v0.3.0 — personal loops, continuity, and safer autonomy

Muse v0.3.0 is the first deliberate product boundary after v0.2.42: personal automations, exact continuity, and safer owner-controlled autonomy are now presented as one coherent prerelease.

What changed

• Add private, explicitly requested Continuity Capsules with exact source citations and restart-safe local baselines.
• Add the visual Flows/Builder workspace for drafting, revising, scheduling, running, and inspecting personal automations.
• Add owner-controlled off, ask, and bounded auto modes, plus safer reminder triage, follow-ups, delivery canaries, and latest-outcome ratings.
• Expand the chat-first personal workspace with Home, My Life, Learnings, resumable conversations, Upcoming work, and muse serve.
• Add exact continuity context for reminders, calendar occurrences, contacts, local runs, browsing visits, conversations, and Muse Work records.
• Add an experimental owner-private AttuneGraph evidence substrate with read-only Lens and policy previews.

Breaking change

muse rollback has been removed because it inspected an empty, incompatible checkpoint store and could imply that agent file writes had been snapshotted. Use muse trace to inspect execution and muse resume for supported run checkpoints.

Safety and reliability

This release hardens concurrent personal-store writes, corrupt-state preservation, daemon recovery, resource admission, restart-safe outbound effects, approval binding, replay reconciliation, cancellation, SSRF and symlink boundaries, injected tool descriptions, and Windows private-file locking. Local recall and large note-index handling are also more accurate and efficient.

Prerelease notice

This is an early 0.x prerelease. CLI and web surfaces run cross-platform; the native desktop companion is macOS-only. No signed or notarized DMG is attached to this release, and no live-provider or long-term dogfooding result is implied by deterministic CI.

• Full changelog
• Quick start