 2fa412e chore: release 0.18.0
- cb3f718 chore: update coverage baseline to 84.01% [skip ci]
- 61d8a45 chore: update coverage baseline to 84.22% [skip ci]
- b404dea chore: update coverage baseline to 84.23% [skip ci]
- 06cfe32 chore: update coverage baseline to 84.24% [skip ci]
- 85b1486 chore: update coverage baseline to 84.24% [skip ci]
- 3ce1368 chore: update coverage baseline to 84.25% [skip ci]
- 87ec524 chore: update coverage baseline to 84.26% [skip ci]
- ef1e922 chore: update coverage baseline to 84.36% [skip ci]
- d1900b5 docs(handoff): record multimodal governance boundary and JIT video skill handoff
- d318202 docs(offer): correct SCORECARD M2/M3 claims and hash-checker first-audit evidence (#619)
- 694db59 docs(supervisor): add Shape 5 manifest-locked multi-phase fan-out pattern
- a9d94af feat(cli,gates): upgrade offer check/init, cross-repo verify, polyglot structure gate, and search flags (#606, #607, #608, #609) (#612)
- 3c46759 feat(f0): Wave A verified delegation — ADR-0033, evidence ledger, mandate, gates G0-G3/G5/G6, hooks (#620) (#634)
- 23b324c feat(f0,lane,harness,telemetry,orchestrator): complete Wave B (#620), resolve #615/#616/#617/#633, and prep v0.18.0 (#635)
- 4673dda feat(governance): DELTA-24 differential governance, spatial JIT whisper, net-delta diff guard & HITL calibration (closes #595, closes #596)
- 6518b58 feat(security): complete 4-pillar AppSec battery (DAST, IAST, Grey-Box Fuzzing) & delegated scope containment (#598, #600, #601, #602) (#603)
- 9cb15d4 feat(security): integrate SAST Triad (Gosec, Semgrep, CodeQL) and enforce explicit error handling (#599)
- 79327a7 feat(worker): wire Knowledge Vault spatial notes into L3 ContextBroker (closes #594)
- e5a7c2c fix(ci): normalize Windows search_test paths and enforce strict pre_tag CI check
- c0e1e11 fix(ci): use deterministic -fuzztime 10000x to avoid Go fuzz timer minimization race
- fec410a fix(lint): replace chan error discard receives with chan struct{} for golangci-lint v2.15
- 692d614 fix(probe): check error received from mcpDone channel in AuditHTTPMCPDASTBoundary (#601) (#604)
- 29d2a59 fix(probe,conv,deliver,offer): resolve Mode-3 issues #611, #614, #617 and complete 5/5 offer scorecard (#618)
- 14bdf6d fix(server,mcp,ci): defer ValidateAndConsume after pre-checks & upgrade CodeQL Action to v4 (closes #605)
- 57fcb22 fix(worker): preserve explicit req.AddDirs[0] target repo under concurrent drain (#610) (#613)
- aeaa928 ⚡ Bolt: Optimize isHotfixSummary and isRefactor allocations (#597)
- e7551d3 🛡️ Sentinel: [HIGH] Fix command option injection in Git calls (#592)
⚡ Quick Update
If you already have g8s installed, check your version anytime with:
g8s version --check-updatev0.17.0
🚀 g8s v0.17.0 (The Gatekeepers)
Zero-CGO pure-Go process execution and capability harness for AI subagents.
📦 Downloads & Platform Matrix
| Platform | Architecture | Binary / Archive |
|---|---|---|
| macOS (Apple Silicon) | darwin/arm64 (M1/M2/M3/M4) |
g8s_0.17.0_darwin_all.tar.gz |
| macOS (Intel) | darwin/amd64 (x86_64) |
g8s_0.17.0_darwin_all.tar.gz |
| Linux | linux/amd64 |
g8s_0.17.0_linux_amd64.tar.gz (also .deb, .rpm, .apk) |
| Linux | linux/arm64 |
g8s_0.17.0_linux_arm64.tar.gz (also .deb, .rpm, .apk) |
| Windows | windows/amd64 |
g8s_0.17.0_windows_amd64.zip |
🔒 Verification
Verify artifact integrity against published SHA-256 hashes:
sha256sum -c checksums.txt🔄 Changes in this Release
Changelog
- 3128a47 chore(deps): bump github.com/pterm/pterm from 0.12.83 to 0.12.84 (#583)
- bd7fa45 chore(deps): bump golang.org/x/sys from 0.48.0 to 0.49.0 (#584)
- f86d948 chore(deps): bump modernc.org/sqlite from 1.59.0 to 1.60.1 (#555)
- 0f07738 chore: release 0.17.0
- 6ab22b6 chore: sync latest_release.commit/date to the v0.16.0 release commit (release.sh self-reference limit)
- db59d03 chore: update coverage baseline to 84.25% [skip ci]
- 2a33ff2 chore: update coverage baseline to 84.26% [skip ci]
- cba0698 chore: update coverage baseline to 84.27% [skip ci]
- 00a82e8 chore: update coverage baseline to 84.27% [skip ci]
- 2d8c6a7 chore: update coverage baseline to 84.29% [skip ci]
- 2fb7025 chore: update coverage baseline to 84.38% [skip ci]
- 2c223f4 chore: update coverage baseline to 84.49% [skip ci]
- 7b44bb8 chore: update coverage baseline to 84.55% [skip ci]
- 6406370 docs(handoff): returns handoff — Session A (v0.16.0 shipped PASSED) routes back to the strategy session (ADR-0022 marker)
- 0a673dd docs(offer): complete Wave 3/4 rollout scorecard and cross-project review (closes #442)
- 03d4457 docs(offer): stress-test verdict row — criteria 1-2 PASS verified, criterion 3 completes 10-12; closes the claimed-but-missing row the pre-registered criteria caught
- 73cd194 docs(offer,skills,tools): add cross-platform ripgrep (rg) standard to offer bundle and wire rg-first into ci_spec_code_sync (#591)
- ae66d14 docs(openspec): standardize DELTA-01..23 registry, pin all 66 grandfathered scenarios, and remove stale status/patch drift
- 5d3713b docs(plans): C5 brief — submit fail-fast pairing + root-dispatch classification (issues #566 #567)
- f40aac7 feat(cli): support cross-repo delivery, preserved worktree override, embedded offer check and polyglot spec sync
- 2ee3d8a feat(cli): v0.17.0 deliver v2 deletions, ladder --out scope check & submit --class (#569, #570, #567, #566)
- 12df06e feat(cli,mcp,server): expose native read/edit/select across CLI, MCP, and HTTP API (#593)
- bdcf520 feat(cli,offer,skills): add deliver --prune-worktree, non-Go docs taxonomy gate, 3-round quotas, and v0.18 AgentVid roadmap
- b8c65b4 feat(cli,search,offer): add g8s search CLI with --receipt-id scope gate and 3-stage code review fixes (#591)
- 7d82577 feat(fsops,cli,worker,harness): add core Read/Edit/SelectPath and F1/F2 delegation env (#593)
- 4e8c945 feat(internal,docs): v0.17.0 DLP masking, worker duration, ladder redtests & F2 containment (#588, #587, #586, #575, #570, #566)
- 4e0c74f feat(search,doctor): add native cross-platform search package and doctor probe (#591)
- f5bf6f3 feat(worker): support cross-repo worktree isolation and sum step usage on partial streams
- d042750 fix(ci,docs): fix Windows pipe deadlock, sync v0.17.0 docs and pre-tag gate
- 41242f2 fix(debt): resolve SDD/DDD/TDD technical debt, bind all 50 claims, and unskip bug tests
- 4de429e fix(dispatch,probe): preserve unquoted Python credential-parser call and subscript expressions (#590)
- f87ea9a fix(offer): scaffold effort-classes for all profiles and skip non-Go structure gate (#442)
- 1571277 fix: change middleware order so auth does not block CORS preflight (#554)
- 3998a3f ⚡ Bolt: Replace ToLower with EqualFold for zero allocations (#589)
- 3637cd6 🛡️ Sentinel: [CRITICAL/HIGH] Fix SQLite Connection String Injection (#574)
⚡ Quick Update
If you already have g8s installed, check your version anytime with:
g8s version --check-updatev0.16.0
🚀 g8s v0.16.0 (The Gatekeepers)
Zero-CGO pure-Go process execution and capability harness for AI subagents.
📦 Downloads & Platform Matrix
| Platform | Architecture | Binary / Archive |
|---|---|---|
| macOS (Apple Silicon) | darwin/arm64 (M1/M2/M3/M4) |
g8s_0.16.0_darwin_all.tar.gz |
| macOS (Intel) | darwin/amd64 (x86_64) |
g8s_0.16.0_darwin_all.tar.gz |
| Linux | linux/amd64 |
g8s_0.16.0_linux_amd64.tar.gz (also .deb, .rpm, .apk) |
| Linux | linux/arm64 |
g8s_0.16.0_linux_arm64.tar.gz (also .deb, .rpm, .apk) |
| Windows | windows/amd64 |
g8s_0.16.0_windows_amd64.zip |
🔒 Verification
Verify artifact integrity against published SHA-256 hashes:
sha256sum -c checksums.txt🔄 Changes in this Release
Changelog
- 53f2902 chore: pre-bump version.go to 0.16.0 (pre-tag gate requires code==changelog)
- 2c94979 chore: prepare v0.16.0 release — CHANGELOG section with cited numbers, VERSIONING current flip
- 0dea3b9 chore: release 0.16.0
- e4e01b0 chore: sync manifest.version to 0.16.0 (pre-tag accepted state; latest_release.tag follows the release commit)
- 9c8e8c8 chore: update coverage baseline to 84.07% [skip ci]
- b9c5532 chore: update coverage baseline to 84.07% [skip ci]
- 88173e2 chore: update coverage baseline to 84.09% [skip ci]
- a25ff5c chore: update coverage baseline to 84.10% [skip ci]
- 771d1ca chore: update coverage baseline to 84.10% [skip ci]
- 1d4a3d8 chore: update coverage baseline to 84.10% [skip ci]
- 29ce995 chore: update coverage baseline to 84.11% [skip ci]
- 52326c4 chore: update coverage baseline to 84.11% [skip ci]
- 37bd865 chore: update coverage baseline to 84.11% [skip ci]
- bacbae5 chore: update coverage baseline to 84.12% [skip ci]
- d0b18fc chore: update coverage baseline to 84.15% [skip ci]
- 334bc7c chore: update coverage baseline to 84.23% [skip ci]
- ec0d202 chore: update coverage baseline to 84.24% [skip ci]
- c0aee6b chore: update coverage baseline to 84.25% [skip ci]
- c6a6e4f chore: update coverage baseline to 84.40% [skip ci]
- 0c6c958 chore: update coverage baseline to 84.56% [skip ci]
- d3c9499 chore: update coverage baseline to 84.76% [skip ci]
- 789e725 chore: update coverage baseline to 84.77% [skip ci]
- d865e84 docs(claims): bind effort-wave machinery claims to tests and demos (v0.16 gate G3)
- 0e08928 docs(effort): brainstorm rails RATIFIED — 6-rung quality ladder, 3-layer catalog freshness, earned-by-pass-rate class defaults (#550)
- 2b078e4 docs(effort): pass-2 Socratic amendments RATIFIED — diagnosis rung, token-budget ladder, local canary, dual gauges, workload-first sequencing (#550)
- 1bcd2a4 docs(handoff): Session B close — aegis mercenary, Returns Ledger 5/5 (ADR-0022 §6 marker)
- 34741f1 docs(handoff): add session-type marker to the deployment routing doc (ADR-0022 §6 gate)
- 868caa7 docs(handoff): deployment handoff — routes Session A (cut v0.16) + Session B (aegis mercenary), pre-registered pass criteria, operating rules
- 67aa28b docs(handoff): execution handoff 20261005-2255 — v0.15.0 released, pilot wave ratified, Phase 1 queued
- 8d6dcda docs(handoff): execution handoff 20261005-2340 — pilot Phases 1-2 + 3.1 landed, continue Phase 3.2
- d8b8909 docs(offer): M2 evidence enriched — worker audit found 7 more real findings (low-tier, 218s, 91 files)
- ca2b9bc docs(offer): SCORECARD wave-1 row — wiki onboarded, first-audit caught 2 real findings day-one (#442 M1+M2)
- 7e4c84a docs(offer): SCORECARD — 1-Mindsets audit (79 findings, low) + P1 sampling first reading
- 914b944 docs(offer): SCORECARD — GATE 3.4 satisfied, effort machinery landed (#556-#559), 38-finding audit
- 668ea16 docs(offer): SCORECARD — Wave-2 defense-in-depth onboarded (M1 2/5, M2 day-one catches), wiki 4-Rules auto-classified
- 9cc99d5 docs(offer): SCORECARD — Wave-3 aegis onboarded (M1 3/5 target hit), first-audit day-one
- 301b748 docs(offer): scorecard — Phase 3.1 effort loader landed (#556)
- f530b4d docs(pilot): P2 brief — wiki 1-Knowledge docs-freshness audit (read_only, low-effort arm)
- 028cc91 docs(pilot): pilot-first effort wave — 5-phase execution plan with completion gates (#442 x #550, RATIFIED)
- ab007e0 docs(plans): C1 brief — effort dispatch adapter + submit --effort knob (issue #550 DoD 2)
- 651c017 docs(plans): C2 brief — sibling-scoped effort classes + offer seed (issue #550 follow-up)
- c50e592 docs(plans): C3 brief — ladder diagnosis dispatch + baked-name alignment (ground-truth fixes from first real traversal)
- 53766f2 docs(plans): F1 baked-effort fix brief (release blocker, #568) + amend R2 rule matrix to coercion semantics
- 9f07c31 docs(plans): F2 catalog brief — register agy platform as baked-name provider (C3 alignment enablement, #568)
- 2dada24 docs(plans): F3/F4 briefs — ladder integrity + gauges hardening from R3 red-cell findings
- e092f8c docs(plans): G3 claims brief — bind effort-wave claims to evidence (#548)
- 7229dcd docs(plans): G4 user-docs brief — effort.md guide, cli-reference, roadmap flip, structure-sync
- 7bcd7e2 docs(plans): GATE 3.4 brief — real sibling dispatch E2E at --effort low
- 8f8ea8d docs(plans): L1 brief — config.File effort fields + agent-models catalog loader (#550 DoD 1)
- d0ae0ee docs(plans): L4 brief — quality-ladder machinery, diagnosis rung, gauges (issue #550 DoD 4-5)
- 1773ffb docs(plans): W2 brief — effort-classes.yml + effort/token telemetry (issue #550 DoD 3)
- 0be3619 docs(plans): align G4 brief with final baked-name ownership semantics (#568)
- 5b378e0 docs(plans): brainstorm addendum — role-specialized recursion (clerk pattern): lateral-F2, pointer-compression, topology as third declarative axis
- e95fa64 docs(plans): pass-3 signal model — blast radius/LOC/declared estimates supersede path-primary; C4 brief
- 9c03189 docs(plans): two-project ops brainstorm — session-sequential/factory-parallel model, guardrail scaling law, pre-registered pass criteria, F-recursion probe opinion
- 35f7380 docs(plans): v0.16 gate briefs — G1 red-cell R1-R4 (lane effort, routing adapter, ladder, CLI) + G2 residue fixes
- 8f7512a docs(plans): v0.16.0 cut plan (the self-measuring release) + aegis mercenary handoff + tuneflow queued
- d30605c docs(user-guide): effort.md guide + cli-reference rows + roadmap flip to Done (v0.16 gate G4)
- a1cc3d0 feat(cli): submit effort-class wiring — class default, override advisories (#550 DoD 3) (#559)
- 4cb3c09 feat(config): effort metadata + agent-models.v1 catalog loader (#550 DoD 1) The provider manifest gains the effort dimension: per-model EffortStyle (named|budget|baked-name|toggle), SupportedEfforts subsets of the ordered 7-level ladder (none<minimal<low<medium<high<xhigh<max), DefaultEffort, Mandatory, and EffortBudgetMap for budget-style providers — all fail-closed validated (unknown style, out-of-ladder level, default outside the supported subset, budget-map on a non-budget style each name the model and field). Plus the agent-models.v1 catalog loader (stdlib hand-rolled parser mirroring internal/lane): schema-version pinned, providers keyed, and a merge helper that FILLS manifest models' empty effort fields from the catalog without overwriting user-set values (unknown providers skipped and counted). Red-first table tests cover the full validation + merge matrix. Worker-dispatched (L1, task 705346d3, effort=medium with recorded justification: bounded spec). Part of #550. (#556)
- b5a1104 feat(ladder): quality-ladder machinery — diagnosis rung, policy, CLI driver, gauges (#550 DoD 4-5) (#561)
- 42907c7 feat(lane): sibling-scoped effort classes + offer knowledge seed (issue #550 C2) (#562)
- 2c19d65 feat(lane): signal-based effort resolution — blast radius + LOC estimates demote path-class to fallback (issue #550 C4) (#564)
- f90e5c4 feat(routing): effort dispatch adapter + submit --effort knob (#550 DoD 2) (#557)
- 256a740...
v0.15.0
🚀 g8s v0.15.0 (The Gatekeepers)
Zero-CGO pure-Go process execution and capability harness for AI subagents.
📦 Downloads & Platform Matrix
| Platform | Architecture | Binary / Archive |
|---|---|---|
| macOS (Apple Silicon) | darwin/arm64 (M1/M2/M3/M4) |
g8s_0.15.0_darwin_all.tar.gz |
| macOS (Intel) | darwin/amd64 (x86_64) |
g8s_0.15.0_darwin_all.tar.gz |
| Linux | linux/amd64 |
g8s_0.15.0_linux_amd64.tar.gz (also .deb, .rpm, .apk) |
| Linux | linux/arm64 |
g8s_0.15.0_linux_arm64.tar.gz (also .deb, .rpm, .apk) |
| Windows | windows/amd64 |
g8s_0.15.0_windows_amd64.zip |
🔒 Verification
Verify artifact integrity against published SHA-256 hashes:
sha256sum -c checksums.txt🔄 Changes in this Release
Changelog
- c5fb435 chore: pre-release bump to 0.15.0 — version surfaces synced, changelog section dated
- 2ea9546 chore: release 0.15.0
- 791b7e7 chore: update coverage baseline to 84.77% [skip ci]
- a5532a3 chore: update coverage baseline to 84.78% [skip ci]
- a2f5738 chore: update coverage baseline to 84.78% [skip ci]
- 0d67b1e chore: update coverage baseline to 84.78% [skip ci]
- 560a28c chore: update coverage baseline to 84.78% [skip ci]
- 91927c4 chore: update coverage baseline to 84.78% [skip ci]
- 1e1b962 chore: update coverage baseline to 84.79% [skip ci]
- 88135b8 chore: update coverage baseline to 84.79% [skip ci]
- e972f14 chore: update coverage baseline to 84.79% [skip ci]
- c509bab chore: update coverage baseline to 84.79% [skip ci]
- 5cbca3b chore: update coverage baseline to 85.19% [skip ci]
- 06b5586 chore: update coverage baseline to 85.20% [skip ci]
- dded9f6 chore: update coverage baseline to 85.21% [skip ci]
- 9247298 docs(claims): apply the claims-integrity audit — 33 stale corrections + 10 ambiguity sharpenings (#547) The docs-truth slice of the claims-integrity wave (issue #547, findings CA-A/CA-B): every FALSE/STALE item corrected to the real surface (user-guide command flags matched to the source, offer bundle version and commands refreshed to v0.14, skill anti-patterns moved to the event-driven posture, ENTERPRISE_LEDGER rows updated), and every AMBIGUOUS headline sharpened to its testable rewrite (the README claims a measurable binary size; the changelog states the docs-battery bound). The audit trail lives in plans/261004-claims-integrity/findings-CA-{A,B}.md; the demo-command standard landed separately (#548). Docs battery green in-worktree (doc-contract 10/10, link integrity 113 links, ai-lint clean). Worker-dispatched (FIX-CA1, task 051fddb7, TTL'd receipt, watch wake). (#549)
- d269852 docs(effort): design survey VERIFIED via 3 research agents against official docs — 7-level ladder, discovery-schema manifest, hybrid fallback convention The training-cutoff draft was stale (operator catch): the Oct-2026 landscape is GPT-6 family (7-value effort enum incl. xhigh/max; o-series deprecating 2026-10-23), Claude Opus 5.5 (medium DEFAULT; budget_tokens deprecated/400 on 4.7+), Gemini 3.8-flash (the agy local name is current), DeepSeek V4 parameter-based thinking, and aggregator prior art (OpenRouter per-model reasoning metadata: supported_efforts/default_effort/mandatory; LiteLLM translation tables). Design revised: canonical 7-level ordered ladder with per-model supported subsets; manifest mirrors the OpenRouter discovery schema; fallback = nearest-supported RECORDED (advisory mismatch signal) with hard-refuse only for mandatory+none.
- 83fe14f docs(factory): scorecard S-4 MEASURED — real-Jev M3 delta + decision recorded (#543, #518)
- c238f07 docs(lessons): first real lesson appended (round-R1 receipts-split-brain catch) + scorecard S-9 LANDED — Wave I pipeline live (RT-I)
- 3f343ef docs(plans): AM1 brief — agent-models catalog v1 (verified data, issue #550)
- dc72c46 docs(plans): FIX-551 brief — receipt-scoped worktree preservation (root cause diagnosed)
- 16bf785 docs(plans): M3 benchmark runner brief — real-Jev vs deterministic (issue #518)
- ae55f2d docs(plans): WI1 brief — lessons package, fail-closed machine checks (S-9)
- c541b4e docs(plans): WI2 brief — g8s lesson CLI + ledger wiring (S-9)
- ae13cd3 docs(plans): Wave I brainstorm — lessons-pipeline rails against LLM self-dealing (PROPOSED, awaits ratification)
- 692ece3 docs(plans): Wave I lessons-rails design RATIFIED — Approach A one-way gate is binding for #519
- bf4b89a docs(plans): claims-integrity audit briefs CA-A/CA-B — v0.15 release prep (operator directive: claims true + operational, no ambiguity)
- bb8ed9c docs(plans): claims-integrity audit findings CA-A/CA-B — 33 stale + 10 ambiguous + 17 unbound (#547)
- 7ea7423 docs(roadmap): v0.16 effort-optimization wave — provider-neutral effort manifest design (#550)
- 722e884 feat(catalog): agent-models.v1 — the supported-models effort catalog (issue #550) The versioned catalog seeding the g8s provider manifest (agent-models.v1): 8 providers, 29 current models with per-model effort_style (named/budget/baked-name/toggle), supported_efforts subsets on the 7-level ladder, default_effort, and mandatory flags — transcribed exclusively from the 2026-10-04 research-verified data (brief carries the full tables; supervisor-authored after 2 consecutive worktree delivery losses, #551 — the deterministic-transcription exception, justification recorded). Providers: openai (gpt-6 family, o-series omitted as deprecated), anthropic (opus-5-5 ships medium default), google (gemini-3.8-flash live), xai (grok-4.7 mandatory-reasoning), deepseek (V4 parameter-based), mistral, ollama (discovery-per-model note), agy (baked-name local wrapper; medium tier verified dispatchable — the first #550 data point). (#552)
- dd54102 feat(claims): demo-command standard — every claim carries a test binding or a demo command (#547) The institutionalization of the operator's no-ambiguity directive: the claims registry grows to 44 entries (17 new operational claims, each carrying an exact demo command proving the behavior live — the 'van hanh duoc' standard), and claims_check.sh now FAILS any claim that has neither a test binding nor a demo command — a claim that cannot point at its proof does not ship. manifest.json latest_release synced to the v0.14.0 tag/commit. Worker-dispatched (FIX-CA2, task d5859f96, TTL'd receipt, watch wake). (#548)
- 21d25c1 feat(lessons): g8s lesson CLI — create/verify/list over the real telemetry DB (Wave I C layer, S-9) The C layer of the lessons pipeline: g8s lesson create runs the fail-closed machine checks against the live state-dir telemetry database and appends to docs/lessons/ledger.jsonl ONLY on pass (fabricated citations exit non-zero with the failing checks and append nothing); lesson verify is the dry-run proof surface; lesson list reads the append-only ledger. The append-only rule is structural — no amend path exists. Tests cover pass/fail/dry-run/list round-trip in-process against TempDir DBs mirroring the state-dir layout. Worker-dispatched (WI2, task 910472f7, TTL'd receipt, watch wake). (#546)
- faaa31d feat(lessons): lessons package — fail-closed machine checks against LLM self-dealing (S-9, ratified Wave I design) The W layer of the lessons pipeline (#519, design ratified 2026-10-04 in plans/261004-wave-i-lessons-rails/brainstorm.md): the lesson schema separates observation (machine-derived) from recommendation (always-tagged LLM opinion), and Verify() enforces the fail-closed rail set — every cited event must resolve to a real telemetry row whose payload contains the claimed snapshot (T1: hostile fabrication refused by test), the author class must not appear among the reviewed classes (T3: no self-review), the cited-ID-set hash must be unique in the ledger and the per-round budget enforced (T6: dedup + flooding cap), and observations carrying smuggled recommendation verbs (recommend/should/propose) are rejected outright — the worker chose refusal over auto-splitting, the stricter reading. Rejected lessons are NEVER appended (ErrRejectedLesson). Telemetry gains the minimal read API the checks need (EventsByTask). RT-I red-tests are live assertions: 16 PASS incl. the hostile-fabrication case — the operator's 'LLM thừa sức bypass' challenge, answered in test form. Worker-dispatched (WI1, task 89aee1ec, TTL'd receipt, watch wake). (#545)
- dd71279 fix(orchestrator): receipt-scoped writes survive worktree release — the delivery contract no longer trusts git status alone (#551) Root cause of the two AM1 delivery losses: Pool.Release preserved keep=true worktrees only when git status --porcelain was non-empty — but .g8s/ is GITIGNORED, so a worktree whose ONLY deliverable was a receipt-scoped gitignored file (the agent-models catalog) reported clean and was removed along with its branch, seconds after the deliverable registration named it. The release path now threads the task's protect...
v0.14.0
🚀 g8s v0.14.0 (The Gatekeepers)
Zero-CGO pure-Go process execution and capability harness for AI subagents.
📦 Downloads & Platform Matrix
| Platform | Architecture | Binary / Archive |
|---|---|---|
| macOS (Apple Silicon) | darwin/arm64 (M1/M2/M3/M4) |
g8s_0.14.0_darwin_all.tar.gz |
| macOS (Intel) | darwin/amd64 (x86_64) |
g8s_0.14.0_darwin_all.tar.gz |
| Linux | linux/amd64 |
g8s_0.14.0_linux_amd64.tar.gz (also .deb, .rpm, .apk) |
| Linux | linux/arm64 |
g8s_0.14.0_linux_arm64.tar.gz (also .deb, .rpm, .apk) |
| Windows | windows/amd64 |
g8s_0.14.0_windows_amd64.zip |
🔒 Verification
Verify artifact integrity against published SHA-256 hashes:
sha256sum -c checksums.txt🔄 Changes in this Release
Changelog
- 06b1b9f Fix git command option injection (#473)
- 30facce chore(build): remove dead resource.syso target and stale versioninfo.json (#493)
- d5405d5 chore(packaging): sync installer templates to 0.12.0 (post-tag)
- c564b15 chore(packaging): sync installer templates to 0.13.0
- 1d3069b chore(security): gitleaks allowlist for sanitizer test fixtures and .opencode prose
- b96d82c chore: bump version to 0.14.0 (pre-release, completed by the release commit)
- 786c221 chore: record v0.13.0 tagged commit (90252b7b) in manifest latest_release
- 79cec63 chore: release 0.13.0
- 0439285 chore: release 0.14.0
- 2f5e87d chore: repo hygiene + version-sync polish (#476 wave B3) (#484)
- 5a5c61f chore: sync packaging installer templates to 0.14.0 (completes the pre-release bump)
- 0009575 chore: update coverage baseline to 80.56% [skip ci]
- 8837a75 chore: update coverage baseline to 80.73% [skip ci]
- 1069822 chore: update coverage baseline to 80.77% [skip ci]
- 960f9a8 chore: update coverage baseline to 80.79% [skip ci]
- df2d2d5 chore: update coverage baseline to 80.80% [skip ci]
- cb7bbcd chore: update coverage baseline to 80.87% [skip ci]
- 6e1ea78 chore: update coverage baseline to 80.87% [skip ci]
- c0c0908 chore: update coverage baseline to 80.87% [skip ci]
- 7998a86 chore: update coverage baseline to 80.87% [skip ci]
- 69048af chore: update coverage baseline to 80.87% [skip ci]
- 768e749 chore: update coverage baseline to 80.88% [skip ci]
- 91abf76 chore: update coverage baseline to 80.88% [skip ci]
- 9125ee6 chore: update coverage baseline to 80.88% [skip ci]
- b1b86d0 chore: update coverage baseline to 80.88% [skip ci]
- ada4e06 chore: update coverage baseline to 80.91% [skip ci]
- a3f4fe9 chore: update coverage baseline to 80.98% [skip ci]
- 0ed7dff chore: update coverage baseline to 81.00% [skip ci]
- e2c528e chore: update coverage baseline to 81.00% [skip ci]
- 0c0b4d5 chore: update coverage baseline to 81.00% [skip ci]
- 72a5228 chore: update coverage baseline to 81.00% [skip ci]
- 0c50db6 chore: update coverage baseline to 81.01% [skip ci]
- 1c523c6 chore: update coverage baseline to 81.01% [skip ci]
- f2807dc chore: update coverage baseline to 81.02% [skip ci]
- 7e40be6 chore: update coverage baseline to 81.03% [skip ci]
- 2f26e3c chore: update coverage baseline to 85.10% [skip ci]
- 2de66b2 chore: update coverage baseline to 85.11% [skip ci]
- 5cf3e8f chore: update coverage baseline to 85.15% [skip ci]
- db4b512 chore: update coverage baseline to 85.15% [skip ci]
- 9d2c1ca chore: update coverage baseline to 85.16% [skip ci]
- ad88d42 chore: update coverage baseline to 85.16% [skip ci]
- 759063d chore: update coverage baseline to 85.20% [skip ci]
- 6f4fe73 chore: update coverage baseline to 85.22% [skip ci]
- 011cfc5 chore: update coverage baseline to 85.22% [skip ci]
- f6b2928 chore: update coverage baseline to 85.23% [skip ci]
- 3af7efe ci: two lanes — product build vs docs (ADR-0031) (#506)
- 1171c6d docs(adr): ADR-0026 independent verification phases & directive falsification clocks (proposed)
- cfa4e8d docs(changelog): accumulate [Unreleased] — the factory + hardening changes since v0.13.0 (#481-#529)
- dab3eed docs(changelog): dedupe the #535 entry in the v0.14.0 release notes
- fca53a5 docs(changelog): restore the Unreleased heading the release tooling requires
- 81a4e8e docs(changelog): v0.14.0 entry — Wave H (verifier registry, gated merger, round R1 M1 0-to-1, receipts-ledger fix)
- 3493db1 docs(changelog): v0.14.0 release notes — 8-gate evidence, red-cell ledger, sanitizer and retry-budget fixes
- 0ca40b4 docs(ci): document why the baseline bot commit carries [skip ci]
- 40d2c22 docs(decisions): ADR-0029 — budgeted auto-retry of failed tasks (#485 stage 4), PROPOSED (#494)
- 265b1d2 docs(decisions): ADR-0031 CI lanes — product build vs docs (operator directive)
- 0b41dae docs(design): gate lane routing design doc + ADR-0024 + S6 plan (brainstorm 2026-09-27) (#421)
- bbd955b docs(directives): D-07 — event-driven supervision ratified (#481) (#497)
- ddbb90c docs(factory): S-10 — docs-lane probe #2 measured (lane gates ~3 min on PR #508); Test-matrix guard gap recorded
- 580894c docs(factory): program kickoff — ADR-0028/0029 Accepted (operator ratified), ADR-0030 context router, plan + scorecard + Wave F briefs
- f64cd0f docs(factory): scorecard S-1/S-3/S-4 landed + S-10 added; directives D-09 (retry budget discipline)
- ba2fe70 docs(factory): scorecard S-10 — CI lanes landed; this row doubles as the first docs-lane live probe
- 9f0c68e docs(factory): scorecard S-10 — docs-lane probe result recorded honestly (PR lane live; direct-main docs pushes stay full-battery, fix candidate noted)
- 05028fd docs(factory): scorecard S-5/S-6 landed — Wave G complete (#520/#521)
- 2dc3a77 docs(factory): scorecard S-7 landed (#532) + H2a merger brief
- eaa27e8 docs(factory): scorecard S-8 landed — round R1 closed unattended, M1 0→1 (#534/#535)
- 45fa569 docs(governance): ADR-0028 tenancy PROPOSED + issue #480 acceptance closure (#500)
- 6d638f5 docs(handoff): #434 fixed + live-accepted, #443 harness self-trigger fixed, #446 filed
- 81e2eeb docs(handoff): add 4 field-found issues (#433-#436) to backlog — operator v0.12.0 field test
- f73cb1b docs(handoff): add session-type marker (ADR-0022 §6 doc-contract gate)
- 3393a2c docs(handoff): addendum 2 — debt-zero program results, 4 waves, remaining balance
- 262271d docs(handoff): addendum — parallel-drain verdict, ADR-0026 program, #449/#450 merged
- f8d2dfb docs(handoff): architecture review + enterprise spearheads + 6-issue backlog (post-v0.12.0)
- 12c9369 docs(handoff): continuation contract 20260929-1418 — debt-zero complete, next = self-audit suite
- 3f0d2d0 docs(handoff): continuation contract 20261002-1200 — hardening program complete, next = #481 signal-file + deferred decisions
- f9bbe0f docs(handoff): continuation contract 20261002-1330 — issue #481 delivered and live-probed, next = ADR-0029 ratification queue
- 6bb52be docs(handoff): continuation contract 20261002-1730 — factory Wave F shipped, next = Wave G + first unattended round
- 5406bd9 docs(handoff): redact local filesystem paths from continuation contract (AI-lint)
- acc70e8 docs(handoff): rephrase gate rule to avoid literal pattern match (AI-lint)
- 7d03f91 docs(operations): process containment model + orphan diagnostics runbook (#415 PR-3) (#423)
- 9e71691 docs(plans): #448 slice B brief — g8s deliver receipt-validated apply
- b720625 docs(plans): #465 P0 hot-fix brief — identity-sc...