CHANGELOG.md

Changelog

6.0.0 (2026-08-16)

⚠ BREAKING CHANGES

• deps: the operation-authority binding for publish-change evidence moves from a legacy authority_trace attachEvidence option (removed by Flow 5.0's option allowlist) to a claim-scoped authorityRef embedded in the attached TrustBundle's own authorityTrace array. Read-side authentication (hasCommittedPublishChangeRecoveryReceipt, merge-change.ts resultDigestClaimedByCanonicalRun) checks the new representation first and falls back to recognizing the legacy flat field for evidence attached by a long-running session before this upgrade. The flow-agents kit-config schema's gate_overrides.*.expectations.*.authority_traces field is renamed to authority_refs to match Flow 5.0's vocabulary; a committed Kit config still carrying the old name now fails closed with an actionable migration diagnostic instead of a bare schema rejection or a swallowed merge exception.

Features

• cli: --authorize-backing-root for legacy Stow-shaped opencode uninstalls (#1237) (698db6a)
• cli: extend init --uninstall to codex and opencode through one shared manifest engine (#1231) (b6129fa)
• contract: add monotonic delegation envelope (#1112) (#1241) (b71e210)
• demo: effectiveness loop — one command that installs, runs, measures, and reports (#1251) (6f90c66)
• economics: production Stop hook emits the honest run-derived record (#1254) (389a8d9)
• kit: activation lifecycle for built-in kits (active_kits registry, activate/deactivate verbs, steering respect) (#1224) (0accf19)
• kit: set-atomic multi-kit activate/deactivate with dependency ordering (#1232) (0177168)
• knowledge: edge-preserving provider-graph ingest with ownership-guarded upsert (#1218) (95f2d08)
• telemetry: honest economics attribution derived from Flow run records (#1227) (553c634)

Fixes

• bind command evidence to observed revisions (#1230) (20a9559)
• builder: let a squash-equivalent reviewed tree satisfy critique descent (#830) (#1243) (4a87f0a)
• cli: removal requires positive provenance (#1238) (#1240) (85f29b4)
• deps: upgrade @kontourai/flow to 5.0.0 (integrity-fixed persistence, hardened evidence surface) (#1220) (fbcb772)
• sidecar: let a committed manifest-declared CI command be claimable as tests-evidence (#1048) (#1245) (05804b4)

Documentation

• builder: codify fault-injection sequencing and fix-round scope checking (#1236) (12d1749)

5.10.0 (2026-08-08)

Features

• cli: init --uninstall for claude-code with ownership manifest (#1209) (67d19d2)
• console: receipt relay on the at-least-once class + eval console isolation (#1087 slice B, #1094 item C) (#1096) (33e12f3)
• evals: add opencode/pi/strands behavioral providers with builder flag (#1203) (21fda05)
• telemetry: stamp the durable economics record with install identity via a shared resolver (#970) (#1188) (d81df2b)
• transport: at-least-once console delivery with a durable outbox (#1087 slice A) (#1090) (e84a4ce)

Fixes

• cli: emit the assignment-provider claim argv when a mutation lacks a matching actor (#1194) (#1202) (c9bec5d)
• cli: fail closed when hooks and sidecar writes target finished or advanced runs (#1191) (#1197) (72771dd)
• cli: transient-vs-domain failure taxonomy for hook and evidence writes (#1192) (#1204) (bf70b39)
• knowledge: Surface-schema-valid trust bundles, complete cache versioning, honest conditional-GET, coherent pull-work gates (#1207) (db1695c)
• require terminal delivery publication before merge (#1034) (e22b7a8)
• skip directory fsync on Windows in state-file-lock (#1001) (fa12229)

Documentation

• decisions: merge-readiness is an attestation, not a claim (#1097) (35b888b)

5.9.0 (2026-08-04)

Features

• hooks: SessionStart install-freshness advisory — ancestry + registry signals, cache-as-untrusted-input (#1180 PR2) (#1186) (02c40e9)
• telemetry: install-identity join key — build-time stamp, pack-time truth assertion, labeled source enum (#1180 PR1) (#1184) (5042549)

5.8.0 (2026-08-03)

Features

• attest sealed execution provenance (3dc29bf)
• hooks: advise on a Stop that changed tracked source without ever starting a session (#1153) (1d2d52e)
• knowledge: standalone revision-bound Context Check (#1158) (d16e841)

Fixes

• builder: tolerate head-desynced gate claims backed by a current workspace snapshot (#1170 PR1) (#1173) (08714b6)
• hooks: deliver blocking Stop guidance to the model; graduated escalation by block class (#1172) (#1178) (ac1edf4)
• hooks: surface tests-evidence scope divergence in the Stop backstop (#1171) (#1174) (cdc7137)
• kit: detect installed content drift (#1159) (4cc2fe3)
• kit: make install registry portable (#1163) (0f8d4ff)
• knowledge: make installed evals and promote output portable (#1166) (4fab651)
• knowledge: make vendored kit schemas self-contained (#1165) (e6dee8c)
• sidecar: stamp workspace snapshots at the producer for all gate claims (#1170 PR2) (#1175) (07bc688)

5.7.0 (2026-08-02)

Features

• add sealed evaluation lifecycle authority (#1147) (3f795f5)
• config: add protected committed Kit policy (#1138) (80fff77)
• flow: compose multiple kit flows (#1136) (6bef2f4)

Fixes

• export lifecycle result digest (#1148) (d5226fc)
• expose minimal sealed execution surface (#1149) (ed8e79b)
• workflow: accept complete public evidence over planning placeholders (#1128) (56b6c02)
• workflow: admit coordinated receipt evidence (#1150) (618a79c)

5.6.0 (2026-08-01)

Features

• add Kit observability contribution contract (#1122) (32c0939)
• expose continuation adapter checkpoint identity (#1076) (7dd2a4f)
• publish Trust advisory PR comments (ce92236)
• surface Trust failure reasons (90b2609)

Fixes

• ci: reject a canonical verify command that pipes into another command (#1089) (95c77a8)
• hooks: stop-gate must not double-gate an actor whose own next_action is done (#962 P1) (#1103) (8bc1f4e)
• opencode: support Stow-managed global init (#1117) (ad75632)
• telemetry-doctor: resolve config the way the runtime does, not just the shipped default (#1083) (fe4add8)

Documentation

• decisions: Console record delivery — delivery classes, and fold vs replay (#1086) (8d3fe3b)
• simplify trust advisory comments (bb6cb97)

5.5.0 (2026-07-28)

Features

• liveness: add a fleet read surface over liveness lanes (#1021) (#1058) (58c6bd3)

Fixes

• bundles: ship codex's missing policy hooks, derive the JSON runtimes from one table (#1024) (#1026) (d8dbba0)
• ci: install the Flow reducer closure from a lockfile so its pin is a control (#1054) (#1061) (f512d63)
• hooks: resolve protected paths instead of matching filename substrings (#682) (#1004) (78c90e4)
• liveness: anchor a submodule on its own working tree, not .git/modules (#1055) (#1068) (64564db)
• liveness: anchor lifecycle auto-emit on the shared repo root (#1020) (#1053) (eb2099b)
• trust: make an unmatched delivery/DECLARED marker a distinguishable outcome (#1011) (#1015) (e5f348b)
• workflow: warn at record time when an evidence command cannot reconcile (#1056) (#1060) (2feb899)

5.4.0 (2026-07-26)

Features

• add actor-bound host recovery (#981) (5a3cc2a)
• add provisional delivery lifecycle (#972) (ffbc15e)
• compile retrospective run observations (#952) (f6de5a0)
• compile retrospective usage corpus (#968) (3a9affa)
• correlate workflow outcome producers (#941) (424b821)
• hooks: a denied tool call ends the call, not the turn (#1005) (#1007) (8da05ad)
• init: bootstrap workflow providers (#943) (1629e8b)
• orchestrate mutable-resource flow cursors (#965) (3f7f17f)
• prepare canonical provider pickup (#983) (e5820cd)
• workflow: persist signed continuation checkpoints (#964) (4c00e16)

Fixes

• complete workflow evidence integrity recovery (e821b6f)
• constrain knowledge consolidation sources (#969) (bcc6fe5)
• evidence: execute evidence commands sequentially, not concurrently (#974) (#976) (ae7699e)
• make lifecycle static checks hermetic (1c8c568)
• make workflow evidence reseal atomic (#932) (88f4fdc)
• patch production brace expansion (#966) (43d6398)
• preserve Flow pending mutation tickets (7976e24)
• preserve provider-confirmed workflow branches (#956) (7cb7cb0)
• recover exact-current lifecycle completion (#973) (a441e5d)
• restore the release-please exemption after the bot identity changed (#1010) (67128f7)
• trust: accept unchanged terminal delivery companion (#996) (fac32d0)
• use supported gh repository selectors (#951) (a61130d)

5.3.0 (2026-07-24)

Features

• add versioned run correlation envelope (#869) (2bd9b10)
• builder: reclaim merged worktrees safely (#910) (273c535)
• console: project workflow trust bundles in Surface's shape (#891) (#904) (375d323)
• correlate installed runtime telemetry (#936) (f430416)
• export workflow→console status mapping at ./console-contract (#933) (#934) (8066c3c)
• harden correlated telemetry semantics (#871) (7d474d6)
• mint canonical Builder run correlation (#928) (0709651)
• propagate run correlation through Builder records (#870) (f802c1c)
• reconstruct correlated nested runs (#872) (d4d4c8b)
• telemetry: hook-native console board sync + --skip-invalid projection flag (#918, #919) (#929) (14604fd)
• workflow: sign canonical gate projection (#902) (da32dad)

Fixes

• builder: keep execution skills out of control state (#903) (3e62b86)
• check context-map drift before push (#875) (522441e)
• complete global opencode kit installs (#880) (d4f6a30)
• opencode: target active worktree state (#886) (9589af2)
• quarantine malformed usage feedback sources (#915) (650262e)
• separate joined usage feedback outcomes (#921) (8dba326)
• workflow: bind planned acceptance contract (#899) (a5bf16a)
• workflow: preserve repeated critique rechecks (#907) (334de0c)

5.2.0 (2026-07-23)

Features

• expose host actor workflow binding (#863) (cd7f357)

5.1.0 (2026-07-23)

Features

• dogfood portable host integration contracts (a958b46)
• dogfood portable host integration contracts (#861) (8b993a6)

Fixes

• ci: execute host conformance drift check (870d25c)

5.0.0 (2026-07-23)

⚠ BREAKING CHANGES

• delegate canonical review projection to Survey (#859)
• Survey review-session resolvers now provide projectionSource and workflowSubjectRef instead of a caller-built surveyInput.

Features

• delegate canonical review projection to Survey (d707b9e)
• delegate canonical review projection to Survey (#859) (28ddc75)

4.8.0 (2026-07-23)

Features

• add survey flow gate adapter (04c4128)
• add survey flow gate adapter (#856) (310b240)
• bridge blocked gates to survey review work (c30073c)
• bridge blocked gates to survey review work (#857) (7806259)

Fixes

• bind survey review projection authority (cfc10eb)
• contracts: disambiguate work-item drift vocabularies instead of retiring one (#818) (#853) (5e0d48f)
• retain runtime dependency revision evidence (ecd1d65)

4.7.0 (2026-07-22)

Features

• add portable utterance runtime profiles (#850) (fb16cb5)
• route utterance extraction through dispatch (#848) (0761fd5)

Fixes

• builder: allow execute-to-plan correction for plan_gap (#837) (07e65ae)
• builder: ship standalone Flow validation (efee110)

4.6.2 (2026-07-22)

Fixes

• ci: require conventional pull request titles (cf37e3d), closes #832

4.6.1 (2026-07-22)

Fixes

• settings: provider repo matchers accept dotted repository names (#841) (92dd188), closes #840

Documentation

• publish reviewed grounding example (#836) (f643a46)
• spec: capture the orchestration-native capability set (issue #86 decision) (#835) (0806639)

4.6.0 (2026-07-22)

Features

• providers: importable TypeScript interfaces for the four provider roles (#819) (11c70d7)
• telemetry: project workflow states onto Console's interactive process vocabulary (#828) (6f47d1b)

Fixes

• config-protection: provably-read-only interpreter grammar for gate-file reads (#799) (#822) (e933b17)
• sidecar: accept playwright test in the tests-evidence execution-proof screen (#827) (435dd38)

4.5.0 (2026-07-21)

Features

• work-items: provider-neutral mutation contract with conflict policy and two adapters (#814) (df82ec4)

Fixes

• workflow: keep learning outstanding loud — stop-gate flag, --skip-learning gap, unbound-session notice (#793) (#798) (9d264a8)

4.4.0 (2026-07-21)

Features

• protection: scope gate-blocking to declared artifact roots; sanctioned fixture authoring (#805) (999abfd)

Fixes

• attest the reconciled delivery bundle (#806) (0058671)
• bind trust verification to consumer change context (#806) (18da500)
• discover per-session trust bundles (#810) (359b07c)
• preserve bundle discovery ownership checks (#806) (345591d)
• trust: separate advisory bundle absence policy (07080df)

4.3.1 (2026-07-20)

Fixes

• preserve critique predecessor chains in gate projection (bb3d158)
• preserve critique predecessor chains in gate projection (a0f780a)
• sidecar: loud publish-delivery preconditions and a help command (#794) (a72d419)

4.3.0 (2026-07-20)

Features

• add authenticated change provider execution (9c05e64)
• add authenticated change provider execution (31a9783)
• add critique resolution coordinator runtime (9ff554d)
• add lifecycle coordinator foundation (caaa21f)
• add reviewed grounding reference workflow (7d6f7ef)
• authenticate cross-reviewer critique resolution (8fee167)
• export canonical work-item vocabulary, types, and schemas subpath (#792) (367cf73)
• pin lifecycle coordinator Flow reducer (a360d2c)
• provision privileged lifecycle authority (650fcae)
• recover merged provider changes (0fe4eec)
• resolve repaired critique history (3f8bd3d)
• track lifecycle authority trust roots (07a8355)

Fixes

• allowlist provider execution environment (11a4ae8)
• authenticate critique resolution graph (dd46e46)
• authenticate recovery receipts end to end (8f2f39b)
• bind Builder gates to lifecycle attestations (7c5ed31)
• bind lifecycle recovery journals (9d1b0d3)
• bind provider config to trusted account context (425d17a)
• bind provider execution to trusted identities (a835ea4)
• builder: ignore stale passing critiques at verify (e325de3)
• builder: ignore stale passing critiques at verify (d792d7c)
• close lifecycle authority trust gaps (1f34eca)
• compose change provider with lifecycle authority (3405093)
• evals: make Goal Fit escape hatch identity-hermetic (#736) (6cfb808)
• expose node to lifecycle sudo helper (d3d5fdc)
• externalize critique resolution trust anchor (9c10e6d)
• externalize lifecycle authority mutation (a237d14)
• fail closed for nested review roots (9835822)
• harden authenticated change publication (95dc168)
• harden authenticated critique resolution (33c69c5)
• harden critique resolution validation (74c327f)
• harden lifecycle authority mutations (ce8c764)
• installer: trust canonical macOS temp aliases (#747) (c8b40df)
• isolate lifecycle authority verification (485fd78)
• isolate trusted command environments (7cc475c)
• keep lifecycle authority writes external (40001df)
• kit: make help side-effect-free (#760) (12d2469)
• migrate and resolve multi-review history (2747772)
• normalize trusted environments across platforms (15070b7)
• observe live provider telemetry (19033f7)
• pin lifecycle authority protocol identity (0059bf4)
• preserve critique bundle compatibility (cf11f5a)
• preserve trusted Windows auth discovery (6fc55b0)
• reauthenticate final provider observation (5804a2e)
• reconcile lifecycle authority commits (5ba3698)
• refresh lifecycle dependency closure pin (a8baf65)
• remove lifecycle authority test seam (b29606e)
• seal authenticated observation artifacts (08ad48d)
• sign critique resolution authority (ec10adb)
• trust local git resolution for change publication (fefae0e)
• trust-verify: install action runtime dependencies (#745) (f2efb33)
• verify lifecycle authority completions (f7edbee)
• verify signed critique event anchors (1905135)
• yield during async subject lock contention (ab9c737)

Documentation

• close governance kit migration contract (#730) (77c61ec)
• update Kontour UI package reference (#728) (cc340af)

4.2.1 (2026-07-19)

Fixes

• correlate Codex command results exactly (#710) (089aca3)
• restore clean npm installs (#707) (2096acd)
• scope critique freshness to gate visits (#724) (d2dc723)

4.2.0 (2026-07-18)

Features

• liveness: conf-driven console relay enablement (#567) + richer real-liveness signals (#705) (b1dd5b0)

4.1.0 (2026-07-18)

Features

• backlog: board-based readiness source decision + surfaced fallback warnings (#441) (#692) (8dc292d)
• ci: enforce kits wrap the veritas engine via CLI, not as a library (#651) (#701) (1fd0380)
• kit: kit-provisioning primitive — declare files a kit scaffolds into a consumer repo (#647) (#691) (a85bdad)
• kits: standing trigger-guards contract and agent_spawn_triggers validation warning (#664) (#686) (ffcf0d9)
• veritas-governance: consult-standards skill — JIT guidance via veritas explain (flow-agents#649) (#700) (f1e8db2)
• veritas-governance: provision governance git hooks (flow-agents#648) (#699) (22965dd)
• veritas-governance: scaffold starter Repo Standards via kit provisions (flow-agents#647) (#696) (6943362)
• veritas-governance: standards-authoring flow + skill (#647) (#698) (6591a26)
• workflow: machine-checkable wave-result reconciliation manifest (#663 slice 1) (#702) (282d2fd)

Fixes

• builder: declare pr-open-gate route-back so missing_evidence repairs at verify (#695 item a) (#697) (d8b83df)
• make workflow critique usable for single-orchestrator review (#689, #690) (#704) (a838b2e)

Documentation

• reconcile flow-agents docs to the veritas engine/kit split (#652) (#703) (147b87a)
• veritas-governance: point to the ratified engine/surface seam doc; refresh fixed veritas#106 status (#688) (14ba90d)

4.0.0 (2026-07-16)

⚠ BREAKING CHANGES

• gate-action envelopes now require schema 3.0 typed artifact targets and structured package-bound public interfaces.

Features

• add check-hachure-boundary ratchet (layer-doctrine enforcement) (#668) (803f427)
• add mission-bound continuation context policy (#639) (2a21810)
• consume @kontourai/surface explainClaim; retire the local prototype (#171) (#638) (d4da065)
• evals: grounded narrative eval corpus, scorers, and mutation battery (#612) (#667) (6cbb4ec)
• make gate actions executable and typed (#627) (df0a4f4)
• migrate InquiryRecord validation from raw hachure to Surface (#674) (7d91e90)
• narrative: bounded at-action agent_stated intent annotation + fallback (#622) (#665) (aac2dea)
• narrative: deterministic grounding validator — fail-closed publication gate (#623) (#654) (b6d5148)
• narrative: grounded runtime projection — turn spine, atomic statements, throw-don't-omit coverage (#618) (#642) (3dfcb52)
• narrative: grounded-execution-narrative/v1 — deterministic composition over authority-owned projections (#613) (#645) (840d8a9)
• narrative: model-assisted prose renderer — display-only, fail-closed (#614) (#655) (f8d67c9)
• narrative: source contract — frozen manifest, snapshot-at-compile, integrity classes, resolver (#617) (#632) (e09ee0e)
• narrative: trust isolation — namespace, canonical+content-shape evidence guards, negative-test battery (#619) (#653) (90535c5)
• telemetry: delegationTarget on tool events + Codex-CLI detection (#581) (#676) (bb38be0)
• telemetry: durationMs / outcome / status per tool result (#580) (#675) (6892ae0)
• telemetry: normalized action-class ontology on tool events (#582) (#678) (3d7422c)
• trust: writer-observed execution in the command log (#634) (#636) (3352895)

Fixes

• bind workflow guidance to canonical flow state (d73eb69)
• bind workflow guidance to canonical Flow state (814f4a2)
• constrain continuation repair to issued gate (876851d)
• constrain continuation repair to issued gate (05de903)
• expose gate-action artifact expectation bindings (#629) (721905d)
• preserve acceptance claim integrity across gates (#633) (81da744)
• preserve optional artifact bindings (#631) (00e75b6)
• return signed continuation turns to driver (#635) (acf09c9)
• suppress terminal workflow actions (9e78243)
• telemetry: fail CLOSED on console-relay usage sanitize (#568 follow-up) (#666) (2f46d49)

3.12.1 (2026-07-13)

Fixes

• bind gate-action requirements to gates (#608) (b1e9ad1)

3.12.0 (2026-07-13)

Features

• add canonical gate action envelopes (#605) (a7cc3e5)

3.11.0 (2026-07-13)

Features

• sign continuation adapter evidence (#598) (df14271)

Fixes

• make Codex installs self-contained and bind GitHub claims (#600) (57d1942)

3.10.0 (2026-07-13)

Features

• telemetry: per-turn model/tokens/cost on tool events (#568 slice 1) (80ac0e7)
• telemetry: per-turn model/tokens/cost on tool events (#568 slice 1) (2b6276d)

Fixes

• #440: scope ownership signals to the actor's own per-actor pointer (#586) (7a8fc82)
• liveness: identify Codex actors by thread (#556) (5ac02cb)
• packaging: preserve runtime instruction files (#575) (f55d288)
• packaging: stop seeding Codex global instructions (#573) (2d25cb6)
• resolve continuation validator from installed runtime (#591) (86191c4)

3.9.0 (2026-07-12)

Features

• workflow: add bounded continuation driver (#560) (e6365ab)

3.8.0 (2026-07-12)

Features

• packaging: install portable skills under .agents (#551) (12f12e3)

Fixes

• builder: make gate evidence sync visit-safe (#558) (1c0e8dc)

3.7.0 (2026-07-12)

Features

• builder: align kit skills with canonical Flow (#552) (2d672ed)

3.6.0 (2026-07-11)

Features

• builder: add authority-aware lifecycle controls (#546) (5164902)
• cli: add public workflow command (#548) (2dad479)

3.5.0 (2026-07-10)

Features

• builder: derive selected-work evidence from acquisition (#543) (bfe1681)

3.4.3 (2026-07-10)

Fixes

• start Builder Flow during session creation (#539) (10214b4)

3.4.2 (2026-07-10)

Fixes

• enforce canonical Builder entry action (#536) (bab5dfe)

3.4.1 (2026-07-10)

Fixes

• resolve packaged Flow definitions in consumer repos (#532) (3eb4a2e)

3.4.0 (2026-07-10)

Features

• builder: add fail-closed FlowRun adapter prefix (#511) (1f2a1bd)
• builder: route Codex specialists by role (5a53e9b)
• drive Builder sessions with canonical Flow runs (#531) (72301c7)
• engine: collapse kit trust model to structured steering (kit-neutral) (#491) (615dc44)
• installed-skill drift detection — per-skill manifest, skill-drift-check CLI, SessionStart advisory (#439) (#455) (a23c346)
• install: guided console-connect wizard + auto-verify + post-install summary (easy-install-flow PR2/3) (#483) (573fd81)
• install: runtime auto-detection + surface silent fail-open paths (easy-install-flow PR1/3) (#482) (a9d249e)
• learning-review: economics-driven advisory proposals + human-ratified decision ledger (#352) (#464) (1f8e56b)
• telemetry: auto-discover owner console conf via trusted workspace/global tiers (fa#410 slice 1) (#460) (4f82858)
• telemetry: config-driven kit-economics console relay so ROI views populate (#469) (#471) (f604f60)
• veritas-governance: exemption-usage-review skill, trailer diagnostic, DECLARED scope-forms docs (#408) (d304621)

Fixes

• checks: content-boundary scans untracked files — local matches CI (closes #367) (#374) (a4e7a0e)
• codex capture false-pass — deterministic exit codes, ambiguous default, anti-forgery extraction (2806c5b)
• codex capture false-pass — deterministic exit codes, ambiguous default, anti-forgery extraction (#470) (06c292a)
• enforce first-step workflow entry (17b3a12)
• goal-fit: stop re-running model-asserted RECHECK text on terminal sessions (#494) (#504) (9546252)
• harden global Codex home installs (1bfaba6)
• preserve user installer settings conflicts (#430) (ac2d356)
• sidecar: trust-bundle writers compose losslessly; record-check; record-time evidence-ref validation (#418) (800675f)
• skill-drift-check ignores foreign (non-kit) installed files (#465) (#468) (71985c9)
• telemetry: land owner usage attributed + priced in the hosted console (#487) (ace8faf)
• telemetry: real per-session token/cost + model so console ROI stops showing $0 (#477) (2a6fcfc)
• telemetry: suppress console relay of genuinely-empty economics records (#478) (b09b6de)

Documentation

• console: document attribution & pricing correctness (#487) (#490) (36b0ec2)
• decisions: embeddable engine and adapter model direction (#499) (89aec1d)
• engine: reframe around engine↔kit split + honest trust tiers (#495) (b5b5ae3)
• trust-reconciliation guide + trust-ledger-retention decision (#488) (9d5feba)

3.3.0 (2026-07-05)

Features

• cleanup-audit: apply mode — safe, reversible session archival (#406) (3dd7550)
• veritas-governance: exemption-issuance flow — governed path for delivery/DECLARED (ADR 0022 §3) (#370) (50f8f3b)

Documentation

• unified coordination guide + console integration doc + status hygiene (#399) (#400) (b60331e)

3.2.0 (2026-07-04)

Features

• builder: per-step model-routing hints + escalate-on-gate-failure ladder (#376) (8182dc6)
• knowledge: inbound-reference integrity check, fail closed (#340) (02932ab)
• knowledge: incremental append-mode consolidate (Closes #343) (9b972f5)
• knowledge: incremental append-mode consolidate, regenerate snapshot from records (#343) (32cc263)
• knowledge: record-carried freshness + Hachure-aligned status semantics (#341) (32ff45e)

Fixes

• delivery: per-session delivery paths so concurrent deliveries stop contending (#379) (fedf4db)
• delivery: per-session delivery paths so concurrent deliveries stop contending (#379) (a03026f)

3.1.0 (2026-07-04)

Features

• docs: probe docs-write contract — vocabulary + decision deltas (#311) (#371) (867c3b5)
• knowledge: neo4j knowledge-store provider — Cypher-backed #317 interface (opt-in default) (#373) (2ef2523)
• knowledge: promote sub-flow — ingest→distill→link→health (flow within a flow) (#313) (#372) (b345d89)
• knowledge: stable record identity — short-id prefix + slug aliases (#339) (ff54bc7)

Documentation

• adr: ADR freeze cutover + liveness coordination experiment (#332) (#368) (2c845b8)

3.0.0 (2026-07-04)

⚠ BREAKING CHANGES

• trust: require origin/check_kind stamps — remove pre-supersession read fallback (#355)

Features

• routing: model-routing policy as datum roles — orchestrator resolves at delegation (#365) (7acf663)
• trust-anchor: fail-closed delivery reconciliation with governed exemptions (ADR 0022 §1) (#358) (0631050)

Fixes

• trust: critique supersession + lossless check/critique round-trip (closes #267, #268, #282) (#344) (c2c3fd5)
• trust: require origin/check_kind stamps — remove pre-supersession read fallback (#355) (ab27f71)

Documentation

• contracts: standing owner directives — durable home for ratified policy (#351) (e335d54)

2.4.0 (2026-07-03)

Features

• decisions: topic-keyed living decision registry contract (Closes #310) (#316) (0bd4e0b)
• gates: regression-lock the FlowDefinition-driven stop gate + gate-named block messages (ADR 0016 Abstraction A closeout) (#265) (0fd0c0e)
• kits: cross-kit dependencies, skill-collision fixes, sidecar governance (#264) (b2a4cc8)
• kits: veritas-governance kit — readiness→trust-bundle adapter with settled gate semantics (#269) (7a08396)
• liveness: default-on lifecycle + tool-activity heartbeats (#288) (#306) (3134614)
• liveness: runtime-agnostic actor identity; retire the "local" default (#287) (#296) (204a4c6)
• promote-then-archive gate — durable-residue extraction is the archival act (Closes #312) (#319) (490542c)
• pull-work: liveness selection preflight — exclude held, claim on selection (#329) (8c76568)
• trust-anchor: manifest-based reconcile, claim classification, loud attestations (WS8) (55b66db)
• trust-bundle: migrate to @kontourai/surface 2.0.0 (Claim.facet rename) (#277) (573b45e)
• veritas-governance: migrate adapter to facet + schemaVersion 5 (#285) (1948639), closes #281
• workflow: branch as first-class routing state with agent/<actor>/<slug> convention (#308) (739575c)

Fixes

• bundles: resolve Codex hook script with HOME fallback; fail open with diagnostic (e9c5993)
• evals: heal integration lanes after runtime-path split (20cdb36)
• evals: register WS8 fixtures with the retirement audit (95f6baf)
• flow-agents: resolve claude-code --global hook paths absolutely (9148033)
• sidecar: preserve branch and created_at across init-plan; add field-preservation invariant sweep (#315) (cae9c38)

Documentation

• adr: ADR 0021 — assignment leases and stale-claim takeover (#286) (df345dd)
• adr: ADR 0022 — fail-closed delivery reconciliation with governed exemptions (#299) (046005a)
• learnings: 2026-07 improvement-program learning review (#284) (514b6ad)

Refactoring

• flow-agents: centralize Codex home default helper (dc9995c)

2.3.0 (2026-07-01)

Features

• strands-ts: consume @kontourai/console-telemetry for pricing/cost (eb878b0)

2.2.0 (2026-06-30)

Features

• strands-ts: consume @kontourai/console-telemetry for pricing/cost (#243) (eba7ff3)

Fixes

• flow-agents: expose kontourai artifact roots (#258) (82db131)

Documentation

• flow-agents: ADR 0018 — freeze local shell-parsing heuristics (ops#21) (#255) (777fc50)

Refactoring

• flow-agents: extract a pure seam from workflow-sidecar + add TS unit layer (ops#22) (#257) (7af3f44)

2.1.1 (2026-06-29)

Refactoring

• flow-agents: one shared module for command-log chain helpers (ops#20) (#249) (67af85f)

2.1.0 (2026-06-29)

Features

• telemetry: derive live pricing source from the console (#242) (ddce44e)
• telemetry: real token+cost capture with single-source versioned pricing (#241) (b0bd4c3)

Fixes

• evidence-capture: serialize command-log appends to prevent chain forks (#232) (bb167e9)
• flow-agents: stop corrupting sidecar JSONL event lines (#244) (fb65d10)
• trust-verify action: correct cross-repo script path (../../ → ../../../) (#240) (a75a6d2)

Documentation

• design: preserve WorkflowRun observability + FlowRun event-sourcing design notes (#239) (c2dc116)
• flow-agents: advertise the real eval coverage, clearly scoped (ops#23) (#248) (d208207)

2.0.1 (2026-06-27)

Fixes

• carry KIT IDENTITY through the trust chain — stop flattening non-builder kits to "builder" (#235) (02d2782)
• gate: classify concurrent-fork vs tamper; never hard-block a benign race (#233) (e24743b)

2.0.0 (2026-06-27)

⚠ BREAKING CHANGES

• liveness: rename coord→liveness + lifecycle-driven liveness claims (ADR 0012) (#154)

Features

• activate FlowDefinition-driven sessions + fix carry-forward history loss (ADR 0016 Abstraction A, Step 0+1) (#208) (7e0120f)
• builder: add continue-work skill for fresh-context slice handoff (#190) (8353fef)
• builder: phase_map + advance-state active-step + record-gate-claim mechanism (ADR 0016 Abstraction A, P-d increment 1) (#206) (9c67730)
• builder: wire 6 step producers via record-gate-claim + flip required:true + fix --expectation targeting (ADR 0016 Abstraction A, P-d increment 2) (#207) (4cf6e52)
• ci: CI mints a signed attestation over its own verification results (CI anchor Phase 2) (#224) (017505b)
• ci: publish session bundle to delivery/ at delivery — feed the trust-reconcile anchor (Phase 1b) (#223) (d9476d8)
• ci: trust-reconcile job — the external anti-gaming anchor (CI anchor Phase 1) (#222) (1678866)
• context: add gate-awareness self-critique doc + AGENTS.md reference (#118) (#123) (45e3841)
• coord: agent coordination as liveness claims — claim/heartbeat/release/status (ADR 0012) (#150) (ed248ed)
• core: FlowDefinition-driven claim production — shared flow-resolver + producer dual-emit (ADR 0016 Abstraction A, P-a/P-b) (#204) (5368017)
• core: gate enforces on the active FlowDefinition's expects[] (ADR 0016 Abstraction A, P-c) (#205) (dd0dab2)
• gate-review: deterministic gate-calibration via canonical Surface InquiryRecord (#119) (#132) (d5ec073)
• goal-fit: re-derive trust.bundle claim status at the gate (ADR 0010 Phase 2 hardening) (#136) (face2cb)
• hooks: capture-first evidence determinism for command checks (#115) (a5bd12f)
• hooks: goal-fit teeth + active-goal reground (block false-completion, survive compaction) (#113) (40ba70b)
• install: extend merge-aware install to codex — preserve user hooks.json (#117) (#158) (212f097)
• install: merge opencode.json + uniform version stamp across all runtimes (#117) (#159) (bab6f68)
• install: merge-aware global installs — opencode/codex --global + codex-home (closes #117 deferred gaps) (#188) (a133b39)
• install: merge-aware install for claude-code — preserve user config + version stamp + --global (#117) (#157) (01d03c0)
• knowledge: add glossary-sync and detect-contradictions hygiene flows (#106) (#197) (6c34c38)
• knowledge: add hygiene-review orchestrator over the four hygiene flows (#106) (#199) (34ecf37)
• knowledge: add knowledge.audit-freshness hygiene flow (#106) (#189) (33f7ebb)
• knowledge: add knowledge.canonicalize-category hygiene flow (#106) (#193) (e5a02ce)
• knowledge: add store reindex() — rebuild graph index from records (recovery, #106) (#185) (377bf59)
• per-run trust checkpoint — terminal seal + freshness drift on resume (consume surface checkpointFromReport/diffFreshness) (#210) (04a6e63)
• productize the trust anchor — flow-agents verify CLI + reusable composite Action + adoption docs (CI anchor Phase 3) (#231) (305515f)
• remove legacy packs layer entirely (no backwards compatibility) (#121) (a7325b5)
• resume: liveness-aware + claim-aware RESUME block on SessionStart (#153, first slice) (#184) (71155bd)
• retire the -legacy dual-emit shadow — FlowDefinition-driven sessions are declared-only (ADR 0016, P-d) (#209) (d9073de)
• sign the terminal checkpoint at release — in-toto/DSSE attestation (consume surface Sigstore, the real external integrity anchor) (#211) (df8df2f)
• tamper-evident command-log.jsonl via hash-chain — the gate detects an altered/removed capture entry (B2) (#212) (ff9b058)
• trust-bundle: maximal enrichment + gate enforces on the canonical bundle (ADR 0010 Ph1+2 core) (#133) (fa4115e)
• trust-mcp: opt-in trust-mcp command to wire Surface's MCP for trust surfacing (#137) (#141) (b7beb43)
• trust-panel: render-trust-panel — project the bundle to a standalone Surface Trust Panel (ADR 0010 Phase 3 local) (#135) (e1b3c35)
• trust-panel: render-trust-panel also emits trust-report.json (universal Surface input) (#140) (c430634)
• validate: guard against duplicate ADR numbers in validate-source-tree (#191) (d0592eb)
• workflow-sidecar: claim-lookup tool — status + failing evidence + how-to-verify + why (#162) (#173) (4b72cba)
• workflow-sidecar: deterministic session slug from work-item ref (#161) (#165) (e69fa26)
• workflow-sidecar: dual-write workflow trust state as local Hachure trust.bundle (ADR 0010 Phase 1) (#126) (#130) (a9b8fd6)

Fixes

• goal-fit: re-derive-tamper block fires independent of backstop + protect it in CI (#196) (9d13212)
• knowledge: auto-close spent proposal artifact on retire apply (#106) (#186) (9835c06)
• security: captureCrossReference now sees declared-type claims — declared-type false-completions BLOCK (adversarial review Finding 1, CRITICAL) (#214) (0d1d4de)
• security: captured-FAIL reconciliation — close the namespace-agnostic false-completion bypass (Round 2 red-team CRITICAL) + fix #216 over-block (#218) (e9bf229)
• security: checkpoint signature now signs the on-disk bytes — attestation moved to a companion file (adversarial review HIGH/A02) (#213) (b27fd14)
• security: CI anchor verifies the REAL deliverable, not just compilation (Round 5 soundness) (#226) (1117624)
• security: close the full gate-bypass chain — path-traversal sanitization + empty-gateExpects union (adversarial review HIGH/A01/A04) (#215) (2554656)
• security: lock down gate bypass surfaces — config protection, MAX_BLOCKS hard-block guard, fail-closed (adversarial review Findings 2 + fail-opens) (#216) (370ebc5)
• security: protect state.json + trust.bundle from agent Write/Edit; best-effort flag node -e/sed -i/python -c profile writes (Round 4 audit) (#220) (ef68054)
• security: resolveFirstStep traversal + tee multi-file evasion (Round 2 audit MEDIUM/LOW) (#217) (ac1f3cd)
• security: robust laundering detection (any ||) + delivery/ bundle protection (Round 5) (#227) (d09bebe)
• security: run the anti-gaming suite in a REQUIRED CI lane + screen the canonical verify + own the verify config (Round 7) (#228) (0d68ab1)
• security: status-independent false-completion check + drop Case B over-block + flag exit-code laundering (Round 4) (#219) (ef53339)
• untrack accidental node_modules symlink + harden .gitignore (#181 fallout) (#182) (9042ff6)
• writers: bundle-writers fail loudly instead of silently losing data (#156) (#160) (6e9e3a6)

Documentation

• adr: ADR 0011 — MCP posture (enforcement stays hooks; Surface owns MCP projection; no auto-injected config) (#138) (e65f2ae)
• adr: ADR 0012 — agent coordination as Hachure liveness claims (#145) (c57138f)
• adr: ADR 0013 — context lifecycle (workflow-boundary compaction, freshness-gated reuse, learning split) (#163) (0589687)
• adr: ADR 0015 reassessment — Tiers 1 & 2 closed-by-evaluation (audit overstated drift) (#198) (dde8c21)
• adr: ADR 0016 — the three-hard-boundary model (FlowDefinition-driven kit-agnostic core) + sync 0014/0009/0004/0005 (#203) (6ded109)
• adr: ADR 0017 — the anti-gaming trust security model (layered defense + external CI anchor) (#229) (bf794ce)
• adr: correct ADR 0015 — Tier 2 reopened as Resource Contract migration (was wrongly closed) (#202) (ec3a67b)
• adr: renumber Flow/Flow-Agents boundary ADR 0014 → 0015 (resolve duplicate) (#181) (1b581b7)
• agents: capture merge-burst + fresh-handoff learnings in operating agreements (#192) (31d5473)
• agents: scope worktree cleanup to your own paths (operating agreement) (#201) (ae6cf41)
• contracts: fail-loud + flake-is-a-real-bug in core review/verification contracts (#170) (c25b48c)
• seed kit-development operating agreements in AGENTS.md (ADR 0013) (#164) (0b6e765)
• Verifiable Trust — user-facing value/use-case doc for the anti-gaming trust model (#230) (8710e29)

Refactoring

• goal-fit: drop bespoke markdown/DELIVERY_TYPES gate parsing — verdict is bundle-driven (ADR 0010 2c) (#139) (342d7aa)
• goal-fit: gate consumers read the trust.bundle, not bespoke sidecars (ADR 0010 Phase 4b) (#146) (7ae2e2c)
• liveness: rename coord→liveness + lifecycle-driven liveness claims (ADR 0012) (#154) (4576e0e)
• workflow-sidecar: bundle is the primary artifact, sidecars projected (ADR 0010 Phase 4a) (#144) (256ee9e)
• workflow-sidecar: consume surface's validateTrustBundle — retire bespoke validator (#175, Tier 0) (#180) (0cee634)
• workflow-sidecar: retire bespoke sidecars — bundle-only workspace (ADR 0010 Phase 4c) (#152) (03432cb)

1.4.0 (2026-06-16)

Features

• #100: require block reasons to reach the model (#102) (5007c63)
• #99: export the workflow sidecar writer/validator as a library (#101) (5baa294)

1.3.0 (2026-06-16)

Features

• add kit TRUST axis to inspect output — orthogonal to K-levels (issue #79) (2a353d1)
• add TRUST axis to kit inspect — orthogonal to K-level capability (issue #79) (02ac699)
• knowledge: rendered-body-as-storage in Obsidian adapter (baef40f)
• knowledge: rendered-body-as-storage in Obsidian adapter (0a31c32)
• migrate gate evidence from surface.claim to Hachure trust.bundle (#97) (8ed43c4)

Fixes

• #74: console-learning test cross-platform + un-quarantine; docs(#39): live-validation rule (89b2bdb)
• #74: un-quarantine console-learning test — passes 12/12 on Linux CI (#89) (371ecd2)
• #75: assert opencode plugin load via factory marker file (#96) (6c09288)
• acceptance harnesses poll for all required telemetry events (canary flake #75) (a27b4ff)
• acceptance harnesses skip (not fail) when no telemetry produced — no-provider CI (d9cba18)
• acceptance harnesses skip telemetry assertions when no provider (canary #75) (dbd0e7b)
• acceptance harnesses wait for ALL required telemetry events, not just file existence (d9c86c0)
• ci: pin @kontourai/flow to ~1.2.0 (#95) (fd97803)
• knowledge: collision-proof body delimiter in Obsidian adapter (4e2560c)
• stop-goal-fit: invoke built validator directly; skip on env errors (#92) (7b3d520)

1.2.0 (2026-06-15)

Features

• #62: move Builder Kit skills into kits/builder, add Knowledge Kit skill, remove orphans (3822e07)
• #62: move Builder Kit skills into kits/builder, Knowledge Kit skill, remove orphans (31f63ca)
• delegate container validation to @kontourai/flow; rename flow-kit → flow-agents kit (d39e909)
• delegate container validation to @kontourai/flow; rename flow-kit → flow-agents kit (ADR 0008) (4343e84)

Fixes

• ci: install repo deps before building bundles in runtime-compat canary (#76) (f8947aa)
• lazy-load @kontourai/flow in validate.ts so list/status/activate work without it (99beebb)

Documentation

• add ADR 0007 flow/skill/kit/tool boundary + skill audit (20b5c7b)
• add Builder Kit quick-start guide and update index/README Quick Start (2e89bf0)
• ADR 0007 flow/skill/kit/tool boundary + skill audit (a1dde52)
• Builder Kit quick-start guide (zero to gated build flow) (83237f7)
• fold orphan rulings into ADR 0007, add ADR 0008 kit-operation boundary (d547edc)
• mark ADRs 0007 + 0008 Accepted (decisions reached in 2026-06-15 design conversation) (3eb7636)

1.1.0 (2026-06-15)

Features

• activate skills and docs in kit runtime adapters (fix #58) (dc726fd)
• activate skills and docs in kit runtime adapters (fix #58) (dc774e0)

Fixes

• apply realpathSync entry-guard to 7 remaining CLI/tool files (c1b3272)
• apply realpathSync entry-guard to all 16 affected CLI/tool files (closes #71) (8a676b0)
• apply realpathSync entry-guard to remaining 10 CLI/tool files (159bb78)
• use hosted console io preset (5b4bb7b)

1.0.1 (2026-06-12)

Fixes

• resolve three kit-distribution blockers (#55 #56 #57) (3350cb1)
• resolve three kit-distribution blockers (#55, #56, #57) (13bf732)

1.0.0 (2026-06-12)

Features

• agentless Flow Kit gate evaluation proof (issue #52 item 3) (f7857ec)
• agentless Flow Kit gate evaluation proof (issue #52 item 3) (86c881f)
• config-protection blocks git hook-skip flags (#41) (6d9e981)
• K-level conformance, degradation invariant, and consumer-target derivation (#52 items 1+2) (d5c332a)
• K-level conformance, degradation invariant, and consumer-target derivation (issue #52 items 1+2) (6ac62eb)
• knowledge-kit: obsidian layout — insights at node root, sources nested; dimension frontmatter (5d6489b)
• knowledge-kit: Obsidian store adapter — file-is-the-record spike (#43) (83d9ff4)
• knowledge-kit: Obsidian store adapter spike — file-is-the-record RATIFIED (#43) (467c8dc)
• knowledge-kit: person entity cards with backlinks + gated resolution (#48) (9456cef)
• knowledge-kit: person entity cards with backlinks + gated resolution (#48) (ac5ccb0)

Fixes

• entity-extractor: parse trailing-period last-entry correctly (76abd87)
• entity-extractor: parse trailing-period last-entry correctly (#48) (ac64fc1)

Documentation

• elevate Flow Kits as the authorable-ecosystem pillar (#45) (fa81820)
• elevate Flow Kits as the authorable-ecosystem pillar (#45) (7ffa44e)
• kit container/extension layering — container contract is Flow-owned (#50) (33d6ec0)
• kit container/extension layering — container contract is Flow-owned (#50) (fd87366)

Maintenance

• cut v1.0.0 (5f88ac5)

0.4.0 (2026-06-12)

Features

• knowledge-kit: gated decision retirement + working-set exclusion (S7, #37) (40ae3fb)
• knowledge-kit: vector similarity detector — first drop-in (I10 unparked) (a63c6d4)

Fixes

• ci: author release PRs via kontour-release-bot app token (#38) (6a2c937)

Documentation

• repo commit/release conventions in AGENTS.md, pinned by static check (aecd896)

0.3.0 (2026-06-12)

Features

• knowledge-kit: concept synthesis with evidence-gated mutations (S3, #34) (f307165)
• knowledge-kit: decision-snapshot consolidation, supersede-not-delete (S6, #36) (7211605)
• knowledge-kit: ingest/classify + compile flows with provenance gates (S2, #33) (07dffd5)
• knowledge-kit: keyless live example + acceptance harness (S5, #35) (9a565aa)
• knowledge-kit: store contract + default reference adapter (S1, #31) (4ed06ba)
• strands-local kit activation — framework-path kits (S4, #32) (8dc05ec)

Fixes

• dedup pi session.start; document opencode run-mode session.created gap (4d7e5b1)
• telemetry-doctor reported the workspace parent as the local sink dir (e15d7b2)

Documentation

• Flow Kits authoring guide, README kits section, npx command forms (a89a86c)

0.2.0 (2026-06-11)

Features

• engine contract 1.0, conformance kit, Strands rebind, integration docs (fd94f58)
• install lifecycle tests, dogfood command, collision marker fix (a0fb2e3)
• live acceptance harnesses for opencode and pi (181382b)
• Strands TypeScript adapter — first native-import engine consumer (0f387ab)
• weekly runtime/SDK compatibility canary + dependabot (9a371b1)

Fixes

• opencode.json — emit schema-valid config (instructions must be array) (35a01ec)
• opencode/pi hook chain — node resolution, stdin payloads, telemetry escape (be4e4f8)
• pi extension template escaping; parse-gate generated hook artifacts (6fe40c5)

Documentation

• roadmap rows reflect the shipped utterance evidence-check hook (#24) (617c755)

0.1.2

• Source validation resolves the Flow CLI at dist/cli.js (with a src/cli.js fallback), and the source-and-static CI lane installs @kontourai/flow so kit Flow Definitions are validated by the real Flow CLI.
• The publish workflow builds the bundle explicitly before npm publish.
• Docs routing between the System Guidebook and the Workflow Usage Guide; duplicated development walkthrough removed.
• README and Pages home advertise the npm install with the version badge; pre-release caveats removed; Kontour family table links product pages and gains a Survey row.
• Fixes phantom skill references, a stale pack list, and path accuracy in the docs.

0.1.1

Documentation And Site

• Rewrote the README and GitHub Pages home with a verified install path (checkout-based; npm publishing is on the roadmap), the Kontour product-line story, and cross-links to the Kontour Flow documentation.
• Rebranded the docs site to the shared Kontour design tokens: Fraunces, Hanken Grotesk, and IBM Plex Mono, the Flow teal accent, light/dark themes, a version badge, OG/social meta tags, and a favicon.
• Fixed mobile navigation: the rail is now an accessible slide-over drawer instead of disappearing below 860px.
• Added frontmatter to fourteen docs (including the workflow usage guide, skills map, and all ADRs) so Jekyll renders them as pages instead of copying raw Markdown, and enabled the github-pages default plugins locally for build parity.
• Merged the evidence reference migration note into docs/migrations.md, merged the roadmap into docs/north-star.md, and retired docs/release-notes.md in favor of this changelog.

Packaging And Cross-Product Validation

• Made the package publishable: removed the private flag, added the license and public publishConfig, a prepack validation lane, and a tag-triggered Publish NPM workflow using npm trusted publishing, mirroring the Flow release pipeline.
• Fixed Flow CLI integration in source validation: FLOW_CLI_ROOT now resolves the compiled dist/cli.js (with a src/cli.js fallback), and the source-and-static CI lane installs @kontourai/flow so kit Flow Definitions are validated by the real Flow CLI in CI.
• Removed the broken build-docs-preview tool and its wrapper, bin, and script entries; local docs preview is now documented in CONTRIBUTING.md using the same Jekyll setup as the Pages workflow.

Repository Cleanup

• Consolidated TypeScript tooling source under src/tools/ and kept scripts/ as the public wrapper/runtime surface.
• Documented repository structure, generated-output boundaries, runtime hook boundaries, and safe cleanup rules.
• Removed stale local runtime artifacts and corrected package metadata drift.

Codex Runtime Hooks

• Reinstalled Codex into an isolated Flow Agents home and fixed generated Codex hook commands to prefer CODEX_HOME.
• Documented the stale repo-local .codex/hooks.json failure mode that caused Codex PostToolUse to reject Claude-only suppressOutput output.

CI And Release Readiness

• Enabled permanent TypeScript unused-code enforcement with noUnusedLocals and noUnusedParameters.
• Made the Node runtime policy explicit: package metadata requires Node >=22, CI runs Node 22, and @types/node stays on the Node 22 major line until runtime policy changes.
• SHA-pinned GitHub Actions with version comments, including dereferencing the annotated actions/checkout@v6.0.3 tag to its commit SHA.
• Split Flow Agents CI into independent source/static, workflow-contract, and runtime/kit lanes with separate evidence artifacts.
• Preserved fail-closed CI evidence finalization: failed, missing, duplicate, or invalid check rows fail the corresponding CI lane.
• Verified the npm lockfile with a clean audit and updated promptfoo to 0.121.15.