Changelog

Every version of the executable with the decisions it carried, the changes in its commit range and the artifacts it published — composed by the release subsystem, never written by hand.

A release is a record of the layer, not a file somebody edits after the fact. majordomus generate changelog reads those records, pairs each one with the decisions dated inside its window and the commits in its range, and writes the result as one value in three encodings — docs/generated/changelog.json for a program, .yaml beside it, .md for a reader. This page is a fourth projection of the same value, so it cannot say anything the tool does not.

What that buys: a version cannot appear here without a release record, a change cannot appear without a commit that carries it, and an artifact cannot appear without the record's own evidence for it — the file name and the SHA-256 the record read off the file it published.

provenance

current version: 1.0.0-alpha.8
document: majordomus/changelog/v1
projected from: docs/generated/changelog.json
for a reader: docs/generated/changelog.md

the same value, elsewhere

Command line majordomus release changelog
HTTP API /api/v1/changelog
The capability release.changelog
MCP majordomus://changelog

The Cockpit runs it from the capability page above; Swagger UI runs the route, on the server this repository starts. None of the four is written down twice — they are projections of one declaration.

v1.0.0-alpha.5

1.0.0-alpha.52026-10-2276c57859618 change(s) 0 decision(s) 6 artifact(s)

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 6

site a memory edit names the pages each key reaches (I3092)37205d4a1
I3092 A translation-memory edit says which pages each changed key reaches, and refuses one that reaches none I3095 A count inside a translated sentence is a slot, so a changed number never drops the translation
site a count inside a translated sentence is a slot (I3095)d296bf2ac
I3095 A count inside a translated sentence is a slot, so a changed number never drops the translation
site a translated bar keeps its English headroom (I3091), and the lessons are decided0ada9533f
I3091 A translated bar keeps the headroom of its English bar, whatever fonts the machine has
site translate the 8362 segments the alpha.1 build added to the Czech copy40d2a5875
handbook the handbook carries the outlook, derived from the tree6b762a886
site every article ends with the articles related to it, in its reader's languagebf14f79f2
I3436 Every article reads in every language the site declares, and its counterparts are reciprocal I3438 A translation records the digest of its source, and site-check refuses one its source has moved past I3074 Every article ends with the articles related to it, in its reader's language, and each answers it back

Fixed fix 3

top #1789's reds, fixed at their sources and derived once76c578596
I3771 A claim scope that is not a repository path is refused, or mapped to the record file it names, so a milestone claim excludes what it says I3759 Every language's homepage is held to the declared weight budget, and the capability list is fetched rather than inlined I3134 The product sentence is declared once, and the homepage, README, page titles, Open Graph and launch kit read it I3074 Every article ends with the articles related to it, in its reader's language, and each answers it back
top train 3a's pre-push reds, fixed at their source and derived once8e06eb3be
handbook the outlook reads only the intent keys it showsf34dd4acb

Documentation docs 3

site an article explains derivation, in English and in Czecha2d233d13
I3078 An article explains derivation in both languages: written once, derived everywhere
site an article explains the plan critique, in English and in Czech6de68f89d
I3077 An article explains the plan critique in both languages: a plan is attacked before it is built
site an article explains the cooperation model, in English and in Czech455304b1f
I3075 An article explains the cooperation model in both languages: seats are claims, tops are judged once, stale work is brought current

Housekeeping chore 6

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v1.0.0-alpha.5-aarch64-apple-darwin.tar.gz	6204966024c03a1e34fd899d3fcfc09699142460cdf4d345932425b58e3a540b
`macos-x86_64`	majordomus-v1.0.0-alpha.5-x86_64-apple-darwin.tar.gz	e854ee236363c2a1ce14409592360dd622af414b66ca0e6cb6e5ddbc3689cd03
`linux-x86_64-gnu`	majordomus-v1.0.0-alpha.5-x86_64-unknown-linux-gnu.tar.gz	2106367929ab9e780fa795f81bf500c90c810c87655873030d31f226582d8e5a
`linux-x86_64-musl`	majordomus-v1.0.0-alpha.5-x86_64-unknown-linux-musl.tar.gz	6cdb68bffb3226af64b734ccd2dc87973631bcd855a5988568a465c8d8bebb7d
`linux-aarch64-gnu`	majordomus-v1.0.0-alpha.5-aarch64-unknown-linux-gnu.tar.gz	ec943cc2672d3cdfda5028821fc5633d9f7a2f46d91ae12bdc520a8b9b76e7ac
`linux-aarch64-musl`	majordomus-v1.0.0-alpha.5-aarch64-unknown-linux-musl.tar.gz	b1c8dfd1285f77ba0b69666501391726fa15a165cf13634f1baa26c5366761e8

v1.0.0-alpha.4

1.0.0-alpha.42026-10-2197391192d33 change(s) 0 decision(s) 6 artifact(s)

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 3

providers a provider declares its browser bridge, and preflight names the missing hostb30ee30a1
ci the interaction probe runs in six shards, verified as one sweep (I3602)7666c365b
I3602 The interaction probe is split, so every control of every page is driven inside its bound I2841 The site's browser probe is split, so the site job runs well inside its timeout
ci the site's browser probe runs in four shards that are the sweep (I2841)95357325d
I2841 The site's browser probe is split, so the site job runs well inside its timeout

Fixed fix 14

top #1765's reds, fixed at their sources and derived once97391192d
I3838 The plan page renders within the audit budget at every width, because a finding is counted rather than printed once per pair I2848 A pre-push gate that runs the executable does not wait on another worktree's build I3829 A provider declares whether its client drives a browser beside the server, and preflight says when this machine's bridge is missing I2841 The site's browser probe is split, so the site job runs well inside its timeout I3602 The interaction probe is split, so every control of every page is driven inside its bound I2847 every file the site generator reads by a literal path is one of its declared inputs
top train 2's pre-push reds — canonical order, no eval, scopes that exist98707ace2
I3013 The evidence job runs only when a planned lane ran tests, so a records-only pull request is not red I2825 A claim released on one runtime is released on every runtime that holds it, and a link to a restarted peer recovers I0832 generate-site-data instrumented and its hot spots removed I2848 A pre-push gate that runs the executable does not wait on another worktree's build I2846 A hand-pinned budget in a case is reported unless it states its margin
top the mesh doctor's remediation names `serve status`, not the lease path712729721
I2825 A claim released on one runtime is released on every runtime that holds it, and a link to a restarted peer recovers
top cases 3247 and 3836 name why their globals look unused76158b704
I2521 What a derive costs is measured per stage and per kind of change, and every file a stage reads is listed I0832 generate-site-data instrumented and its hot spots removed
top case 1018 counts the queue's tickets with a glob, not ls | grep374fa149e
I3098 Waiting derives take the machine's derive lock in the order they arrived
site the plan page counts its findings instead of printing one row per pair (I3838)c278259ab
I3838 The plan page renders within the audit budget at every width, because a finding is counted rather than printed once per pair
site-data the scenario cache engages; the tool's lib dir is compared physically (I0832)57c1a9d91
I0832 generate-site-data instrumented and its hot spots removed
mcp the Claude in the browser sources are cited as text, not links6ea3de94b
derive waiting derives take the machine lock in the order they arrived (I3098)fe464a41d
I3098 Waiting derives take the machine's derive lock in the order they arrived
test a case run removes its own scratch dir however it ends (I3834)34ca69681
I3834 A case run removes its own scratch dir however it ends: passed, failed, timed out or interrupted I3830 A local gate reports and CI decides: pre-commit and pre-push refuse only on integrity I3833 majordomus disk prune reclaims by name what nobody is using: idle build directories under their cargo locks, and the container runtime's cache
ci a gated step leaves its receipt and a step bound follows its measured time (L1, L2, L7)6240bc2d7
ci the evidence job runs only when a planned lane ran tests (I3013)99727f47c
I3013 The evidence job runs only when a planned lane ran tests, so a records-only pull request is not red
test case 3602 compares its route lists in C order (I2841)a9f29e563
I2841 The site's browser probe is split, so the site job runs well inside its timeout
ci the site probe runs in six shards, since the Czech copies doubled the routes (I2841)3ad4310f4
I2841 The site's browser probe is split, so the site job runs well inside its timeout

Performance perf 2

derive reading the derive queue forks nothing (I3098)4b36890a9
I3098 Waiting derives take the machine's derive lock in the order they arrived
site-data a scenario whose tool and use case are unchanged is not re-executed (I0832)73d26b129
I0832 generate-site-data instrumented and its hot spots removed

Documentation docs 4

plan the roadmap reads idd-workspace's release from the committed merge603164312
plan a node the mesh lists as present but cannot link says why (I3835)12c702cdc
I3835 A node the mesh lists as trusted and present but cannot link is said so, with why, on every surface that names it
mcp Claude in the browser reaches the mesh through Claude Codeebf58f233
I3285 A vendor workspace reads the plan through the authenticated remote MCP surface, and a tunnel never makes it look local
rules a worker lands its own green head, and every bootstrap says so (I3824)8d394f3c2
I3824 The cooperation rule says a worker lands its own green head, and every bootstrap says the same I3825 A build refuses to start beside five others or below 35 GiB free

Tests test 2

provider a bridge without its host is not looked forf21025614
I3829 A provider declares whether its client drives a browser beside the server, and preflight says when this machine's bridge is missing
site case 3848 reads its own plan, and says what its ceiling counts (I3838)0545642b7
I3838 The plan page renders within the audit budget at every width, because a finding is counted rather than printed once per pair

Housekeeping chore 8

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v1.0.0-alpha.4-aarch64-apple-darwin.tar.gz	87b5f17a05d8bfbd6b8d628883ef9fab572769b3db630daec4862ac3e3790cc4
`macos-x86_64`	majordomus-v1.0.0-alpha.4-x86_64-apple-darwin.tar.gz	db150297c23774f4c2d504483f9b6386035d4770dbdf10072ce98ebdd75f574e
`linux-x86_64-gnu`	majordomus-v1.0.0-alpha.4-x86_64-unknown-linux-gnu.tar.gz	aadc60edec3070c5ed64ae7f3605b8205ee1dd8e880d9843977d61576c256d79
`linux-x86_64-musl`	majordomus-v1.0.0-alpha.4-x86_64-unknown-linux-musl.tar.gz	f4022f2b79ab03a7a6c51c31f4fb0e19581c73d5ffa2e2f8d4610920be579bac
`linux-aarch64-gnu`	majordomus-v1.0.0-alpha.4-aarch64-unknown-linux-gnu.tar.gz	1aafbed99a30820875f777ab6a6868a75b3e485819d8d762e5a9466747eb404a
`linux-aarch64-musl`	majordomus-v1.0.0-alpha.4-aarch64-unknown-linux-musl.tar.gz	49152c6ced5667078b0209761457f8529f8d199f1a822d2c7947cb446fb7daf9

v1.0.0-alpha.2

1.0.0-alpha.22026-10-21905159df711 change(s) 0 decision(s) 6 artifact(s)

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Fixed fix 1

ui the intent workspace borrows the plan instead of copying it (I3018)9129c6697
I3018 The intent workspace borrows the plan instead of copying it on every request

Documentation docs 4

plan record I3079, the Deployments table's link that is too small a targetea81bca38
I3079 The links of the Deployments table on /ui/delivery meet the target size at every audited width
plan the roadmap reads idd-workspace's release from the committed merge46ffa4e6e
plan the derived plan page of I3009ce424b866
I3009 No record's prose and no board announcement holds a template delimiter
plan the landed IDD work is recorded, and idd-workspace is done3c9797a27
I2781 An issue is started, verified and finished from the intent workspace I2783 The intent workspace reads itself again when a move ends on its server I2789 The intent workspace shows why an intent stands where it stands and every move made on its issues I2812 The IDD loop is accepted end to end in a real browser on one commit I2900 Every issue id on the intent workspace is a link, the shared-scope pairs are one folded line, and no missing library is asked for I2907 The workspace's headline numbers are the chosen intent's I3000 The workspace's record texts are drawn as prose I3001 The intent is the page's title, and panels ask questions I2915 The workspace speaks in plain words I2916 The workspace reads in the order a person asks I2917 Each intent has one primary action I2813 A published page that answers 503, or does not answer, is asked again before it is called missing I3007 A commit that a record or the site's data names is a commit the history holds I3010 The mesh manual says the edit guard is not wired, and how to wire it by hand I2914 No /ui page shows an issue id that leads nowhere I3009 No record's prose and no board announcement holds a template delimiter

Housekeeping chore 6

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v1.0.0-alpha.2-aarch64-apple-darwin.tar.gz	baae30271835477db70806c1006609f21c47224e2825118595001183c68f6f1c
`macos-x86_64`	majordomus-v1.0.0-alpha.2-x86_64-apple-darwin.tar.gz	5236640245e03a47b0095d82811bb6fd4fb42610d4aa17f4b209bb360e134a1d
`linux-x86_64-gnu`	majordomus-v1.0.0-alpha.2-x86_64-unknown-linux-gnu.tar.gz	12dc25ea63880e45c26a3f50418a90b68dc098fb1c433e4c7b302b353f5b6947
`linux-x86_64-musl`	majordomus-v1.0.0-alpha.2-x86_64-unknown-linux-musl.tar.gz	376d53a9ca37b2bc98338cfd3a98077c7a3a94a25163e9c03b0b2ad8bcf4e6ea
`linux-aarch64-gnu`	majordomus-v1.0.0-alpha.2-aarch64-unknown-linux-gnu.tar.gz	3b246c41cf04f04383b16c77d36ce4491c5655d3b4931edc359c30aa762dcc9c
`linux-aarch64-musl`	majordomus-v1.0.0-alpha.2-aarch64-unknown-linux-musl.tar.gz	b4373e9151e5cae81e8d91278a4275c7ecabb7eea3402b6620144460402da616

v1.0.0-alpha.1

1.0.0-alpha.12026-10-209a5a9b77531 change(s) 39 decision(s) 6 artifact(s)

Decisions

The architecture decisions the layer dates inside this version's window, each with the route the document records for it.

adr-0218 accepted 2026-10-19

Every language of the site is derived from the English build and a translation memory
adr-0217 proposed 2026-10-19

A change is reconciled by the modules that own its state: hooks only sense, reconciliation is derived on read and says how each join is known, a private read stays on its machine, and verified is answered only by proof
adr-0216 proposed 2026-10-18

Every live surface follows one channel with named follow streams, and nothing polls where a stream exists
adr-0215 proposed 2026-10-18

A phone is the baseline width of every first-party surface, and the primary flow is accepted there before a surface grows
adr-0214 proposed 2026-10-18

A provider's native extension points carry the contract as generated projections; Majordomus neither embeds nor patches the worker's runtime
adr-0213 proposed 2026-10-18

Usage is observed through each provider's official telemetry into one provider-neutral record, and reported, estimated and billed amounts are never merged
adr-0212 proposed 2026-10-18

A workspace is read in the operator's own signed-in browser or from the vendor's export, never through a launched automation profile or another tool's credential
adr-0211 proposed 2026-10-18

A record promoted from a workspace cites the message it came from by a typed reference that validates in every checkout and resolves only where the store is held
adr-0210 proposed 2026-10-18

The sentence that says what Majordomus is has one declaration, and every surface reads it
adr-0209 proposed 2026-10-18

Prismatic Lumen names the owner's mesh-wide view, and it owns no scheduler, event bus, store or API
adr-0208 proposed 2026-10-18

The product's value is stated as the false dones its finish caught, beside the friction it cost
adr-0207 proposed 2026-10-18

A new mechanism is admitted only with the measured problem it removes
adr-0206 proposed 2026-10-18

Public outreach begins only after a stranger has finished a first task unaided
adr-0205 proposed 2026-10-18

What a runtime can do is a set of separately evidenced facts, and detection never authorises
adr-0204 proposed 2026-10-18

The hub is reached privately over the tailnet first; a public ingress is a deployment target, never an application change
adr-0203 proposed 2026-10-18

GitHub Pages is a signed bootstrap anchor for the mesh, never its signalling channel
adr-0202 proposed 2026-10-18

The mesh routes work to an identity, never an address, and selects among proven transports instead of implementing NAT traversal
adr-0201 proposed 2026-10-18

The persistent runtime is the authority; every operator surface, Lumen included, is a client of it
adr-0200 proposed 2026-10-18

Supervision repairs only what is idempotent, owned and verified, and never restarts blindly
adr-0199 proposed 2026-10-18

A hub is a declared host service; a working checkout's server stays a client's child
adr-0198 proposed 2026-10-18

Delivery is judged by verified outcomes landed per day, with lead time p95 as its control, never by commits, pull requests or sessions
adr-0197 proposed 2026-10-18

The backlog is bounded by a declared bound that every session reads at start, and the bound reports rather than refuses
adr-0196 proposed 2026-10-18

Delivery latency targets are budgets of benchmark policy, measured per phase, and never a correctness gate on runners the repository does not own
adr-0195 proposed 2026-10-18

What accepting an issue unblocks is answered by one counterfactual evaluator over the plan graph
adr-0194 proposed 2026-10-18

An ingested brief is an intake revision, and its requirements are reconciled into the existing plan
adr-0193 proposed 2026-10-18

Conflicting evidence keeps the verdict vocabulary: the criterion reads unknown and cites both sides
adr-0192 proposed 2026-10-18

Replanning is bounded, idempotent and never weakens its intent
adr-0191 proposed 2026-10-18

A plan drafted from an intent is a proposal, checked by the plan's own validators before any record is written
adr-0190 proposed 2026-10-18

Mutation testing is scheduled evidence over declared critical predicates, never a gate on every change
adr-0189 proposed 2026-10-18

JUnit and Cobertura are formats evidence is imported from and exported to; the tracked ledger stays the only store
adr-0188 proposed 2026-10-18

A rule's proof of effect is a recorded refusal of its violation, not the presence of its wiring
adr-0187 proposed 2026-10-18

Tests are selected by the impact of a change, derived from what each case declares it reads, and a change of unknown impact runs every case
adr-0186 proposed 2026-10-18

A pull request's required verdict is the feedback lane, a gate whose inputs did not change is reused as inputs_unchanged, and the proof lane judges the combined top before it lands
adr-0185 proposed 2026-10-18

A derivation is a typed graph of the generators the executable already plans, keyed by the content of what each node reads, and the full derive stays its oracle
adr-0184 proposed 2026-10-18

Every command name is implemented by exactly one executable, and the other only delegates
adr-0183 proposed 2026-10-18

Evolution is scheduled at the episode boundary and carried out by a session; nothing promotes itself
adr-0182 proposed 2026-10-18

A closed session record is judged by what it can attribute, not only by its schema
adr-0181 proposed 2026-10-18

An episode records the governance and the briefing it was handed, each by one digest
adr-0180 proposed 2026-10-18

A prompt pack is a campaign: kept as received, indexed as a kind, and cited by the records it drove

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 4

site the Czech copy translates the segments the merge with master brought370fdf4cc
site the Czech copy is complete and its rule is enforcedce0b7e58c
site every page in Czech, derived from the English build and a translation memory0ce1424df
site every article reads in every language, and a translation keeps up with its source4624a38df
I3436 Every article reads in every language the site declares, and its counterparts are reciprocal I3437 An article names every language version in one translations table, and every member names the same group I3438 A translation records the digest of its source, and site-check refuses one its source has moved past

Fixed fix 20

top suite budgets re-derived from the release head's run9a5a9b775
top a milestone title GitHub can hold, and Pages bounds for two languages88ce9857e
top the site-languages step leaves the receipt the ci verdict asks forbd676bbe3
top the UI audit warms each surface and retries a timed-out load once (I3090)82ac259d0
I3090 The UI audit warms every surface and gives an unreachable page a second load
top the bar's own "How it works" is Princip in Czech too35f5241ad
top the UI audit samples the served docs' Czech copy, and its breadcrumb fits at 3209bf2b7258
top the Czech bar fits at 768 px, and a graph's reset restores the page's own wordsca83931eb
top the UI audit samples a language copy under a mount as well as at the root5b5358d91
top two more cases the Czech copy reached, cases 97 and 1071aa936b537
top what the Czech copy of the site asked of the checks that read every page4fc1ffe7f
top the reds the re-cut's own checks found before its pushf2420807a
I3060 A provider hook declares its timeout, and the session end closes its episode inside the budget
site every language's copy is in the sitemap, and an alias leads to its target's copyb3bf6ed7e
capture a provider hook declares its timeout, and the session end closes inside it (I3060)c6556694a
I3060 A provider hook declares its timeout, and the session end closes its episode inside the budget
ui the UI and the Cockpit wear the site's bar with the language switchb12a5fcb5
test case 3590 compares the second pass by diff, not shasumc24cdc1a2
ui every Knowledge tile reads whole at a phone's width (I3025)b9b6dbfa5
I3025 Every Knowledge tile reads whole at a phone's width
ui the Knowledge manual link names a page the site has (I3024)19d5dda61
I3024 The Knowledge screen's manual link names a page the site has, on the server and on Pages
plan the promoted records pass the pre-push gates and name only what they touch596cd5ebb
I3134 The product sentence is declared once, and the homepage, README, page titles, Open Graph and launch kit read it I3136 The copy refuses hype words that no recorded comparison permits I3117 The README and the launch page say only what master does about model invocation, doctrine dispatch and overrides I3122 A coverage figure on every surface names its dimension, its commit and what it does not measure I2962 What the served surfaces change is said as the registry says it I2963 The README's exit codes are the commands' contract I2965 The site says a test proves a guarantee only as far as recorded evidence supports it I3100 What the ChatGPT project decided is promoted into the layer, each record naming the conversation and message it came from
plan the promoted records wait on what 0.30.0 landed and on what their owners answered51916f41d
I2812 The IDD loop is accepted end to end in a real browser on one commit I2783 The intent workspace reads itself again when a move ends on its server I2902 A status names the moves it admits, and every surface reads that I3117 The README and the launch page say only what master does about model invocation, doctrine dispatch and overrides I3122 A coverage figure on every surface names its dimension, its commit and what it does not measure I3163 Each episode boundary derives whether evolve is due — skip, defer or run — and the next session is told why I3267 One read-only evaluator says what accepting an issue would unblock, from plan.next's own readiness rules I3234 A derive whose executable is current and whose inputs did not move answers before it waits for the machine's lock I3100 What the ChatGPT project decided is promoted into the layer, each record naming the conversation and message it came from
plan the promoted records name only paths that exist and break two order tiesd3229ef16
I3100 What the ChatGPT project decided is promoted into the layer, each record naming the conversation and message it came from

Documentation docs 2

Pipeline ci 1

validate three browser probes outgrew their bounds; each bound grows with its measurement6e2aadba1

Housekeeping chore 4

derive the I3060 plan page07f15d4c0
I3060 A provider hook declares its timeout, and the session end closes its episode inside the budget
release record v0.30.2 and the metadata it publishes94372c0fa
derive the projections follow the merge with masterb0e833128
plan revive the derive, CI critical-path and IDD drafting records that never landed321f5dde6
I2521 What a derive costs is measured per stage and per kind of change, and every file a stage reads is listed I2533 The incremental derive becomes the default after a shadow period proves it equal, and one flag returns to the full derive I2115 The slowest case costs a fraction of its budget, and its budget is never raised to follow runner load again I2348 A gate's result is reused only for the exact inputs it judged, and a skipped gate carries the proof that nothing it reads changed I2350 One gate model names what a local check, a pull request, an integration and a release must run, and no second inventory exists I3100 What the ChatGPT project decided is promoted into the layer, each record naming the conversation and message it came from

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v1.0.0-alpha.1-aarch64-apple-darwin.tar.gz	afa2fe2f0e19397fc5b3b8e079c348a09a3080961b966b0b064e191adb104137
`macos-x86_64`	majordomus-v1.0.0-alpha.1-x86_64-apple-darwin.tar.gz	84d7c08db6f18f98947ef973a6097b4ef0d0d0bdb94612bcb22b0278f6e940f3
`linux-x86_64-gnu`	majordomus-v1.0.0-alpha.1-x86_64-unknown-linux-gnu.tar.gz	45b14249c8faf8e47095ce3382369973fc4a5dd672f10941f3e4b2667475a5d2
`linux-x86_64-musl`	majordomus-v1.0.0-alpha.1-x86_64-unknown-linux-musl.tar.gz	298c3832116c05ac7784c671e75b5b554b1b8d9d3230d863858f884776456a1f
`linux-aarch64-gnu`	majordomus-v1.0.0-alpha.1-aarch64-unknown-linux-gnu.tar.gz	46302b27158583eb28ff7bbf41ab46f993954362c687eaa5dee77a09c00a8756
`linux-aarch64-musl`	majordomus-v1.0.0-alpha.1-aarch64-unknown-linux-musl.tar.gz	38ff14c89ad372797e1a9fa16bde3aca920406c4bdb759721dbbb11f7dab22ee

v0.30.2

0.30.22026-10-19dd4c0a87c7 change(s) 0 decision(s) 6 artifact(s)

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Fixed fix 6

top I2917's nothing-to-move arm of the intent's primary action has a testdd4c0a87c
I2917 Each intent has one primary action
ui each intent has one primary action (I2917)d93b93ad1
I2917 Each intent has one primary action
ui the intent workspace's panels stand in the order a person asks (I2916)069970820
I2916 The workspace reads in the order a person asks
ui the intent is the workspace's title and every panel asks a plain question (I3001)d65aee8a7
I3001 The intent is the page's title, and panels ask questions I2915 The workspace speaks in plain words
pages a claim newer than the ledger is not yet recorded, not a refusal (I2853)29acb77dd
I2853 a Pages deploy on a fresh master is not refused for claims newer than the ledger it reads
ui every record text on the workspace is drawn as prose (I3000)d09232416
I3000 The workspace's record texts are drawn as prose

Housekeeping chore 1

release record v0.30.1 and the metadata it publishese6268966b

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.30.2-aarch64-apple-darwin.tar.gz	b44b8da000546c85af6ad3d0a28d693bcf2560bf8e9c6120dfe24946811efa57
`macos-x86_64`	majordomus-v0.30.2-x86_64-apple-darwin.tar.gz	60735a8fdad48839bf424c3949565f3c0c4524101f7266c459a0ef953483c9dc
`linux-x86_64-gnu`	majordomus-v0.30.2-x86_64-unknown-linux-gnu.tar.gz	eed5fce0af6b5c01bf8409043c6ec0b4bb830652a215864eabed4ad4c6c8768b
`linux-x86_64-musl`	majordomus-v0.30.2-x86_64-unknown-linux-musl.tar.gz	2b404e30a78fc2335044b268cfc8c8386ef40c2d12fcd619045971c0c58f18f5
`linux-aarch64-gnu`	majordomus-v0.30.2-aarch64-unknown-linux-gnu.tar.gz	6292503a7ab1862eb9124e60b053c0dafbfb67fe0a3a196fe7dabadaa9a8d2ba
`linux-aarch64-musl`	majordomus-v0.30.2-aarch64-unknown-linux-musl.tar.gz	05777434fd01413eefc422475a7f225c3c4841faf0583f85fe0e652b0b7bfb2a

v0.30.1

0.30.12026-10-199904000d221 change(s) 0 decision(s) 6 artifact(s)

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Fixed fix 18

top case 3003 reads the Knowledge screen I3022 and I3023 draw9904000d2
I3022 An empty knowledge queue is one sentence that says how a record arrives, not two empty tables I3023 The Knowledge screen reads in review order, in plain labels, and leads to the knowledge manual
top #1412's real reds: the footer commit, the record cases, coverage, a pipe flake70d127e14
I2851 the homepage's product view counts the delivery the history proves beside the statuses the records declare, each count a link I2987 server.status and peers.list ask every checkout at once, a bounded number at a time
top I3007's objective names the template links without writing a placeholder7a20e31fd
I3007 A commit that a record or the site's data names is a commit the history holds
top case 3363 sorts with LC_ALL=C, so its order is the machine's no more92f790d39
I2962 What the served surfaces change is said as the registry says it
ui the Knowledge screen reads in review order, in plain labels (I3023)076312f8a
I3023 The Knowledge screen reads in review order, in plain labels, and leads to the knowledge manual
ui an empty knowledge queue is one sentence, not two empty tables (I3022)820602967
I3022 An empty knowledge queue is one sentence that says how a record arrives, not two empty tables
site a commit that a record or the site's data names is in the history (I3007)c0b799497
I3007 A commit that a record or the site's data names is a commit the history holds I0817 Phase timing and work counters behind MJ_TIMING I0818 The command registry is read in one pass
offload a remote derive builds only inside its own run directory (I2882)a4c19d60f
I2882 A remote derive builds only inside its own run directory
ui the Knowledge review reads as steps, each command as code (I3021)6f54b4153
I3021 The Knowledge screen shows each review command as code with what it does as a sentence
site the site says a test proves a claim only as far as the evidence does (I2965)c90d10c01
I2965 The site says a test proves a guarantee only as far as recorded evidence supports it
doctor no work whose answer cannot change a findinged72c1325
I2995 doctor does no work whose answer cannot change a finding: the roadmap lookups and the board's wide status
ui the workspace's headline numbers are the chosen intent's (I2907)a762f7456
I2907 The workspace's headline numbers are the chosen intent's
doctor the work no remote holds is counted in one walkba44bed3f
I2993 doctor counts the work no remote holds in one walk, whatever the number of branches
docs the MCP surface, claims and README name the eight writing capabilities (I2962)1b9b93d1b
I2962 What the served surfaces change is said as the registry says it
release a latest.json naming any pre-release is refused, not only the one published (I2829)9f8baafee
I2829 An alpha is published as a pre-release end to end, and never becomes the latest release anywhere
docs the README's exit codes are the commands' declared contracts (I2963)ae2a2a322
I2963 The README's exit codes are the commands' contract
site the policy and roadmap pages name the .ai/repo layout in force (I2967)886cd9a18
I2967 The site's own pages name the layout in force
install the smoke server binds its own loopback address0707822cd

Performance perf 1

server every checkout is asked at once, sixteen at a timebaadbbfb0
I2987 server.status and peers.list ask every checkout at once, a bounded number at a time

Documentation docs 1

server the public module doc names no crate-private item317ae1312
I2987 server.status and peers.list ask every checkout at once, a bounded number at a time

Housekeeping chore 1

release record v0.30.0 and the metadata it publishesa0e7dd961

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.30.1-aarch64-apple-darwin.tar.gz	0dfaa6a41224e7b830b1e9baf2d1ff66e06cad04b0483e16accab9ce4e4e31df
`macos-x86_64`	majordomus-v0.30.1-x86_64-apple-darwin.tar.gz	f8b8424efb08e182ddb09c29eb15b5274e02df6b4ba96cbba73f7387acbce5ab
`linux-x86_64-gnu`	majordomus-v0.30.1-x86_64-unknown-linux-gnu.tar.gz	83b29af38b2ab7048aac653e90a42b0d5793f18dde5e83231a2b8c744fa11f11
`linux-x86_64-musl`	majordomus-v0.30.1-x86_64-unknown-linux-musl.tar.gz	9022bbd67e6ff0a12994dae7a5764040d8ceec4c6c2417567bd11255e9ceb400
`linux-aarch64-gnu`	majordomus-v0.30.1-aarch64-unknown-linux-gnu.tar.gz	e79b36d624e9c3364bd8c85865fc9a9f5c674ccd44656d4b77e34da89d69851c
`linux-aarch64-musl`	majordomus-v0.30.1-aarch64-unknown-linux-musl.tar.gz	a50464e71535137bd012b903a8de16df17b05ff9b481c70801acc65c0397efae

v0.30.0

0.30.02026-10-182dfff9698114 change(s) 2 decision(s) 6 artifact(s)

Decisions

The architecture decisions the layer dates inside this version's window, each with the route the document records for it.

adr-0172 superseded 2026-10-22

A client always gets a server, and a session that is opened starts by joining the cluster
adr-0175 proposed 2026-10-19

v1.0.0-alpha.1 declares what it can do and its limits, and every line of the declaration names its proof

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 11

site the homepage counts the delivery the history proves, each count a link (I2851)ca277ce74
I2851 the homepage's product view counts the delivery the history proves beside the statuses the records declare, each count a link
ui the intent workspace shows why its intent stands where it does, and its moves (I2789)49f348d2e
I2789 The intent workspace shows why an intent stands where it stands and every move made on its issues
ui the intent workspace reads itself again when a move ends on its server (I2783)afaecfe34
I2783 The intent workspace reads itself again when a move ends on its server
ui an issue is started, verified and finished from the intent workspace (I2781)6811d1eeb
I2781 An issue is started, verified and finished from the intent workspace
site /plan/ names its observed commit and each milestone's release (I2743)5485fee6b
I2743 The public roadmap draws every milestone in the graph's order, each issue with its inferred delivery
plan merged work the plan has not recorded is drift, gated past a window (I2741)09c334079
I2741 Merged work the plan has not recorded is drift, and on the trunk past a window it is red I2748 The drift already on the trunk is settled before the gate is made blocking I2653 Every diagram on the site is one interactive, linkable viewer whose node links are inferred, and a derived table can be drawn as a chart
ui the roadmap reads delivery, and its now is where work is (I2744)c3f6618cf
I2744 The UI roadmap reads delivery and the releases themselves, and its now is where work is M002 A durable record names the worker that wrote it
worktree a checkout says how far it is from the remote trunk, and a stale one fails doctorf4635ab71
plan an issue's delivery is inferred from merges, releases and the forge (I2740)ee02079b1
I2740 An issue's delivery is inferred from branches, pull requests, merges, tags and the published site
site the roadmap draws every milestone in the graph's order (I2743)4d75789ea
I2743 The public roadmap draws every milestone in the graph's order, each issue with its inferred delivery I2740 An issue's delivery is inferred from branches, pull requests, merges, tags and the published site
plan a milestone's version is inferred from the release that carried it (I2742)f8fe91332
I2742 A milestone's version is inferred from the release that carried it, never typed M000 Milestone and DAG driven development M001 A blocking question survives a handover

Fixed fix 41

site a navigation link's fragment names an element, not a file2dfff9698
ui an unobserved panel's reason wraps at phone width (I2943)81d1fb302
I2943 A mesh this process is not on is said as not observed, never as zero or no
release a version's part count is decided once, so no parse branch is unreachable0dea534e7
ui the id offset in the workspace's prose is derived, not defaulted (I2900)c969471ec
I2900 Every issue id on the intent workspace is a link, the shared-scope pairs are one folded line, and no missing library is asked for
ui the standing panel's subheadings wear a class the kit defines (I2900)1808c4ccb
I2900 Every issue id on the intent workspace is a link, the shared-scope pairs are one folded line, and no missing library is asked for
ui every issue id on the IDD workspace is a link; a missing library is not asked for (I2900)3782bedcf
I2900 Every issue id on the intent workspace is a link, the shared-scope pairs are one folded line, and no missing library is asked for
top the IDD sub-headings use the kit's panel title01b1aae0a
ui every class a screen gives an element is one the stylesheet defines (I2852)500f0d48b
I2852 every class a UI screen gives an element is one the UI's stylesheet defines
pages a published page that does not answer at all is asked again like a 503 (I2813)3f36b5bd2
I2813 A published page that answers 503, or does not answer, is asked again before it is called missing
ui the Knowledge screen states nothing its checkout could not observe (I3020)4767d1be4
I3020 The Knowledge screen states nothing about the repository that its checkout could not observe
integration a forge setting that could not be read is unknown269bf5d67
I2966 A forge setting that could not be read is unknown, never \"allows nothing\"
ui a mesh this process is not on is said as not observed, never as zero or no (I2943)a636d9448
I2943 A mesh this process is not on is said as not observed, never as zero or no
install a dry run initialises nothing, and the install guide says only what is true (I2942)5b4f8ba6a
I2942 An installer dry run changes nothing, and the install guide says only what is true
ui the published PR Drain carries its pull requests and counts them by lane (I2850)82ace9a10
I2850 the published PR Drain carries its pull requests, and counts pull requests rather than plan issues
ui the IDD lists wrap a long path, and the shared-scope heading follows its panel's (I2789)9bcbc988b
I2789 The intent workspace shows why an intent stands where it stands and every move made on its issues
top 71b2's cases skip properly, its gate model parses, case 18 mutes every suite step4ada9a40e
release release next raises from the trunk the repository names (I2849)6dceb97e7
I2849 release next raises from the trunk the repository names, never from a branch name written in the tool
pages every snapshot read step can ask the forge3aa828e5b
I2964 Every step that reads a surface into the published snapshot can ask the forge
lease a server's release is ordered by semantic-version precedencef7183e329
init a fresh init leaves doctor clean (I2941)4f3b3490d
I2941 A fresh init leaves doctor clean: a README that does not name AGENTS.md gains one paragraph that does
install the installer refuses an unpinned pre-release, in its source (I2829)261c45caf
I2829 An alpha is published as a pre-release end to end, and never becomes the latest release anywhere
release an alpha is published as a pre-release end to end (I2829)2d4131a4a
I2829 An alpha is published as a pre-release end to end, and never becomes the latest release anywhere
pages a published page that answers 503 is asked again before it is called missing (I2813)9d016bb19
I2813 A published page that answers 503, or does not answer, is asked again before it is called missing
process a tool written a moment ago is run once its writer lets go (I2827)8a82388e0
I2827 A tool written a moment ago is run once its writer lets go
release a pre-release version is parsed, ordered and bumped to5b2bfa723
scope a task scoped . claims the whole repository2dedd2d78
ci plan-record-cases runs the plan surfaces' cases 3100-31041135b5236
build the build dir sweeps sort in one localef6d28ada9
knowledge a candidate cites its own commit, and a superseded decision yields none (I1985)2d3ee66da
I1985 A knowledge candidate relates to its own decision and commit, not to the whole episode
build build dirs are swept before every build, under cargo's lock (I2713)36de9d126
I2713 A build never lets idle incremental sessions fill the disk
scope a task scoped . claims the whole repositoryc7def1192
release a pre-release is never published or resolved as the stable release13670b1f0
mcp a client always gets a server, and a bare session starts by joining the cluster (ADR 0172)80eb4a539
plan a milestone DONE with no issue is released where its evidence was recorded (I2742)dcabb286c
I2742 A milestone's version is inferred from the release that carried it, never typed M000 Milestone and DAG driven development M001 A blocking question survives a handover
plan release-record-cases runs 3102 and 49; release records ordered by a set (I2742)c67c4407e
I2742 A milestone's version is inferred from the release that carried it, never typed
plan the delivery and drift code is covered and ordered canonically (I2741)043955cc7
I2741 Merged work the plan has not recorded is drift, and on the trunk past a window it is red
build case 08 declares the idle incremental-session sweep as its one non-temp rm -rf51246dd95
plan released_in reads the release records, not the tags (I2742)e82e6edb9
I2742 A milestone's version is inferred from the release that carried it, never typed M000 Milestone and DAG driven development M001 A blocking question survives a handover
pages a publication that did not arrive is a finding, never a green step (I2661)194e207f3
I2661 A publication that did not arrive is a finding the next reader meets, never a green step
build a build prunes the idle incremental sessions of its build directory (I2713)309665056
I2713 A build never lets idle incremental sessions fill the disk
reap disk and load are bounded before the cliff, not at it7be59b023

Documentation docs 15

release Version's docs name the distribution module without linking it1a74d3627
plan the owner's /ui/idd review is milestone idd-reads-at-a-glance (I2914)4b15b432b
I2914 No /ui page shows an issue id that leads nowhere I2901 One grammar names an issue id, and every surface reads it I2902 A status names the moves it admits, and every surface reads that I2903 The workspace prefers stages by IntentStage, not by strings I2904 An intent whose criteria are met while its milestones hold open issues says so I2906 Every id and chip on the workspace leads to its record I2910 A move on the published workspace reads \"live only\" I2911 The workspace is a list and its chosen intent side by side I2913 Each intent in the list shows its progress I2918 The issue list filters by status I2919 The graph and the intent list respond to a hand and a keyboard I2915 The workspace speaks in plain words I2917 Each intent has one primary action I3000 The workspace's record texts are drawn as prose I3005 Code on the UI has one highlighter
adr the alpha declaration states its install pin and its network limits22ed9fd9a
adr the hub re-admit step is the supported command4d0da4d80
adr a macOS mesh hub upgrade can drop it from the tailnet, as an alpha limitc2746d4af
plan I2842, the live site is verified on a schedule (after the alpha)70b5804e8
I2842 The live site is verified on a schedule, and its last verification is evidence
plan the site-probe split is I2841, in this lane's id blockb6be53111
I2841 The site's browser probe is split, so the site job runs well inside its timeout
plan the MCP cancellation issue is I2840, and I2829 claims no case it does not add33b682111
I2840 A cancelled MCP call stops, and the client is told it stopped I2829 An alpha is published as a pre-release end to end, and never becomes the latest release anywhere I2740 An issue's delivery is inferred from branches, pull requests, merges, tags and the published site I2742 A milestone's version is inferred from the release that carried it, never typed
plan I2829, the site's browser probe is split (after the alpha)0549a8cb1
I2829 An alpha is published as a pre-release end to end, and never becomes the latest release anywhere
plan renumber the MCP cancellation issue to I2826644a6d053
I2826 A GitHub release carries the tool's own changelog for its tag, never GitHub's generated notes
adr the alpha declaration points at no record master will not holde2d69a022
adr v1.0.0-alpha.1 declares what it can do and its limits (ADR 0175)d605fbeb4
I2826 A GitHub release carries the tool's own changelog for its tag, never GitHub's generated notes
plan a released mesh claim reaches every runtime that holds it (I2825)91ed1dac1
I2825 A claim released on one runtime is released on every runtime that holds it, and a link to a restarted peer recovers
plan the MCP cancellation issue is recorded, a cancelled call stops907697ecb
I2840 A cancelled MCP call stops, and the client is told it stopped
worktree the trunk-distance surface carries its examples, and its MCP tool is invoked3d16d1c08

Tests test 18

ui every branch of the workspace's id linking and the graph library's absence is held (I2900)a119ab213
I2900 Every issue id on the intent workspace is a link, the shared-scope pairs are one folded line, and no missing library is asked for
ui the PR Drain's lane cards are read from the one map the queue answers (I2850)38f2e9b7f
I2850 the published PR Drain carries its pull requests, and counts pull requests rather than plan issues
release a pre-release is ordered, printed and refused the way the release paths rely onaa68933a7
ui each session-ledger line is read on its own (I3020)6afb12403
I3020 The Knowledge screen states nothing about the repository that its checkout could not observe
ui a drift message in the standing panel reads whole with its issue id a link (I2900)d0d2d01f7
I2900 Every issue id on the intent workspace is a link, the shared-scope pairs are one folded line, and no missing library is asked for
ui case 3220 walks its loop in the ui job, not wherever a browser exists (I2812)627eae882
I2812 The IDD loop is accepted end to end in a real browser on one commit
ui case 3220's live step shows a move only through the channel it holds (I2812)bc782b40f
I2812 The IDD loop is accepted end to end in a real browser on one commit
server a pre-release server is older than its final; unorderable means not semver1bb0dcc04
process the busy retry is proved on every platform, not only Linuxf7385e854
ui the standing panel's realising rows and drift are rendered from an answer (I2789)fab8869e2
I2789 The intent workspace shows why an intent stands where it stands and every move made on its issues
mcp the oversized body is one byte over the bound, so its 413 is always read2306da302
release case 3224 measures its fixture whatever MJ_ROOT the caller exports877ff431c
I2829 An alpha is published as a pre-release end to end, and never becomes the latest release anywhere
pages the 503 retry's case is 3226, not the 3221 #1312 carries (I2813)fe777b442
I2813 A published page that answers 503, or does not answer, is asked again before it is called missing
ui the IDD loop is walked end to end in a real browser (I2812)f199ded8a
I2812 The IDD loop is accepted end to end in a real browser on one commit
plan plan.flight is one answer over HTTP and MCPa92f60917
I2744 The UI roadmap reads delivery and the releases themselves, and its now is where work is
worktree the trunk distance is covered to the last changed line9223ef689
plan every path of release_records and release_key is covered (I2742)a1be751f0
I2742 A milestone's version is inferred from the release that carried it, never typed
backlog the integrator case copies what the gate now readsd8936063c

Pipeline ci 2

ui the audit's bound follows the surface it walks2d0c9df40
the site job's bound keeps headroom, and plan-record-cases runs the IDD loop68062918e
I2812 The IDD loop is accepted end to end in a real browser on one commit

Housekeeping chore 27

derive the 0.30.0 top derived after its coverage mergead1dfe7ce
derive delivery.json observes the pushed 0.30.0 topbd3219d01
derive I2900 over the 3220 deferral (I2900)a77d2a93b
I2900 Every issue id on the intent workspace is a link, the shared-scope pairs are one folded line, and no missing library is asked for
derive I2900 over 0.29.1 (I2900)2e80ec3f7
I2900 Every issue id on the intent workspace is a link, the shared-scope pairs are one folded line, and no missing library is asked for
derive I2900 over 71b2's head with master 707a04c (I2900)03aa72b7b
I2900 Every issue id on the intent workspace is a link, the shared-scope pairs are one folded line, and no missing library is asked for
plan I2942 is done, with the evidence that settles it2b383cf28
I2942 An installer dry run changes nothing, and the install guide says only what is true
plan I2943 is done, with the evidence that settles it21b661513
I2943 A mesh this process is not on is said as not observed, never as zero or no
plan I2826 names its own case, so the plan status names no missing file4960fa3c7
I2826 A GitHub release carries the tool's own changelog for its tag, never GitHub's generated notes
release bump the version to 0.29.1f17855bf9
plan the VERIFY issues whose work is on master are settledf9c4d9b94
I1031 A served surface says which checkout it is serving I1101 What this tool leaves behind, established by inspection rather than by memory I2068 A verdict that depends on the runner says so, and one cold sample is not a regression I2601 majordomus evidence reaches record, stamp and show I2745 The landing page states no present it does not read I2746 Every published tree draws its diagrams, and every diagram is the interactive viewer I2780 The UI has an intent workspace: an intent, its milestones, issues, waves and graph on one screen I1105 The repository is discovered once, into one model
plan I2941 is done, with the evidence that settles it65220a9e5
I2941 A fresh init leaves doctor clean: a README that does not name AGENTS.md gains one paragraph that does
release record v0.29.0 and the metadata it publishes707a04c7c
plan I2829 is done, with the evidence that settles itc554c08bc
I2829 An alpha is published as a pre-release end to end, and never becomes the latest release anywhere
plan four issues whose code the integration top carries are recorded done (I2706)90bf65b4a
I2706 An own event whose append failed is never acknowledged as durable, and a journal reload is bounded in size I2760 A scope entry is one path, and a path context would refuse is refused at start I2786 The published UI reads the evidence CI recorded, and a publication that would show tests as not run is refused I2770 majordomus ui and the Cockpit wear the site's navbar: one renderer, the same styles and scripts, and a browser comparison that refuses a difference I0905 Liveness and readiness are registered capabilities, not router hacks I1023 Nothing private reaches a published page I2282 The record pull request's dispatched verdict does not satisfy branch protection I2695 The Observatory draws the proof, claim, surface, wave and release scenes from the capabilities that already answer them I2698 The new scenes have screenshot evidence at 1080p and 4K on a named revision
quality the baseline drops the three examples Version now carriesc50657244
derive the merged #1312 tree7cf2236f2
derive #1299 over the release candidate 0a19b7fe3ec50905c443
derive the batch derived over the 0.29.0 release candidatefd2023800
plan eight issues whose code master already carries are recorded done (I2414)8d0b36d99
I2414 mesh.state and mesh.peers answer a filtered summary that fits one tool answer I2415 A mesh review request carries a body, can be withdrawn, and expires I2132 A hello names the runtime it is meant for, and no other runtime accepts it I2140 Paging mesh.events returns every event exactly once I2701 The idle timeout is declared beside the other server timings, and serve --idle overrides the declaration I2702 A checkout keeps one address across restarts, because its server binds a port derived from the checkout I0812 Validate the graph, and let doctor and watch ask the same validator I2708 A mesh event field nobody listed fails the mesh check, and no log field or review body carries a credential the redactor knows I1800 The sandboxed engine a scripted capability runs in I2417 The landing page is a click-through story: an editorial hero and an evidence chain a visitor steps through I2482 Every screen of the UI has a case, and no link on the UI is dead I2652 The UI shows what the knowledge base holds: the candidates awaiting review and whether the deriver still writes, read and never acted on I2653 Every diagram on the site is one interactive, linkable viewer whose node links are inferred, and a derived table can be drawn as a chart I2697 The public snapshot carries the p5 library, or says which scenes it cannot draw I2718 A linked worktree runs its own hooks, never the primary checkout's I2734 A session joins the mesh at its start and leaves it at its end
evidence the trunk's recorded run reaches the tracked ledger, and the baseline holds it99667818d
I2795 The trunk's recorded run reaches the tracked evidence ledger, and the baseline is tightened to it
plan close I2601, I2745, I2746 and two milestones whose evidence holds58d522c1a
I2601 majordomus evidence reaches record, stamp and show I2745 The landing page states no present it does not read I2746 Every published tree draws its diagrams, and every diagram is the interactive viewer
release bump the version to 0.29.0040dcb14d
plan delivery.json observes the merge of #1304's CI fix (I2748)c34a3c008
I2748 The drift already on the trunk is settled before the gate is made blocking
plan I2743 evidence recorded (I2743)33cd3f9a0
I2743 The public roadmap draws every milestone in the graph's order, each issue with its inferred delivery I2740 An issue's delivery is inferred from branches, pull requests, merges, tags and the published site I2742 A milestone's version is inferred from the release that carried it, never typed
plan eight merged issues are recorded done, the rest of the drift is planned (I2748)822cd914f
I2748 The drift already on the trunk is settled before the gate is made blocking I1800 The sandboxed engine a scripted capability runs in I2417 The landing page is a click-through story: an editorial hero and an evidence chain a visitor steps through I2482 Every screen of the UI has a case, and no link on the UI is dead I2652 The UI shows what the knowledge base holds: the candidates awaiting review and whether the deriver still writes, read and never acted on I2653 Every diagram on the site is one interactive, linkable viewer whose node links are inferred, and a derived table can be drawn as a chart I2697 The public snapshot carries the p5 library, or says which scenes it cannot draw I2718 A linked worktree runs its own hooks, never the primary checkout's I2734 A session joins the mesh at its start and leaves it at its end I1302 Identity, provenance and support level are typed fields, not prose I1305 An observed contract has a fingerprint, a compatibility state and a fixture I1900 An intent is a typed record whose stage and satisfaction are derived I1962 The evidence gates read subject findings and widgets I1980 A layer names the tool version it was written for, and doctor tells version skew from defects I2484 majordomus ui ensures the shared server and opens the UI's dashboard I2749 A commit that only plans an issue is not its delivery I2289 A task built off the mesh is refused I2735 An edit no claim covers is refused I2288 A task is on the mesh while it works I2750 The trunk's drift gate reads the forge before it judges
plan record I2744's evidence (I2744)b4247f312
I2744 The UI roadmap reads delivery and the releases themselves, and its now is where work is
plan I2742 evidence recorded and verified (I2742)8642d7437
I2742 A milestone's version is inferred from the release that carried it, never typed

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.30.0-aarch64-apple-darwin.tar.gz	e15586cfe0da84964fa261e8402cb088d93a0369a71a11f0f8dbdd11c6410db8
`macos-x86_64`	majordomus-v0.30.0-x86_64-apple-darwin.tar.gz	ecea13aa20dce4495cb00479ff9fcad04162dd166f5762fc1f28ea418ea425f4
`linux-x86_64-gnu`	majordomus-v0.30.0-x86_64-unknown-linux-gnu.tar.gz	7fcc015c688b257b38ef4f4039dd3fbabfca24ddd15af7150fdba2c469bfe562
`linux-x86_64-musl`	majordomus-v0.30.0-x86_64-unknown-linux-musl.tar.gz	dff34a9a3015f45fdeaabbc609491c520ad1075a8e2707cf5a683ad39edd9962
`linux-aarch64-gnu`	majordomus-v0.30.0-aarch64-unknown-linux-gnu.tar.gz	0fea0290e04c25f26d3ab46b14716b6a9372e9057444091d612718935aa1a83f
`linux-aarch64-musl`	majordomus-v0.30.0-aarch64-unknown-linux-musl.tar.gz	51df29dea8b4b9ff9bec1117797e2195e893ec6d3338df74488bb52b4ee0651e

v0.29.0

0.29.02026-10-174a457369030 change(s) 2 decision(s) 6 artifact(s)

Decisions

The architecture decisions the layer dates inside this version's window, each with the route the document records for it.

adr-0169 proposed 2026-10-16

What an adoption leaves behind is measured, not remembered
adr-0167 proposed 2026-10-16

Work moves through seats on the mesh, lands in combined tops, and every checkout is kept current

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 4

features every capability module and every kind is named by a stable feature359f8223f
ui the intent workspace shows an intent and what serves it (I2780)f1cb08bb7
I2780 The UI has an intent workspace: an intent, its milestones, issues, waves and graph on one screen
http a served surface names the checkout serving it (I1031)f178d2bfe
I1031 A served surface says which checkout it is serving
ui the UI and the Cockpit wear the site's navbar (I2770)3a8ca8549
I2770 majordomus ui and the Cockpit wear the site's navbar: one renderer, the same styles and scripts, and a browser comparison that refuses a difference

Fixed fix 16

ui a monospaced path or id wraps at phone width instead of widening the page4a4573690
top the create under the lock is covered, and a named skill never reads as unnamedaf5c8efe7
top the UI wears the bar the site renders, and two milestones no longer share an order40f558749
top batch 71a passes shellcheck and covers the create planned under the lock81744db86
top the navbar heading has an anchor zola and GitHub agree ond0de74268
top batch 71a covers its changed code and meets the structure gatesbc9132ba0
worktree StartPoint's reference and fallback carry their examplesfe9b99405
pages the published UI reads the evidence CI recorded (I2786)302adff89
I2786 The published UI reads the evidence CI recorded, and a publication that would show tests as not run is refused I1954 Every runner reaches the ledger, through the recording branch
ui the intent workspace passes rustfmt and clippy (I2780)8def88737
I2780 The UI has an intent workspace: an intent, its milestones, issues, waves and graph on one screen
test case 3110 stops when it cannot enter its temp dir (I1031)159db73a4
I1031 A served surface says which checkout it is serving
bench remove a cold sample's repository by the mktemp path it lives under65e961cd8
test case 3066 reads the mesh state until it answers3d90e0920
worktree a new worktree starts from the remote trunk6131bff0f
start a scope entry is one path, and what context refuses is refused at start71474ebac
I2760 A scope entry is one path, and a path context would refuse is refused at start
mesh a task is claimed on the mesh when it starts (I2288)486de96de
I2288 A task is on the mesh while it works
bench a timing verdict names its runner, and one cold sample is not a regression (I2068)507e38c80
I2068 A verdict that depends on the runner says so, and one cold sample is not a regression

Documentation docs 5

plan the shared build directory's crate artifacts are bounded (I2787)cc5362986
I2787 A build never lets the shared build directory's crate artifacts fill the disk I2713 A build never lets idle incremental sessions fill the disk
adr renumber the adoption-footprint ADR to 0169 (I1101)b0064423d
I1101 What this tool leaves behind, established by inspection rather than by memory
rules the cooperation rule names its enforcement points by their pull requestsa5f1e0e4a
consolidation what an adoption leaves behind, measured (I1101)e1997844a
I1101 What this tool leaves behind, established by inspection rather than by memory
adr the owner's cooperation model is one rule, read by the site and the UI (ADR 0167)7adfcc3d1

Housekeeping chore 5

release derive the 0.29.0 bump over batch 71a0a19b7fe3
release bump the version to 0.29.06e1e527df
release record v0.28.0 and the metadata it publishes0c8016a43
plan I1101 evidence recorded, issue in VERIFY (I1101)e3b0e747a
I1101 What this tool leaves behind, established by inspection rather than by memory
derive the plan page of I2760e81e622bd
I2760 A scope entry is one path, and a path context would refuse is refused at start

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.29.0-aarch64-apple-darwin.tar.gz	c0f257a8344734100d6e3cfaed5169ce97a3f84b2cbcd820a823143820b77968
`macos-x86_64`	majordomus-v0.29.0-x86_64-apple-darwin.tar.gz	1dfe8ba83f0bfa69bb3e31e9a94ad802931cdf8a6f13e8deb43d18aeab22bb21
`linux-x86_64-gnu`	majordomus-v0.29.0-x86_64-unknown-linux-gnu.tar.gz	6bf87c46d4f79a6eb5e9cfacfd95cdee8bb74e915d6590db90de2b3da97166f8
`linux-x86_64-musl`	majordomus-v0.29.0-x86_64-unknown-linux-musl.tar.gz	837304bbecc360d5b3f722865fd97fa06710372a76074cd9ef1bd03348113b38
`linux-aarch64-gnu`	majordomus-v0.29.0-aarch64-unknown-linux-gnu.tar.gz	869ee0afe99157421e0b3983f91fd2eb9a48230bfbb743e97986d8fbbd383e91
`linux-aarch64-musl`	majordomus-v0.29.0-aarch64-unknown-linux-musl.tar.gz	05734268f0e9e44ad2d7a8573d74937785817d3aa1505590992cbd4a403004bd

v0.28.0

0.28.02026-10-17441c9655490 change(s) 6 decision(s) 6 artifact(s)

Decisions

The architecture decisions the layer dates inside this version's window, each with the route the document records for it.

adr-0166 proposed 2026-10-16

The plan's surfaces are inferred from delivery, and nothing the plan shows is typed beside it
adr-0165 accepted 2026-10-15

A skill is derived for every domain of the registry and shown wherever skills are
adr-0164 accepted 2026-10-15

A durable record names the session that wrote it, and relates a task only when the task is that session's
adr-0163 proposed 2026-10-14

A server serves only a share of its own version, with the surfaces it offers
adr-0157 proposed 2026-10-13

A mesh node may offer a shared build cache, peers discover and select it, and compilation never depends on it
adr-0124 proposed 2026-10-10

An uploaded prompt pack is a provenance-tracked input artifact, not a second intent model

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 6

context a worker is given a bounded slice of knowledge, not the knowledge basec598adf8b
I0814 Give the worker a bounded slice of knowledge, not the knowledge base
knowledge the graph is validated, and doctor and watch ask the same validator (I0812)c5aec68c9
I0812 Validate the graph, and let doctor and watch ask the same validator I0810 A content-hash manifest that makes a second sync cheap
editors every domain of the registry is a skill, shown wherever skills are (ADR 0165)4e74a42a6
session a branch episode carries the trunk's outbox into the tracked sections (I1984)6edc0e6a6
I1984 Knowledge candidates never leave untracked files on a trunk that only pull requests change
session a trunk episode writes its records to the outbox (I1984)a5c3ee4c4
I1984 Knowledge candidates never leave untracked files on a trunk that only pull requests change
rules a standing approval is written where the permission layer reads it3774d1ed0

Fixed fix 34

ci the rust job's case gates drive the executable the job built441c96554
top the last three changed items of top 70 are coveredbd7f0af86
top top 70 covers its changed code, its rust lane fits, its palette waitsa259f94df
top the essay links limitations relatively and plan-record-cases runs every plan reader735266fe5
site the plan diagram is drawn past Mermaid's default size bound611a9a85b
test the stale-executable readiness test waits out a busy copye559ee54e
top the members of top 70 meet on the CI wiring, the port and the site audit078ae6911
site the skills table on the skills page takes keyboard focusd4cbf8924
top the members of top 70 meet where they first meete97f034bd
I2410 A trusted machine on the tailnet is found through Tailscale, with no address written by hand
rules the vendored candidates-reviewed rule dates no incident it does not attribute8f8825642
site the landing page states no present it does not read (I2745)bad02f37e
I2745 The landing page states no present it does not read
reap the reaper asks cargo where the shared build directory is7ff6be98e
docs every published tree draws its diagrams (I2746)337b41ee7
I2746 Every published tree draws its diagrams, and every diagram is the interactive viewer
release the record pull request's dispatched run is not its verdict (I2282)8ed40f6eb
I2282 The record pull request's dispatched verdict does not satisfy branch protection
site a diagram's node text is readable in both themes3024cbcc0
test case 3066 names the step that ended it00fc6a841
mesh a review is redacted before it is signed3c3372d06
I2708 A mesh event field nobody listed fails the mesh check, and no log field or review body carries a credential the redactor knows
serve the idle timeout is declared beside the other server timings7111f846b
I2701 The idle timeout is declared beside the other server timings, and serve --idle overrides the declaration
derive a fixture without history gets a verdict on its derived data3b5833692
I1409 Derived data stops hashing inputs it cannot control
logging every tracing field passes the one redactordd4798ce5
I2708 A mesh event field nobody listed fails the mesh check, and no log field or review body carries a credential the redactor knows
mesh an EventBody field nobody listed fails the mesh checke2d7042a4
I2708 A mesh event field nobody listed fails the mesh check, and no log field or review body carries a credential the redactor knows
doctor doctor says it checks governance only and names where the runtime is read1ed658183
I2707 majordomus doctor reports a stale server, or says plainly that it checks governance only I2157 Ready means ready: a lost lease, a degraded layer or a failing mesh is not reported ready I1995 Work a session left uncommitted in a worktree is named, not found by luck
ci a plan-record change plans only the gates that read a plan record4df3ca5e5
I0806 Make the session rules doctrines, with retention and archiving I2662 Validation leaves the deployment a runner: a branch's checks never hold the pool a publication or a release record needs
site a leak finding names the file it is in, never the text (I1023)bdc75e2cf
I1023 Nothing private reaches a published page
site the essay links the limitations page by its address, not a content pathea7f82b50
graph the committed graph is whole or its generation refusesa2e22b484
I1966 The composed graph is whole or its generation refuses
serve a checkout keeps one address, its server asks for a port derived from itb3f35a34a
I2702 A checkout keeps one address across restarts, because its server binds a port derived from the checkout
mesh an append the disk did not take is not acknowledged as durable06e28bb4d
I2706 An own event whose append failed is never acknowledged as durable, and a journal reload is bounded in size
scope a task's scope admits what its derive wroteed8afb075
I2114 A task's scope admits what its derive writes
doctor a machine that derives has the pinned Rust toolchain52b0659d8
test a case does not inherit the interface the operator binds servers onaa6688ddc
ci the hook environment is dropped as the fixture fix drops it, keeping git -c settings4b05ff868
ci nothing a hook runs inherits the repository git hands the hook3c415b146
ci a push runs what CI would find first, and a case never waits on stdin8f7fb5bc5

Performance perf 3

economics a bootstrap median counts its draws instead of sorting each resample43b8e9bac
build dependencies are optimised in the debug build every derive and hook runsfa8f00f6c
changelog every release's ancestry is listed by one git process7eee00861

Documentation docs 18

cli linked_port carries an example of the port it derives52a884282
plan the plan's surfaces are inferred from delivery (ADR 0166)b80c18350
I2653 Every diagram on the site is one interactive, linkable viewer whose node links are inferred, and a derived table can be drawn as a chart I2740 An issue's delivery is inferred from branches, pull requests, merges, tags and the published site I2748 The drift already on the trunk is settled before the gate is made blocking
knowledge the words follow the trunk outbox (I1984 slice 3)b1a0bff60
I1984 Knowledge candidates never leave untracked files on a trunk that only pull requests change
plan a resumed mesh.events walk misses a partitioned writer's event (I2733)a64fdc1a4
I2733 A resumed mesh.events walk returns every event exactly once, across partitions I2140 Paging mesh.events returns every event exactly once
adr a node key is rotated by a succession its predecessor signsa9ff7e1c3
I2705 A node key can be rotated, peers follow the new key, and the old key is refused
adr a merge GitHub makes is guarded by checks, not by strict (I1409-c)89a44047b
I1409 Derived data stops hashing inputs it cannot control
runtime every failure class names its proofa53fd3b80
I2731 Every failure class in the published failure table names its test or its stated limitation
adr a durable record names the session that wrote it (ADR 0164, I0702)e59b86b66
I0702 Decide how a record is attributed, between named alternatives I0701 Reproduce the misattribution as an executable case
adr the realization report names what is not orphan work6ee6b77c5
adr a server serves only a share of its own version (ADR 0163)cfff43810
adr a trunk episode stages its records and the pre-push judges the pushed branchesa53f08f11
I1984 Knowledge candidates never leave untracked files on a trunk that only pull requests change I1990 The pre-push check judges the refs being pushed, or says why the checkout's task binds them
site a Czech essay says why the product is a layer and not another agent17fa2c4d0
adr state the disk and derive time without a typed percentage (ADR 0157)a28c54f27
adr the build-cache case is 3013, 3011 is another session's (ADR 0157)057e3d4f0
adr record what the first provider measured in ADR 0157 and I2673/I26747a749356c
I2673 The sccache client configuration is derived from the selected offer, local disk first I2674 A node is provisioned as an S3 cache provider, idempotently, with no secret in the repository
adr a mesh node may offer a shared build cache, never depended on (ADR 0157)cdb52778d
I2670 A build-cache offer is a typed model and its selection is a pure, explained function I2677 The build cache is documented, governed by a rule and described on the site and the Pages
adr the prompt-pack ADR is 0124, 0121 is the fleet ADR on master809c603e3
adr an uploaded prompt pack is a provenance-tracked input artifacta488c7405

Tests test 4

perf a repository of N records costs N parses, not N squared (I0836)c081c0b1a
I0836 A synthetic repository generator for scaling cases
sessions a second worker's record lands on the first worker's task (I0701)84d174c23
I0701 Reproduce the misattribution as an executable case M002 A durable record names the worker that wrote it I0702 Decide how a record is attributed, between named alternatives
derive a committed derivation survives a merge that touches none of its inputs91b5fdf8e
I1409 Derived data stops hashing inputs it cannot control
http a rebinding host, the API page and the site's JSON are proven, and I2151 is doned5f1289e9
I2151 A page served beside the write routes runs only script it shipped, and a rebinding host reads nothing

Housekeeping chore 24

plan I2745 carries its evidence and reads verify (I2745)54cf30f57
I2745 The landing page states no present it does not read
plan I2746 records its diagram-scope evidence and is verified (I2746)3a8ffe184
I2746 Every published tree draws its diagrams, and every diagram is the interactive viewer
release bump the version to 0.28.04a6abf2a0
derive the derived data follows the merge of master d116266bad1720c3
derive the derived data follows the merge of master275f35597
derive the derived data follows the merge of master d116266d65fd8cca
release record v0.27.0 and the metadata it publishesa2aa25f36
plan I2123 is done, a caller beyond loopback changes nothing it cannot authenticatedc3c36550
I2123 A caller beyond loopback reads, and changes nothing it cannot authenticate
plan I2124 is recorded done with the tests that prove it43933145b
I2124 An event reloaded from disk meets the trust policy in force, and no stamp outruns the clock
plan I1409 records fixture_without_history_evaluates from case 30559910ad089
I1409 Derived data stops hashing inputs it cannot control
plan I2128 is recorded done with the tests that prove it2caa75bee
I2128 A lease is removed only by the process that holds it, and serve stop stops the server in order
plan failure-is-visible records two of its three evidence tokens4056f7302
I2707 majordomus doctor reports a stale server, or says plainly that it checks governance only
plan I2135 is done; a committed tofu declaration fails the mesh check70e203fd2
I2135 The trust root is read from the default branch, not from whatever the checkout holds
derive the changelog follows the merge's whole history311e092db
plan an observation becomes a grouped, routed candidate is recorded done88d1e8075
I2074 An observation becomes a candidate that says what it is about, and reading groups recurrence I2075 A candidate is routed by what it is about
plan I2134 is done, and its evidence names the tests that prove itdb2d2d31b
I2134 A key removed from the trust list loses its links without a restart, and a node key can be rotated I2705 A node key can be rotated, peers follow the new key, and the old key is refused
derive the projections follow master c0e3585dc8618f825f8
derive the projections follow master 97c4521f91fa31bd31a
derive the projections of the Czech essay over master a6b1e103274cd022cd
sessions the record of the episode that opened this change, and its projectionsb406a1e53
derive regenerate after merging master and renumbering the build-cache case9dd87294f
offload the iMac is a third derive hosta3a86d364
plan I2414 names the files and the measurements its implementation found4a6f9976e
I2414 mesh.state and mesh.peers answer a filtered summary that fits one tool answer
plan the mesh works out of the box, and its six missing pieces are issuese531f1fe9
I2410 A trusted machine on the tailnet is found through Tailscale, with no address written by hand I2411 A server whose mesh is enabled is reachable on the tailnet and the LAN, and only by a trusted peer I2412 `majordomus init` declares the mesh and enrols this machine's key, so a fresh repository cooperates I2413 A linked worktree cooperates through its repository's running server, and a start that cannot ensure one says why I2414 mesh.state and mesh.peers answer a filtered summary that fits one tool answer I2415 A mesh review request carries a body, can be withdrawn, and expires

Formatting style 1

test cargo fmt over the derived-port assertion in cli_docsf37efd935

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.28.0-aarch64-apple-darwin.tar.gz	48e91654391e59048d17b2ded83d964e5f33c6c6440d5798c547d787553aba84
`macos-x86_64`	majordomus-v0.28.0-x86_64-apple-darwin.tar.gz	f3e1f0e686a205159cf4823091885e0bef1046959bed4081703083fbd15cd9f9
`linux-x86_64-gnu`	majordomus-v0.28.0-x86_64-unknown-linux-gnu.tar.gz	52e8c51339c0c449622793556a3c668127d2930d6b28f2999cddeee9cdac64df
`linux-x86_64-musl`	majordomus-v0.28.0-x86_64-unknown-linux-musl.tar.gz	87e69f3184ebbaa65a2565ba957e579cda4ea16e30b4e44c34a35a16cd4438c5
`linux-aarch64-gnu`	majordomus-v0.28.0-aarch64-unknown-linux-gnu.tar.gz	b9b600487e2d68f664d0d9bb97505f80fe4ed38443833c0f7a9510e48fab771f
`linux-aarch64-musl`	majordomus-v0.28.0-aarch64-unknown-linux-musl.tar.gz	103134918ff2cddf3dec8fd443287e803e55a12a1c26189d108de02776d41501

v0.27.0

0.27.02026-10-16c1a430dcf82 change(s) 4 decision(s) 6 artifact(s)

Decisions

The architecture decisions the layer dates inside this version's window, each with the route the document records for it.

adr-0161 proposed 2026-10-14

A mesh node follows the published release, through the one installer, forward only
adr-0160 proposed 2026-10-14

The kiosk draws what the repository proves, from the sources that already answer it, and draws it with p5 only where the build has it
adr-0152 proposed 2026-10-13

A diagram and a chart on the site are one viewer each, over what the build derived: interactive, linkable, and linked by inference
adr-0069 proposed 2026-09-15

A capability may be scripted, and repository automation is scripted capabilities rather than shell

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 15

mesh an edit no claim covers is refused (I2735)ed994d5d0
I2735 An edit no claim covers is refused
mesh a task built off the mesh is refused23b7f645e
I2734 A session joins the mesh at its start and leaves it at its end I2288 A task is on the mesh while it works
mesh a task's scope is claimed on the mesh while it works8bb8a2238
I2288 A task is on the mesh while it works I2734 A session joins the mesh at its start and leaves it at its end
capture a session joins the mesh at its start and leaves it at its ende81e054a5
I2734 A session joins the mesh at its start and leaves it at its end
capability the sandboxed engine a scripted capability runs in (I1800, ADR 0069)7ac2fde4a
I1800 The sandboxed engine a scripted capability runs in
knowledge a lookup answers in an order it can explain, and asking writes nothingf36a4c554
I0811 Read-only knowledge lookup with an ordering that can be explained
worktree work a session left uncommitted in a worktree is nameddfbbc29db
I1995 Work a session left uncommitted in a worktree is named, not found by luck
ci a gap the audit calls planned names an issue that exists9f8c41b68
I1510 A gap the audit calls planned names a plan object that exists
executions a run started from the command line is seen by the server2be92697c
I1501 An execution a person starts is an execution the server can see
ui two more kiosk scenes, and the snapshot carries the scenes and p5 (ADR 0160, I2697)75db37541
I2697 The public snapshot carries the p5 library, or says which scenes it cannot draw
ui the kiosk draws what the repository proves, with p5 where it is built (ADR 0160)1ed8a4c87
I2695 The Observatory draws the proof, claim, surface, wave and release scenes from the capabilities that already answer them I2698 The new scenes have screenshot evidence at 1080p and 4K on a named revision
site a diagram is interactive and linkable, a table draws as a chartbbb94fc2d
I2653 Every diagram on the site is one interactive, linkable viewer whose node links are inferred, and a derived table can be drawn as a chart I2654 A chart is held to its table by a gate, and the tables that are measured series are drawn I2656 The diagram viewer serves the Cockpit and majordomus ui, and a node that is a repository file links to its source
site the landing page speaks to a buyer, and holds on every device239df858c
providers Gemini and Antigravity read the repository through the projection60e97fb0c
site hand-written copy promises only what a claim permits2e26a3d36

Fixed fix 29

mesh the edit guard passes the structure gates93063e327
test case 3067 names its commands on one covers headerc6b42cf6d
top case 1096 counts a shared reading as a reading3c12372e3
mesh the task record declares the claim it carries70e60d531
plan the milestone is the bytes its first branches carry3acf2cf68
top the grand top's new code is covered and the command screen is within its budgetee944b18b
ci an integration top runs to the end and shows every red2c56a6fb8
I2664 A run that has already failed is cancelled by itself, and a red on the trunk is fixed before anything else is prepared
test case 532 reads a table row up to its own </tr>8080ea219
I1995 Work a session left uncommitted in a worktree is named, not found by luck
top the crate boundary is told about rhaia0dcdeaaa
top the launcher's help reader takes no pipe, and I2718 names no home directory51faa7a5c
I2718 A linked worktree runs its own hooks, never the primary checkout's
doctor no linked worktree reads the same whether or not the executable is at hand4bf88bed4
I1995 Work a session left uncommitted in a worktree is named, not found by luck
site the grand top carries its members' authored site data692d067f0
ci the release path never waits behind pull-request validatesba11bd6bf
I2710 A release run never waits behind pull-request validates for a job slot I2711 The pages job judges production only after the deployment of its own commit has arrived I2712 release-check treats a tag whose release run is still going as pending, not as a missing record
site a surface card's title fits a 320px screen5f4964a3b
ui the Observatory asks again when it is seen11567a0b0
serve ensure starts its server with the share it was given4dada2c87
release a release names its archive from the matrix, without a debug buildc2fa59702
handbook a copied link names the artifact the handbook is published atf56d54cbf
executions the reported store shows itself in examples, and the case waits bounded2dec71329
evidence the launcher hands evidence subcommands to the executable (I2601)c4a8f9c56
I2601 majordomus evidence reaches record, stamp and show
init a personal layer is seeded with a policy update can writef83ff2c7a
docs no heading of the handbook skips a level962472c96
events each execution's cursor is set as its replay is collectede9ee93dd5
site a missing copy file is a finding of promises, not the end of homepage-check367e4f86b
mesh a borrowed server publishes no handover of another checkoutad249172c
http keep a live-event cursor per executionb7b675cf7
mesh a linked worktree cooperates through its repository's running servere8235eece
mesh a board intent past the journal bound is projected onced4ce8f995
mesh a retired server leaves the meshf0a739905

Performance perf 1

ui a screen reads the answer its source shares instead of copying it43204ad13

Documentation docs 5

adr a capability may be scripted, and the automation milestone is on master (ADR 0069)fbb9aaf47
I1800 The sandboxed engine a scripted capability runs in I1804 The first shell scripts become scripted capabilities over typed Rust I1802 Nothing runs Perl I1803 New shell is refused without a declared exemption, and the migration inventory is tracked
plan four of the day's defects are planned so their carriers can close themb1e0d8d12
I2713 A build never lets idle incremental sessions fill the disk I2714 One build directory never serves two worktrees' jobs at once I2717 A release record pull request gets a verdict that can pass I2718 A linked worktree runs its own hooks, never the primary checkout's
adr what the Observatory is told arrives on /events, the one live channel (ADR 0158)2f759351d
convergence the baseline of the 10-14 pack is measured against master e8505a431d5b0e28630
I2706 An own event whose append failed is never acknowledged as durable, and a journal reload is bounded in size I2151 A page served beside the write routes runs only script it shipped, and a rebinding host reads nothing I2705 A node key can be rotated, peers follow the new key, and the old key is refused I2134 A key removed from the trust list loses its links without a restart, and a node key can be rotated I2708 A mesh event field nobody listed fails the mesh check, and no log field or review body carries a credential the redactor knows
adr a mesh node follows the published release (ADR 0161, safe-self-update)5addc860b
I2720 majordomus self update re-runs the published installer, and never reimplements it I2724 A node without a route to the site takes the archive from a peer and still verifies it itself I2165 A released archive carries a provenance attestation the installer can check

Tests test 2

mesh the edit guard owes its examples and its coverage2a90f49ab
coverage the grand top's new Rust code is covered by a test2396be3f4
I1501 An execution a person starts is an execution the server can see I2718 A linked worktree runs its own hooks, never the primary checkout's I1995 Work a session left uncommitted in a worktree is named, not found by luck

Pipeline ci 1

pages the UI snapshot job builds p5, so the published kiosk draws its scenes (I2697)f4cda1016
I2697 The public snapshot carries the p5 library, or says which scenes it cannot draw

Housekeeping chore 28

derive the derived data follows the merged case header fix0a6e6c127
derive the derived data follows the merged task record schema92d335db2
derive the derived data follows the merged milestone417eab2ce
derive the grand top's derived documents follow its canonical inputsa3ba14a7e
plan I2127 and I2163 are recorded done with the tests that prove them540b3ca5c
I2127 A server that lost its lease hands its sessions on and ends I2163 A client never attaches to a server of another version without saying so, and a newer client replaces an older server
derive the derived data follows the merged tree1b82abaf6
plan the MCP transport bounds are recorded done with master's own evidence0c0a7211f
I2147 The MCP transports bound what they read and follow the Streamable HTTP rules they claim
derive the projections of the landing page on master c0e3585dc838340a04bf
derive the derived data follows master c0e3585dc8 into I1403's recordfa049026e
I1403 Backfill the projection once, deliberately, and record what it created
derive the projections follow master e8505a431d8e180b845
derive the derived data follows master e8505a431d7e1f2ac80
derive the derived data follows master e8505a431d into I0806's record289cbbe4d
I0806 Make the session rules doctrines, with retention and archiving
plan I1403 is done — the GitHub projection has no backlog, and the ratchet says so4f3c9bddd
I1403 Backfill the projection once, deliberately, and record what it created
plan I0806 is done — master already holds the session rules266d5af14
I0806 Make the session rules doctrines, with retention and archiving
campaigns the convergence, trust and product proof pack of 10-14 is trackedaf070b47f
I2700 A lease probe asks a cheap liveness route, and a server holding another lease token is not taken for the leaseholder I2709 A red on the trunk has one named carrier, and nobody else may land until it is paid I2151 A page served beside the write routes runs only script it shipped, and a rebinding host reads nothing I2163 A client never attaches to a server of another version without saying so, and a newer client replaces an older server I2282 The record pull request's dispatched verdict does not satisfy branch protection I2487 A screen is streamed, and one stream tells an open page which readings changed I2660 The site is published as an artifact by the job that built it, so a ready site waits for no second workflow I2663 The published UI is not read from nothing on every deployment
release record v0.26.0 and the metadata it publishesf937ac387
derive the derived data follows the merge of master 97c4521f91a20d963d9
derive the derived data follows the merge of mastera71bccb80
derive the derived data follows the merge of master ff38297096927f2f7e4
derive the derived data follows master ff38297096 and the I1600 recordca4401900
I1600 The challenge is one recorded run, and every public surface replays it
derive the projections follow master ff38297096bf8179aa8
derive the projections of the landing page on the master of its landingbce111701
plan I2601 is in VERIFY, and the derived plan pages follow (I2601)6f4a83658
I2601 majordomus evidence reaches record, stamp and show
derive the projections of the landing page on the master of its landing5a679909e
derive the derived data follows master e506c041a4783e7cf70
derive the derived data follows master e506c041a4aa0395953
plan the public-proof milestone is done, on the evidence of I16009ee0a66a7
I1600 The challenge is one recorded run, and every public surface replays it
plan I1600 is done, the challenge master already replaysde14385dd
I1600 The challenge is one recorded run, and every public surface replays it

Formatting style 1

mesh rustfmt the edit guard; the derived data follows the merged stack04986858e

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.27.0-aarch64-apple-darwin.tar.gz	283ce45eb5687a1f824373e37dbdeca9c14cac36978dbd404128001d4147b8c8
`macos-x86_64`	majordomus-v0.27.0-x86_64-apple-darwin.tar.gz	178bb10c8fab3d9869f0727f73f0b80cd3815d8da8b2fa801533b3307ade5afa
`linux-x86_64-gnu`	majordomus-v0.27.0-x86_64-unknown-linux-gnu.tar.gz	dd5cd97cfc513d41158096c20c9ac23a75e34e1235a5d7d72f4fe668cb4599ca
`linux-x86_64-musl`	majordomus-v0.27.0-x86_64-unknown-linux-musl.tar.gz	1679e7eaa6b02629c970d118f19410816d702c0e6d373fa00f5093d3eaef49ac
`linux-aarch64-gnu`	majordomus-v0.27.0-aarch64-unknown-linux-gnu.tar.gz	64a0114471e03eb80284520210f04d1b216f9cafb124c5d0444e80ef20c8fba6
`linux-aarch64-musl`	majordomus-v0.27.0-aarch64-unknown-linux-musl.tar.gz	c3d8d14d28c61ce8a7e11afedf7679c1c29fba17e39592af0f0d3241800ce74c

v0.26.0

0.26.02026-10-14ff382970913 change(s) 0 decision(s) 6 artifact(s)

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 2

adopters an adopter gets only what fits it, and a failed branch run ends itselfa47c70939
I1989 init seeds a scope for the stack it finds, not for this repository's I1996 doctor does not fail an adopter on a check written for this repository I1991 A comment-only edit of the policy regenerates no bootstrap I2664 A run that has already failed is cancelled by itself, and a red on the trunk is fixed before anything else is prepared I2709 A red on the trunk has one named carrier, and nobody else may land until it is paid I2662 Validation leaves the deployment a runner: a branch's checks never hold the pool a publication or a release record needs
ui the Observatory's gates are closed with evidence, and new events interrupt its rotationd7a4361bc
I2680 The Observatory's gates are closed with evidence: screenshots, measured frame rates, a soak, the recovery drills

Fixed fix 5

test case 130 compares surfaces at a budget the seeded governance fitsd4d23c378
release a tag no longer freezes the queue, and two adopter records hold96cff105c
I2054 A tag does not turn every other pull request red until its record lands I1986 The vendored rule package says nothing that is only true of this repository I1987 A knowledge record's file provenance survives the file's deletion
adopters the catalogue drops doctor's adopter reasoning line; case 3018 asks for no pagerd9dea083b
runtime a closed live channel stops keeping its server, and eight issues are proven3e848ca4d
I2129 The lease timings the policy declares are the ones the mcp and serve elections use I2131 A server in use through the Cockpit or HTTP is not stopped as idle, and a checkout keeps one address I2126 A server busy with tool calls is never taken over as if it were dead I2133 Every mesh input and answer has a bound, and a refused registration learns nothing I2157 Ready means ready: a lost lease, a degraded layer or a failing mesh is not reported ready I2161 No answer, log line or mesh frame carries a credential the redactor knows I1509 A detail page that pages nothing has outgrown the reason it pages nothing I1998 A health command in an unsupervised repository does not exit 0 I2282 The record pull request's dispatched verdict does not satisfy branch protection
mesh a node key is owner-only from the moment it is written37c72bbed
I2134 A key removed from the trust list loses its links without a restart, and a node key can be rotated

Housekeeping chore 6

release 0.26.0, the contract the knowledge reference answer changed83d4afbff
I1987 A knowledge record's file provenance survives the file's deletion
release record v0.25.0 and the metadata it publishes0f0c35eb7
observatory the gates' production evidence is the published site at 2ca25bb9cf63ae8e0c2
plan the Observatory's milestones are done with their evidencec3da677d4
I2678 The public Observatory replays events that were recorded, and says it is a replay I2679 The Observatory follows a stream with a cursor instead of asking for its page again I2680 The Observatory's gates are closed with evidence: screenshots, measured frame rates, a soak, the recovery drills
observatory the published replay is the mesh as recorded at 11:39Z753449f90
plan nine issues stop requiring what they deferred, and I2137 is done304469c84
I2137 An accepted mesh event is on disk before it counts, and a damaged journal line is reported, never fused or dropped silently I2126 A server busy with tool calls is never taken over as if it were dead I2700 A lease probe asks a cheap liveness route, and a server holding another lease token is not taken for the leaseholder I2129 The lease timings the policy declares are the ones the mcp and serve elections use I2701 The idle timeout is declared beside the other server timings, and serve --idle overrides the declaration I2131 A server in use through the Cockpit or HTTP is not stopped as idle, and a checkout keeps one address I2702 A checkout keeps one address across restarts, because its server binds a port derived from the checkout I2132 A hello names the runtime it is meant for, and no other runtime accepts it I2703 The mesh cooperation rule lists the hello checks in the order the code runs them, and a test names that order I2133 Every mesh input and answer has a bound, and a refused registration learns nothing I2704 A dialer reads no reply beyond the link bound and no more candidates than the bound, and a refusing peer is retried at a measured, jittered rate I2134 A key removed from the trust list loses its links without a restart, and a node key can be rotated I2705 A node key can be rotated, peers follow the new key, and the old key is refused I2706 An own event whose append failed is never acknowledged as durable, and a journal reload is bounded in size I2157 Ready means ready: a lost lease, a degraded layer or a failing mesh is not reported ready I2707 majordomus doctor reports a stale server, or says plainly that it checks governance only I2161 No answer, log line or mesh frame carries a credential the redactor knows I2708 A mesh event field nobody listed fails the mesh check, and no log field or review body carries a credential the redactor knows

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.26.0-aarch64-apple-darwin.tar.gz	b503fa119f32d397889b690ce43db663605c94d1b8e8e4e29b1f004c4cb2bcef
`macos-x86_64`	majordomus-v0.26.0-x86_64-apple-darwin.tar.gz	5660a987bb0a3b96ac33d4fc864fd091b93b81364d32a0961656e6713a284862
`linux-x86_64-gnu`	majordomus-v0.26.0-x86_64-unknown-linux-gnu.tar.gz	54f911fa0b6950ec8f13070aa6f1eff74e510458e5648d760f9ed962258a8495
`linux-x86_64-musl`	majordomus-v0.26.0-x86_64-unknown-linux-musl.tar.gz	6de4ec37191e4da619e19f50ad2849704232c80b6534102806a61dfe2876a1f5
`linux-aarch64-gnu`	majordomus-v0.26.0-aarch64-unknown-linux-gnu.tar.gz	89633a013bf89d2137422b0467f15086ec244f872b3cc8f932a0a1d9e4d6b00a
`linux-aarch64-musl`	majordomus-v0.26.0-aarch64-unknown-linux-musl.tar.gz	1fa2dfd6b2bc827eecfc8568bb9086ddbc6db5e318c1f5a03059a483486af981

v0.25.0

0.25.02026-10-14ac203c34d10 change(s) 0 decision(s) 6 artifact(s)

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 3

ui the Observatory follows the journal from a cursor, and every new tool is calledbb844110b
I2679 The Observatory follows a stream with a cursor instead of asking for its page again
ui the published Observatory replays a recording of the real mesh, and says it is a replayf58b8a1c6
I2678 The public Observatory replays events that were recorded, and says it is a replay
editors Claude Code reaches every workflow skill by its name, and evolve says what it learned9709eea84
I2694 A promoted note resolves in every checkout, not only where it was promoted I2664 A run that has already failed is cancelled by itself, and a red on the trunk is fixed before anything else is prepared

Fixed fix 2

plan I1900 is ready again until the intent it serves has a critiquef044ae642
I1900 An intent is a typed record whose stage and satisfaction are derived
plan an open issue scopes the test directory, not a case it has not written yet70b4e540c
I1988 A use case's setup scripts live where the adopter declares, and its scenarios may run the adopter's own commands I1965 The entry preflight reads the one verdict

Documentation docs 1

handbook the Czech handbook says what the MJ way is, and states no figure by hande217df9d6

Housekeeping chore 4

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.25.0-aarch64-apple-darwin.tar.gz	315a5f7824e6a8f0aafc07d32769c949db8791600b8795d866ebe932f6f9aa1a
`macos-x86_64`	majordomus-v0.25.0-x86_64-apple-darwin.tar.gz	c4de17255b7846a3fe7ddc8668d6299d7d1f1a7eea1cb301ec2b320dd6ff9ff6
`linux-x86_64-gnu`	majordomus-v0.25.0-x86_64-unknown-linux-gnu.tar.gz	edb3a128a163b90a22da3fe1135a861ef4cdf54478edf46465211198c583dd4c
`linux-x86_64-musl`	majordomus-v0.25.0-x86_64-unknown-linux-musl.tar.gz	34416d74a83dbd3c2dad18f8493cf433b5e885f4218db4bc5ca29e953b9b6dae
`linux-aarch64-gnu`	majordomus-v0.25.0-aarch64-unknown-linux-gnu.tar.gz	1c34018c1250660d6580f71c6ef9036e994f07485969f5ad45a744f5f0267c30
`linux-aarch64-musl`	majordomus-v0.25.0-aarch64-unknown-linux-musl.tar.gz	9185d67e2b07d159aa3140dd69480021b5e7d8aa2cfc82c1a8107f783b24fa66

v0.24.1

0.24.12026-10-1492f11cda735 change(s) 3 decision(s) 6 artifact(s)

Decisions

The architecture decisions the layer dates inside this version's window, each with the route the document records for it.

adr-0158 proposed 2026-10-14

The Observatory is one screen of the UI, and it draws only what was observed
adr-0155 proposed 2026-10-13

An expedited landing is the owner's word, judged on the merged tree, and never reaches a tag
adr-0147 proposed 2026-10-12

The Cockpit is published as a snapshot by the exporter that reads the UI, and two snapshots link only the pages each holds

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 7

product the Observatory is a feature with a claim a reader can check3d8da99be
I2678 The public Observatory replays events that were recorded, and says it is a replay I2679 The Observatory follows a stream with a cursor instead of asking for its page again I2680 The Observatory's gates are closed with evidence: screenshots, measured frame rates, a soak, the recovery drills
ui the Observatory draws the repository and its mesh from what the sources answered6e06a86c6
I2678 The public Observatory replays events that were recorded, and says it is a replay I2680 The Observatory's gates are closed with evidence: screenshots, measured frame rates, a soak, the recovery drills
skills evolve is a skill that composes the knowledge commands, and the version is 0.23.1a9d7b2115
ui the UI shows what the knowledge base holds (I2652)6b46a80f5
I2652 The UI shows what the knowledge base holds: the candidates awaiting review and whether the deriver still writes, read and never acted on I2489 A screen over its budget fails the build: the UI's latency budgets are benchmark policy, and bench --check holds them
rules an expedited landing is the owner's word and never reaches a taga383e44b3
pages the Cockpit is published as a snapshot (I2495, ADR 0147)46bdc20b6
I2495 The Cockpit is published as a snapshot at /cockpit, and the UI's evidence links lead to it
session session records are capped by policy and archived on requestebe15d2e4
I0806 Make the session rules doctrines, with retention and archiving

Fixed fix 12

ui the Observatory's projection carries no link into another surfacece94eb767
ui every name of the Observatory answers on the published site, and the homepage shows ite37877639
test case 3011 finds the snapshot's observatory page by its path inside the snapshot9d31aa3a7
ui the Observatory takes every colour from the tokens and numbers no event it cannot identify371100487
test case 401 reads the build the bounded launcher asks cargo for65d86ff18
ui /ui/screensaver is the kiosk under its earlier name689fc2555
test the evolve skill is named by the two tests that prove every active skillbd82ee4e9
I2664 A run that has already failed is cancelled by itself, and a red on the trunk is fixed before anything else is prepared
ui the first screen of the published UI leads only with decided figures0a926184a
build a build never waits in silence behind another build's locke7a37c636
ci a record a head adds is pending, not backlog308857ded
pages the surface name is braced in the pattern pages-check buildsd77991a7c
pages a snapshot is asked of the publication that declared it5fa227b68

Documentation docs 3

plan the delivery latency of 2026-10-13 is recorded as a post-mortem and four issues51021b88c
I2660 The site is published as an artifact by the job that built it, so a ready site waits for no second workflow I2661 A publication that did not arrive is a finding the next reader meets, never a green step I2662 Validation leaves the deployment a runner: a branch's checks never hold the pool a publication or a release record needs I2663 The published UI is not read from nothing on every deployment M004 Performance is executable evidence, and the hot path does no canonical work twice
rules between a tag and its record nothing else lands48cd7a07e
handbook the Czech handbook says how session records are capped and archivedf4c90e2ee

Housekeeping chore 13

derive the derived data follows master ee84e49b1844f3d84d2
derive the derived data follows master a6b1e10328e7c83bbb4
derive the derived data follows master 2ee40c5aa147aaa49d4
derive the projections of the session cap and 0.24.0 on the master of its landing507b1724d
derive the projections of the session cap and 0.24.0 on the master of its landinge363d523d
derive the projections of the session cap and 0.24.0 on the master of its landing0b28ece25
derive the projections of the session cap and 0.24.0 on master beb60f5f968783d8371
plan four delivered UI issues record their evidence and completion8a29993b6
I2483 The UI is published as a snapshot: read once at the published commit and carried by the site at /ui I2486 No screen waits for a source: a page shows the latest reading with its age, read again behind the reader I2489 A screen over its budget fails the build: the UI's latency budgets are benchmark policy, and bench --check holds them I2495 The Cockpit is published as a snapshot at /cockpit, and the UI's evidence links lead to it
derive the projections of the session cap and 0.24.0 on master 5bfee30eb1d3b69169c
release record v0.23.0 and the metadata it publishes2d933d314
release 0.24.0, with the projections of the session cap on master 3442ce68c5100c41bbb
derive the projections of the session cap on master e506c041a4cbe421c38
derive the derived data follows the merge of master e506c041a49c56e7124

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.24.1-aarch64-apple-darwin.tar.gz	4e6371d0760f7b2193429bf237256144d7d6c749ba93b3674c839221038b8d4d
`macos-x86_64`	majordomus-v0.24.1-x86_64-apple-darwin.tar.gz	36322c978c1ca3b1cc34b1ee5df7a00d83c458f1f9abe8ddcab84a21c9351b45
`linux-x86_64-gnu`	majordomus-v0.24.1-x86_64-unknown-linux-gnu.tar.gz	5e6ff82feadd60e2663516b4b94c26b9a177798657a67fc04f7734c58e30c12c
`linux-x86_64-musl`	majordomus-v0.24.1-x86_64-unknown-linux-musl.tar.gz	263ac4ef71ceab6b32d7ef269cbb2acbafc680143f8aa76d5c822454af478118
`linux-aarch64-gnu`	majordomus-v0.24.1-aarch64-unknown-linux-gnu.tar.gz	7ab71d5c08e28c553f4d332f05f62207ad79b22a2d29227e55421d28757e78b8
`linux-aarch64-musl`	majordomus-v0.24.1-aarch64-unknown-linux-musl.tar.gz	45291456055f45fe08f878f717a7d269f68f1e366379e13c9153fef3ef39d529

v0.23.0

0.23.02026-10-13e506c041a39 change(s) 1 decision(s) 6 artifact(s)

Decisions

The architecture decisions the layer dates inside this version's window, each with the route the document records for it.

adr-0146 accepted 2026-10-12

A capability is invoked by name through a generated skill

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 5

editors a capability is invoked by name from Claude Code, through a generated skill37067ec23
site the published UI is linked where the publication holds it8c9082664
site the landing answers five questions, and the navigation is rendered once6c58b9974
ci the GitHub projection is applied by the landing itselfcf90345b7
I2460 The overview asks its sources at once, so it costs its slowest source and not their sum I2478 A rule opens its proof: what it states, the tests that prove it, what is missing, and the rules around it
providers preserve owner-authorized SSH permissionseb76b216d

Fixed fix 18

ci the projection workflow's guards are if-statements8d852d79f
test case 1097's message no longer reads as an early exit93c9c2189
test case 486 asserts what the site's check says todayba49c586c
rules a rule cites an external page without linking itb7ef193ab
http a stopped server refuses the next connectiona178e1b2b
docs the handbook build writes nothing into the tree it reads3b3ba8e77
site Escape gives the focus back, and the hero's label wraps on a phone052b4ae49
hooks a push that changes the crate builds its rustdoc with warnings denied first19a2f94f7
docs the doc of a public function links no private constant115d67a39
tmp a temporary root is swept only when its process is gone, never when it cannot be asked57ce0ccf6
site a bar link to a snapshot's root is decided by the publication modelb90699421
rules one malformed rule file is one finding, not fifty-sevena28ab7032
I2068 A verdict that depends on the runner says so, and one cold sample is not a regression M004 Performance is executable evidence, and the hot path does no canonical work twice
github a listing that failed is not an empty remote941ec686f
docs the six commands that joined the doc-command baseline leave it (#720)bbbc44a4f
doctor a JSON parser that cannot run is not read as the file's failure83fdc2932
ci a lane's own output is not a dirty treef0911e679
I1949 CI evidence is recorded clean, and its report is the tracked ledger's verdict
live a failed reload consumes no write either (I1992)32d5b488a
I1992 A rebuild that fails consumes no change: the next request retries it
live a rebuild that fails consumes no change (I1992)260da7bf2
I1992 A rebuild that fails consumes no change: the next request retries it

Performance perf 1

ui a screen over its budget fails the build (I2489)664ebe4cf
I2489 A screen over its budget fails the build: the UI's latency budgets are benchmark policy, and bench --check holds them I2485 The bench measures the first request after the repository moved, and a budget bounds it

Documentation docs 1

plan I1992, a rebuild that fails consumes no change2adf44450
I1992 A rebuild that fails consumes no change: the next request retries it

Housekeeping chore 14

derive the derived data follows master 62d6ca2e4549f201108
derive the derived data follows master 73d3c8cc3171b3060cc
derive the derived data follows master 9e50ce2af39d3ef5c78
derive the derived data follows the merge of master 9e50ce2af39e2ed1041
derive the derived data follows the merge of master b34259715e7c8b77de2
release record v0.22.0 and the metadata it publishesc3ebd75b8
derive the derived data follows the merge of master d1653776cce28de1d22
merge the handbook's cache files are master's bytes917f35a97
derive the derived data follows the merge of master 23c5c31be3bc6d8b8aa
merge master 3d92c25c12 into the branch, derived files followb09367dda
derive the derived data follows the v0.18.0 record18cb398ce
derive the derived data follows the v0.18.0 record9f513a514
derive the derived data follows the v0.18.0 record6c3325eb9
plan close the eight issues master already holds, and re-measure foura8a7830a4
I1502 A server serving code that no longer exists stops calling itself ready I0837 Timing report as JSON I1967 A reporter that sets a flag is a reporter I1946 The verdict words are status words of the design system I1947 Every feature reaches a test, and every use case has a feature I1950 Text a run printed is redacted by one rule set I1948 Evidence is judged at the presented revision, by one freshness function I1952 Evidence subjects are derived once, in Rust I1966 The composed graph is whole or its generation refuses I1403 Backfill the projection once, deliberately, and record what it created I0806 Make the session rules doctrines, with retention and archiving I1949 CI evidence is recorded clean, and its report is the tracked ledger's verdict I1900 An intent is a typed record whose stage and satisfaction are derived I1903 The work realising an intent is joined across episodes, providers and handovers

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.23.0-aarch64-apple-darwin.tar.gz	237ded6539553cd7ce41060f8b78f8005f1273a47583163f513ed0fa57de473d
`macos-x86_64`	majordomus-v0.23.0-x86_64-apple-darwin.tar.gz	b8dfb703363a53c510191e2880986e4f542b03fe744eb182acd6160d6d841ce0
`linux-x86_64-gnu`	majordomus-v0.23.0-x86_64-unknown-linux-gnu.tar.gz	b09b4716c76ea4203db0de4246bedd6a0e495654b73586ffcd263142c91ef837
`linux-x86_64-musl`	majordomus-v0.23.0-x86_64-unknown-linux-musl.tar.gz	f36a18a751fdffc43c909dc0949b5cc682ed082d82d1dc8c739038c508e6074a
`linux-aarch64-gnu`	majordomus-v0.23.0-aarch64-unknown-linux-gnu.tar.gz	0e090873567ca75de865f656d92dfde5c0fbbf674b1d1e384cd13bd36eec0ffc
`linux-aarch64-musl`	majordomus-v0.23.0-aarch64-unknown-linux-musl.tar.gz	7e251296b6b3adbf6476ed5bdf9bbc307fc07636db9c30f611fae6381ca98cc2

v0.22.0

0.22.02026-10-1361d44176757 change(s) 6 decision(s) 6 artifact(s)

Decisions

The architecture decisions the layer dates inside this version's window, each with the route the document records for it.

adr-0149 proposed 2026-10-12

A handbook edition is a declared locale tree, built from the tree it describes
adr-0145 proposed 2026-10-12

A personal layer changes nothing shared: it is covered by git's own exclude file, checked where it is claimed, and handed to the team by one command
adr-0144 proposed 2026-10-12

An intent is proposed by a capability, and its stage stays derived
adr-0142 proposed 2026-10-12

No screen waits for a source: a page shows the latest reading with its age, and the reading catches up behind it
adr-0141 proposed 2026-10-12

The UI is published as a snapshot read at one commit, and a publication never pretends to be a process
adr-0140 proposed 2026-10-12

Editors and agents read projections of the layer, and cargo embeds none of it

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 9

docs the handbook is built from the tree it describes (ADR 0149)fc7917367
install personal mode is a switch — init --personal, verified, and --shared (ADR 0145)3bf63db8e
I2491 A personal layer changes nothing shared: init --personal and install.sh --personal keep the layer one person's own, verify it, and --shared hands it to the team
intent an intent is proposed by a capability, and its stage stays derivedee7f3373c
ui every entity the UI names is a link, and every screen has a case (I2481, I2482)995496f6f
I2481 The UI links every entity it names, and says none where a source has no value I2482 Every screen of the UI has a case, and no link on the UI is dead
ui the snapshot is bounded, declared, documented and wired into Pages (I2483, ADR 0141)41cc4dddd
I2483 The UI is published as a snapshot: read once at the published commit and carried by the site at /ui
ui the UI links what it names and says none (I2481, work in progress)64dca8303
I2481 The UI links every entity it names, and says none where a source has no value I2482 Every screen of the UI has a case, and no link on the UI is dead
ui the UI is read once and written as a static snapshot6f55316bc
editors Zed and Antigravity read projections of the layer (ADR 0140)17e99c068
mesh a review request carries a body, is withdrawn by its asker, and ends with it76dc4b399

Fixed fix 22

test the deployments reading is asked for by served forge, and the test says soe6d0371cf
test the served doctest names served.forge, and the handbook page is a whole documentc03a5ff76
served the module's documentation names the three capabilities it hasebf01655f
docs the handbook wears the declared design, and its sources are chapters onlyab498d5c0
ci every red of the tag candidate's validate run is paid at its cause3e8225a43
test case 2979 looks for a session record without ls | grep54263f8ba
ui an absent deployment count reads none, and the stub forges answer the deployments read897bc430a
ci master's seven reds after the backlog landings are paid in one commit5631447ff
site a Markdown table is aligned by a class, so one column cannot stop a publication3c48889f8
quality the readings carry their examplesc40dbb86a
ci top 2 pins a sort to the C locale and classifies web report ui-snapshot6cb8009ad
ci the landing top's members meet — what the first combined run found102a08dd4
I2484 majordomus ui ensures the shared server and opens the UI's dashboard I0821 Flattened YAML is cached under .ai/local/cache by content hash
site every badge states the one offer, and no surface lists release records5dab8737b
site pages-check finds the repository for release-live, and case 180 holds itd38d3bc56
site the site offers the release that was published, on every surface at once1c15652c0
editors the projection meets the structure gates it added a module to19b6416d4
editors rustdoc reads no path placeholder as an HTML tag7cf2dfb56
http the live stream misses nothing a client can be told about000e2b047
build each worktree builds its own crate in the shared build directorya29738743
scope a path that holds a space is one path (I2464)dea8e07a7
I2464 A path that holds a space is one path to the scope doctrine
mesh a review request is withdrawn and expires with its runtime, not its session3daef42ca
mesh a clone on a machine its trust list does not name opens no mesh socket9e1d9cc37

Performance perf 15

ui no screen waits for a source (I2486, ADR 0142)344cb306c
I2486 No screen waits for a source: a page shows the latest reading with its age, read again behind the reader I2487 A screen is streamed, and one stream tells an open page which readings changed I2489 A screen over its budget fails the build: the UI's latency budgets are benchmark policy, and bench --check holds them
ci a release record and its projections plan a light validate22de3c496
capability the slow screens read once99ea09509
bench the bench measures the UI and the live view2fcb023e5
cockpit assets are cached by their digest66bc00bd2
integration the queue reads its relations oncea865e3207
ci the projection renders every record in one process, adr check resolves rules once89db623dc
test derivation cases generate site data without executing the scenarios26898026f
gates digest each file once per completion report9df08e7bd
doctor one python3 for every schema, one awk for every case header0221b4779
site page literals without a subshell each; modules checked in one jq141acab6d
site one jq per section for the page literals, one awk for case coverage202efbac8
ci the pipeline's data files are planned by their readers84de132df
ci shellcheck runs in batches over a bounded pool39b0587db
site invert the OpenAPI reference walks and drop jarr's per-line forkse5e4bcf36

Documentation docs 3

adoption the arrangement is called personal mode, and its way to a shared layer is measured4b66ef5f5
adoption using the tool without leaving anything in git, measured98bee6156
ui the UI is the accepted primary surface, and its plan says what landed0e458b2c6
I2460 The overview asks its sources at once, so it costs its slowest source and not their sum I2463 A train of stacked pull requests is a typed object, served everywhere and drawn as a graph I2470 The pull requests drain in the UI: a queue a reader narrows, inspects and follows to what each depends on I2478 A rule opens its proof: what it states, the tests that prove it, what is missing, and the rules around it I2484 majordomus ui ensures the shared server and opens the UI's dashboard

Tests test 1

editors `generate editors` is proven over a real repository, with `just` where coverage runsc46ff6c72

Housekeeping chore 7

derive the derived data follows master 9d31c4d456 and the readings8d35e7165
deploy Fly.io is not a target; the provider block and fly.toml leave the contract9af3fa65a
I0909 The production image is a generated projection of the build specification I0913 The provider configuration is generated, and the cheap profile is declared
derive the derived data follows the UI-performance batch with the slow screensc66f49e40
release record v0.21.0 and the metadata it publishes7bc7e662c
derive the derived data follows the UI-performance batch on v0.21.039d682a26
derive the derived data follows the v0.21.0 top and the per-tree build1906935a4
derive the derived data follows the remembered queue64352fc6a

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.22.0-aarch64-apple-darwin.tar.gz	bd4f69a863cca0321267c9a9ea358d9e174aa830ee37f275306554b63236ac22
`macos-x86_64`	majordomus-v0.22.0-x86_64-apple-darwin.tar.gz	aa02c341feb0e4efa2eb9d6489a409b88b9f50c66cf90139b74a4f7ff51e28c5
`linux-x86_64-gnu`	majordomus-v0.22.0-x86_64-unknown-linux-gnu.tar.gz	879d2aa20108c112d00c3e27be152b6e678ed040bf3a022973a5e1a962f0b1c2
`linux-x86_64-musl`	majordomus-v0.22.0-x86_64-unknown-linux-musl.tar.gz	7ab2dd2fbe34c4350b44b960b441584f68bc11bf51f59e41b7151ac6d690c952
`linux-aarch64-gnu`	majordomus-v0.22.0-aarch64-unknown-linux-gnu.tar.gz	7051bc83be12ba572c29f699ba22edd8ce7cf4a8955707c98a34e1f030d78aae
`linux-aarch64-musl`	majordomus-v0.22.0-aarch64-unknown-linux-musl.tar.gz	2c289bd004a04e5152b4c788a148f7a09e71b331ce6ba1ca5f37998ff6fc3d0f

v0.21.0

0.21.02026-10-12722228ef3207 change(s) 10 decision(s) 6 artifact(s)

Decisions

The architecture decisions the layer dates inside this version's window, each with the route the document records for it.

adr-0139 proposed 2026-10-11

Worktrees share what cargo compiles on the way, and keep their own finished artifacts
adr-0138 proposed 2026-10-11

A train of pull requests is a typed object that can be seen
adr-0136 proposed 2026-10-11

Every session briefs itself on an interval, from one capability a provider mod the policy switches keeps in front of it
adr-0135 accepted 2026-10-11

`majordomus ui` is the primary surface, and the Cockpit is the technical layer beneath it
adr-0134 proposed 2026-10-11

The next version is allocated at landing, by the integration executor, from the trunk's version and the change's measured impact under a typed policy floor
adr-0133 proposed 2026-10-10

Everything that happens in the repository is followed in one stream, folded and addressed
adr-0131 proposed 2026-10-10

A release publishes its metadata to the site before its record lands, and the site never goes back a release
adr-0129 proposed 2026-10-10

A train of stacked pull requests lands in one run of the required check, each link on the verdict its head already has
adr-0126 proposed 2026-10-09

A caller beyond loopback reads, and changes nothing it cannot authenticate
adr-0118 proposed 2026-10-09

A session leaves what it observed, and the boundary keeps one routed candidate per defect

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 31

build worktrees share what cargo compiles on the way (ADR 0139)c56b5b87c
ui a rule opens its proof, and the rules it depends on and that depend on it (I2478)ae556b894
I2478 A rule opens its proof: what it states, the tests that prove it, what is missing, and the rules around it
ui an intent opens what serves it, its criteria and their evidence (I2476)5ba4b928a
I2476 An intent opens what serves it: its statement, its criteria and their evidence, and the milestones and issues that serve it
ui the issues are browsed by status, milestone, priority and text (I2475)bc8ee345d
I2475 The issues are browsed: every issue of the plan by status, milestone, priority or text, each a link onward
ui the drain draws its merge throughput over the fortnight its trail ends on (I2474)6a69100eb
I2474 The drain draws its merge throughput: each day's merges over the fortnight its trail ends on
ui a pull request shows its trail, and the drain the lane's recent activity (I2473)41008d555
I2473 A pull request shows its trail: what the executor did to it, and the drain what the lane did lately
integration how long CI takes is measured, and the CI/CD screen draws it (I2472)306cf3b05
I2472 How long CI takes is measured, from when each run started to when it completed, and the CI/CD screen draws it
ui the roadmap opens a milestone, its critical path and its neighbours (I2471)6c8c17a44
I2471 The roadmap opens a milestone: what it holds, what can start, its critical path, and what it waits for M004 Performance is executable evidence, and the hot path does no canonical work twice
commands the effect class is declared per subcommand and flag378f93cc2
I1981 A command's effect class is declared per subcommand and flag, and live scenarios judge the whole argv
ui the pull requests drain in the UI, narrowed, inspected and followed (I2470)2df014b2d
I2470 The pull requests drain in the UI: a queue a reader narrows, inspects and follows to what each depends on
integration a train of stacked pull requests is typed, served and drawnb60351428
monitor a machine is named, a withdrawn review is news, a merge is told once73855209f
offload a derive offloaded to a declared host waits its turn in a FIFO queuec1958f5d1
I2398 A derive offloaded to another machine waits its turn in a declared queue
ui the UI has every screen, and the mesh is an inspectable graph (I2462)59a993753
I2462 The UI has every screen, and its mesh is a graph whose nodes open an inspector
integration a head stacked on a landed pull request merges on the verdict it has361fecf07
I2298 A pull request stacked on one that landed merges on the verdict its head already has
session every session briefs itself on an interval (I2399, ADR 0136)dd5a6336c
I2399 Every session briefs itself on an interval, without being asked
ui majordomus ui is the product, served at /ui (I2461, ADR 0135)9bcebb9f8
I2461 majordomus ui is served at /ui as its own product, with screens composed from capabilities
integration a head that contains master still owes its allocated version606d9c61a
site one search, opened from every page, over what the build published988aec549
integration the executor allocates the version where it refreshes99c3eafd5
site a number in prose is a number the repository states0824947bf
site the landing page is a click-through story76fb37abe
I2417 The landing page is a click-through story: an editorial hero and an evidence chain a visitor steps through
release the version a landing allocates is decided once, under a typed policy floor0e38ab5bf
monitor everything that happens is followed in one streambf08180a4
I2400 A signal model and a fold join every source the server already records I2407 The monitor is released and deployed
mesh mesh.state and mesh.peers answer a summary that fits one tool answer1eb8d5fa8
release a release publishes its metadata before its record lands45efcfead
I2303 A release publishes its metadata to the site before its record lands, and the site never goes back a release
gates the closing question is answered by measurement303f8384f
I2301 Whether the work is done is answered by measurement: the done invariant asks about debt, what was left behind and the backlog
integration a head stacked on a landed pull request merges on the verdict it hase97caa007
I2298 A pull request stacked on one that landed merges on the verdict its head already has
integration the executor reopens a record pull request no run was started for (I2296)44e2af08b
I2296 The executor reopens a record pull request no run was started for
knowledge a session leaves what it observed, and one candidate per defect is routed4afbde69e
I2073 A worker records an observation in one command I2075 A candidate is routed by what it is about
mesh the host firewall is a derived requirement with a verdict88fe975fc

Fixed fix 76

test case 991's no-root probe defers its root, as case 1074's library now roots every scripte95cbeed1
test the published pair is compared on the figures it cites, not only the ones it types217e1b501
ci case 1022 is renumbered 1086 and the mesh's test fixtures live in the mesh94ca56fe3
I2123 A caller beyond loopback reads, and changes nothing it cannot authenticate
ci the interaction probe is bounded at 3300 s, the site it walks having grownd7b1c82d6
offload a refused apply no longer spoils the next offload of the same tree66600867a
deploy a stage line is asserted with contains, not a manual anyf48fcbca9
cli two error paths no test can reach are folded into the answer57c27f784
ui a slow panel cannot take the browser's connections1a552beb5
integration a version conflict that cannot be resolved aborts the refresh merge7517f7c4a
deploy an image that builds, caches, starts, and reuses the release binaryd62f7e258
test integration tests ignore the session's MAJORDOMUS_* environmentf38533dba
reap-orphans the shared build directory is removed through $target3312a5a3a
deploy preserve generated artifact header contract045f576f5
release the record is staged without naming an ignored path8517b0a12
ci what #963's structure job and the ui audit found is paid24ab7f820
evidence a file moved since the run changed at its old path too0e97eae55
ci the coverage job's bound follows the crate it measures326a13a68
ui a busy panel keeps its contrast, and a long fact value wraps05fa7e561
ci the rest of what #957's run found below the top is paidc6c04bfd8
train what #957's run found below the top is paid in one commit79bb4e3c1
I1900 An intent is a typed record whose stage and satisfaction are derived I2401 monitor is one read capability with three projections I2398 A derive offloaded to another machine waits its turn in a declared queue
ui an unnumbered pull request is shown as unknown, not as #034d029bef
ui a milestone named by a slug opens, and the roadmap's tests ask the screen as it is (I2471)08333dc61
I2471 The roadmap opens a milestone: what it holds, what can start, its critical path, and what it waits for
integration the trains command's doc renders under rustdocaa1b399b1
ui a mesh session shows the claims the summary countsbbc547e6c
ui every screen renders in-process and passes the audit and design gates (I2461, I2462)d5580ae82
I2461 majordomus ui is served at /ui as its own product, with screens composed from capabilities I2462 The UI has every screen, and its mesh is a graph whose nodes open an inspector
lib a script that sources the library leaves no temporary filesbcc6347d5
mesh the mesh's own cases and lab ask for the full view1f9c8a0ec
ci the slowest-case budget is re-derived from 2026-10-11's runs841ed86e8
ui the UI is a described service and keeps its internals to itself (I2461, I2462)572494c22
I2461 majordomus ui is served at /ui as its own product, with screens composed from capabilities I2462 The UI has every screen, and its mesh is a graph whose nodes open an inspector
ci the slowest-case budget follows the 4127 s measured under a saturated pool4fb1dbd16
release only the change that adds a release's record escapes the floor32999fa85
monitor the withdrawal rule takes no context it does not read7d1d467ad
release the record of the trunk's release lands at its number388353292
release the record is staged without naming an ignored path1ba11643c
integration carries_master owes a minor version, and its two branches are tested9993844bd
integration the tests leave no temporary directory beside the system's770b464bc
release the review of slice A, on the mesh: renames, empty changes, the floor's mode8e833d463
release a landing measures the movement from where the head forkedc8c6a9205
ci the verdict asks every selected gate for a receiptf220f5e02
I2416 The ci verdict asks every selected gate for a receipt, and a gate whose step never ran is red
integration carries_master owes a minor version, and its two branches are tested6dde8d38e
gates every way a closing reading can fail is one a test reaches225f6ab38
ci a projected record edited by a head is pending, not refuseda8c7c77ad
I1900 An intent is a typed record whose stage and satisfaction are derived I2300 A head is judged against what it changes, not against GitHub's live state
release the record is staged without naming an ignored pathca488f87a
plan I2123 names the files it touches4868514a4
I2123 A caller beyond loopback reads, and changes nothing it cannot authenticate I1900 An intent is a typed record whose stage and satisfaction are derived I2114 A task's scope admits what its derive writes
mesh the nftables commands are ones nft accepts, and a command is ok by its exit47fc2d6a6
mesh a lab node commits its declaration, and the trust root's paths are tested11472da40
I2135 The trust root is read from the default branch, not from whatever the checkout holds
http a slow or silent client cannot hold the shared serveree9053efe
I2156 A slow or silent HTTP client cannot hold a server worker
ci a bench check and a status probe are not verdicts on the runner56a337e1a
mesh no port is derived open to every source, and the firewall's code is testede30630c99
mesh a sync message stays under the link bound whatever the marks weigh060311a90
I2139 A sync message stays under the link bound whatever the marks weigh
mcp every MCP transport has a bound, and a session outlives its longest request9e018a302
I2147 The MCP transports bound what they read and follow the Streamable HTTP rules they claim
ci the suite is dealt from measured seconds, and case 51 runs beside the others37b825efe
ci a registry hiccup and a slow sample are not verdicts71c3284e1
lease a newer client replaces an older server, and an older client says it is older383309ae0
I2127 A server that lost its lease hands its sessions on and ends I2163 A client never attaches to a server of another version without saying so, and a newer client replaces an older server
integration unmirrored reads git's list without a branch nothing reaches4189fa949
release an installed release serves a foreign repository (I2162)5f654cae6
I2162 A released archive, installed, serves a foreign repository over the shared server in CI I2165 A released archive carries a provenance attestation the installer can check
http a server busy with slow calls still answers the lease probe3be5cbbda
I2126 A server busy with tool calls is never taken over as if it were dead
serve a server someone is using is not idle, whatever the transporte80c336ba
I2131 A server in use through the Cockpit or HTTP is not stopped as idle, and a checkout keeps one address
serve a superseded server hands its sessions on and ends5bb27f421
I2127 A server that lost its lease hands its sessions on and ends
serve the declared lease timings are the ones an election uses59dbfd1c0
I2129 The lease timings the policy declares are the ones the mcp and serve elections use
mesh a key withdrawn from the trust list loses its links without a restart9d09a4a5f
I2134 A key removed from the trust list loses its links without a restart, and a node key can be rotated
mesh every mesh input has a bound, and a registration learns only its own trusted peersa0553dd19
I2133 Every mesh input and answer has a bound, and a refused registration learns nothing
mesh paging mesh.events returns every event exactly oncef820f5ab0
I2140 Paging mesh.events returns every event exactly once
http no answer, log line or handover carries a credential the redactor knowsadb513dce
I2161 No answer, log line or mesh frame carries a credential the redactor knows
mesh a hello names the runtime it is meant for, and no other runtime accepts itaa28332ca
I2132 A hello names the runtime it is meant for, and no other runtime accepts it
health ready means ready, and the mesh is a dimension of health721e9a917
I2157 Ready means ready: a lost lease, a degraded layer or a failing mesh is not reported ready
http the API page runs only what it ships, and a rebinding host reads nothing21ea43629
I2123 A caller beyond loopback reads, and changes nothing it cannot authenticate I2151 A page served beside the write routes runs only script it shipped, and a rebinding host reads nothing
http the writer list and the doc examples follow executions.startbde38800c
I2123 A caller beyond loopback reads, and changes nothing it cannot authenticate
mesh an accepted event is on disk before it counts, and a torn journal line is reportedbb63c9439
I2137 An accepted mesh event is on disk before it counts, and a damaged journal line is reported, never fused or dropped silently I2124 An event reloaded from disk meets the trust policy in force, and no stamp outruns the clock
mesh a working tree may narrow the mesh's trust and never widen it4816d7c8a
I2135 The trust root is read from the default branch, not from whatever the checkout holds
serve a lease is removed only by the process that holds it, and serve stop stops in order632acc00d
I2128 A lease is removed only by the process that holds it, and serve stop stops the server in order
mcp a tool call that may have run is never sent a second time7f956339a
I2145 A tool call that may have run is never sent a second time
mesh an event reloaded from disk meets the trust policy in force477f417d9
I2124 An event reloaded from disk meets the trust policy in force, and no stamp outruns the clock
mesh the MacBook hubs are named by their tailnet addressa9cf1f295
http a caller beyond loopback reads, and changes nothing it cannot authenticate8d6e0c76e
I2123 A caller beyond loopback reads, and changes nothing it cannot authenticate
integration a missing pull ref is one unknown head, not a failed refreshfe13037d1

Performance perf 4

docker materialize generated cached multistage image4069a90b7
deploy derive BuildKit dependency and local compiler cache stages4a221398f
release the changelog asks git when each decision was added side by side65429c638
dashboard the overview asks its sources at once (I2460)51b8def04
I2460 The overview asks its sources at once, so it costs its slowest source and not their sum

Documentation docs 6

rustdoc the batch documents with -D warnings58b31d489
ui the pull-request detail is documented and accepted (I2462)8d34e1f7a
I2462 The UI has every screen, and its mesh is a graph whose nodes open an inspector
campaigns the living-site V2 pack is measured against its premise6d5254e96
mesh every public item of the summary view carries an example642a4563a
ci the critical path of 2026-10-10 is measured and recorded705890da2
I2396 The CI critical path of 2026-10-10 is measured, recorded, and explained before anything is changed
plan I2282, the record pull request's dispatched verdict does not satisfy branch protectionfdcdb3916
I2282 The record pull request's dispatched verdict does not satisfy branch protection

Tests test 19

coverage the lease's lock warning and the test network's refusal are coveredd765ef1d5
monitor the monitor, the lease and their neighbours are covered to the last linedbbcb1228
ui the drain, timings and train views are covered to the last linec4686c286
release the allocation, the landing and the prs commands are covered to the last linea706d00ee
mesh every changed line of the mesh command and runtime is covered0c65eedf6
integration the drain, the relation and their neighbours are coveredf4283b34b
runtime the monitor, the lease, the server and the MCP transports are covered0963cda5b
deploy enforce cache stages and canonical Rust toolchain3ca910911
brief,train every changed line of the brief and the train view is coverede8b1c6235
I2399 Every session briefs itself on an interval, without being asked I2463 A train of stacked pull requests is a typed object, served everywhere and drawn as a graph
offload every changed line of the derive offload is coveredee320559e
I2398 A derive offloaded to another machine waits its turn in a declared queue
coverage the UI, the landing and the allocation code of the train are coveredcbd0b6525
integration the trains command, the allocation repair and their neighbours are coveredca05abf0b
mesh the journal's file paths and the trunk's refusals are covered0cd52569c
release the release module's declaration test names release.next6c2531385
http a forbidden capability error is covered on every path it takes554734807
mesh a value that is not a key is rejected by every trust policy3a0eec0d6
I2124 An event reloaded from disk meets the trust policy in force, and no stamp outruns the clock
serve a server stops on a signal whether it reads a pipe or runs unbounded19fdd2a0d
I2128 A lease is removed only by the process that holds it, and serve stop stops the server in order
executions the all-executions channel is subscribed before the execution it must see969c2d289
I2123 A caller beyond loopback reads, and changes nothing it cannot authenticate
integration the fallback's own failures are tested, and refresh reads what was fetched7513bd1ce

Pipeline ci 1

docker publish SHA images and reusable GHCR BuildKit cacheea8c47dc8

Housekeeping chore 70

derive the derived data follows #963's assembled head 01c76facd017aab87ac
derive the derived data follows master 00496ba981 and ADR 0139e88e4a3b3
derive the derived data follows ADR 0139 and the merged head6ffacd1ac
derive the derived data follows the merged head (I1981)ac95d3b32
I1981 A command's effect class is declared per subcommand and flag, and live scenarios judge the whole argv
derive regenerate the derived data for the per-subcommand effects (I1981)63ee47852
I1981 A command's effect class is declared per subcommand and flag, and live scenarios judge the whole argv
derive the derived data follows master 7377fe6568 (#944)58d0516f2
derive the derived data follows the train's segment-2 top refs/prep/948 (3935dc8c49)74747e93e
release the mesh views declare the 0.21.0 their public contract requiresbe515d65c
derive the derived data follows the release-record fix on the first link320651645
derive the derived data follows the first link on master 1393d9ef2a0feda12a1
derive the derived data follows master 1393d9ef2a7624fbd2f
campaigns the Operation Zero night-shift pack is tracked236b4691b
campaigns every pack that arrived after the first import is trackedc9f20dc7b
integration derive slice B on slice A's review fixes3b883e284
derive the derived data follows the head this branch is stacked on (fabcbcfcb5)68369163c
derive the derived data follows the head this branch is stacked on (42053b941b)fabcbcfcb
derive the derived data follows the head this branch is stacked on (54a91603bb)42053b941
derive the derived data follows the head this branch is stacked on (cd4d0fac1a)54a91603b
derive the derived data follows the head this branch is stacked on (7d1cb5c8e5)cd4d0fac1
campaigns every pack the owner handed over is tracked, and named with its plan9b44f6db5
derive the derived data follows the head this branch is stacked on (684af31491)7d1cb5c8e
derive the derived data follows the head this branch is stacked on (dc6d7bd088)684af3149
derive the derived data follows the head this branch is stacked on (0c9c59a268)dc6d7bd08
derive the derived data follows #909's head 969316d06ddcb097394
release raise to 0.21.0 for the public surface #860 moves, and derive0c9c59a26
release raise to 0.21.0, and derive on master's mergee87106f98
release raise to 0.21.0 for the reopen trail words, and derive969316d06
plan I2301 is done, with its evidence at ecb51b27722841459fa
I2301 Whether the work is done is answered by measurement: the done invariant asks about debt, what was left behind and the backlog
release raise to 0.21.0, and derive on master's mergeded406196
derive the derived data follows #909's head dcf87a48ccf37c0facb
derive the derived data follows master 890e112dcf87a48c
campaigns file the Opus/Fable mesh-pack prompt pack as receivedeebab6b00
derive regenerate after merging master (890e112d04)ecb51b277
derive the derived data follows master 4dfd1856d2 (0.20.0)8e648aa8e
derive the derived data follows the head this branch is stacked on (50abe5d31d)77cdfcbae
derive the derived data follows the head this branch is stacked on (8408185fa5)50abe5d31
derive the derived data follows the head this branch is stacked on (a313ef424c)8408185fa
derive the derived data follows the head this branch is stacked on (75667858da)a313ef424
derive the derived data follows the head this branch is stacked on (d3d6cedac9)75667858d
derive the derived data follows the head this branch is stacked on (e85b3c6c14)d3d6cedac
derive the derived data follows the head this branch is stacked on (f09bee167b)e85b3c6c1
derive the derived data follows the head this branch is stacked on (c69ffe4196)f09bee167
derive the derived data follows the head this branch is stacked on (396ba67341)c69ffe419
derive the derived data follows the head this branch is stacked on (10ebd1a1e4)eae89cd3f
derive the derived data follows the head this branch is stacked on (451576e426)10ebd1a1e
release record v0.20.0 and the metadata it publishes451576e42
integration carry the review fixes to origin without a rundb90c48c0
integration carry the review fixes to origin without a run2bbbe6928
derive the projections of the committed merge07cc1b819
derive the derived data follows the head this branch is stacked on (1c5be3baa8)6c547edd9
derive the derived data follows the head this branch is stacked on (c343e834c0)1c5be3baa
derive the derived data follows the head this branch is stacked on (e8a75ddb75)c343e834c
derive the derived data follows the head this branch is stacked on (f37b129016)e8a75ddb7
derive the derived data follows the head this branch is stacked on (3fd1894393)f37b12901
derive the derived data follows the head this branch is stacked on (d9251c6a6f)3fd189439
derive the derived data follows the head this branch is stacked on (29b33daf93)d9251c6a6
derive the derived data follows the head this branch is stacked on (12d2524e5f)bfc0dd709
derive the derived data follows the head this branch is stacked on (2b782e1280)12d2524e5
derive the derived data follows #855's head 192ace8d0a2b782e128
integration carry the hand-made merge to origin without a run210b2194d
derive regenerate after merging master75a1962a0
derive regenerate after merging masteradeda4a74
derive regenerate after merging master5fc4d6b37
derive regenerate after merging mastera1da0ba23
derive regenerate after merging master437dad018
derive regenerate after merging master3804c84b1
derive regenerate after merging master4e555bf3a
derive regenerate after merging master71022ef7a
derive the derived data follows the merged mastere927547a8
derive regenerate after merging master265750f78

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.21.0-aarch64-apple-darwin.tar.gz	0aa31ca2883e083b45453f44e001a1570c0c2adc10f8e5805478aa8df5a9a849
`macos-x86_64`	majordomus-v0.21.0-x86_64-apple-darwin.tar.gz	93bf75213ab072f346c6a37bcba0fb0107896b73726e890c5a2f764314207f15
`linux-x86_64-gnu`	majordomus-v0.21.0-x86_64-unknown-linux-gnu.tar.gz	9ad96b9f7f53c917a385b49a5df032ff04ba400f16275c3ae1a9a2fe649830b9
`linux-x86_64-musl`	majordomus-v0.21.0-x86_64-unknown-linux-musl.tar.gz	d68f1e86c855701dab10ee7e712a358f7dc57c43c8e470e1becd5900f1dab4de
`linux-aarch64-gnu`	majordomus-v0.21.0-aarch64-unknown-linux-gnu.tar.gz	b81832a45721a25e4cd019d8814cb79ed70e011b48437b384a9dfcea38268028
`linux-aarch64-musl`	majordomus-v0.21.0-aarch64-unknown-linux-musl.tar.gz	904210a20060b79cfb73889410c5aa7efb37d68b15ad5327d71877dd64aee12f

v0.20.0

0.20.02026-10-10c8f0e4c508 change(s) 0 decision(s) 6 artifact(s)

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 1

release a released archive carries a provenance attestation the installer checks (I2165)dd5ec84ac
I2165 A released archive carries a provenance attestation the installer can check

Fixed fix 3

plan I2114 names the files it touches, and I1900 is left as master has it192ace8d0
I2114 A task's scope admits what its derive writes I1900 An intent is a typed record whose stage and satisfaction are derived
derive the lock's script holds under pipefail, and its cases see it7455ed364
I2114 A task's scope admits what its derive writes I1900 An intent is a typed record whose stage and satisfaction are derived
derive one derive at a time, no orphans, sees what commits will6a1e63bbe
I2114 A task's scope admits what its derive writes

Housekeeping chore 4

derive the derived data follows master a804ae2045 (0.20.0)f1a892ebc
release raise to 0.20.0 for the provenance feature, and derive7fb5e276c
release record v0.19.1 and the metadata it publishes03e1d8a59
ci the case bound and the slowest-case budget are measured, not typedb1ab190d0

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.20.0-aarch64-apple-darwin.tar.gz	74c11b2a46fbe2942835f4e6004d0fbf647d8e5246ed4fbcafb3c45e63607141
`macos-x86_64`	majordomus-v0.20.0-x86_64-apple-darwin.tar.gz	7eb3e79b512545762621a37a57beecbc78a82d0aed211524eefa063e3ae12437
`linux-x86_64-gnu`	majordomus-v0.20.0-x86_64-unknown-linux-gnu.tar.gz	beb2cd4bcf6d994a53dbfe2a0c526d01e9dcbc22ffd2e4338be1097a82a4d06f
`linux-x86_64-musl`	majordomus-v0.20.0-x86_64-unknown-linux-musl.tar.gz	7e544a0de55d3808158206166eba07208bb762ef6f9d6343a81a7ff496cd1f11
`linux-aarch64-gnu`	majordomus-v0.20.0-aarch64-unknown-linux-gnu.tar.gz	9bce00acf355ce4b1e1b852902196d1ad3ae63301edcc066e6e48071ee8b881d
`linux-aarch64-musl`	majordomus-v0.20.0-aarch64-unknown-linux-musl.tar.gz	84b4201b176eaffa292bfcef7ae77265c6ecaa89f1f0387c840e4e34bb10f80b

v0.19.1

0.19.12026-10-10fe0b58b674 change(s) 0 decision(s) 6 artifact(s)

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Fixed fix 1

mcp a refusal from a serving shared server is answered, and elects nobody8425606a1

Housekeeping chore 3

derive follow the v0.19.0 record19aa4ff6a
release record v0.19.0 and the metadata it publishes121f7dd87
release raise to 0.19.1 and derive8811c8a23

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.19.1-aarch64-apple-darwin.tar.gz	9fd32a8210695b48104e328cc73384571f52773459c0ea994c2f69c788ef9107
`macos-x86_64`	majordomus-v0.19.1-x86_64-apple-darwin.tar.gz	01665bd8de68a134eb690a85ba3cc578106da2407504617c2bfacf769ba5efbd
`linux-x86_64-gnu`	majordomus-v0.19.1-x86_64-unknown-linux-gnu.tar.gz	6271f177b590ad1ba95091205f498ca968b67676793e3e069ab5b96f58a8939d
`linux-x86_64-musl`	majordomus-v0.19.1-x86_64-unknown-linux-musl.tar.gz	3e91ceb9e396767ac28392f9fb032a36ef7d79ed87a8325af411b869efab12bd
`linux-aarch64-gnu`	majordomus-v0.19.1-aarch64-unknown-linux-gnu.tar.gz	62589191c7cdf93f2f5dc24fece5c1015ab046c8298daa3529bc606ee719e9b3
`linux-aarch64-musl`	majordomus-v0.19.1-aarch64-unknown-linux-musl.tar.gz	d508e4c54d3046497a10e72f1e8acd387b099eec3cd1132328f6e47b763b4b43

v0.19.0

0.19.02026-10-093d92c25c17 change(s) 1 decision(s) 6 artifact(s)

Decisions

The architecture decisions the layer dates inside this version's window, each with the route the document records for it.

adr-0123 proposed 2026-10-09

The worker is asked for a handover before the context window fills, by a provider mod the policy switches

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 1

capture the worker is asked for a handover before the window fills81ce30338

Fixed fix 2

capture remove only what was installed, and type no context figures46bde5240
site the release feed shows the changes that exist, not three it assumes86312044e

Documentation docs 2

plan four adopter and runtime findings, and the pages derive writesd45bdb577
I1996 doctor does not fail an adopter on a check written for this repository I1997 The peer board can be read from the command line I1998 A health command in an unsupervised repository does not exit 0 I1999 A tracked file a hook regenerates does not refuse a task that never touched it I1986 The vendored rule package says nothing that is only true of this repository I1995 Work a session left uncommitted in a worktree is named, not found by luck I2059 A rebuild never replaces the executable a live lease names
plan I2059 and I1995, two runtime defects the plan did not hold10178b6f7
I2059 A rebuild never replaces the executable a live lease names I1995 Work a session left uncommitted in a worktree is named, not found by luck

Housekeeping chore 2

release raise to 0.19.0, record the verification episode, derive5b5367f08
release record v0.18.0 and the metadata it publishes1e09f7301

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.19.0-aarch64-apple-darwin.tar.gz	c5c4e75deab6e0741c6a89b8cb0701aaddbf5b555db93829a8ec2ba0ce877d76
`macos-x86_64`	majordomus-v0.19.0-x86_64-apple-darwin.tar.gz	dbb82c3d9c2ffc93ce027ce6085e7e6b22273b8fc844779cc640037796bffaf3
`linux-x86_64-gnu`	majordomus-v0.19.0-x86_64-unknown-linux-gnu.tar.gz	e8e6c7f6305af1416c6b965fb16c0b821710f0f80b91f52dbab8c522207d3cb7
`linux-x86_64-musl`	majordomus-v0.19.0-x86_64-unknown-linux-musl.tar.gz	063bfd95327ce1779e77d58f297291dbf78f3d07eddbeaf69e32e179af3b14aa
`linux-aarch64-gnu`	majordomus-v0.19.0-aarch64-unknown-linux-gnu.tar.gz	af08acfd1c9fd84d6fafd3b03da491cf75d551af1e504980fe8f3301cf903f80
`linux-aarch64-musl`	majordomus-v0.19.0-aarch64-unknown-linux-musl.tar.gz	48c52e57a5f982a6b7d14a4304841b94638ba44f0145e2e4877e30fe5965cc7b

v0.18.0

0.18.02026-10-096800dcb5116 change(s) 1 decision(s) 6 artifact(s)

Decisions

The architecture decisions the layer dates inside this version's window, each with the route the document records for it.

adr-0111 proposed 2026-10-07

A task names what it serves, and the binding is derived, pinned and never stored

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 1

intent a task names what it serves, and the binding is derived, pinned and never stored4f4136ea6
I2000 What a piece of work serves is one derivation, with a revision I2004 plan start refuses an issue whose binding is refused, in both engines

Fixed fix 9

site the source-pin debt is paid, eleven to noneb72089932
batch the suite budget is re-measured, and two failures found in other runs are fixed5f01c9e07
probe a chosen tab's panel that did not appear is not a region nothing reveals707629eca
test two surfaces are compared without the age a finding quotesee24f0d73
test case 938 sorts in the C localebfcd1a7c4
integration an unlisted open successor and a successor read in part hold, they do not release4335a3002
integration a binding the forge spells unreadably is a requirement that was not read9591a68d0
integration a supersession is declared by someone who may, and closes on what git finds1970e9252
integration a required check bound to an app is only that app's run (S1)16d90ffeb

Tests test 3

ci case 97 reads the dispatch arm the release record's verdict split2ce9315fa
mcp every listed tool is one a client accepts, held over the wire310a2c87e
intent every changed line of the binding is covered in process, and its shell is declaredf5de1f889

Housekeeping chore 3

derive the batch's derived artifacts follow the v0.17.0 record3f7e93d0b
release record v0.17.0 and the metadata it publishesc174bca9d
batch batch 3 is composed, raised to 0.18.0 and derived6cbaa8a06

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.18.0-aarch64-apple-darwin.tar.gz	a751cfc79c2720f5f4ee369fc9e33a4a7b1cfc7d55a4299553439f52d15aa127
`macos-x86_64`	majordomus-v0.18.0-x86_64-apple-darwin.tar.gz	c04f7394462706269fbe91ce84dbaab6b730360858a20ed9ead4b92a63640484
`linux-x86_64-gnu`	majordomus-v0.18.0-x86_64-unknown-linux-gnu.tar.gz	ee2746a1d6ddf98eedced3ba340511efcaffcb7ade3ab8dec7e81c5710056eaf
`linux-x86_64-musl`	majordomus-v0.18.0-x86_64-unknown-linux-musl.tar.gz	4e6356f0c6d152bf67091d037d1c742bbc8e273441a75510e2751216cf5e6120
`linux-aarch64-gnu`	majordomus-v0.18.0-aarch64-unknown-linux-gnu.tar.gz	bb92f0a28263c3578bba76ad54fa2fecc2b7b56ce26c21f620337bb699fe765e
`linux-aarch64-musl`	majordomus-v0.18.0-aarch64-unknown-linux-musl.tar.gz	dd24611623a26f3ca7bacd097f5b460d3649bcc67ddc8ae9b2ec385c19792f65

v0.17.0

0.17.02026-10-084090b2b8a35 change(s) 2 decision(s) 6 artifact(s)

Decisions

The architecture decisions the layer dates inside this version's window, each with the route the document records for it.

adr-0110 proposed 2026-10-07

MCP says nothing its capability does not
adr-0105 proposed 2026-10-03

A handover moves between machines as a signed record in a ref of its own, and is resumed only on a plan

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 5

mcp a tool says nothing its capability does not24f88e9cc
timing the timing report is one line of JSON under --json3142d2762
pack a source pack for ChatGPT, verified to carry only committed sources748b4cd22
cockpit the plan, one milestone and one issue, with moves run as executions54cf109dc
continuity a handover moves between machines as a signed record and is resumed on a pland385ed52b

Fixed fix 12

test case 886 gives both runs of context one clockacb1ebb45
mcp every tool's input schema is an object at its root88a03d1fc
pack every changed line of the source pack is reached by a test7573e2682
cockpit the plan pages spell no layer path and their links are 24px targets98f386a02
mcp the clients are ordered by the canonical order, and the case's requests are boundede90368b7f
security a remote's URL is published without its credential8fdb8ed2e
pack every exported item shows itself, and the pack tools are called8592877a0
server the staleness judgement is unit-tested and case 885 is boundeddc1119870
cockpit the issue page's moves ask capabilities.describe, not the registrya23e632a3
server a server serving code that no longer exists stops calling itself ready8c29f1f3a
I1502 A server serving code that no longer exists stops calling itself ready
handover two records of one second resolve to the later write, not the larger suffixfd36929ae
continuity the offered handovers and the changed paths take the canonical orderaa46dceac

Documentation docs 2

continuity the continuity code carries its examples and its tests9b4d3f1b4
mcp every exported type of the projection carries an example, as rustfmt formats itfe6d177c5

Tests test 11

continuity every changed path of the continuity code is drivenfbea8da0b
continuity the command writes its report once, and the cases name their remote branchc123ccd97
continuity the seven continuity tools are asked as a client asks them1aad152bd
mcp every changed path of the projection is driven; unreachable arms are foldedf1fe41d8c
session every branch of the public URL rule is reached by a unit test28ada7aa6
mcp a remote keeps its login, and no shared record holds its passwordba47d6651
mcp the projection's account of itself is held against the servera79fcdf9b
mcp the stdio round trip asserts a tool's hints, not the constant they replaced82a7ab31d
mcp the server is held to the protocol and its boundaries from outside032c54ee0
cockpit the last unreached arms of the plan pages are reached88c1edacb
cockpit every arm of the plan pages is reached by a testf4401610e

Housekeeping chore 4

batch batch 2 is composed, raised to 0.17.0 and derived3b9f93790
release record v0.16.0 and the metadata it publishes52e9738c6
derive the projections follow the merge with mastera993a21d4
derive the projections follow the conformance suite6bd507c91

Formatting style 1

integration the trail test is formatted as rustfmt formats it9f00e62c6

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.17.0-aarch64-apple-darwin.tar.gz	db80bb29dcc5a708c68a2de10451f353f3a03f74ba1b0e9d49cd988ed6de593d
`macos-x86_64`	majordomus-v0.17.0-x86_64-apple-darwin.tar.gz	2293e5867027162b62c759ca87bade6cda10d154d7f344bae42628992cf5588f
`linux-x86_64-gnu`	majordomus-v0.17.0-x86_64-unknown-linux-gnu.tar.gz	d18f937c74936dff76eb383a5647e9e92f88e991e492e992072fe00c9e576867
`linux-x86_64-musl`	majordomus-v0.17.0-x86_64-unknown-linux-musl.tar.gz	7597dcf38b2bea144ddb0d54178ec57d9f22fcea908a29a27d5169b9ea0944ee
`linux-aarch64-gnu`	majordomus-v0.17.0-aarch64-unknown-linux-gnu.tar.gz	fd4ca7f47470e83d44986078ffa76d0a4208aa7a89710a7bbaf16ccb9908d1dd
`linux-aarch64-musl`	majordomus-v0.17.0-aarch64-unknown-linux-musl.tar.gz	a5fc3dd0a1d2be2bf31fb41fb9e4689b29ead66ad3b037ba107c5e32507f4f2c

v0.16.0

0.16.02026-10-08f70c522d724 change(s) 0 decision(s) 6 artifact(s)

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 3

serve the interface a local server binds is the machine's to namec39c30cb7
evidence a recording carries what its run measured, as a typed run0e0e9443e
evidence a crate binary that ran nothing is not a pass62f9ec556

Fixed fix 9

batch the findings of the first run that are the batch's own90b6dff01
docs the heading a link names has one anchor in every renderer4f5baa60c
test case 991 judges a terminated command after the one that follows ita390e0235
live a request that arrives during a rebuild waits for ite3e122211
test case 413 records the reports its run stampedb2f66bc5b
evidence a run's records and its excluded outputs are put in canonical order2f12b7501
finish the registry declares exit 13, a note that could not be recordedbcaef20f7
finish a note is read once, and kept before the outcome says completed1b404b69c
lint a reporter that sets a flag is a reporter15f95faf9

Changed refactor 1

evidence a coverage summary is read without a debug-only assertionc0a296d0c

Documentation docs 3

serve the host resolution's public items carry an exampledec928066
evidence the stamp and record pair says why no documentation check runs it67daf5123
evidence a run's totals say what they count9687d8b0f

Tests test 5

serve every arm of the host resolution runs under a test29865face
evidence the newest failing recording is the one a stale judgement names3265284a1
evidence every line the typed run changed is reached by a test5a96f3a6e
evidence the text recording runs through the command and reports a failed writedf28b9543
evidence every line the crate adapter changed is reached by a testd41005bbb

Housekeeping chore 3

derive the batch's derived artifacts follow the case 991 fixa27f5b7d6
release record v0.15.0 and the metadata it publishesf062a71cd
derive the projections follow the merge with master0594c0097

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.16.0-aarch64-apple-darwin.tar.gz	b92c3af90eed4214687d47f213552525a468f9155b09533d21c2c382a4d532be
`macos-x86_64`	majordomus-v0.16.0-x86_64-apple-darwin.tar.gz	9ee53da267155e5fa372f1a539e34430ff4b3f20f9bfca16b02752a1411e2d24
`linux-x86_64-gnu`	majordomus-v0.16.0-x86_64-unknown-linux-gnu.tar.gz	f784ddaf5c29b654fc4c678cfc2c8abfcb8d5a7e8d8998d63f0c1cda0cb4f167
`linux-x86_64-musl`	majordomus-v0.16.0-x86_64-unknown-linux-musl.tar.gz	62d6248ebde7f3dac784957a2e05eadcf87914132a4d81c36041f6de179f863b
`linux-aarch64-gnu`	majordomus-v0.16.0-aarch64-unknown-linux-gnu.tar.gz	2a2973a878f426930564284c915ae2c292f6ea828a67c3df451474f234310120
`linux-aarch64-musl`	majordomus-v0.16.0-aarch64-unknown-linux-musl.tar.gz	aa85553180e1b0ec18230e7d10814f2338049229162578ba7fe79efa18585c1a

v0.15.0

0.15.02026-10-0776a7a234076 change(s) 1 decision(s) 6 artifact(s)

Decisions

The architecture decisions the layer dates inside this version's window, each with the route the document records for it.

adr-0107 proposed 2026-10-05

Completion discharges obligations and never decides whether an intent is satisfied

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 10

mesh the owner's MacBook Pro is a rendezvous hub on the LAN5e81feda0
mesh the owner's second MacBook Pro and iMac are trusted45b8d5df8
intent derive an intent's verdict from its evidence aloneed66fee5e
site a feature page is placed under its domain and told in order55b52bf3f
site /features/ is the product by domaina03cfa6bc
site one feature card, drawn from a feature or a domain memberb17efb1ad
site every badge component is drawn by the one status primitive3a538752c
site the challenge tells the story of its run before its output50997beaa
site one terminal primitive for the concise story and the full evidence16e1d5a92
site one status primitive, and the chain from a claim to its proof27445eaf8

Fixed fix 30

tmp only a name directly in TMPDIR is moved, and a dead root is sweptf9b6e00a1
tmp a command leaves nothing behind in TMPDIR744c7d552
update the renderer's scratch directory is named as the temp path it isf7b9d6d4c
site both committed site graphs are taken through one refusal, which a test reaches4e7d9f49a
economics the context suite is re-recorded at B3's tree2488bc630
graph the composed graph read as data is whole; a committed graph is never a prefix9f98133aa
integration a drain says why it stopped oncebdabd87db
test case 545 waits for the re-read it is promised; multicast binds the port it uses7e78012d2
intent case 895 sorts pinned, and the satisfaction rule names no absent pathf1880423b
test case 884's feature and domain declare what their schemas require4153efdd4
doctor a stale bootstrap warns; the rule names its enforcemente2a9a7b43
doctor a generated bootstrap names only rules in force48869b3ca
site the copy-button spec reaches a button inside a collapsed disclosure924ad830c
generate the registry counts the web surfaces every checkout hase6392cc17
intent a criterion is met only by evidence current at the judged revision88223bb02
intent preflight follows what an issue serves and answers serves, maintenance or refused9d3449a35
github --apply refuses an adapter loaded from a tree that is not the trunk64cd0ebef
release prose names no version label, and the limitations page says what is true82d3b7c67
github --apply projects only the clean trunk, one at a time, and a refused write fails itc97f92cf4
site-check the feature-id grep pattern braces its variable (SC1087)b60361833
site a feature's status and its claims' proof use the one status badge7dec31466
knowledge a domain is a kind the graph knows, and a feature is part of its domainc7484f446
knowledge every kind the skeleton declares is a kind the graph knows435392297
site a status badge contains its own screen-reader label39d3625f5
site a copy button says when the clipboard refuses, and a run's exit reads as a numbereb0a11e66
site the features hero gives its three ways in equal weight21331aef4
site a feature's own headings read as headings and lead its outline3b91599f6
site the interfaces table keeps its caption inside its scroller7fa8d2240
site a recorded run wraps inside its block instead of scrolling sidewaysc3a04f441
yaml a doubled quote inside single quotes is one quote9030dc479

Changed refactor 4

site a graph artifact is one map, with no branch a graph cannot take19c183c6a
site both site graphs are one artifact helper, with no early return a test cannot reach92923fac5
intent the plan-records filter takes no branch a comparison never reachesdc06d3961
intent drop the unreachable unresolved-milestone branch in driftc65e0012f

Documentation docs 12

readme restore the token-measurement limitation #785 wrote, and derive the batch on B3a3c97b048
graph derive_whole links derive() unambiguouslyd44649947
integration the stage-1 transcript is marked as a run against the real forge2260311ef
integration rollout stage 1 is recorded, taken with the released 0.14.0e5ff8962d
mesh MulticastProvider::port carries its example79ecdbb94
intent the preflight claim says what preflight does: serves, maintenance or a cause7dcb7b50f
rules the intent rules list every drift code the engine emits834e75bc2
intent completion never decides whether an intent is satisfiedd8580ff69
intent the preflight says it is at least as strict as validate, not its twin307387374
intent the preflight claim says it is a question, and the new prose is wrappeda737898a7
intent the homepage lists what of the intent model is built from the claims matrix2bb84d39f
the declared status is "rejected", and economics measures what it measuresbdd0fd6f5

Tests test 8

integration a drain's JSON report is driven; its write takes no arm of its ownb30dc76f9
intent every reachable path of the preflight is driven; unreachable arms are folded7ac448873
intent case 893 drives the preflight's three verdicts through a fresh initfe5e8be96
release every changed branch of the label check is covered by a unit testf76abc08f
site case 12 asserts the matrix's two defined evidence columns6b8611e51
site a feature added under a domain is drawn there, and removed, is gone3370cd526
site site-check holds the feature index and pages to the datasetb97de7c7c
site a status speaks the vocabulary of its kind, and a refusal count is the run'sb9559c211

Housekeeping chore 12

plan close the four issues master already holds, and the episodes nobody closed21704692c
I1516 The adapter composes a projected body in one place I1520 A step that runs out of time says so itself I1945 The test-evidence decision and its plan are recorded I1015 A surface with no server behind it is not offered as if it had one
release the intent batch is 0.15.0, the minor its public contract requires05ed532db
derive regenerate after refreshing the intent batch on master 5908234ce0f1dafe906
derive regenerate B3 on master 5908234ce0 (v0.14.0 recorded)f6eeac612
release record v0.14.0 and the metadata it publishese772b9e83
derive regenerate B3 on master 815b96b5a1 and the flakes fix340955ce5
derive regenerate after composing the intent batch96f214782
release release 0.13.2 with B33ea3c8bc1
derive the registry counts the surfaces a clean checkout has00e71aff3
derive the projections follow the preflight rebased onto master985053190
derive the intent claims' projections are current on master 2a4fe055b8b7ec513ae
ci case 810's duration is measured, not defaulted8f7ec3cc8

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.15.0-aarch64-apple-darwin.tar.gz	744aee1f6fc97f729658693dcd2b9edfe89304e86b031611fa8be6cd59ded00f
`macos-x86_64`	majordomus-v0.15.0-x86_64-apple-darwin.tar.gz	e617e74ae909d3c83470cc0e5e1e35210d5e2efe242d085c4eac0bc691bc1a8f
`linux-x86_64-gnu`	majordomus-v0.15.0-x86_64-unknown-linux-gnu.tar.gz	17ea431086936b213acd6eb56bd2bc2396d0f3916a65e47165094ee1a3c79ddd
`linux-x86_64-musl`	majordomus-v0.15.0-x86_64-unknown-linux-musl.tar.gz	a9da8a5d941fb44cdd83c012a1db075877e621952efe4867e1a40bddd5e3f073
`linux-aarch64-gnu`	majordomus-v0.15.0-aarch64-unknown-linux-gnu.tar.gz	3218abe60a5ead6336fdf1535b8710d585fb00b7faf1349644e3535f45a5055c
`linux-aarch64-musl`	majordomus-v0.15.0-aarch64-unknown-linux-musl.tar.gz	ed6d4e068aa260fb0f11053bc9e25543bfb0bd98a7290e64149f7a74b12d797c

v0.14.0

0.14.02026-10-06815b96b5a67 change(s) 0 decision(s) 6 artifact(s)

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 18

integration one executor per repository across machines, and its throughput is seen9272aaf79
integration an overlap names its kind, and risk reads what a merge changes (WP16)46d40ac7f
integration a dependency is satisfied by a merge alone (WP14)83f35ec7f
integration continuous mode is gated by the trail's record of verified merges (WP21)3ba8aa2a1
integration an offline cleanup read, and Obsolete only from a person's label (WP23)85ca02dbf
integration every assessment names its issue and milestone (WP24)1e3317556
integration a rank names its factors; dependents and size order equalsb4f0befd3
integration prs repair brings master into one named pull request; scripts/unblock retired2c241c981
integration cleanup reports the branches merged pull requests left on origin (WP22)3b2de048e
integration cleanup closes only what it decided, at the head it decided on239cfb2e4
integration a refused candidate does not block the queuefbbc05546
integration redundant work and a landed successor are told apart (WP13)e9c33d54b
integration a merge is proved where it landed; an unverified merge holds the drains60267eae0
integration auto-merge is Unsafe, only a merge commit merges, one label policy (WP12)34c521981
integration reasons, evidence and gates are typed, and every gate is reported (WP11)76e19e1d0
integration the integrator's throughput is folded from its traild2eabd65d
integration a dry run is proved to move nothing (WP29)429b08201
integration required checks and reviews are authoritative2c8f32e8d

Fixed fix 22

site a feature's capability row wraps a long tool name193a8ff7e
integration the proof's listings take the canonical order; a long tool name wraps5b5e2d9e4
test every scratch clone the executor merges in names its own identity9ac18b1d5
integration a branch that moved since it was observed is a stale refusalcc02c9a41
integration repair pushes without a lease; case 720 stays strict44ece5bf4
test cases 720 and 850 follow repair's pinned lease and the dependency readc6d71803b
integration the leftover claims are released through the claim the lease holds38eda121e
integration the private module's doc examples are text, as its convention says7fc1edd73
integration repaired heads hold the pipeline; a diagnosed repair dry run exits 101ccf07926
integration the dry-run proof reads the repository's trail, and a Rust test measures it16a73a02d
integration the dry-run proof judges only the mirrors it observed705920d5f
integration reads write nothing; an aged observation is said137b80590
integration a lease is renewed or lost, and taken for the observed base655ff9238
integration racing executors merge once; the lease is a held flockc75f2b201
integration every destructive act is on one shared trail before it happense27f2aabb
ci nothing merges a pull request around the integrator701cda1e9
integration check-attr's paths are written while its answer is read62b7fec4d
integration a ref-keyed relation is dropped while master stands stillc061ea5d5
integration the executor's own head holds the pipeline while its check is unreported11800aa4f
integration every changed line of the relation path is reached by a testf661feb39
integration a relation is decided on the observed head, and only facts are keptb8b270b00
integration the classifier reads what the forge and the trail say, not proseb9c8334c9

Changed refactor 3

integration the dry-run proof has no failure branch it cannot reachb7aeebd55
integration what merged pull requests left is read by cleanup, not refresh (WP22)e0b2908b5
integration a marker's word boundary is the number list's own2f062f215

Documentation docs 1

integration review states, dependency markers and relation freshnesse515d9ee3

Tests test 17

prs explain says a dependency that landed as well as one still open5ccc6fc2a
integration every changed path of prs repair is driven; unreachable arms are foldede350e5292
integration the reconciler, a squash landing, explain and a failed proof are driven6d901dc37
integration the model, the classifier, the relation, the queue and the metrics owe nothing9eec14527
integration every changed path of the executor is driven; unreachable arms are folded72d8b44dd
integration the executor runs against a scripted forge; a declared test module is test code7cb724e95
integration the trail harness answers the read before a closure; a silent refusal is named9d0dc8df1
integration case 850 names the strong case redundant, after the D2 rename756ab3597
integration every scripted forge answers the ruleset read, and 850 reads the shared traile99fc7012
integration required checks and reviews, end to end; ADR 0101 item 3dc5a363a6
integration the drain re-plans after every merge, across five drainsf6d8b2310
integration what the trail must refuse and keep, stated before it is fixed51c559aa7
integration the bounded hold's trail lines without a time or a head are testededb04cfcf
integration the fork filter, the base guard and the pending-only hold each have a test77fe089cb
integration a relation is the observed head's, stated before it is fixedbb1a0a44c
integration what the classifier misreads, stated before it is fixed26ff31abd
integration the harness scripts what changes between two observations4f655e79a

Housekeeping chore 6

release record v0.13.2 and the metadata it publishes20ad547fd
release n6 is 0.14.0; a branch that cannot be listed is refused as suche49456930
derive regenerate batch-n6 on master 9a31fed5e5 (release 0.13.2)88f097dc2
derive regenerate the composed batch-n6 on master b557ab1c8c14dbff991
derive WP22 derived after merging batch-n6 1d6e1c926d1f4aae
derive batch-n6 derived after WP12141c5b39f

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.14.0-aarch64-apple-darwin.tar.gz	6bd455c540bf7e52a411df724eee07ff1dc53fcb90a3076996281268e2dde53f
`macos-x86_64`	majordomus-v0.14.0-x86_64-apple-darwin.tar.gz	af3392bb8e73928e0909fa3d74a7c220147d1f5128ea7873270cc23a050ca0c3
`linux-x86_64-gnu`	majordomus-v0.14.0-x86_64-unknown-linux-gnu.tar.gz	4338a4643f697ca005c5cac597f5c93314bf906fdd31ca6b7a91ae6ab1838069
`linux-x86_64-musl`	majordomus-v0.14.0-x86_64-unknown-linux-musl.tar.gz	84bfd813eb4be2a4db50f6c12470fb48ff107c97c18f0b3f42f042c714b84984
`linux-aarch64-gnu`	majordomus-v0.14.0-aarch64-unknown-linux-gnu.tar.gz	91e824614e48e941422ac55d3adbd921a7fdcdb218762f765f1eb8003651fc40
`linux-aarch64-musl`	majordomus-v0.14.0-aarch64-unknown-linux-musl.tar.gz	460f9a8b56d3e086994dc530b1ff9425134fddba8744b2b45fe4b0b2aa62376c

v0.13.2

0.13.22026-10-069a31fed5e16 change(s) 0 decision(s) 6 artifact(s)

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Fixed fix 7

providers the worktree guard is said in as many lines as before65940e375
context a path not created yet resolves from its ancestorse7e032f02
decision a supersession names one recorded decision, and list marks it261cc27a7
cli an installed majordomus runs the commands its bootstraps nameed11f797c
check scope leaves out the commits a fast-forward or rebase brought from the trunk5f42631e7
doctor the lifecycle doctrine counts the episodes of the branch it judges3f2076d13
doctor a linked worktree's hooks are found where git keeps theme39a83664

Tests test 2

cli the forwarding case accepts the executable under either name25313dbc9
doctor the linked-worktree case leaves when it cannot enter the worktreeaa652b90a

Housekeeping chore 7

release release 0.13.2b0944db92
derive the batch follows #783 at its budget-sized worktree paragraph515bd83c3
derive the batch's projections follow master with the v0.13.1 record84a324cfa
release record v0.13.1 and the metadata it publishes35535728e
derive the batch's projections follow master at v0.13.13419a1c1f
derive the batch's projections follow its seven members3abde34fb
plan an adopter's upgrade is a planned outcome, I1980-I19911aaf9f86d
I1980 A layer names the tool version it was written for, and doctor tells version skew from defects I1991 A comment-only edit of the policy regenerates no bootstrap I1981 A command's effect class is declared per subcommand and flag, and live scenarios judge the whole argv I1982 Plan stamps written before seals existed are re-sealed by a command that keeps their original times I1983 Upgrading the vendored rules reports or applies the policy and source keys those rules depend on I1984 Knowledge candidates never leave untracked files on a trunk that only pull requests change I1985 A knowledge candidate relates to its own decision and commit, not to the whole episode I1986 The vendored rule package says nothing that is only true of this repository I1987 A knowledge record's file provenance survives the file's deletion I1988 A use case's setup scripts live where the adopter declares, and its scenarios may run the adopter's own commands I1989 init seeds a scope for the stack it finds, not for this repository's I1990 The pre-push check judges the refs being pushed, or says why the checkout's task binds them

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.13.2-aarch64-apple-darwin.tar.gz	5e98d56a3e2e713856603251d047cd79f2a3696cd8282c88d92c91692a0b67fe
`macos-x86_64`	majordomus-v0.13.2-x86_64-apple-darwin.tar.gz	02cd6372564405d7816192bfcd003950502cc9c0ed0cfe7a688dd200d01f2c2a
`linux-x86_64-gnu`	majordomus-v0.13.2-x86_64-unknown-linux-gnu.tar.gz	60280e182b2d581969bc603a5b1230d67932fa8e82f7a7e39a6c0dea741a1c3f
`linux-x86_64-musl`	majordomus-v0.13.2-x86_64-unknown-linux-musl.tar.gz	3a55f5dda4054a819f6aa663d0ae1e3788a73b45f345a505e5134f5e2b99e960
`linux-aarch64-gnu`	majordomus-v0.13.2-aarch64-unknown-linux-gnu.tar.gz	3903322ee961c43e689d6c8295003c0396be8d7ae504a402f5fdd2afa9ca6cba
`linux-aarch64-musl`	majordomus-v0.13.2-aarch64-unknown-linux-musl.tar.gz	4e1c67dd8d307a0cb46479ad0e34a5beeeda5c626a73f35105e9be363e17d1cc

v0.13.1

0.13.12026-10-042a4fe055b19 change(s) 0 decision(s) 6 artifact(s)

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Fixed fix 9

site the domain page's prose reads its headings as headings8294cc6d3
rules a unit-test module in its own file is proof the crate gate runs185a30977
release the installer reads /proc where the system has no ps4122d3192
install an upgrade keeps a superseded tree a running process usesfa305ca91
live a write this process made is a move, on every path that can make one7dfba01a8
pages a rebuild is chosen only for the trunk's own tree901a146c2
test CI fails on a skip, and a skip is excused only where another job holds itf04717040
I1967 A reporter that sets a flag is a reporter
reap a server that holds its checkout's lease is not abandoned849d314b0
site a prose heading reads as a heading, not as a linkd5ba8abeb

Documentation docs 2

how-it-works every claim the independent audit refuted or overstated is corrected456e42fe6
how-it-works the architecture as the code ships it, mapped and audited3facc7974

Tests test 3

batch-n2 cover the batch's changed lines, refreshed against masterd33d51e1c
rules a unit-test module in its own file is run by the crate gate104593bdf
site a prose heading reads as a heading, held by case 82046e26b295

Housekeeping chore 5

ci the suite's total budget follows its measured cost under load99d7196d6
ci the slowest case's budget follows its measured cost under load8bf38314f
ci the coverage job's bound leaves room for contended runnersdc8c42ecc
plan close what master already holds, retire the manifest nobody can sync02706daea
I0901 The deployment description is a kind of the layer, not a provider file I1006 The runtime reads the graph through the registry, like every other read I0810 A content-hash manifest that makes a second sync cheap I0811 Read-only knowledge lookup with an ordering that can be explained I0809 Record only edges that a file states, each with where it was observed
release record v0.13.0 and the metadata it publishesa14e24542

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.13.1-aarch64-apple-darwin.tar.gz	d74c537a9aebf4dadbd414217e9ddc985a65964d3a0bfe1a32ca77678d563516
`macos-x86_64`	majordomus-v0.13.1-x86_64-apple-darwin.tar.gz	cbb7e7988cbd153193a0d2f02a35c94a66e69cd11c809df9fd639794ad6bb64f
`linux-x86_64-gnu`	majordomus-v0.13.1-x86_64-unknown-linux-gnu.tar.gz	37adf894971411c5a6a98d83091b1d585616ad8d5917428c26ad0dc2727d493d
`linux-x86_64-musl`	majordomus-v0.13.1-x86_64-unknown-linux-musl.tar.gz	1ff8628b3944cdf5febc53c2e06d86c3fe3522bcc89771c1e7a134a0988023f7
`linux-aarch64-gnu`	majordomus-v0.13.1-aarch64-unknown-linux-gnu.tar.gz	cba95ca7d885e4e4ab1ea94c19fc338772c9edac21ca50ae62755fd38d4f6f06
`linux-aarch64-musl`	majordomus-v0.13.1-aarch64-unknown-linux-musl.tar.gz	0815c41b152abe4533533b0d0766900bb6a1f8416b81bcab1787900f28a15a4e

v0.13.0

0.13.02026-10-04f0751705335 change(s) 2 decision(s) 6 artifact(s)

Decisions

The architecture decisions the layer dates inside this version's window, each with the route the document records for it.

adr-0104 proposed 2026-10-03

The product is filed under a few domains, and a feature names its one
adr-0077 proposed 2026-09-17

Published content may be written in the reader's language; the repository's own artifacts may not

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 5

site the homepage is told overview first, and the product map is its domainsb9f476920
product the product is filed under a few domains, and a feature names its one6de049eae
site two articles from one evidence base, and the rule change they neededd8c97273f
serve what a lease contest is judged by is declared, not compiled64143f0ed
ci the queue measures itself, and still cannot mergeab06f4382

Fixed fix 12

site-check the homepage's navigation is read by landmark, not by its first 80 linksb9a9a0e6b
batch-n1 the product-domains claim page carries the five sectionsc4557bc0f
batch-n1 the four CI findings on 487cedf70862769f
site the bar lights the group that holds the section a page lives ind5051df78
product what the product surface claims is what the model can backb1555082b
rules land-and-publish describes the serialised pages group, not push cancellation98e7fd9ae
lease the declared lease timings carry examples of what they answer7d8e0dde2
env publish the server after startup and show one entry heading48f13f3a0
site-data exit 13 names every internal step, and case 593 asserts what can failbc2df49ff
site-data a read that failed is not an empty repositoryfc885ff63
serve a slow but live owner keeps its lease; a wedged one is still replaced48ce13299
pages a deploy is not cancelled by the next mergeffb62646f

Performance perf 1

site the navbar needs no Flowbite; its collapse and dropdowns are site/nav.jsedeb6ec0a

Documentation docs 2

product every public domain type carries an executable examplecd7caaa1e
cockpit the feature record states what the Cockpit can writef769f0d70

Tests test 8

env the entry's episode and checks are covered, not only their doc example487cedf6f
product every changed line of the domain model is coveredd00baded7
shared a stopped server's listener is awaited, bounded, not probed once074b40046
coverage a replacement that cannot be started is an error, not a ready server17a4fe283
coverage the declared lease timings and the replaced-executable take-over are exercised86f785d5e
reasoning a linked mesh runtime advises, and its absence leaves reasoning intactbd9026db3
site the published pair must state the same figures1863e82ae
serve the lease-declaration case is 354, not 349e46c62acf

Housekeeping chore 7

derive the projections follow the merge with the v0.12.0 recordb40738da8
release record v0.12.0 and the metadata it publishesa570e5c7b
derive regenerate after merging masterec462fb4a
derive the projections follow the merge with batch L0ddc56041
derive re-derive after merging the Cockpit record fix9e4e6a47b
the lease branch follows master8980326f7
derive the projections follow the merge with master9c7733cf2

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.13.0-aarch64-apple-darwin.tar.gz	a556d96fcd8b4b6c24ad8c3c988e65d7eccc84b4d4a9116b87ef5e427ed1b739
`macos-x86_64`	majordomus-v0.13.0-x86_64-apple-darwin.tar.gz	08a686e7a082693541995b7f768a4c0e1dff38a38ae74b1f5e84bb8195dcf7fb
`linux-x86_64-gnu`	majordomus-v0.13.0-x86_64-unknown-linux-gnu.tar.gz	6c828fe60b3fd1b002a1924c6b6e7021aaaa3a278ba941b59b685ee9abca8657
`linux-x86_64-musl`	majordomus-v0.13.0-x86_64-unknown-linux-musl.tar.gz	71fd00c91e1b394c7492dc4451cebe19a7e44cbed0172fa0330162d55ba8b75a
`linux-aarch64-gnu`	majordomus-v0.13.0-aarch64-unknown-linux-gnu.tar.gz	84ad1c317e21efa475b0e7d078c93eec273d523d236d356035a53aefc3ed8f2d
`linux-aarch64-musl`	majordomus-v0.13.0-aarch64-unknown-linux-musl.tar.gz	52038e7a81d4a67aec7c1393388e4cf43b8d51780113c99b93baf0cd0f8d90f9

v0.12.0

0.12.02026-10-03a137c3fe1132 change(s) 6 decision(s) 6 artifact(s)

Decisions

The architecture decisions the layer dates inside this version's window, each with the route the document records for it.

adr-0076 proposed 2026-09-17

A skill is a capability only when something proves it — tested, documented, enforced and used are derived, never authored
adr-0075 proposed 2026-09-17

Which work realises an intent is a join over the records the lifecycle already keeps, and closed work does not outrank evidence
adr-0073 proposed 2026-09-15

An issue names the intent criterion it serves, and the coverage of every criterion is derived from the plan
adr-0070 proposed 2026-09-15

An intent is a typed record, and its stage and satisfaction are derived from the plan and the evidence
adr-0091 proposed 2026-09-12

Knowledge is derived at the episode boundary, from the ledger and git, and a person promotes it
adr-0046 proposed 2026-09-11

A working context is derived and a closed record is composed; neither is a document somebody must remember to write

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 23

site the homepage is a landing page, on a dark stage, with the evidence up fronte4a652f1d
site the homepage is the landing design, composed of the kitfe16b7893
site the eight page designs, composed of the kit from real data20435f1b3
site /kit/ is a section, and a screen is a page composed of the kit13eadc43b
site a component kit the product and documentation pages are composed of86adf6dd5
derive a visitor watches the tool refuse an agent, from one recorded run973d885ab
I1600 The challenge is one recorded run, and every public surface replays it
ci a documented command is run, or says why it cannot be2e2b1b808
test a case can name what it covers, whatever kind of thing that is3d6aef2af
ci advisory is not an exemption from naming proof16226ef12
knowledge derive knowledge at the episode boundary, serve it everywhere, enforce it26a1dd777
evidence a subject is judged at the presented revisionf27139ecd
evidence subjects are derived from what the layer declares405732fc3
site every tile that shows a fact names the test that proves itc1e87622d
skills a skill is a capability only when something proves it773cb6da5
cockpit an intent's page links each criterion to its test and the work realising it98b5921c4
intent the work realising an intent is joined across episodes, providers and handovers706f11593
I1903 The work realising an intent is joined across episodes, providers and handovers
intent an issue names the criterion it serves, and the plan is held to its intent127919bf6
convergence where the work is held is a verdict, not a thing somebody might notice8381c9c3c
ci a release follows the verdict, and a check that could not measure refuses2b22edfc4
intent an intent is a typed record whose stage is derived06cccb8ae
product a claim shows the test that settles it, and the matrix counts what is provendcfbd073a
session every client gets an episode, and every provider capability cites its evidenceef103581f
session a closed episode's record carries a composed bodyf07c772fb

Fixed fix 65

batch-l the realization read carries an example, and a tag header wraps at 320 px4f57a9c6c
cockpit the intents page asks objects.get whether it holds an objectbb2b892a2
site a component argument that is a variable is passed in braces230828448
batch-k a proof link names the built commit, and case 409 reads find without a word split711d93d35
mesh the multicast test binds the port it then listens on31e0cc358
site the features screen builds without the getting-started page949d9a51b
mesh the UDP test binds the port it then listens onc1443916d
economics the context suite is re-recorded at batch L's tree6728930e0
intent plans and realised work are shown in the canonical order8d4486c1a
site a kit table scrolls by its class, and a route name breaks96dc16862
docs the release verdict step is marked as one only GitHub can answeraf420c7fd
site two branches the coverage gate found untested, and a modulo read as a percentage6af537d80
probe a list filter is judged once its items have settledc1f7879cc
batch-j session context's fixture states #220's contract, and skills find their own executable87f8f2e08
probe a wait polls on an interval, because a starved renderer delays its frames tood0fe5ac81
site resolve the kit sheet the merge left in conflict, and the homepage's two overstatements630bcf661
probe the kit's copy and search specs judge what happened, not what remains8d43722d9
design text on a tone's ground is measured, and every tone ground passes it51093cff9
finish the vacuous-verification finding is one the reproduce gate can read45feab9a8
test a prefixed covers word names no command, and case 409 sorts in Cff0eeef42
site every sentence on the screens is true of this repositorye3e486a33
site the kit builds without CSS and its secondary text reads on a tone07cbdc40c
probe a revealed panel is given the frame Alpine shows it in274794df1
site the rest of the screens scaffold, which the previous commit left out3cd59b334
economics the context suite is re-recorded at batch J's tree740d8624c
batch-l a plan is started by its transition, not a hand-written stamp511946c72
I0001 Audit what actually plans work in this repository
batch-j the members' cases, gates and rustdoc pass on the batch's tree78f09f8af
site the economics revision links are targets a finger can hitdaaa96a73
site the kit passes the gates CI holds it to, and 0.12.0 carries the tone kind6690fb53a
economics the context suite is re-recorded at batch L's tree94e8d8c58
server an episode survives a reload, and a bench counts its own executora7e206554
economics the context suite is re-recorded at batch I's treefe1c9fefb
batch-i the intent kind is declared and the campaign check sorts as it joins8183164ad
usecase a recorded verification does not carry the recorder's tree537c4e7c9
test the intent record tool is run over MCP and its answer checkedeb4ac5e0d
test case 409 skips through the helper, not with a bare exit 022affef5c
test batch I's cases hold to the rules its members bring together1fce827b0
test the convergence tool is run over MCP and its answer checkedad54d9bde
site the intent, gap and critique kinds say where they are publishedb128120a8
repair the context suite is re-recorded at the merged tree16713d31b
ci the rust job runs when the plan selects the intent-realization gate5f158bb06
adr a lock is broken only by a breaker its holder's release must wait for610c3fd29
ci the campaigns check refuses names and entries it cannot recordc542a6a2a
shell the release verdict is a declared unit of the inventory19a8a130d
ci the campaigns check sees every manifest, and hashes without Perlcc48da39b
shell an installed tool finds its own executable, not one in the repository9a4a69a96
ci the campaigns check runs under pipefail and is declared67e6cf587
doctor a coverage name the installation cannot resolve is undecided, not broken39bd6ff2f
site a claim's test path wraps on a phone, and case 12 escapes its dot73cb31501
test every fixture that copies the harness or rust-check carries lib/sha256.sha9a97b4a0
site the challenge pins its source links and a feature owns its use casecef1d85b5
ci the plan job exposes the intent_check output the rust job is gated on01a97489c
test case 638's foreign-tool example is a command the liveness gate does not flag5ca4912fe
test case 617 runs both coverage checkers and names are matched literallyb58c13afe
project issue I1962 no longer scopes the deleted surface-coverage script42a5715ee
I1962 The evidence gates read subject findings and widgets
rules the liveness rules and the proof claim say what the gate now readseae78d958
shell nothing in the repository runs perl, and two scripts nothing calls are gonee483e16e4
test the knowledge cases skip through the helper and never read as an early exit49eab1762
ci the rust job is gated on the intent-check plan outputc7aa59493
release a tag older than the record practice is a note, not a defect86ba91c53
site-data two payloads are read from files, because Linux caps an argument6ea7331f2
convergence holdings are ordered once, and every public item shows what it does26dd52a38
ci a campaign brief may name what this repository does not have8ecf38b24
cockpit derive the areas and the route table from the dispatcherde8415b6e
gates the evidence gate stops adding a finding to the pipefail ratchetba41577fe

Changed refactor 1

order fourteen collections take the canonical order, and the baseline falls to 928221eeac7

Documentation docs 5

plan graph.json's node cap is an issue with its measurementd4a4ef37a
I1966 The composed graph is whole or its generation refuses
release the test names the baseline, not an unpublished historydc18ef273
site the manifesto says what exists now that coverage and the two records doc3c0c7fd5
intent every exported item of the intent surface carries an executable exampleb24618309
campaigns the briefs that drove these campaigns are tracked, and kept as receivedafeebbb9a

Tests test 11

coverage gather's open-episode and peer-checkout paths and the empty-work renderingc53bad7c7
coverage the subject judge's changed lines are exercised317a827a1
intent cover realization, review and plan coverage; one split per serves token37f9de5be
coverage the lines batch J changes are exercisedde11b4b28
design the inventory is read with tones and without them0fe4658e9
coverage the intent lifecycle's changed lines are exercisedb11ae7700
usecase case 94 keeps the challenge in its pruned cataloguea332ed7c6
installer a missing digest tool and a malformed digest both fail closed78da54d90
evidence every new line of the subject index is covered17776a8a3
evidence the two intent rules are proven by runs recorded against this treeed5eaac2a
site-data the payloads that killed the site job are held under the cap35a60de7e

Housekeeping chore 26

ci the pages trigger names the documented-command gate's inputs274f79f94
ci the ui audit is bounded by what the grown site costs3db3eea4a
ci the suite budget and the structure bound follow batch J's measured costbe9f675f1
ci the structure job is bounded by what a full plan costsd5e50774d
derive the derived projections follow the header-reader fix and its tests2c09e90bb
derive re-derive the screens over the kit branch at master 376ae59a60626f91
derive re-derive the kit over master at 376ae5904791d266
derive batch L's projections follow the plan-start fix48bcf921e
release the surface measured a minor, so the version is 0.12.0f3fc57dc6
release record v0.11.0 and the metadata it publishes444d3c9eb
derive batch I's derived artifacts are current46fe003a5
derive the projections follow the committed merge with master4b4d77b68
derive the changelog keeps master's release decisions after the mergedb46dc70c
derive the derived projections follow the merge of its base40600c9db
derive the derived projections follow the merge of its baseb5fb0201a
derive regenerate the artifacts that name the digest tools51f7430e2
derive the derived artifacts follow the corrected knowledge cases8679cf5c9
release the version is bumped to 0.11.0, the minor the knowledge surface requires3588593c4
evidence record the runs that prove the skills7b6966e8b
derive the projections follow the merge with feature/intent-plan-coverage8d167ba90
derive the projections follow the merge with feature/intent-lifecyclec43af2b8e
derive the projections follow the merge with mastere7dd4066e
derive the projections follow the merge with master730416173
derive the projections follow the merge with master25b14cace
merge master and re-derive5cc801c96
merge master and re-derive0b7a7c9ad

Formatting style 1

convergence rustfmtc5ab8fb45

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.12.0-aarch64-apple-darwin.tar.gz	76602cb005b103c41f2eba4f0d8f9f2286c123ec3a1c70030f107c1f38f7aeb9
`macos-x86_64`	majordomus-v0.12.0-x86_64-apple-darwin.tar.gz	2ee4bf28825c67235c7975d95225f0a95c83cefd78c1e4ed0c6c42ee5d521602
`linux-x86_64-gnu`	majordomus-v0.12.0-x86_64-unknown-linux-gnu.tar.gz	5f49782c656d9ba1133f682c0b81ed22b2c2ad8287cbc43cb4d4221ae9209e21
`linux-x86_64-musl`	majordomus-v0.12.0-x86_64-unknown-linux-musl.tar.gz	da1000f3b0a14d4e4c8e43f8cf7401bda2db1c9df75247042ff3000bb9bd3ec9
`linux-aarch64-gnu`	majordomus-v0.12.0-aarch64-unknown-linux-gnu.tar.gz	c611ad630bcf0b5fb5e14f0ce2c6730c6db31534d3740477480019570af331e4
`linux-aarch64-musl`	majordomus-v0.12.0-aarch64-unknown-linux-musl.tar.gz	b9e9cd5d4d2253f0a682bed56a3578b4a12b5a1110e15f8ebb70e38dd691ecef

v0.11.0

0.11.02026-10-021271a2ecd164 change(s) 10 decision(s) 6 artifact(s)

Decisions

The architecture decisions the layer dates inside this version's window, each with the route the document records for it.

adr-0098 proposed 2026-10-01

Reasoning is provider-independent, advisors are optional, and review is a recorded fact rather than a claim
adr-0101 proposed 2026-09-30

Pull requests are integrated one at a time, each against a master observed a moment before
adr-0059 proposed 2026-09-30

The mesh is on for this repository, and every session start holds it
adr-0089 proposed 2026-09-29

An interface shows only what is derived, and unknown is never drawn as healthy
adr-0088 proposed 2026-09-29

A dashboard is a projection of capabilities, and every card names the answer it was read from
adr-0097 proposed 2026-09-15

A plan stamp carries the seal of its event, because the ledger never leaves the checkout
adr-0064 proposed 2026-09-14

A declared tool has a version, and a mismatch is a finding
adr-0063 proposed 2026-09-14

A peer's uncommitted work is part of its claim, and a commit that carries it is refused
adr-0062 proposed 2026-09-14

A verification is proved against a commit, and two attempts that disagree are not proof
adr-0061 proposed 2026-09-14

A gate's verdict is evidence, and a rule the repository enforces itself is proven by it

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 25

integration the queue is seen, waits counted, outages retried, the drain continuous1042e2d12
ci the version workflow has a modelebf39cf7c
reasoning advisors are optional, discovered by capability, and review is recordedfa0df532e
worktree a new worktree shares the primary checkout's .envrc.locale5134c4e3
integration pull requests are integrated one at a time against the current master160b9d758
preflight generated docs are judged by the generation check that ran5f99283a1
health the runtime names the commit it was built from9fd573ef9
ci every mcp tool the registry projects is invoked by something, or the gate says so7e8614b67
pages a failed publication is retried on a clock, and a rebuild is asked only when it helpsf44cab3f0
worktree the reclaim is a command, not a list somebody has to act on1b6a7f5c3
plan a plan stamp carries the seal of its event91080bd64
I1945 The test-evidence decision and its plan are recorded
mesh the doctor judges the server, and every session start says it (ADR 0059)bfd7db5da
rules majordomus depends on nothing of prismatic, and a gate says socd8e49984
cases a case number is surveyed before it is taken399a99bf5
ci the ui-integrity gate refuses UI state that is not derivedecd294124
site a module page links its crate reference4f377dffa
preflight coverage is judged by the measurement that was recorded589843483
dashboard the overview answers four questions from the capabilities that hold them6c81ac0e6
freshness every repository answer says when it was observed9580ccab6
evidence evidence is judged at the presented revision, and a failure outranks an absence87d9909e7
site the homepage shows one declaration reaching every surface01795a693
environment a declared toolchain the machine does not satisfy is a mismatch68c9cf633
ci the version bump has an actor, and it proposes rather than releasesf20f6089e
cockpit the Cockpit shows who else is here, and says when it could not ask0a1e650d5
ci the knowledge graph's refusal of a doubly claimed identity is a gate6ae2f425e

Fixed fix 68

usecase a recorded duration is masked wherever it stands77fcf861b
test case 97 builds the site outside the checkoutcc90060bd
usecase a recorded scenario decides the schema check, so no line is masked3b02d3c20
ci the cockpit probe is bounded by what it now measurably costs27fc07f0d
release bump and version share one decision, and an unmeasured contract refuses9ace743ad
test case 304's fixture is judged without the generator it does not come fromb8551b309
cockpit the peers page passes o_path by value, as clippy requires5c1af0ece
usecase a scenario's record does not say whether its recorder had an executable5a65de680
release release version answers with the contract, and commits are evidenced30c166d0
test two RepositoryInfo test fixtures name the observations9b46f2fd5
test cases 304 and 305 skip through the helper, not exit 0001cca17a
test case 343 bounds its curl calls, and pages.rs is formatted04b09df1f
test case 624 skips through the skip helperdd656e045
test cases 581 and 582 skip through the skip helper4c1286b9b
cockpit the integration page's lane counts say why zero is the fact2ee6c1e01
usecase what doctor reports about reasoning is the recording machine's, so evidence masks it7386e6e45
derive every stage uses the executable the derivation resolved95c34a7c5
usecase a scenario runs in the ci reasoning mode, so its evidence is the same everywherec4af0fbf8
ci the suite's tree is measured in every shard and joined oncec2e03d6ce
test case 56 judges the faster of two timings39b422726
test the heaviest cases open one per shardbea1a47e5
test case 578 skips its positive half instead of passing it5da587f4a
ci the suite's verifier does not stand in for the suite2b60dad3a
test a case never inherits the runner's shard selectionc296d16dc
worktree cleanup counts a branch the remote trunk contains as merged94a906e79
serve stop reports stopped only when the server process has exited57d7857c6
integration the subsystem is the executable's, and its contract is tested where it is served0d1929685
health the build's commit decision is tested, and case 635 can fail againe4324a36d
worktree the reclaim reads each branch's upstream again, not the listing's1e1768acf
site-check a failed run that spoke is not described as having printed nothingefe6f9178
test case 276's server sweep asserts its exit code and its outputa9db2405a
site-check a checker that says nothing has not passed, and the relay is written oncef34235568
github the adapter composes a projected body in one placea19588c50
I1516 The adapter composes a projected body in one place
test a case does not kill the machine's servers9fd908b99
test the stale-executable case reads a version that exists81c2d1bc9
rules the two liveness rules their scans can decide are blocking221fee8cc
finish the verified tree is seeded from head, so a flagged file cannot hide an edit21895d29c
cockpit the four questions ask for their route instead of reading the registry8f2a2a68a
finish a verification records the tree it proved, and refuses a moving one6a4a26608
gates a gate verdict that cannot be read refuses the outcome completed7a8814dcf
automation the independence gate's exemption states why and when it ends122fdc11d
test case 492 reads its diff without a pager, so the liveness gate passes2b3a40852
ci the collision guard has a caller, and cannot answer about nothingff28c9710
mesh compaction keeps what is live, and a returning stream is heard again93472d7bf
freshness the gates read an observed answer as the branch meant ite7097f063
cockpit the compiled stylesheet follows the neutral guaranteed status60a52bd7e
scope case 241 takes the name #659 gives it4adb2df67
site the local preview serves the pinned build instead of re-rendering with zola servee27be3254
coverage a binary killed mid-run is shown by its unfinished block, not the output's tail57b3cd5b5
coverage the coverage job names the test that failed, and two lib flakes are closed3f82fb2b8
scope case 241 is no longer mistaken for a generated file170f7af35
site committed page content links its source at the built commitf628ce053
test a case runs only in the fixture the runner made for it10460db3c
cockpit command words, a narrow distribution row, typed chip order3f9335b6c
site the status pages carry the evidence verdict beside the declared status8e50b09d3
cockpit the Cockpit says only what it knows1991e5c03
site a declared guarantee is not shown as proven5f72c6bfb
coverage each measurement writes its export to a name of its ownfc821df1f
evidence a ledger row's commit is never an option, and the cap reads the same test388ff69c1
evidence the crate's tree excludes its outputs where rust-check writes themd356a7f27
finish the verify command runs without the outcome finish is claiming45c39c3bb
cli every value of --presented-tree says what it means8ab972f67
evidence CI publishes the tracked ledger's verdict and measures its runs where they ranc6a0072ad
ci a missing coverage export is a measurement that could not be trustedc57cca945
knowledge the knowledge reader honours the schema the index enforces7ecae80f7
test just test runs the plan CI runs, not three suites beside it8ff4efc1b
ci the differential coverage gate has a runner, and the case can tell12cd83e69
liveness the wait scan reads what the rule names, and a run: line is a command2a6f39dfe

Performance perf 3

ci the rust job's tests run in three lanes3b7978474
ci the suite runs as four duration-balanced shards with one verdict over all of them19a3c0665
worktree the topology measures every work tree at oncef36c1912e

Documentation docs 18

build_identity executable doctests for the module and identifyaf6ecb206
worktree state::branch carries a doctest of its exact-name filter5d6856afd
worktree dirty_states carries an example that measures and keeps input orderf063b78ef
environment Pin carries an executable example of floor versus release lined2a9daa02
reasoning link to the derive function, not the derive attributee824bf06d
reasoning every public item carries an example and every module a behavioural test239644a3f
worktree merged_into_trunk carries an executable example739a8c934
security the deletion promise names compose, vendor update and migrate with their limitse26abf16c
security the promise about deletion says what holds, and a case binds it8df1ad0e0
breakingmodels a model's status is optional, and absent means the catalogue declares noned7e4731af
test case 275 names the renumbered unknown-gate case 578cbfb5c573
preflight the coverage record types carry examples, as the quality gate askscfee37456
architecture name the ADR directory and its file pattern apart, not as a path2c376d657
architecture how Majordomus derives its surfaces0a0b79b92
the tree's version and the one a reader can obtainf5f11620b
who runs the writer, and why nothing did8dabaf74a
adrs propose four decisions a shared-checkout session provedcfc6ecdca
environment news_digest carries the example its rationale describes2b4c09fc6

Tests test 16

coverage the lines batch H2 changes are exercised35c50d293
site case 406's fixture carries what master's homepage-check readsba48ca00b
integration the prs renderings and the forge's JSON readers are proven3193d04eb
reasoning the reasoning MCP tools are invoked as a client invokes them1e8f57bee
integration case 720 calls the three MCP tools as a client doescbb2aa95c
pages a rebuild refusal names this commit's own build in flight606190dd3
ci the alphabet gate is asked its question under every locale3fdd878a2
finish a verify command that creates an untracked file is refused too2e063b7af
site case 535 refuses a local preview that re-renders with zola servecffa760ae
evidence the monotone rule's containments are proven both ways4f937e7cb
evidence every changed line of the presented revision is covered0ed6f0f8a
capture a receipt names the provider's event in a field, not in its id120bb0235
knowledge case 74's fixture is a valid instance, and the tree derives after itf9e0e77f6
knowledge case 330 asserts what a de-declared contract now is — a refused file63f497288
ci the gate's clean pass names the node it readb3f659294
ci six gates that had never been seen to fail are proven by their violationsdd909daea

Housekeeping chore 33

generated re-derive the changelog once the merge reaches HEAD's history398700e58
derive re-derive the changelog and site data over the merge commit68708852e
derive the derived files follow batch G2's memberscfb040d11
derive the derived files follow master and #7065edc95278
derive the derived files follow the merge of master9f681784c
derive the derived data follows the widened deletion promisec18de2f01
derive the derived data follows the deletion promiseb22c6c7e5
ui-integrity the four paid baseline lines are dropped, so the ratchet holds them465e4db96
derive the derived projections follow the merge of its base7c998e3de
derive the derived projections follow the merge of its base72641060c
derive the projections follow batch E76c56605a
derive the derived projections follow the merge of master224d92904
derive the derived projections follow the merge of mastera491382a5
derive the projections follow batch D4f4b03c75
release record v0.10.0 and the metadata it publishesb34fd71f3
derive the projections follow the merge with master058cb0fbf
derive the projections follow the merge with master606b736e9
derive the projections follow the merge with master8197b45a9
derive the projections follow the merge with masterc5f5e49d9
derive the projections follow the merge with master726f6436f
derive the projections follow the merge with masterd21f05b11
derive the projections follow the merge with master16da6739e
derive the projections follow the merge with master25c30de9a
derive the projections follow the merge with mastera4356d5a8
derive the projections follow the merge with masterc695f924a
derive the projections follow the merge with mastere263a1c89
derive the projections follow the merge with masterc4d01e562
derive the projections follow the merge with master9c2858d25
merge master and re-deriveafd78acd2
derive the projections follow the merge with master0c69ef149
derive the projections follow the merge with master464d8f65a
derive the derived data follows the merge with mastere7b7130f7
derive the stacked tree's derived dataf60dd9080

Formatting style 1

test the coverage assertion is formatted as rustfmt writes it8ffc3e9dd

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.11.0-aarch64-apple-darwin.tar.gz	a61783ccdd9d2b89e5270170af215f7404c6b517d9c7a78529a52e0089d076b7
`macos-x86_64`	majordomus-v0.11.0-x86_64-apple-darwin.tar.gz	0d59cda3ec037dc0d33670c9f9ccad67be3d079dc61c69be679dfb236a5179fd
`linux-x86_64-gnu`	majordomus-v0.11.0-x86_64-unknown-linux-gnu.tar.gz	8b407725a8d9e4b9b5f016ecaaf4b62dd901eed00536af21598d40d5cd4b3c21
`linux-x86_64-musl`	majordomus-v0.11.0-x86_64-unknown-linux-musl.tar.gz	21e8b3c4130b3d26916028be4c017dae3e998cf4f1904ec9c895b7d6a8834c79
`linux-aarch64-gnu`	majordomus-v0.11.0-aarch64-unknown-linux-gnu.tar.gz	4ecbdbb44209205fe4f13eb141fc6710d48f3f159fb0ea7a05e2c4db76b64899
`linux-aarch64-musl`	majordomus-v0.11.0-aarch64-unknown-linux-musl.tar.gz	8d3c335bfa842943356a6bea4c69fd0b82850a59217827b4eaea2323311edd23

v0.10.0

0.10.02026-09-29910835dd0132 change(s) 9 decision(s) 6 artifact(s)

Decisions

The architecture decisions the layer dates inside this version's window, each with the route the document records for it.

adr-0087 proposed 2026-09-26

Evidence is indexed by subject and judged at the presented revision
adr-0086 proposed 2026-09-24

The crate's rustdoc is a published web surface at /rustdoc, produced by the invocation its gate proves and verified at the public URL
adr-0085 proposed 2026-09-24

The version is authored once, in the crate manifest, and shipped to the shell tool as a generated projection
adr-0082 proposed 2026-09-24

Token economics are measured from matched runs and published only past a declared rule
adr-0080 proposed 2026-09-20

A CI run reaches the tracked ledger through a recording branch, never through the run that produced it
adr-0071 proposed 2026-09-15

A feature exists only when its delivery is computed and every dimension passes
adr-0068 proposed 2026-09-15

CI evidence is kept where the run happened, and published with the commit it proves
adr-0067 proposed 2026-09-15

Mesh cooperation is authenticated links between runtimes and one replicated journal folded the same way everywhere
adr-0066 proposed 2026-09-15

Entry reports a verdict per claim and the evidence behind it, from one preflight value

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 18

test a case that declines to run is recorded as a skip, never as a passd348a6c76
evidence text a run printed is redacted by one rule set5f1226aca
product every active use case has a feature, and case 503 holds itbd74cd30d
design the verdict words are status wordsba0770c9c
economics record the context suite's first measurement54ee7cd24
site the schema reference links every schema file to its source300e93ce0
mesh this repository runs its own mesh372eccf36
entity every entity names its public documentation pageed1398a9c
economics measure token economics from matched runs, never typedf48b9b078
web the crate's rustdoc is a published surface, produced by its gate and verified live5baad7874
evidence CI records its runs, and the site publishes them with the commit they prove5a43a3a05
rules the report says what was proven, not merely that it found no fault9119e306a
delivery whether a feature exists is computed, and unknown is not delivered9ba6a17f5
served a deployment is evidence, judged by the commit it serves1f7e98bbb
mesh runtimes cooperate over authenticated links and one replicated journal964d26e3d
shell new shell is refused unless the inventory exempts it4a05b6292
environment entry reports a verdict per claim and the evidence behind it271989160
mesh a signed cooperation journal and a deterministic state fold7bea9265b

Fixed fix 51

test a server's URL is read from its own listening line, oncea5ea413ff
site long directory paths wrap on the context page7f824c3ec
economics one context measurement counts each file onceb5fc0d5bf
economics the explain example expects the answer, not a refusal51a84dd4f
site the economics page links through Zola and names the built commit6973ef9fe
economics the benchmark fixture is English and its references resolvead09800e5
ci crate-boundary argues for tiktoken-rsda63efb49
economics explain answers a repository without a methodology782a7e97f
rust a checkout with no site config still hands off its rustdoc reference02bcb9aac
test case 89 empties the server log before it waits on itcf5fb2fe6
test the batch's cases decline through skip, the one shape case 413 accepts9b52c572b
shell the inventory declares the four CI scripts the batch brings5118a3140
shell declare the entity gate master added since the branchb594d9f8f
test case 532 declines through skip, the one shape case 413 acceptse0d35c170
pages the deploy job's bound exceeds its steps' again, evidence step included6974910c8
evidence public text refuses a secret once redacted or cut off21d22d944
evidence public text refuses a credential its shape only announces9e654b61b
claims deployment-contract-refuses-by-name promises only what case 84 asserts6e4b40867
test no case in test/cases/ can decline with exit 0 any morec2fb7a66e
ci the job summary counts a SKIP as skipped, not as failed1ba9834cd
test a status 4 the case never declared is a failure, not a skip08209a66d
ci a case is bounded at 3600 s, above the budget that warns of itb1386ae7b
ci suite-budget fails a pipeline on any stage and sorts in byte orderd68bd8dc5
ci the suite's bound is measured, declared once, and refuses growth39b2916f9
mesh a runtime dials its present siblings before the ones that stopped2b4aa04cb
site the responsibility pages' file links and site-check follow the built commit07035a459
mesh a node's streams are compacted before its quota refuses a sibling84ad1dd4e
pages the comment no longer reads to case 97 as a timing phase937343683
site a page's source links name the commit it was built from2548eff4c
execution a cancel is recorded before its token is visible45439dbf0
pages verify-docs says an index it never fetched was not measureda50e2385b
ci the evidence collector and rust-check fail when any part of a pipeline doesc22cb2c11
evidence a proof older than what it is about does not support a guaranteee24f21dd7
mcp the instructions say what writes, counted off the registry, not a promise of read-only92f641910
evidence a run recorded while the tree was dirty is not proof of the commit it sat onb77bfbcdb
release the carrier scan orders canonically, and case 484 pages nothing8a0a68ddc
release a version declared in TOML, JavaScript or Python is refused too7c5f58da0
mesh a push is counted as it leaves, not when its answer returns8173f333d
site git's listing of tracked paths reaches jq by file, not by argv6122a6bc9
mesh the lab evidence sorts in one collation and the diagram ids stop colliding with headings1f3f1cece
shell declare the shell gates master added since the branchbe2eeec35
release a release record is derived before it is proposed018293b15
served list the deployments in canonical order447b76a8b
test case 384 observes a non-zero verdict instead of dying on it16a319417
serve stop waits for the lease it read, not for the path to be freec0e885275
serve the shutdown's own bound is stated, and begin_stop carries its exampleb3214a797
serve the lease is released before the mesh drains, not after it016b04b4f
site the tracked listing reaches jq through a file, and a slow run is not a failed one249e597a1
mesh a command with nobody to ask says so, and the lab waits for the runtime it asksfb0285477
mesh the gates the first commit failed, each at its causef086432f7
environment a verdict names the tree it was measured on, and the lease is read once9fc7284d8

Performance perf 1

release a release's history is listed once, not asked once per decision08cbd76d5

Changed refactor 5

order the economics sort sites adopt the canonical order358a0ab69
evidence the redactor orders its kinds canonically and writes English799834606
evidence the redaction table spells a one-byte class inline418ebac6b
release the shell tool reads its version from share/version.txt7655e9a7f
release the version is authored once, in the crate manifestf3553508d

Documentation docs 10

environment the RulesTally example builds its report with a verdicte1d61945f
adr the recording stops where the ledger covers, and trunk proof needs a quiet trunk3145123fd
I1954 Every runner reaches the ledger, through the recording branch I1959 The evidence publication is typed, bound to its build, and kept on gh-pages I1960 Every widget names its proof
adr the recording stops at a ledger-only commit, and publication states match firsta1ccbebed
I1954 Every runner reaches the ledger, through the recording branch I1955 The evidence publication is an allow-listed projection
ci the per-case budget is the pass limit, and its worst cost is censoredd0b912444
adr evidence is indexed by subject and judged at the presented revisionbea35d448
I1945 The test-evidence decision and its plan are recorded I1965 The entry preflight reads the one verdict
mesh the guide and how-it-works describe cooperation as it ships1c35c5d3c
execution say which guard makes a cancel land before its token is seend8f91e79f
rules the verdict's two accessors say what they are for, not what the signature saysa258c6894
adr ADR 0085, the version is authored once and shipped as a projection30a0cb128
served every exported item carries an example that runsc71152a3b

Tests test 8

evidence the ledger-row test names no CI run, a field #577 added85d21b7d6
evidence the byte class test spells its samples as byte stringsd478261fb
evidence the rules side of the tree cap is judged over a test that exists8c8efd8bd
ci the artifact case asserts the pairing, not the order of the uploads1d4ff7935
release a refused derive-check must fail the publication jobb5ff5ecce
release the version is authored once, and the cases read it through its one reader7f6e3842f
mesh the lab's record is judged from outside the lab, and two claim joins are correcteda4ead40eb
mesh the rendering layer is measured, and the version says what the contract dide83842630

Housekeeping chore 37

ci the rust job is bounded by what the batch measurably costsbf5dbd274
ci the suite budget is re-derived from the batch's measured costfabdc4442
derive the projections follow the economics fixes55c556e73
derive the projections follow the merge with masterb9fdfef74
derive the projections follow the merge with master 35f6457937da6db6
derive the projections follow the merge with mastera366f3185
derive the projections follow the merge with master 35f64573f5a84527
derive the projections follow the merge with master67b589d7d
derive the projections follow the rebase onto mastere60a0101d
derive the projections follow the rebase onto mastere7d6d60b0
release the surface measured a minor, so the version is 0.10.051a685abd
derive the projections reach their fixed point after the merge08d9820d0
derive the projections follow the merge with master131c04ee6
derive the projections follow the merge with master07b48a0db
derive the projections follow the merge with master3959fe407
derive the projections follow the rebase onto masterbf0dd8305
derive the projections follow the rebase onto masterc99c34e4d
derive the projections follow the v0.9.0 release record0dba33e5b
evidence the baseline records the debt a stricter gate can seea009197d1
release record v0.9.0 and the metadata it publishesf0f19dea1
derive the projections follow the merge with master, at 0.9.0415cd1d4d
derive the projections follow the merge with master 823ca041d00b7b80
derive the projections follow the canonical carrier scan91f7cc0c7
derive the projections follow the wider version-carrier detectorece5faead
derive the projections follow the version authored oncef2d128fea
release 0.9.0, because served.show joined the contract8b7da5672
release 0.9.0, because the environment gained the preflight capability814d72a76
derive the projections follow the merge with master380c721b4
release 0.9.0, because delivery.feature and delivery.report joined the contractc00501b4a
derive the projections follow the merge with masterb2ef9560e
merge feature/a-deployment-is-evidence meets mastere3cf03be8
derive the projections follow the merge with master83a8af1c1
derive the projections follow the merge with master89eea3687
derive the projections follow the merge with master8d7125e75
derive the projections follow the merge with master58a0428b0
derive the projections follow the merge with master13cad65c7
derive the projections follow the merge with master8587973f9

Formatting style 2

mesh the rendering tests are formatted as rustfmt writes themdab6e1b56
delivery cargo fmt — the module lists stay sorted and the git args wrap9e830d8fa

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.10.0-aarch64-apple-darwin.tar.gz	eec02d0717ff70836e397a23f35a4f8d4af2a7aeda70b789f2f69a87fd96cc45
`macos-x86_64`	majordomus-v0.10.0-x86_64-apple-darwin.tar.gz	e7657b7bcfa1af6dad5640820164d5ad37d5e99d3842afeffb0d71c8bb37b0aa
`linux-x86_64-gnu`	majordomus-v0.10.0-x86_64-unknown-linux-gnu.tar.gz	35e6e8fd6eb4b1fcb6d1ccf7b46828ffc0db7c6fd202724f827afab8d3e99786
`linux-x86_64-musl`	majordomus-v0.10.0-x86_64-unknown-linux-musl.tar.gz	06351fb7ac00c05a87471800af037a68b8fc667f2077f9bc99de40953616cbb6
`linux-aarch64-gnu`	majordomus-v0.10.0-aarch64-unknown-linux-gnu.tar.gz	5b7cb6a18f8657e65977e84ab357a0ac69715247d01df30fdaf504bddf730f4f
`linux-aarch64-musl`	majordomus-v0.10.0-aarch64-unknown-linux-musl.tar.gz	17e56539424b318c4b8a2a31aea0b0c0dd9c34d1fa7614d424c757fb31e1cb85

v0.9.0

0.9.02026-09-25823ca046811 change(s) 1 decision(s) 6 artifact(s)

Decisions

The architecture decisions the layer dates inside this version's window, each with the route the document records for it.

adr-0056 proposed 2026-09-12

Every object of the layer has a derived address, both directions of every relation, and a declared place of publication

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 2

docs the documentation hub and its index are read off the registry and the buildc3555511c
entity every object of the layer is addressable, cross-linked and publishedc0b1e9424

Fixed fix 3

docs the hub names every kind it links, and the release is the minor the surface measuredf8a5caf56
entity an edge's order is the collection's own, and the surface is exampled0fdca807c
site an entity's URI may not push a phone page sidewayscb2a69059

Documentation docs 2

coverage the differential rules are a table, not a hand-drawn blockd15df020d
entity the entity capability's surface carries executable examples054c312bf

Tests test 1

cockpit the entity routes join the read-only and rebuild sweepsc0b15d496

Housekeeping chore 3

derive the projections follow the v0.8.0 release record6932fc67b
release record v0.8.0 and the metadata it publishes49a8f053a
derive the projections follow the merge with master df244393d803dc0e47

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.9.0-aarch64-apple-darwin.tar.gz	c2f71342018da8a03b8be6ea66c14ce3a3f4d819cc9f5a311f6215304a0d2a24
`macos-x86_64`	majordomus-v0.9.0-x86_64-apple-darwin.tar.gz	8a0e587dcc45aaa70e6a4027c90351994c2d621c5467c64800efb901b21798b4
`linux-x86_64-gnu`	majordomus-v0.9.0-x86_64-unknown-linux-gnu.tar.gz	15189a2bb8d6cad7a52f2cd769c07114e53246b2fdf0a388e2fa045fb9d6f355
`linux-x86_64-musl`	majordomus-v0.9.0-x86_64-unknown-linux-musl.tar.gz	28d1644ba2f984b57721f3c8e2bc23eb11eb6f76dc6534bb0156444dc7c678ac
`linux-aarch64-gnu`	majordomus-v0.9.0-aarch64-unknown-linux-gnu.tar.gz	c619f973950a5490af3d3721719a52f4834d2f84df60fa59071afc0161be6731
`linux-aarch64-musl`	majordomus-v0.9.0-aarch64-unknown-linux-musl.tar.gz	4cd7a2edac6d8a96a89523689c65f99628c20f8d705048cdaa51dc719a187942

v0.8.0

0.8.02026-09-208d37d011e82 change(s) 0 decision(s) 6 artifact(s)

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 5

graph a dangling reference refuses the generation, and runtime stays beside the graphd8355cd5c
ci the crate's dependency boundary is measured, not asserted377af4a38
site the inventories the homepage shows are held to the model that owns themc386b227a
finish a refused finish is a record, so a caught false done can be countede3a27dd3d
site the homepage weighs what it shows, and loads no runtime it does not usef617c5287

Fixed fix 26

env a file the index refused is named, not countedd69888e52
test the disclosure spec retries a dropped click, on a bound it measureda6fdf859a
test the disclosure spec waits for the state it assertsbb3f7ab0d
site every diagram node is unique, and three pages pass the UI audit2d4754f54
site scenario cards fit a narrow screen; case 94 commits with its own identity939535e25
site a use-case page renders live scenarios and wraps its evidence output763b94d7a
site the claims matrix reaches jq by file, not by argv6186c7272
docs the case context's doc link names the type it means87a904494
ci the UI audit is a job of its own, so it reports instead of being cancelledde485b178
the tool's statements about itself match its code; a tested guide7a3f035fd
cockpit a page asks a capability for what the layer holds, and a gate holds it theref9375c65c
docs two references name what exists5e451944d
test the interactive scan walks its globs instead of listing them6d7492c29
ui a record page's view parameters are one family, so a pager cannot multiply the routesd38384dcc
release the publish job may open the pull request that carries the recordf36ee380a
rules five rules say how they are decided, and one of them is now a gate8b58ff876
ui the audited pages pass their audit, and a graph page is paged like every listing3692d34d2
serve concurrent ensures start one process, so a stopped checkout stays stoppedd00652552
ci a pull request's run reaches its verdict, and a release record is proposed or says why not6d08c63d5
server a server answers where it stands from memory, not by probing itself173b70a8d
knowledge the discovery cases hold the contract class init now declaresd82450dce
serve a busy server is not a dead one, so every client attaches to the server entry started98c5a26e0
site the refusal is about what the site offers, not every version it printscac5aa6bb
site the version the page shows is the one a reader can obtaine6443701c
skeleton init declares the context class, so a new repository indexes its contracts587cf472b
cockpit the palette probe tells an empty list from a wrong orderffb0ad365

Documentation docs 5

adr decision 0010 states its own context, alternatives and consequencesf4b6b7d1a
adr the lease already has one reader, and three documents said otherwise50e3de273
claims the two live-scenario claims carry every section their page owes9697b1098
graph the runtime overlay's exports carry examples, and derive's link is unambiguous4fe593b3a
architecture how Majordomus works as one model with many projections6778eb7f3

Tests test 7

ci a whole file's JSON may not travel to jq on the command linebf8ce0837
claims every guaranteed claim is asserted by a runnable test that names it09a188388
graph the case takes a number above the high-water markecbfd9b46
cockpit the projection case is 389, above the high-water mark611bd605a
ci the crate-boundary case takes 360, which nothing else claimed226fd1ecf
usecase a live scenario is held to what a question may do, and its evidence is locald2eece55b
site cases 12 and 95 assert what the site builds today, not the pages it used to have035ec4490

Housekeeping chore 38

derive the projections follow the merge with master1d43b5ffb
derive the projections follow the merge with masterf4fa183b2
derive the projections follow the merge with masterf0609de98
derive the projections follow the merge with mastere069249c0
derive the projections follow the merge with master4c2572e49
derive the projections follow the merge with mastere9891ec1b
derive the projections follow the ui-job splitd3c2fbf31
derive the projections follow the merge with master0cb56094b
derive the projections follow the merge with masterd8b58ebaf
release 0.8.0, because the layer summary gained a public field1b3fb1ac8
derive the projections follow the merge with masterc9e978504
derive the projections follow the merge with master70b9fd202
derive the projections follow the merge with master781008657
derive the projections follow the merge with masterc1580df0e
derive the projections follow the merge with master12be9f406
derive the projections follow the merge with master5dfefc2ca
derive the projections follow the merge with masterf8d858f1b
derive the projections follow the merge with master67554aed6
derive the projections follow the merge with masterdba5ac100
derive the projections follow the merge with master72d9e1c0d
derive the projections follow the merge with master1e9498326
derive the projections follow the merge with mastere07725676
derive the projections follow the merge with master38326fa17
derive the projections follow the merge with masterae586ebce
derive the projections follow the merge with master29dacf6bf
derive the projections follow the merge with master421ad1a87
derive the projections follow the merge with master851a34519
derive the projections follow the merges that make master green85a6678eb
derive the projections follow the merge with master5143e6e59
derive the projections follow the merges that make master green787c030ed
derive the projections follow the family ruleb405caa6b
derive the projections reach their fixed point after the merge with masterb1f563025
derive the projections follow the merge with master8ff2a0833
derive the projections follow the merge with master59e7d87c4
derive the projections follow the merges that make master green0060fd454
derive the projections follow the merge of the v0.7.0 record with master65afe42d9
release record v0.7.0 and the metadata it publishes32f59b52f
derive the projections follow the merge with master3ed3dbbe6

Formatting style 1

test rustfmt the surface-writes test60b0172b0

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.8.0-aarch64-apple-darwin.tar.gz	b0c899119267fb2483d5c0685ae9c76244e007df2f58434d16c48465f6ec1142
`macos-x86_64`	majordomus-v0.8.0-x86_64-apple-darwin.tar.gz	14360af012ee9af37ce1809828636d56c099873125695ff27e9a14ff254a2531
`linux-x86_64-gnu`	majordomus-v0.8.0-x86_64-unknown-linux-gnu.tar.gz	231d665124a56e73e24f91786d2f4680965e2ede0a28c2b25ac557cb2e276035
`linux-x86_64-musl`	majordomus-v0.8.0-x86_64-unknown-linux-musl.tar.gz	23bceda3eacb16dc1a85c5aea00ce0e72348f839dfe299ea2dff6a257c6fc48f
`linux-aarch64-gnu`	majordomus-v0.8.0-aarch64-unknown-linux-gnu.tar.gz	383829eee7af477e3a8483356565d391e6aca64daf8211330d647ff1d7876dca
`linux-aarch64-musl`	majordomus-v0.8.0-aarch64-unknown-linux-musl.tar.gz	1218d079863e94cbdc5b456f3c077c756b277734183cfd5153e39c94c24df336

v0.7.0

0.7.02026-09-15ab776e5c255 change(s) 0 decision(s) 6 artifact(s)

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 6

site every link resolves and every control does what a spec says, held by a blocking rule7d5fe591a
site the HTTP API reference is an index, a page per tag and a page of shared typesaa48fef52
site the homepage tells the product's story in a declared order, and a rule holds it75729f35c
recover the stray-file sweep is a capability, and the command asks itc9dc7a945
site the homepage replays runs that happened, and shows what the tool refuses094d34e3b
site the homepage carries the evidence and commit chapters, at 0.6.111744faf8

Fixed fix 39

ci a step that runs out of time says so itselfb3e261428
I1520 A step that runs out of time says so itself
pages the deploy fetches the history and tags its link check reads, so master deploys again593cbde3e
ci the terminal refusals apply where scenarios ran, and a log assertion waitsaf0dfd49a
site the links and controls change passes what CI found on it3bf9b9f37
cockpit a card title breaks a long identifier instead of widening the page9d44b1f40
site the diagram theming writes no colour of its own, so the design gate holds167f46ed0
ci site-check counts every failure it prints, and shell-lint refuses the shape that lost them0dab3ff51
docs the differential coverage mapping is a table, not a hand-drawn diagram2fc1a80ab
ci three reds that CI found on #310's own tree30403bcc7
coverage the crate floor is a ratchet, the coverage measured, and only risesf15bb4e47
test case 318 forces the SIGPIPE it measures instead of hoping for ite01d4013f
test case 135 gives the executable its share, and names the failure38b21c221
ci three always-on reds that #310's own fixes leave standingbb3138114
mesh the loopback socket tests are host-independentf5800b3a7
coverage the crate floor stays where its rule holds it, and only the domain ratchetsb3d1c2fe2
coverage the coverage floors are the coverage measured, and only rised5dd4b967
ci the benchmark comparison runs where its baseline is, and the rust job fits its budgetb253a0643
site an example heading is anchored under the type that documents it33f2faf2d
site rendered doc comments repeat no id, and case 09 judges each <pre>5ae3e808f
session ten closes at once no longer leave the pointer aiming at nothinge1a3ab937
knowledge a contract is the kind it declares, and it is that kind once47a4477b1
adr the identity survey runs before the lock, not inside itf03c1a316
test three suite cases read a tree that is correct as stale or incompletee33566f5c
site a transcript box names the axis that widens a phoneecdade1c7
site a rendered doc comment demotes its headings and its functions carry examples8b6436fca
test case 12 asserts the hero title, not a markup it never hadb752ff9b7
test a restored target keeps its cache tag, and the fixture runs CI's cargofd80ca045
bench plan.transition is required where the plan holds an issue, and says so elsewhere00128ff63
I0001 Audit what actually plans work in this repository I0002 Define the canonical milestone and issue schema
site capability prose renders its rustdoc instead of publishing it7b6421c8d
ci english-only-check sees every script, in any locale561d1c1e8
site capability descriptions render rustdoc markup instead of publishing it rawcaa82f0b9
rust news_digest carries the example its behaviour owes26c326ee0
site an enum value's description takes its own line, and stops the API page overflowing94ca7ff91
site the panel a reader lands on is the one with the most to show106c4e088
reap the reaper survives its own worktree listing, and a consent names its subjectfc4cad858
release the record reaches master through review, not through a protected push11a027868
events task.gate names the module that writes it, and every event is documented16e084243
coverage the coverage gate states its own verdict3ad3fa014
docs the coverage mapping is a table, and the claim names its case55dcc2be6

Documentation docs 4

coverage the merge keeps master's table and this branch's ratchete2d375793
capability the benchmark policy and its precondition carry examples796fe233e
recover four examples that prove what the prose asserts0ab4e8722
ci english-only-check names the locale CI actually runs, and its real ranges1110f2e6f

Housekeeping chore 6

derive the projections follow the merge with master1388ad2c3
release 0.7.0, the version the public contract requires3dfccb0ff
derive regenerate derived data over the #348 fold616c1a55f
mesh mark the host-independent test fix under this task9e005ef75
derive the status documents and the registry follow the three case fixes59d747ea9
derive the projections follow the merge with master 19b275520f3ad6d694

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.7.0-aarch64-apple-darwin.tar.gz	3f8a635bd7feaf2786ddffe9df57253bd2fb4133e3e2cc652f671ab3b0ae2091
`macos-x86_64`	majordomus-v0.7.0-x86_64-apple-darwin.tar.gz	729455c0af635e77f361972dc281489c80293786d54ae8c64bc483be1385eab5
`linux-x86_64-gnu`	majordomus-v0.7.0-x86_64-unknown-linux-gnu.tar.gz	2a7dd5997444373d821cdbe3e1d6338b40a052d024e0e13f60de234b6358b83e
`linux-x86_64-musl`	majordomus-v0.7.0-x86_64-unknown-linux-musl.tar.gz	9267cf684dc0688e1758697e89dd785b8572512a38cab7e30392aadae1d428ea
`linux-aarch64-gnu`	majordomus-v0.7.0-aarch64-unknown-linux-gnu.tar.gz	9d8b18e1fb21085763b8a095d174613ae91010c8f2d5129af41d6a32b5e5b76c
`linux-aarch64-musl`	majordomus-v0.7.0-aarch64-unknown-linux-musl.tar.gz	375bb5f8cbba3effd7fce94c0402bd2e24d8e452c67094ba90f35a5f2ca5e117

v0.6.0

0.6.02026-09-12d98a264b5208 change(s) 9 decision(s) 6 artifact(s)

Decisions

The architecture decisions the layer dates inside this version's window, each with the route the document records for it.

adr-0055 proposed 2026-09-12

Disk is the fifth self-accumulating quantity — build output is reclaimed by predicate and a build is bounded before it starts
adr-0054 proposed 2026-09-12

A commit message is a judged value, not a convention and not a prompt
adr-0053 proposed 2026-09-12

An identity is allocated above the high-water mark, and a collision is refused on the branch
adr-0051 proposed 2026-09-12

The minimum release version is measured from the public contract, and conventional commits are demoted to evidence
adr-0048 proposed 2026-09-11

A rule declares how it is enforced, and review is one of the three ways
adr-0047 proposed 2026-09-11

The session domain is typed, its identities are not interchangeable, and closing is exactly once
adr-0044 accepted 2026-09-11

Cooperation is repository-wide because the board is gathered, not because the server is shared
adr-0043 proposed 2026-09-11

Entering the repository brings its runtime up, through one bootstrap command the entry file calls
adr-0041 proposed 2026-09-11

Proof is a recorded execution, and inputs unchanged is not proven

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 32

adr an allocation names what is outstanding, and what it cannot reach595a5aa6d
coverage the changed-code coverage gate of #214dbb6c26cf
reap disk is the fifth quantity — reclaim landed build output, bound a build before it startsf4c320de6
commit the commit message is a value this repository judgesb59988774
finish a session does not finish behind its own published site043c5c85f
site the navigation is declared once, and every projection derives from ita8e002b5b
site nine top-level categories become five intents and one action8357b37c9
docs every hand-drawn diagram becomes mermaid, and the baseline reaches zeroe51600d73
docs an architectural relationship is drawn, not typed in box artcbe3e3917
adr allocate an identity above the high-water mark, and refuse a collision on the branch3733e94ad
merge the merge policy is a projection of what the generators writed4325fafd
release the public contract decides the version, not the commit subjectsea05dc261
plan an issue moves through the lifecycle as a capability, not only a commanda946ae06d
rules a rule declares how it is enforced, and review is one of the three ways080349f5b
backlog bound the four quantities that grow on their ownd65cc145d
capture a prompt record carries its episode, and the archive is private and bounded842f93159
gates the done invariant, answered from what already knows38157e00b
gates completion is a state the repository decides, not a claim6f6293ebc
peers the board is the repository's, gathered from every checkout (ADR 0044)853bf6369
session the session domain is typed, and closing an episode is exactly onceacf06af46
models the model catalogue is one declaration, and routing explains itself387e22dcf
mesh every surface projects the one mesh runtime, off until declared21aed93fd
rules project.a-verdict-states-its-subject, with its case and its CI gatead4d19c0e
entry entering the repository brings its runtime up, through one bootstrap commandad434114b
ci a promise names a proof a machine can followfaa9107a4
session the subsystem gets a reading of itself, and the docs stop describing a lifecycle it does not havebf51ca0dc
evidence a claim is proven by a run that happened, not by a file that existsa65a21951
mesh the mesh core — identity, protocol, registry, trust, providerse1cb97992
recover close episodes nobody ended, and stop records claiming the tool's exhaust9d87da3b1
rules a rule names what proves it, and the naming is load-bearingc2efe3368
session the briefing an episode opened with is checked against gitc9f40810f
devcontext compile a session's context from the repository, structured802dfb670

Fixed fix 86

test a dedup assertion compares two lengths, and could never pass75f09c04c
site the version is visible on a phone, not only from 640px updf4cfe7e3
cockpit the mesh reason sits beside the facts list, not inside it275ffbe3c
recover a stale staging directory is reported and left, not deletedce7339594
docs every intra-doc link resolves, so the crate documents itself again5a81aa0c2
commit the commit subsystem orders through one place0384f21b6
docs an example path is not a machine pathdc1a18f92
environment entry draws one banner and never names a server it just replacedff36cacfb
commit a record id in a code span is shown, not citedd5efa5cdd
records a record reads the whole declaration, and absence is not damage60326fcb0
capture capture status names the providers it has no adapter forf258a0e75
ledger the published order and the envelope are facts, not accidentsac4e27037
pages the age of an owed publication is the oldest debt, not the neweste0c309df3
site a collapsed badge is not a gone badge0c05c07da
ci the gate dispatcher clears a share that names another checkouteeb5797d4
site the generator supplies the raw wrapper, so the source must not1c8548673
evidence the ratchet refuses a lost proof, not a new claim454d7a908
schema a transparent newtype input projects the shape it wrapsbfa04d4c5
executor the handler counter counts every handler, at every depthb8f6606b2
liveness six waits are bounded, and the supervision window counts code139558f2e
github-sync a human-written title is not a record id6c291d082
development-semantics a finding key is an identity, not a coordinate5a39369fc
site the two diagrams the widened gate found — back to a measured zero8021a7e27
git a read must not move the repositoryd39cf280d
ci diagram-check was honest about a corpus it did not look at — 0 becomes 2706214a63
claims the seventeen guaranteed claims whose test never named them backed077cb13
site the matrix is shown whole and the questionnaire is groupedd098c88f9
commit the history benchmark case runs in a repository with two commits5957bbc78
commit the use case asserts what it is about, and not that the repository is healthyb747440af
capture the archive mode is read GNU-first, so Linux reads a mode and not a filesystemff00a4b9c
commit the crate's own lints, at the pinned toolchainf9c4da433
rules the vendored package installs the doctrine, and no count is written by handb8a7a07d1
pages a run that published is no longer indistinguishable from one that did not32c6fb606
gates one reader per property, and a citation that survives a renamefffcd32b4
commands every command says once whether it is a capability or why it is notc90b8c66d
gates one verdict on enforcement — the duplicate rule reader is removedcdb25a2cc
site two headings that boasted, dated, or were written twice18d58852d
lint five dead names removed, one directive restored, one exit code put to workea19b5ad2
ci two pipelines stop hiding their own failures7a0747e6a
ci the order ratchet goes back to 92; raising it was moving the goalpostb45e86e28
test the gate is executed, not handed to sh, and a rule's citation follows its filef7f0aad3b
cockpit the page CI actually renders is the refusal, and it overflowed toocc87fc11e
the ADR statuses I had no right to write, and a 320px overflow2e0bd9341
release the three defects CI found, two of them mine4fe78bf96
release the writer stays usable where no contract can be measuredf562bf5cb
lint the newer clippy is answered, not baselined0aef4f140
merge restore master's files the merge had reverted7928fbe50
site the API page has one title, and a scenario's record stops depending on the dateccc1404d1
session an example path stops looking like somebody's home directory11e6749df
rules three blocking rules name the case that proves them, and the derived-merge glob stops eating hand-written schemas0cc5a114e
schema restore the policy schema's prompts block the derived driver droppedec680346d
adr the session domain decision moves to 0047, because 0044 was claimed twice5ba6dd15e
test case 133 builds its fixture in the harness's repository94fad98c5
rules three references the merge and the rename left pointing at the wrong thingb5e1c628e
ci the pages paths follow the model, and 09 stops depending on run orderf6b35877b
usecase a compressed size is decided by the machine that compressed it456f3b647
test the help assertion holds the claim that is true nowd57b3e1dc
test name the peer-board tuples so clippy's type_complexity passes under -D warningsd8ed512bd
evidence a verdict carries the denominator it was reached over7837275c7
rules yield ADR 0047 and case 134 to their earlier claimant; take master's release fixa24629655
merge the design system's ten projections resolve on mergecdac4f5b4
release the release schema declares the key the release automation writesb9c91d9e8
release the schema is told about the field its writer and reader already share65fb52d6d
evidence three defects review found in the fabric's first cut3a20fe9a1
gates answer where the model is absent, and add no debt to three ratchets3f987bde0
merge declare the thirteen derived site/content trees the generator rewrites7444f0209
recover stat -f is a different flag on GNU, and the event was undocumented0eabc4109
ci rule-proof-check pipes under pipefail, and counts once29329afee
entry a server entry starts inherits none of the caller's descriptors69fd5641a
records a killed writer no longer leaves its staging file in a tracked section613608904
order the ratchet counts what ships, and a jq filter is not sort(1)9d57fe1ab
claims ci-verdict asserted a branch rule that does not exist6e9f223f0
doctrine `doctrine status` reports the registry beside the set it is a subset of8b7043366
ci a cancelled job says why it carries no verdict, and the bound cites its measurement29a9e38dc
ci three ratchets that were counting something other than their subject02fd25c41
cockpit the two findings this branch added to the structure gate6c1cb8634
rules the rule that landed while this branch was open names its proofc6977d99c
ci pin the toolchain, and four more gates that could not run04320b329
doctor the rule and doctrine verdicts state their own denominators815116686
cockpit the graph drawing is chosen from the graph's shape, not one name for all eight3b1c1a6d3
rules the cases and the governing rule describe both enforcement modes83198d51d
pages an errored Pages build is a failed deploy, and nothing local is published5b59e18ce
I1303 The store is bounded, measured and invisible to every published projection
session the lifecycle is the episode's, not the task'sd5d541850
ci a gate CI cannot run, three fixtures that inherited the machine5544c1afb
server the shared server follows the repository instead of freezing ita8adc5a56
ci the gates that were red on master read the evidence they meant tob7eee54a2

Performance perf 1

policy the doctor and watch budgets are derived from runs, on both their subjects66fef5f21

Changed refactor 4

site the homepage is nine sections, not twenty-twoac1e6e32e
order fifteen collections adopt the canonical order, and the baseline falls to 90eb7f1fad2
I1510 A gap the audit calls planned names a plan object that exists
order ten of the collections that arrived ordered beside their rendererbb4abafd8
M000 Milestone and DAG driven development
order fourteen collections take the canonical order, and the baseline falls to 924803476f2

Documentation docs 12

commit the subsystem's three new exported items carry an executable example212935e02
quality the new surface documents itself9d1734595
commit the architecture diagram is drawn, not typed4e57c3675
commit the timings are measured, and the hot paths are measured not to pay them76a1615d8
commit every exported item of the subsystem carries an executable examplece1d5f2fb
rule say why check does not ask the publication gate2b0abbc37
plan,ledger an executable example on every public item this branch addsdadf7ab36
mesh the claim pages carry their full contract, and the site tells the story60037f4ce
evidence an executable example on every exported item of the fabricc4cd7cf9b
claims the detail pages for the split ci-verdict claim672f08fa2
order the rule says what the shell ratchet does not count86469fbbf
cockpit the gap matrix is re-verified and the gaps are in the plan34794c73e
I1501 An execution a person starts is an execution the server can see I1512 Gate state is something the runtime can answer

Tests test 7

commit the three claims carry a recorded execution, not only a named test3239df657
budget the two cases stop naming the budget value they widen0f1aa6a11
commit the fixture's temporary worktree is named after the case it belongs tob7082d8aa
rust every exported item of the rule and evidence modules carries an example8b6a844af
release the writer and the schema are tied, so the next field cannot slip through53d995eff
design case 107 asserts the graph viewer's exemption is gone, not that it holds965d4df5d
session the subsystem is covered, and the coverage says what it means2783a5556

Housekeeping chore 59

derive the projections follow the merge with master 33a792ec74776118c0
derive the projections follow the merge with master 19b2755207406c6638
derive the projections follow the merge with master a77c35a74c07c510f4
derive the projections follow the merge with master df244393d0995772eb
derive the projections follow the merge with masterc668bbbb0
derive the projections follow the merge with master 623ff738e26818260e
derive the projections follow the merge with master 687a23f4d555d0887a
derive the projections follow the merge with master cd04012f1dd5f81493
derive the projections follow the merge with master 5e31dd49802d3212c0
derive the projections follow the merge with master 33806c04e74430913e
derive the projections follow the merge with master 9f7644fb0c7aa6c32b
derive the projections follow the merge with master 958bd1fb7c8fca0049
derive the projections follow the merge with master 958bd1fb7034ffaa4c
test cases 278 and 279 become 281 and 282, and the merge with master 860951619ae3320046
derive the projections follow the merge with master 8609516190dfb1aa4e
derive the projections follow the merge with master 8609516194b531558e
derive the projections follow the merge with master 8609516199b754cd3a
derive the projections follow the merge with master be8b66672, and case 278 becomes 2797d225fe35
derive the projections follow the merge with master 6739f46680fb04b2c6
derive the projections follow the merge with master 593de20f8490818e42
derive the projections follow the evidence gate860132db0
derive the projections carry the two devcontext parameter listseb3efc3f3
evidence the baseline records both halves, at the number the corrected predicate earnsc1299e268
development-semantics the baseline retires the two entries that closed5bd5016ca
derive refresh derived data a stale merge left on master1e3b47e04
derive projections follow the merge of masterd1c4d063c
derive the projections follow the merge with master e2de2e5ec23fc77fcf
coverage mark the differential gate work under task t-20260912105728-73859f7aea390
derive the projections follow the merge with master f9bee12bc1fb0d74ea
derive the projections follow the merge with master 04d9910e4120affcdf
derive the projections follow the merge with master 3407ca2d4b1d71d0d2
derive the projections follow the merge with master f22f34ddee9031a9b7
site the doctrine reaches the site as a page, like every otherce767b18a
derive the projections follow the merge with master b8d3eb59baa8b2e78a
derive the projections follow the merge of masterd80967756
derive the projections follow the navigation changeb2d4efe90
derive the projections follow the diagram conversiondd67c01d4
derive the projections follow the merge of the allocator and the merge policy16c83c67f
derive the projections follow the merge with mastera523bcf5f
derive the projections follow the fifth batch966b141ca
derive the projections follow the fourth batchc099fadf0
derive the derived tree for the merge of master187bc625c
derive the projections follow the third batch445e783ed
derive the projections follow the batch of seven870825d9a
derive the projections follow the merge of masterb5736b605
derive the projections follow the fifth merge of masterefddd1289
evidence the first recorded runs, and six claims that are proven36a6f1da0
derive the registry dataset follows the fabric's new documentation3d3cdcc27
derive the projections follow the third merge of masterb45d52718
release record v0.5.0 and the metadata it publishes8128683c0
derived regenerate after merging master4d40de2a7
derive regenerate over master@3a032c1e0f320b46b7
derive the projections follow the second merge of mastere3ee16de3
derive the projections follow the merge of mastercbc2c72cd
derive regenerate the projections over master@87b9ac659fbea3d9dd
derive regenerate the derived artifacts for the merge result2c3d3a75c
derive the projections follow the merge with masterd6b9d90d6
derive the projections follow the merge of master7cb8f8e6c
quality the baseline stops accepting three findings that no longer existc7f47c667

Formatting style 2

rust the two test files rustfmt still rewrites67f6f66de
rust format the crate, and name the type clippy could not readc15e45aa5

Integration merge 4

commit bring origin/master 3407ca2d4 into feature/the-commit-is-an-intent16eac16e7
commit bring origin/master 98a1f0800 into feature/the-commit-is-an-intentbd9be64a8
entry take master's batch of seven, restoring the policy schema's prompts block77225cbb9
origin/master (#221)fe66b4b7e

Other other 1

Merge origin/master into feature/canonical-versioning73386b837

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.6.0-aarch64-apple-darwin.tar.gz	3efdd7125063a5418bc2c473dc7202ae1865b84dd309e6389ca191f8ac9e5160
`macos-x86_64`	majordomus-v0.6.0-x86_64-apple-darwin.tar.gz	a7801c74905b7e067d454e2f81364e8768fb521fc951c47b750756b5a4c0ac88
`linux-x86_64-gnu`	majordomus-v0.6.0-x86_64-unknown-linux-gnu.tar.gz	9b77678d697c49a301bb7cd5485f9ae30949ecbd78eb34e8e27f0f9da5d81d38
`linux-x86_64-musl`	majordomus-v0.6.0-x86_64-unknown-linux-musl.tar.gz	300c92c9c0c70b0277d0b3dde5504292a0f7aedf8ac728932959c12c3f929948
`linux-aarch64-gnu`	majordomus-v0.6.0-aarch64-unknown-linux-gnu.tar.gz	d7415dbfb6ccb857f287b1f5a6b49df97c29bc3185f6883155191f46873f2dd3
`linux-aarch64-musl`	majordomus-v0.6.0-aarch64-unknown-linux-musl.tar.gz	01521975b7297757a542f6d57957624213143ba5a663a8bf0192776a53727ce2

v0.5.0

0.5.02026-09-113a032c1e0344 change(s) 15 decision(s) 6 artifact(s)

Decisions

The architecture decisions the layer dates inside this version's window, each with the route the document records for it.

adr-0040 accepted 2026-09-10

Development semantics are capabilities of one runtime; every surface is a consumer
adr-0039 proposed 2026-09-10

Liveness is four rules, advisory until a scan can decide them
adr-0038 proposed 2026-09-10

A scenario declares where it runs, and an obligation is a step
adr-0037 accepted 2026-09-10

A gate whose runner the repository cannot get on demand is planned on demand, so that the verdict arrives
adr-0036 accepted 2026-09-10

The design system is a typed declaration in the crate and every first-party surface consumes its projections
adr-0035 proposed 2026-09-10

A checkout's server is one of the repository's, and its state is served like every other fact
adr-0031 accepted 2026-09-09

The design is one declaration and every surface is a projection of it
adr-0030 proposed 2026-09-09

A task owes obligations, and the evidence that discharges them goes stale
adr-0029 proposed 2026-09-09

The changelog is a projection of what the repository already records, and the version has one writer rather than one source
adr-0026 accepted 2026-09-09

A capability module's area is derived from the features that name it, not declared beside it
adr-0025 accepted 2026-09-09

Presentation order is one total order owned by the crate, not a decision each surface makes
adr-0024 accepted 2026-09-09

An orchestrator is a provider only at the bootstrap level, and its worktrees are scratch checkouts
adr-0028 accepted 2026-09-08

The crate's public surface is measured by the crate, and absence from the API is a decision
adr-0027 proposed 2026-09-08

A command is declared once and every surface is a projection of the command graph
adr-0023 accepted 2026-09-07

Product features are objects of the layer, and the landing page is a projection of them

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 64

archive a snapshot of the tracked tree that can leave the machine71d716cc1
site the landing page is the intent-driven development argumenta47f93ef9
devtask a declared session link is derived, a branch guess is inferredb08d5de58
devtask issues and milestones as executable development scopes2c3749fc3
peers a peer holds more than one claim83f75b088
rules the liveness doctrine lands as four rulesbb8e5d76b
entry a rule and a gate hold repository entry shutb59009b22
site the method as a projection — governance layers and the four axesbd367dd0b
site the site is published at majordomus.devef96b2351
release the version is measured against the public surface, not claimed303dca256
use-cases a scenario declares where it runs and an obligation is a step8e2c1afd7
design the gate asks whether a declared colour can be read61e2989c7
session one episode per provider session, not one per checkoute91a07d5b
design measure the declared colours against WCAG 2.1 AA5f646e867
ui audit every surface the executable serves, not only the built onesb80b1d2de
health the report names the server, and readiness stops meaning three thingseb00abc10
integration scripts/unblock, the local master merge as one command5525f4b9b
mcp the shared server's lease has one reader, and a gate that keeps it534e8fb7b
mcp an announcement outlives the server it was made tof200a90fe
design the design system is a typed declaration and every surface consumes its projections95ffb1b7c
serve entry converges — ensure, status and stop, the start event calling ensure, and the election under a slow start4a4a945d5
server a checkout's server is one of the repository's, and its state is served7c4bc6a1b
release the changelog links where it can, names its producer, and the published site is gatedefebf080c
I1305 An observed contract has a fingerprint, a compatibility state and a fixture M000 Milestone and DAG driven development
obligations the outer obligations are established from git and the published site, not typed into a ledger by the worker who owes themf2000a52c
obligations what a task owes, and whether its evidence still describes this tree, over every surfacedc14dd0d3
rules an empty result and a failed command must not look alike824223cb5
ci three failures of one session, turned into checks1e96e91b7
plan one issue walks the whole chain and back, and a remote close still does not complete it67d6298c2
I1307 The ChatGPT shape is mapped from evidence and never becomes the canonical model
context the board reaches the worker who never asked for it8ad5bb6a7
plan the plan's derivations are capabilities, so a server can answer what to work on nexte41faa62d
I0001 Audit what actually plans work in this repository
peers a session is told it has not announced, and doctor names the work that exists on one disk1487d729e
trace an issue leads to the commits and pull requests that realised it, and back, without either being written down3831e151c
I1305 An observed contract has a fingerprint, a compatibility state and a fixture
design one declaration for the design, and every surface projects it2b3b9fffa
closure a task owes obligations, and the evidence that discharges them goes stalecf1ee94ca
peers an announcement outlives the connection that made it, and a claim is answered rather than merely recorded6aeec67b1
ci a gate says the published site came from master, and is being servedfbc1da919
release the version rises to 0.4.0, and the projection gains its page, gate and record957a6ff5a
release the changelog is a projection, and the version is derived from the commits82583eba1
ci the GitHub projection has a gate, so it cannot rot green again597ebe4e5
I1303 The store is bounded, measured and invisible to every published projection I1304 The browser transport is the one this repository already drives
skills a description that does not tell two skills apart is a finding7af039a4a
plan the projection to GitHub becomes a gated, identified, traversable milestone209a82c30
I0001 Audit what actually plans work in this repository
completion the shell integration installs itself, and takes itself out again2a7af4272
workspace a workspace is a kind, and only its content is localf9bbc636a
I1301 A workspace is a declared object of the layer; only its content is local
commands a surface that withholds a command says why, including the last silent case26743dac5
product a capability module's area is derived from the features that name it, and the sidebar groups by it1c36ca9a2
order one canonical presentation order, total and natural, owned by the crated7df74e93
providers the provider table is a generated document, a rule and a gate hold every document to it, and a job runs the gates its model assigns798a58094
providers what a provider is beyond its template is data, and bb is the first orchestrator declaredc1666878c
just the distribution group delegates, it does not reimplement4f5cc1b07
quality the measurement is a capability, and the rules that hold it are the layer's578ff6545
cli every command says whether it is a capability, or why it is notdb8b6f227
quality the crate measures its own public surface from its syntax tree94b0c22fc
commands the palette, fish, and the cost measured rather than claimed8e7faed93
product product features are objects of the layer, and the landing page is a projection of them675068f01
execution an execution is a watched capability call, not a second registry65dded963
commands one canonical command graph, and every surface derives from it427b73248
capabilities projection closure as a capability, a gate and a ratchetd05b1eafe
capabilities the command line is compared with the registry, not with itselfd2ac127a7
cockpit the sidebar reads alphabetically8518f00dc
web every projection route carries its availability, and the served-only ones are checkedade9050e6
env a direnv adapter that carries no repository logic, and a modular justfiled648e974c
cli majordomus env, and the split between what may build the indexc6bbce3a2
env one typed snapshot of what a checkout isaa64215da
generate the composed graph is an artifact of the one plan, with a schema and nothing private674b89907

Fixed fix 116

archive the archive command's pipelines stop hiding their own failures60a04f33f
ui the pin test counts the foreign-surface marker the audit added4e04aa6ff
site the landing page stops stating the unbuilt half as present fact87b9ac659
site the landing page's own gate stops claiming a check it does not run46fd96bd2
schemas the subset is a subset, and a gate asks an independent parser4e48a5677
mcp a server that lost its lease says so, and takes on nobody newf245eb630
capture a provider shim declares whether the person waits for itcb4207874
site-probe the sweep serves the site it measures, and the guard cannot pass on a listing67c3c2405
test every wait in this repository's shell carries a boundd66904da8
site a use case carries the same shape whether or not it declares a list4a87331cf
pages report the deploy that did not happenb0b095709
site the group's self-link carries a target of its own8b9409897
doctor the vendor's evidence is verified where it lives, not in the repository that adopted itc99aee554
session one episode writes one record, and an uncommitted one is visiblea038591b4
capability environment.status answers with a clock in it, so it is not cached0839627b7
site the base path the old address had, and the file the new one rests on05fdb333a
site the link to a changelog group is beside its disclosure, not inside ita0d6b0f90
release one group per kind, so the changelog stops repeating itself0799bc91f
build cleaning stops at the checkout that asked for ite02305e24
the site builds again, and clippy reaches the tests28a68421b
site a deploy that lost the CNAME is refused rather than published92c0098a3
task obligations gain a producer, and an honest outcome is no longer stranded05ee9dbd8
ci the implied level is a string, and shellcheck says sod40b236e5
generate a derivation refuses an executable of another generation9a34710c6
ui the audit measures the served surfaces it can now reache798d42f5
site-probe the walk that discounts a clipped element is asked about the element0ece4be20
plan,release a repository with no plan or release still sets every parameter2b59268ec
M000 Milestone and DAG driven development
commands evidence declares a class and a task requirement the vocabulary holds79ce87d97
site the navigation row wraps, so no page is wider than the viewport at 768pxfcb70bb30
security the peer-board request is a declared exception, not an undeclared onef66418147
ci a gate whose runner is scarce is planned on demand, so the verdict arrivesff921a93f
execution the queued transition is published before anything may start the work759307be5
session the server line reaches the briefing as an argument, not as a shared name8b6a03f98
order every shell sort is pinned with LC_ALL=C, and the debt is zeroad9ff819d
docs a public item's documentation stops linking to a private oneefdcefb3c
generate the composed graph is a generated artifact againe380088ee
capability a handler answers from the distribution the process located861f81a5a
site the page never scrolls sideways to reach one identifier48c445170
ci the changelog is checked against the history it is composed fromfe5fdc91e
design the gate reaches its own implementation, and the crate's new surface stays inside the crate4b7122a73
ci the ratchets and projections master raised without noticingb994eeaa9
pages a short sha names the commit it abbreviates873c9e1ac
design file the data-page vocabulary and tag an unfiled data word13b3abc33
ci the two ratchets the branch moved, moved backa3cd91399
release the command line is accounted for once, and every new export shows itselfda4f72511
tests four examples and one assertion catch up with contracts that already changed91f9fb851
execution a cancellation after a failure keeps the failure, said as a guardce40e2b49
context a peer that said nothing no longer ends `context` with nothing said89c814490
ci the structure job is green on two of its three gatesb6743dc39
release the committed changelog stops describing the commit it is inebc10de4d
ci the probe reads 426 from the WebSocket route as a surface answering7af40d230
ci master is green again on the three causes nobody owned6c979b376
site two checks meet new content and stop reading it as an inventory709407a1d
worktree a new path starts approved for direnvb3ffee4e9
obligations the pathspecs an obligation is hashed over reach every depthc5268505b
scope a task that merged the trunk has not touched what the trunk touched83775c7ab
derive where cargo builds is asked, not assumedbd63891d9
ci the gate model parses again, and the gate a merge dropped is declared againd7f492294
site-check a route is named on the API page whatever it is styled with9fcd06f8f
runtime a stale runtime says so, on the lease and on the way in53b21b4bb
tooling two failures of this session become refusals with testsb90e0dd47
release the module asserts the two projections it documents98f6606ce
gates a derivation refuses a degraded index, and one pass says everything a command still needsf6b73b05a
design,adr the three failures this session hit, each with the gate that would have caught it1cbb36869
traceability an open pull request keeps the columns after its empty onesefe5afdb4
I1305 An observed contract has a fingerprint, a compatibility state and a fixture
commands the module asserts the three projections it documents5609ab148
site the changelog page reads the groups the document carriesb551a3327
doctrine the schema check reads the schemas, instead of reporting a clean bill of health over an empty set0ad022303
docs the semantics module documents a validation that is not an itemed649c769
share a MAJORDOMUS_SHARE naming another worktree of this repository is refusedfc9864ebc
derive every stage names itself as it begins and reports what it cost59aa3769c
ci ci-plan tells a bare path list which spelling it wanted5bd2f77bc
cli an unknown command that the Rust executable provides says so and names the launcher59f5c8b75
github-sync the protection against overwriting a person's edit was blind when the plan had moved21f7ad848
I1302 Identity, provenance and support level are typed fields, not prose
github-sync a projected record carries its own identity, so a rename cannot orphan it3db47f7d6
I0001 Audit what actually plans work in this repository I1301 A workspace is a declared object of the layer; only its content is local
ui a scroll container is a containing block for what it positions, and the finding that says so names it2d328460b
ci a job that hangs fails instead of holding a runner for a shift1ea8da126
completion TAB in this repository asks a program that can answer itff2d64e57
order the collections that disagreed with each other, and a rule that keeps them from disagreeing again28304f300
ci the wiring case asserts the dispatch, and the provider table is a document of the docs target38cec32a9
derive the catalogue carries the rewritten summaries, and the crate is formatted441aa73f4
worktree the scratch roots are read from the checkout the command runs in24a21375f
usecase the tool under test is on PATH for its scenarios, so the evidence is the same on every machine28af54468
site the document router parses under bash 3.2, so the macos job runs the site cases again1df70e37e
rust the test build compiles again on master, and clippy 1.98 is satisfied5540b762f
merge the test-only index literal gains the field master added52bfbe7f0
site the mobile overflow findings, and the measure that invented three of them93977cce1
test the five suite cases that fail on master, and the silence that hid theme5933f485
site-data a scenario failure says which scenario, and case 11 re-pins the package it edits82ec36404
release the guard died on the archive it was written to catch1ef73612a
distribution a release is complete over the set it was published against8c48954e8
release the release asks Pages to publish, because its own commit cannot238e95089
release-verify a report a person reads, and no OK it has not earned5374ca524
release the packer that lost v0.2.0, and the status nobody could ask for84aa37b49
site the dependency-graph links are distinguishable without colour, and the crate is formattedbbe74e431
quality the re-export arm is a guard rather than a nested if99623c0ac
test case 11 mutates the version the tool has, not the one it had6658d2c1d
test case 12c stops testing a subsystem that moved out of it5d849ae60
gate derived-current asks both halves, not the one that is cheap94eb63142
quality a test builds its report in one initialiser95ca55bd8
quality the documentation links only to what the crate still exports, and the renderer is testable0f25df64d
test case 12 counts the moments the catalogue features, and matches the tag the build writes26d263b2c
generated the typing case asserted more than the rule, and less than it couldfe4958aa2
generated the two documents nobody published a contract for, and the rule case 52 meant2257db97b
site the command route wraps, and the closure is proved where it is written348431bc1
ci the install gate gives the deployment the window it needs84e8b526d
product meet master where it moved — ADR 23, the shared install block, the UI standard6bd67fe57
product the feature route has a benchmark case in a repository with no features0b385b67a
test the homepage's moment count reads the catalogue, not a directory that moved0fcd91fce
test two site checks that no longer describe what the build produces5e04284fc
worktree the container test names no home directoryefc6a085b
test the duplicate plan test and the unformatted tests a merge left behindde52b8497
cli the crate passes fmt, rustdoc and its test build againa10f0af08
environment describe the services master serves, from its route constantsb405705ba
tests master's own two failures, and the size cliff behind one of them6815b9bf5
why the acceptance case asserts the schema identity the tool prints5314bd6c8

Performance perf 2

server let a caller ask about this checkout alonee042a4cac
context a file that cannot be a context document costs no processd0bda2132

Reverted revert 1

design the pull request numbers stay as they were written2600b2932

Changed refactor 1

entry the rule defers the lease to project.the-lease-is-read-once9f6926ac0

Documentation docs 28

audit complete phase 01 — gap matrix, drift audit and the phased planb2ebc5fbd
audit phase 01 baseline — the system run end to end, with evidence174a1d24a
architecture name the canonical development runtime and make it enforceable93c5f3f87
ci where a gate cannot reach, and a milestone for derived-data integrityc17b62387
I1409 Derived data stops hashing inputs it cannot control
plan the plan meets the tree it is supposed to describea2882e3b6
I1031 A served surface says which checkout it is serving I1021 A browser proves the interface, at the widths people use I1305 An observed contract has a fingerprint, a compatibility state and a fixture I1306 A sync resumes, repeats itself without harm, and says how fresh it is
breakingrelease `scope classify` left the public surface after v0.3.14fcccc69c
rules four rules this day taught, and the two documents that meet them6d2c54ad1
ui the skipped-subtree record carries its own example7f813a56d
design the rule sets a floor on the value, and the branch that measures it carries the amendmentf13273f9e
schemas task.evidence is documented where every other event isa547850b3
claims two claim documents carry the five sections the contract requires20b2f941e
entry the operator's page for entering the repository766adaec6
entry the audit of repository entry — what converges on its own and where it breaks143af7b54
bootstrap every worker is told it is not alone, and told to push before it ise6571df53
plan I1301 is done, and I1302 may not land its schema alone012fed644
I1301 A workspace is a declared object of the layer; only its content is local I1302 Identity, provenance and support level are typed fields, not prose
plan the projection claim splits in two, and only one of the halves was ever true990bd0588
I1308 The executable's share is one capability, shaped like continuity
plan the external-workspaces milestone and its ten issues54c5f45ee
I1301 A workspace is a declared object of the layer; only its content is local I1308 The executable's share is one capability, shaped like continuity I1304 The browser transport is the one this repository already drives I1309 The boundaries this milestone asserts are gates, not sentences
adr the audit withdraws two thirds of ADR 00257f75414bf
adr an external workspace is not a providera845624ad
adr the synthetic run under bb was done, and it says what archiving a thread does notcc6540f2e
adr .mcp.json reaches Claude Code under bb, and the projection baseline takes the parent command the unwired gate let in929c29f8e
adr an orchestrator is a provider only at the bootstrap level, and its worktrees are scratch checkouts7da5ad9b2
claim the claim says what the gate now does, and where it cannot reachd485fe9ae
worktrees the cleanup nobody is prompted to do has a billa3afb1dac
adoption close the warning block, and say apparatus not ledgerc713bf419
adoption what doctor reports in a repository that is not this one7eebc1e9e
plan the deployed surfaces learn who is asking, and the providers are data9f973e52c
I1208 Adding a provider is one file, removing one is one deletion, and both are executed rather than described I1206 What an anonymous reader may do is derived from the effect classification, not from a list
environment the document the env recipes cite97f4cad8c

Tests test 21

entry the cold start is proven — a storm, a crash, two worktrees, planted drift96257970f
suite a waived benchmark is a declaration, so the two cases read itbf3f22e0a
suite the staleness case answers for the executable beside the sources11263d490
suite the docker context case reads the first rule, not the sixth line19fca96a2
session the case takes 111, since 110 was allocated twice51aa6e92e
I1301 A workspace is a declared object of the layer; only its content is local I1308 The executable's share is one capability, shaped like continuity
suite the rust-check step list follows the gate that was added to it5d72ae69d
suite each stage of the future-command case gets its own repositoryab00adc8d
unblock the case takes a number nobody else is takingd912a58ea
design the zero-registration mutations use a word the declaration does not file60b5b2492
workspace the declaration is proved to carry no credential3d9c929a5
order the gate is driven against fixture trees, and driving it found five more unpinned sortsf6af28819
gate case 56's first export is a repository too, so CI asks the same gate as a laptop8b6b9a982
env the two tests the adapter rule names, written000e40d67
the recipe set is asked of just --dump, not of one file's text010541612
distribution the installability report, over states this repository is not inb1be17353
gate the registry half needs a repository, not just a treeb7f88c73e
cockpit the sweep renders the routes the dispatcher actually answers4fd2d838c
site the feature pages vouch for the claims the homepage used toca45221c0
execution the terminal's rendering is asserted, and a surface count is derived9badf2448
commands the generated completion, loaded into a real zshf37da5681
worktree the migration's classification, its guard, and a dirty movee4ef4cba4

Housekeeping chore 105

env source machine-local .envrc.local from .envrc and ignore it1a651e644
derive the projections follow the merge of master83cd83ee6
derive the projections follow the peer claims merge702d06d5f
derive the projections follow the quoted scalarscf1cc1b54
derive the projections follow the merges master never regenerated06fa25891
I1409 Derived data stops hashing inputs it cannot control
derive the projections follow the master merge8a51ba050
derive the projections follow the master merge95b775cec
derive the projections describe the trunk again, so it can publish84b90b193
derive the projections follow the merge of master2aee5b1c1
derive the site data follows the tree08caf51aa
derive the projections follow the merge of master4cfd25574
derive the projections follow the second master mergee120f1996
derive the projections follow the template repair2511a3241
derive the projections follow the master mergef27d366d2
derive the projections follow the merge of master6042f4286
derive the projections follow the master mergebb82e058d
derive the projections follow the last four merges940b00262
release 0.5.0, and the projections that follow it4cd5cf6ac
derive the projections follow the contrast capability89b039165
derive the projections follow the merge of master4e015631a
derive the projections follow the registry entry and the claim documentsa46012d3e
derive the projections follow the on-demand gates and ADR 00372a6ba6d8b
derive the projections follow the master merge3b3ac4313
derive the projections follow the master merge1ae462da0
derive the projections follow the master merge371e33659
derive the projections follow the second master merge47f87721c
derive the projections follow the master merge829e9ca5a
derive the projections follow the master merge8ea2cbe5a
derive the projections follow the master merge998eee46a
an empty commit, to prove a commit no longer owes a derivee54def3af
derive the projections follow the master mergeec677b281
derive the projections follow the master merge04599afd2
derive the projections follow the master mergeea5592a9e
derive the projections follow the master merge789e95ab8
derive the projections follow the merge of #142c1a3e7930
derive the projections follow the master merge08348b0c1
derive the projections follow the merge of #1287c3e9f9ac
derive the projections follow the master mergec4b6d0715
derive the projections follow the target-directory fix6be9c8080
derive the projections follow master once moref36420c30
derive the projections follow the master merge8c53e2b11
derive the projections follow the master mergea4f9780b0
derive the projections follow the master merge16cc159c7
derive the projections follow the merge, generated by a binary that knows every module0df29dbcf
derive the projections follow eight branches and current master98f3dfbda
derive the projections follow six branches folded togethere15b311e7
derive the projections follow the master mergec114a92f3
derive the projections follow the master merge341451cb7
derive the projections follow the master merge91b4e8be6
derive the projections follow the master merge3a2aeab52
derive the projections follow the mergef2b018f26
derive the projections follow the two merges, and the baseline records lib/doctor.sh501ea2d41
derive the projections follow the merge of origin/master11fc8bf2b
derive the projections follow the master merge, and the baseline records three scripts that arrived with it8ddb6496d
derive the projections follow the final master mergecdc859654
derive the projections follow the master merge5e6d324c1
derive the projections follow the master merge0d45da189
adr,test renumber to the identities the board actually left free50f276bc3
derive the projections follow the master merge21a1203cc
derive the projections follow the second master mergee94b760d1
derive the projections follow the master merge5fe8f2ec8
derive the projections follow the master mergeb79363681
derive the projections follow the master merge, with the ADR renumbered to 0030f1c1b6556
derive the projections follow the merge of the base branche4c40b814
derive the projections follow the entry-point fixes691fab7db
derive the projections follow the merge with master44468dbc1
order the merge brought three modules and fourteen comparators; two are adopted and the baseline says what the rest arec72d294cc
derive the projections follow the two adopted sessions4066bdf4f
sessions adopt the two episodes this checkout left unrecorded1015d8ff8
derive the projections follow the merge with masteree9e79b3f
derive the projections follow the five-PR integration, with adr-0028 renumbered60bc499e4
derive the projections follow the skill description invariant6d19fc7ba
derive the projections follow the merge with masterd5d95779c
derive the projections follow ADR 0025a3a267e8e
derive the projections follow the merge of #114867f3a9f8
derive the projections follow the merge946bc36e0
derive the projections follow the merge09d410b5a
derive the projections follow the mergesebec65fd1
derive the projections follow the merges3bdc000ac
sessions adopt the record the hook wrote on 2026-09-0886b63f649
derive the registry follows lib/context_docs.shf3880a89a
derive the projections follow the merge with master914c13f56
derive the projections follow the merge004af3b53
derive the projections follow the mergese47531a4e
derive the projections follow the rebase onto cdd7f1cd41beeb077
derive the projections follow the merge6b21a9e85
derive the projections follow the merges19fa9d1f1
derive the artifact manifest records the fingerprint the last commit madea1b0d2637
derive the projections follow the merge with mastercdd7f1cd9
derive the projections follow the second rebasec217f2359
derive the projections follow the merge4cda9f9f2
derive the projections follow the rebase2c077cfad
derive the projections follow the merge9ee7c2952
derive the projections follow the merge with masterbebf76f03
release record v0.3.1 and the metadata it publishesc2629a26c
product follow master to 1fd5e32e, and take the sharper form of the moment count04bbeb483
derive the projections follow the moment-count correction015d21dda
derive the projections follow the two check corrections6cda9bcc2
derive the use-case evidence re-recorded at normal speed3c5705d1e
derive the projections follow99ead0772
derive the projections follow the mergec85c2cb0b
derive the projections follow the merge with master8bafa2854
derive the projections follow the merge with mastere25278a71
derive the projections follow the merge with master2365af0cf
plan I1005 done, with the evidence the contract asked for27662495a
I1005 The graph is a generated artifact with a schema and no unsafe field

Other other 6

wip: milestone, issue and the CI.md section before the master merge7143d199e
Merge origin/master into feature/github-work-graph6b5c2eb45
Merge feature/github-work-graph into int/everything, with I1305 restored to its own milestoned52f43334
I1305 An observed contract has a fingerprint, a compatibility state and a fixture I1401 The identity of a projected record is what the record carries, not what its title says I1408 The documents stop claiming a projection nobody runs I1301 A workspace is a declared object of the layer; only its content is local I1308 The executable's share is one capability, shaped like continuity I1304 The browser transport is the one this repository already drives I1405 A pull request names the issue it realises, and the edge is derived rather than remembered
feature/graph-model wip: uncommitted work found in the worktree at the topology migration, committed as it was034f334bf
feature/deployment-core wip: uncommitted work found in the worktree at the topology migration, committed as it was6579f1978
chore/derive-master wip: uncommitted work found in the worktree at the topology migration, committed as it was1410a0c79

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.5.0-aarch64-apple-darwin.tar.gz	cadb5ed2a7a61759cb279dfc29bd39594f5791472e551103bf18bf28b6e33f58
`macos-x86_64`	majordomus-v0.5.0-x86_64-apple-darwin.tar.gz	f04ce1b034bd5d5248d0e19051e955553769e72517e05f62309e4f322c3676d3
`linux-x86_64-gnu`	majordomus-v0.5.0-x86_64-unknown-linux-gnu.tar.gz	1180951cf5bb97c9ac07b60a673364dd8c712dcc60ae45728580212c6eb656b7
`linux-x86_64-musl`	majordomus-v0.5.0-x86_64-unknown-linux-musl.tar.gz	420407cc6a47b05b4e0a85735ef8346538378c0680ede455b38ba034f66bc92f
`linux-aarch64-gnu`	majordomus-v0.5.0-aarch64-unknown-linux-gnu.tar.gz	2d2465e1ea348514a7b071529af69ccff015939efc587ef3759ea8bef250defa
`linux-aarch64-musl`	majordomus-v0.5.0-aarch64-unknown-linux-musl.tar.gz	1cbc4d05e0863012187220257f433061f643e64ad71a46ffcfaf08d62b429fef

v0.3.1

0.3.12026-09-0845f921efb708 change(s) 19 decision(s) 6 artifact(s)

Decisions

The architecture decisions the layer dates inside this version's window, each with the route the document records for it.

adr-0021 accepted 2026-09-07

The branch-to-worktree topology is derived from git identity and enforced everywhere
adr-0020 proposed 2026-09-06

The capability graph is composed, not centralised, and projected twice
adr-0017 proposed 2026-09-06

An episode that opens is handed what the last one left
adr-0015 proposed 2026-09-06

The episode boundary is drawn by the provider, not by the model
adr-0014 proposed 2026-09-06

A closed session is a shared object of the layer, not a local note
adr-0013 proposed 2026-09-06

Every web surface is discovered from its producer, resolved once, and projected
adr-0012 proposed 2026-09-06

The Cockpit is a sixth projection of the registry, not an application over it
adr-0016 accepted 2026-09-05

The scenario is a body section, not a header field
adr-0011 proposed 2026-09-05

Every directory in the layer carries a contract
adr-0010 proposed 2026-09-05

Curated knowledge is one kind with a class, not a second store
adr-0009 accepted 2026-09-05

Prompt capture happens below the model, or is reported as unavailable
adr-0008 accepted 2026-09-05

Use cases are executable canonical objects of the layer
adr-0007 accepted 2026-09-05

Skills are data under the layer's skills section, and every surface that shows one is a projection
adr-0006 accepted 2026-09-05

CI planned from one model of what affects what, gates as repository-owned scripts, and the site deployed from the run that verified it
adr-0005 accepted 2026-09-05

One projection plan over the canonical inputs, named owners for every truth, and the site as a view of the registry
adr-0004 accepted 2026-09-05

One canonical declaration, composed modules, derived projections, and performance as evidence
adr-0003 accepted 2026-09-05

One shared MCP server per repository, peers, and clients that start it themselves
adr-0002 accepted 2026-09-05

A canonical capability registry, with MCP, HTTP, OpenAPI, Swagger UI, the CLI and the reference as projections
adr-0001 accepted 2026-09-05

A Rust executable with a data-driven, read-only MCP surface over stdio

Release on GitHub →Compare →Tree at this version →

Changes

Every commit in this version's range that parses as a conventional commit, under the heading its type carries; a subject that parses as nothing is grouped as other.

Added feat 188

site the install block sold as one command, and /why/ organised by who you are933dba91d
worktree the branch-to-worktree topology, derived from git and enforced everywheread414ce6e
plan adoption as a reversible two-folder contract, decomposedfc25581d7
doctrine nothing committed names this machine, and every answer satisfies its schema1bf5135fe
git the derived merge driver covers everything and is required103b06e6f
git the derived artifacts resolve on merge instead of conflicting29a8b2119
graph the layer's kinds enter the graph as themselves, with their own vocabulary434d18d72
capability where a capability means anything is metadata, not a condition in a page5e297b1a5
graph the references the layer already carries become typed edgesc5ecfa1f4
plan the capability graph milestone, decomposed into execution contracts05e1c378a
plan the Fly deployment milestone, decomposed into execution contracts1943519d5
graph one derivation composes the registries that already own their facts837f146bb
web Swagger moves to /swagger; /docs belongs to the documentation site5cae94754
directories the contract hierarchy on the wire and in the Cockpit916a6a7f6
generate a projected JSON Schema says it is projected7404c2b96
generate every artifact declares its document, its encoding, its contract and its source832fdc997
site the install command is one command, on the page a person lands ona13d93e3f
ui hold every page to one audited standard, discovered rather than listed12a3adb35
continuity the lifecycle runs itself, and every surface can read it13b7d9779
session the episode that opens is told what the last one left5901b55b1
derive a continuation record that exists without a worker typing one28c93f9e5
doctrine the derived-data rule gets a gate, so staleness stops billing the next person01aee7352
directories the contract hierarchy on the wire and in the Cockpit16e907fc9
deploy the listen address is one fact with two projections58a2c377a
I0904 The listen address is one fact with two projections
release a tagged release builds every supported target, or publishes nothing76b61cdd2
deploy deployment reads are declared once and projected everywhere1f0749639
I0903 Deployment reads are declared once and projected everywhere
health liveness and readiness are registered capabilities, not router hacks527ce5b76
I0905 Liveness and readiness are registered capabilities, not router hacks
why the map gets its own route, and the reverse links reach further8fc26357e
release package, verify, record and simulate a release from the model3d6b9cd6b
distribution one canonical model for how this project is shipped11b58c6b4
deploy the deployment object becomes typed Rust that refuses nonsense7d6d93a82
I0902 The deployment object becomes typed Rust that refuses nonsense
capability every command module asserts what it declares, and the gate is strict7402acf55
deploy a deployment is a kind of the layer, not a provider filef9089710a
I0901 The deployment description is a kind of the layer, not a provider file
directories the contract hierarchy on the wire and in the Cockpit2f4528a3b
continuity the lifecycle runs itself, and every surface can read it8fc689782
session the episode that opens is told what the last one left173cca442
derive a continuation record that exists without a worker typing one0c5e796cf
web the rule, the gate, and a surface nobody wrote code fore98d7c3b1
rules high is a number, and a module composed for nothing1624c6031
rules a command's evidence belongs in the file that declares it1f5e03a13
why the site becomes a reader of the catalogue, and the invariant is tested048ceeb64
site the layer's own memory, on the website, generated from the recordsa3c4ba7a8
generate every artifact declares its document, its encoding, its contract and its source54f91fa8e
why one domain model, and every interface a projection of itca6f3615c
session the episode boundary is drawn by the provider, and the working context store finally has a producere9ffa54f1
web the running server answers every static surface, from one armc304c41ef
why the catalogue, from ten moments to the operational surfacec1c10382f
why the operational moments become objects of the layeraadcf67a9
sessions the record's contract, enforced, proved and documented092fa19f1
web the reserved names are data, and the validator holds them7f910995f
plan the capability graph milestone, decomposed into execution contracts2485e9548
plan the Fly deployment milestone, decomposed into execution contracts36995bd77
site the web surface as a page nobody maintainsc386d4b72
rules the web surface has one declaration and two reserved namesd2408372b
web the topology reaches the page, the API, the docs mount and the sitee64dadece
sessions a closed episode is an object of the layer, projected like every other2d58e3473
capture the record is majordomus.capture/v1, and every prompt is three filesced86e655
web the test and benchmark reports, as surfaces nobody registered7a3c63a44
web the surface model, discovered from producers rather than registered39640ca39
cockpit the registry, rendered for a person, and the graphs it already impliesb2a092411
adr the threshold for recording a decision, and what a change set reachesb92215f10
site the layer's directory contracts as a page, from the tool's own verdict8e683b7ca
adr a decision states what it put in force, and the graph reads it backwards2e08815a9
knowledge the curated record carries the contract its class declaresec10af9ec
use-cases the scenario is a body section, not a header field3aec9ce98
context a directory of the layer that says nothing about itself is a failure917f086d7
schema state the order the rules resolve in, and hold every kind and schema to being appliedf50ce0684
schemas a document schema is one file whose identity fixes its pathbd08d089e
capture keep every prompt as a record and a rendering, described by its own schema8d0fa98ff
adr architecture decisions are canonical objects of the layer2492d5b7e
capture record the person's prompts from a provider hook, and prove it by running it953e21349
pages a generated status document, and a diff on staleness9abe90595
site one route per command of the Rust executable, under /docs/cli/ebd6c82ec
use-cases the skills command is named and run by a use case1f74291be
cli the clap declaration and its examples are the command line's canonical documentation88c15f788
site the contract animation reads at a glance, one task and one verdict at a time0f365719f
skills implement, the second skill — files onlyb6fd3b18d
skills repo-review, the first skill5fbb704ed
site the skills section is a projection of the skills cataloguedb20ba32e
skills majordomus skills, the skill-integrity doctrine, and the skill contract0df08c76d
kinds the skill kind, its schema and the source classes that discover ite7a16fa4b
site each outcome has its page, and the hero cards lead thereed1b8f63d
site hero titles at display scale, constant height while switchinge1be0e93c
site the homepage hero sells the outcome, not the machinery0114ddd28
site five more recognition moments under /why/7c5506d36
site one deploy path, scripts/site-deploy, for the Pages workflow and for a person at a terminal40ab2fd62
site use-case pages from the objects, with executed evidence and coverage5b01ce524
shell doctor checks the scope file and init seeds it6ae786602
scope the repository scope as data, read once and applied everywhere018ec8b47
use-cases fourteen more use cases, each with a scenario the tool runs58c80d089
site five more recognition moments under /why/c937db765
shell doctor checks the scope file and init seeds it82f3fa53b
scope the repository scope as data, read once and applied everywhere8461a8345
bench per-target allowances in the policy; the process-cold spawn gets twice the roomab0c14e1f
ci one model of what affects what, a planner, the verdict, and the gate scripts0e6fd975a
site five more recognition moments under /why/04ebc67dc
site the Registry page is a projection of the registry, generated and checkedc04ce58c7
generate the provider bootstraps are a target of generate, one renderer, checked in CI4100d6112
use-cases use cases as canonical executable objects of the layerf78d69c6d
site the Rust executable's reference routes, generated from the registry manifestbae489275
site the API reference at /docs/api/ and the raw document at /openapi.json9cea510ec
openapi tags, examples, per-status responses and one source of prose877922140
generate the site dataset carries every surface of the executable; cli.md from the clap declaration5cbb3e5e1
site the Registry page is a projection of the registry, generated and checkedfb09749a5
generate the provider bootstraps are a target of generate, one renderer, checked in CId922fc4fe
site the API reference at /docs/api/ and the raw document at /openapi.json4ee4d9880
openapi tags, examples, per-status responses and one source of prosee3c79f076
catalogue three use cases and one application for the served layer39f16ec45
shell doctor checks the scope file and init seeds it6ca2c0eb8
scope the repository scope as data, read once and applied everywhereb2bac9be0
site the Registry page is a projection of the registry, generated and checkedf829f2151
generate the provider bootstraps are a target of generate, one renderer, checked in CIbd292ca57
bench the policy gates a percentile only past a sample count; the noise floor is a millisecond17c9d01d1
architecture the canonical architecture as doctrine, property-tested, benchmarked and gated8bec4025f
objects resolve a majordomus:// URI once for objects.get and the MCP resource read1df8c12aa
perf no eval anywhere, the baseline and check proved, budgets proved, and the performance doctrine as five rules90362ebaf
I0824 Bench persists local runs and keeps a latest projection I0825 An explicit committed baseline I0826 bench --check refuses a regression by policy I0829 Performance doctrine as project rules I0830 docs/PERFORMANCE.md, README, CONTRIBUTING and CLI reference
generate per-module reference, the benchmark matrix and the registry manifestc575b4357
bench the benchmark projection, runners, coverage, baselines and the bench command134e3682c
bench every public command benchmarkable from the registry, cold and warm, with a baseline and a check0334deff1
I0823 majordomus bench: targets derived from the command registry I0827 The benchmark policy block
executor one execution path with counters, a policy-driven cache and prepared MCP listingsc5d089104
capability modules compose capabilities, the root composes modules01467b30c
plan milestone M004, performance truth, with its execution contractsfcab0f888
M004 Performance is executable evidence, and the hot path does no canonical work twice I0817 Phase timing and work counters behind MJ_TIMING
perf phase timing and work counters behind MJ_TIMINGe2a00a74b
mcp clients start the shared server themselves; justfile; ADR 3d1f1efbfb
mcp one shared server per repository, peers, and MCP over HTTP6ae97b8f0
schema kinds and JSON Schemas read at run time; the shell allow-lists derived from the schemasabf50a11c
kinds context documents, claim members, implementation and test files as data; allow-lists scanned at build5735bbf28
cli HTTP, OpenAPI, Swagger UI, introspection and generation as projections of the registryf32014c30
capability canonical capability model and registry; MCP derived from it74fb6c393
cli add the Rust majordomus executable with a data-driven stdio MCP server4d59957e6
context adopt scoped context documents in this repository and its skeletonaeb931365
context enforce context integrity, prove it, and brief the worker with the chain4dad86f19
context scoped context documents — discovery, resolution, validation, impactbbb44ed98
migrate upgrade legacy repository layout to .aicf0d73179
init seed portable .ai repository layer049de9571
knowledge edges only where a file states one, each naming where it was stated9b7320f61
I0809 Record only edges that a file states, each with where it was observed
session read closed episodes back, labelled and ordered by what they assert4a7c934eb
I0805 Read sessions back with a divergence label
knowledge nodes whose identity survives a rebuild and whose kind is never guessed4fd808379
I0808 Extract nodes with identities that survive a rebuild
site-data check the responsibility join in both directions47d3e2998
session close an episode into an envelope, attributed by a ledger stampef65f95f2
I0804 Close a session into an envelope derived from the ledger
site-data responsibility links come from the canonical recordb34f25077
knowledge discover sources from the repository index, never by walking the tree0db0501da
I0807 Discover knowledge sources from git, not from the filesystem
session open an execution episode, and refuse to open a second34cd24971
I0803 Open a session and report its status
plan M003 — a session is an envelope and knowledge is compiled from what is canonical2c4dc6fad
M003 A session is a durable envelope, and knowledge is compiled from what is already canonical
site a responsibility page carries its state, its command, its proof and its links82edb74e8
commands the command surface as two doctrines, and the contract where workers read itd97985fc3
commands a page per command, demonstrated by the fixtures the tests execute410b62c2a
events close the ledger vocabulary, on the way in and on the way out4c9c1ab97
commands one owner for the command surface, and coverage computed from it13d0242ba
plan M002 — a durable record names the worker that wrote it9edba86aa
M002 A durable record names the worker that wrote it M001 A blocking question survives a handover I0701 Reproduce the misattribution as an executable case I0702 Decide how a record is attributed, between named alternatives I0703 Implement the decision and prove it holds I0704 Publish what attribution guarantees, and what it still cannot I0201 Declare which profile axis may become which runtime limit
plan the status vocabulary is declared once and every surface reads it98ecb87a1
plan the milestone gate reaches the work inside itbd97c4993
I0201 Declare which profile axis may become which runtime limit
plan give every forward roadmap milestone its issuesb3b106ec6
M000 Milestone and DAG driven development I0201 Declare which profile axis may become which runtime limit I0206 Publish the runtime-adapters claim with the test that proves it and the limits it does not cover I0301 Define the execution record, including what an absence looks like I0305 Publish the telemetry claim and record what remains unmeasured I0401 Define an accepted outcome, and join it to its measurements without storing the join I0404 Publish the cost-per-outcome claim with its unit defined beside it I0501 Group comparable work from what the records already carry I0504 Prove the recommendation is advisory and publish it as such I0601 Let a policy name a shared source it does not copy I0605 Publish the shared-policy claim and what sharing still cannot do
site a claim page names the milestone that would make it guaranteed8b276d897
plan M001 is done — a blocking question survives a handover181c86ab0
M001 A blocking question survives a handover
blockers a question refuses a completed finish anywhere on its branch06383f2fc
plan I0102 decides that a question blocks its branch, not only its task7bcce2d73
I0102 Decide whether a question transfers or the gate widens
readme the roadmap table becomes a pointer to the projectiona1288fe9c
doctrine the roadmap is a projection, and a document may not be a second authority99a8dc0b2
catalogue use cases and applications as data, enforced like everything else9a1a8b6b0
plan milestone acceptance evidence is written by the command, not by hand8ce1ac7b2
M000 Milestone and DAG driven development
site the roadmap is the milestone graph, not prose in the READMEc8ac338c9
site an interactive finish contract at /contract/, and two checks that hold itb2c62261e
docs the plan's current state as a derived document, and a wider next-ready search44f24556f
plan the first real milestone, and the GitHub projection applied for real6a6371fca
M001 A blocking question survives a handover I0101 Reproduce the escaped blocker as an executable case I0102 Decide whether a question transfers or the gate widens
roadmap milestones become a gated graph, and the roadmap derives from it2d17b29a0
site the plan is a derived surface — roadmap, milestones, issues and the DAGc27d6f1f3
site moment pages carry their evidence; two checks restated as properties019df0af6
plan the canonical project model, its derivation engine and its command surfaced7b949fed
site the why section becomes data, links both ways, and stops collapsing code6780071cb
site the hero shows the contract working; the transcript moves below itf27c7aa86
site derive two graphs from the sources and render them interactively9cabd296c
doctrine a declared, dispatched and wiring-verified enforcement layer1f18a7475
memory context, checkpoint, history, decision, question, prompt, search6f0b1ea93
site route audit — funnel homepage, five-intent navigation, limitations and roadmap pagesf0516e3fd
site rebuild GitHub Pages as a Zola projection of canonical dataf5cfab37e
site one detailed document per claim, rendered as its page0e3cdc1a6
site detailed claim pages, and every claim mention links to one16ee5f4a6
site every recognition moment is a case-study page322d4d446
site pain-first homepage — recognition strip and before/with comparison1d87ca9b2
site every tile is a page84af3af7d
site who-it-is-for section from claim-free positioning copy9acfd7980
cli region projections and dispatcher-aware wiringf58310de0
site migrate the derived site to Zola, Flowbite 4, Alpine and Mermaid08c083b48
site derived GitHub Pages site, claims matrix, and pages workflowb596dcce2
self-supervision, example walk-through, README for v0.18d1cae6e6
update, start, checke5242b4f2
scaffold entry point, shared helpers, YAML subset parser, test harness18c4080de

Fixed fix 171

distribution the release builds on runners that still exist98772ecbf
ui the audit follows the topology, and finds the pages it was missing0151eaa20
distribution the advertised install command is proved against the published sitee574d800b
ci the Pages workflow triggers on the paths the gate model now names99af7b927
discovery the in-process glob matches bracket expressions, so the ADRs are indexed621303ad5
test case 76 says why it failed, and follows the schema path rule6b4da355d
rust the four rustdoc errors that fail the gate on every branch48299b76f
ci the baseline is named where the tool writes it, and the merge driver is declared onced3a36fd25
bench a refusal is a measurement, and only a failure stops the runcd836a67e
distribution the release archive carries the launcher the MCP one execs5213b79dc
why a repository without a catalogue still has a case for every route434437f00
ci rustdoc builds under -D warnings, and two cases read the surfaces as they are served0dd8c4ace
site the shared moment card on the audience and area pages, and a command note that folds71dd7bd00
site long code tokens fold on a phone instead of pushing the page sidewaysdd5164556
usecase a recorded scenario says nothing the clock decides711035897
ci every gate green after the topology landeda60b65e04
ci no example path names a home directory, and the merge driver is wired relative to the worktree46f55ef8f
worktree a session's scratch checkout is never cleanup-eligibledb9a5a349
ci the runner's clone wires the merge driver it is checked for5a190b041
rust the three lints that fail the gate, written the way clippy asks6864d4a5c
ci the runner's clone wires the merge driver it is checked for62334ee59
rust the three lints that fail the gate, written the way clippy asks5c749b262
site the web dataset carries the site's own version, and a description is not a path4c1884e1b
claims,test three claim pages the contract rejects, and a rule that fired on a file27af381df
release one entry per path in a release archive4db957624
git an agent's worktree is not part of this repository8967a8b49
generate a plan writes inside the repository it was planned forde76ee617
schema four component names that meant two things each, and one ADR number claimed twice58b552932
generate a plan writes inside the repository it was planned for6fdfdc4db
site the published contract path points at a file that existsfbbf668e5
release publication regenerates every projection of the record77681eeac
distribution the public release metadata says it is generated2d83344c8
generate one definition of a repository-relative path, and the projections it makes reproduciblef3be42bca
tests the fixture's own declaration had grown past its size limit623970e9b
ci a home directory in an authored document fails where it was written0873947de
I0908 A hosted process has no repository, and says so instead of failing
web a declared surface that was never built keeps its mount, and the tree is regenerated2c3be37c9
plan an issue's reasoning stops naming a developer's home directory138840b40
I0908 A hosted process has no repository, and says so instead of failing
examples the walk-through stops naming a directory that no longer exists059f04a90
generate a generated artifact names its schema by a path, not by this machinee0a5e71f0
generate a provenance banner names the repository, not the machine3d99a94cc
ci one declaration per plan output, so the workflow parses at all9f0fe56cb
ui the audit reaches zero, and stops attributing its own failures to pages2ca03db97
capture capture render repairs the archive it is named to repair5ba6d4c52
capture the provider sanitiser took over the rendering's field readera7610c142
integration the defects the merged tree's own gates foundb43b0b5ce
deploy the deployment schema takes the identity master's loader requires1fb7cca3b
ci the Cockpit probe gets the libraries it probes forb99d84822
schema the context contract keeps its constraints where they are now declared61016a9ba
ci satisfy the gates the branch had not been run through76a71048f
context a directory's contract is discovered because it is onebe874eef8
site the published session projection says nothing true only of its readerbdd150c55
test an allow-list is a banner and then patternsdcfef63cb
site a skill example's path is a path, so it wraps like one40e8c430b
ci the Cockpit job probes pages whose libraries it never built7b76530dd
ci the three things the first CI run found5ff8036a6
ci the Cockpit probe gets the libraries it probes forf992a15af
adr 0017 uses the heading levels the validator requires973dbc711
ci the Cockpit gate is declared, selected, and never ran1ce4d09dc
usecase the commit a handover quotes, not only the one it states7014e7c4f
usecase a derived record states its commit in prose, and evidence must notd28a771ac
ci one cockpit_assets output, not two0b64ef18e
derive a quoted section kept its words and lost its paragraphsadb949968
ci three gates that were not gating anything4667e9245
site the generator converges in one passb4fde1f59
site a generated document's page is projected from what the run producedd93ba2bd9
schema the context contract keeps its constraints where they are now declared1c8af6b72
ci satisfy the gates the branch had not been run through4044f0181
context a directory's contract is discovered because it is onee65a47cf4
ci satisfy the gates the branch had not been run throughc73c52fc1
site a skill example's path is a path, so it wraps like one2b42014b5
ci the Cockpit job probes pages whose libraries it never builta6dfd8c86
ci the three things the first CI run found3ffbbad55
usecase the commit a handover quotes, not only the one it states18f6e1d47
usecase a derived record states its commit in prose, and evidence must not05919656e
context a directory's contract is discovered because it is onedb9906cf3
ci one cockpit_assets output, not twoef0400a91
docs the use-case example nests its fences, and the capture example uses no real home994561f73
derive a quoted section kept its words and lost its paragraphsa9dbdf927
ci three gates that were not gating anything504126f84
evidence the EPIPE diagnostic in recorded output, at its source and in the normaliser7719c72d1
rules one assertion that runs, in whichever form the author chooses19fb3b56d
usecase the run's verdict is a fact about the run, not about its printing5ea1db0f4
evidence the recorded evidence carried the operating system's user name0241fbff5
usecase the run's verdict is a fact about the run, not about its printing1742142d4
ci the plan job never declared cockpit_assets, so that gate could not fire2b6447d3c
schemas the session-record schema joins the convention, and the tree is regeneratedf17cd99c0
session the four ways the session subsystem was already inconsistent with itselfa840487c3
web the declaration module asserts what it wires, and an error names its kind onceeb38d9207
rules the reserved names are held by tests, not by a runtime finding9dea53fdb
capture,state no eval in the writer, and current.yaml declares the key it writesa7fb5a6c9
schemas the capture and document schemas join the one convention2751b3950
web the listing header is a format string, not four arguments762cd61c3
adr renumber the scenario decision to 0014b872ba2f5
bench a capability module called `system` vanished from three denominatorsaf56e2e3f
site two assertions that moved with the tree under them7f3d9b96b
layer the checks the last three kinds left behindc38bd83c8
site route the documents a run writes before it writes thema1ba27a7c
pages the derived content is committed, so the fast path can render a clone4f98d412c
site a command page's breadcrumb names the command it is underdcb596c79
site a command page names the whole command, and says its summary once8b038698e
usecase pin the scenario repository branchfafd4acb8
claims the scope claim carries its own note02af4b255
site a new selection clears the previous one's edges; Registry is listed once in the navigationc9a173590
site the core-model diagram sits in the section's width, beside its callouta7d5847bd
site the homepage README fragments link site routes, not repository paths37dd48266
site a new selection clears the previous one's edges; Registry is listed once in the navigation8059b4fca
site a long identifier wraps instead of widening a registry or section pageb3ceaf6e3
site a description on the executable's pages wraps at 320pxc53b8f0dd
usecase the evidence normaliser masks the verification wall time969696df3
site the executable's route slug follows Zola, one Registry page3e8dac549
usecase the scratch directories are named as the no-forbidden-constructs case reads thema974d2c31
bench the routes bench loads the scope the index builder now takesb32dcdeb1
bench the routes bench loads the scope the index builder now takes144771d09
scope migrate seeds the scope, knowledge reads it, case 65 ignores the budget line94cdec334
bench the routes bench loads the scope the index builder now takes9454c0e4c
scope migrate seeds the scope, knowledge reads it, case 65 ignores the budget line1fce6f281
bench a baseline fails a run only on the host that recorded it38dedb392
plan the model accessors and the status JSON hold under bash 3.20a6d71d0d
site a path in a claim or an issue title wraps inside a 320px card27db8a983
I0830 docs/PERFORMANCE.md, README, CONTRIBUTING and CLI reference
scope migrate seeds the scope, knowledge reads it, case 65 ignores the budget linef28a5dad3
serve ask descriptor 0 whether stdin is a pipe, not the path /dev/stdin2356c588a
shell the plan model reads its rows under bash 3.26d3f18d39
site a path in a claim or an issue title wraps inside a 320px cardaae7115e1
I0830 docs/PERFORMANCE.md, README, CONTRIBUTING and CLI reference
bench a baseline fails a run only on the host that recorded itcd3f04a43
serve ask descriptor 0 whether stdin is a pipe, not the path /dev/stdin8de168618
site plan and issue rows shrink at 320px instead of widening the page2a4537e9c
site a path in a claim or an issue title wraps inside a 320px cardff4406b50
I0830 docs/PERFORMANCE.md, README, CONTRIBUTING and CLI reference
mcp settle_alone answers a Reply, as the session does since the prepared listings277b366cb
merge the YAML subset types decimals, and two cases stop counting objects.get's casesc7b937cf6
mcp nothing a client leaves behind locks the others out of the shared server4a2f20aac
mcp order resources with sort_by_key, as clippy 1.98 asksd3ed96886
context drop the document chain under budget before any record body2db43cc0a
doctrine separate registry rows with the one byte no rule value can carry4f8b55dff
state reading commands answer on a checkout with no local store yet6808848fc
migrate back up and remove the legacy provider body instead of carrying it into .ai9b9f14c33
paths derive the distribution root from the entry point, never the environmente6df13ad7
site-data the plan model reaches jq through files, not argv780a76b07
M003 A session is a durable envelope, and knowledge is compiled from what is already canonical
site declare the inputs the generator reads, and use one fixture helper75e118cf2
claims a claim that belongs to no responsibility must say so45ff51821
checkpoint a finished task has no checkpoint due, so stop reporting one4c4b19a54
test assert the key a policy error names, not how it punctuates ite23c7e117
test assert the key a policy error names, not how it punctuates itfd48689df
site the overflow probe names what actually overflows7fa8057d6
ci the deploy waits for the measurement, not for a heuristic that predicts it0fdb682bb
prompts the shipped assets open with a heading, so they are valid Markdown6c680977a
policy a required key that is missing is reported, not turned into a shell errorc1c2686f5
site a claim's note may wrap, so a path in it cannot set the page widtha9c9cc000
site a sample says it is a sample2787b3b47
site the route map mirrors Zola's slug, and a canonical path may wrap1a50a2ccf
I0001 Audit what actually plans work in this repository M000 Milestone and DAG driven development
site let a step's note wrap to its own line on a phonefb0eb1d56
site expand the generator's input globs in byte orderdf6b79b7b
ci export the subshell setting shellcheck cannot see through, regenerate9483779a1
derive what the tool knows about itself, and refuse a second copy920fce43a
docs PLAN_STATUS.md recorded the commit it was generated at, so it was stale on commit80ab7b25f
site refuse an invalid project model from the model's own findings5d63204fc
M000 Milestone and DAG driven development
test the site fixtures copy the project registry the generator now requires95862bc25
site regenerate the manifest after editing one of its inputs8d4df52cf
site untrack two generated doctrine pages the new rule caughtdbf5b1107
site the doctrine filter announces its state, not only its colour70b5768e0
site derive the responsibility count instead of writing it38327c0e7
site parenthesise the edges pipeline so jq 1.7 parses it60f83e37c
test replace ls|grep with a glob loop in the why-route countf6488ca07
question the file's own template is not an entry, and publish the blocker gap204f1c792
state a task record names its checkout, and does not export its scope8efa84799
site derive the route check from generated content; match node_modules as a symlinkd0028b9ae
site point the npm scripts and gitignore at the current site scripts6b5aaafb7
start,check accumulate repeated --scope, tolerate spaces, normalise scope at read timea98a0a342
site min-w-0 on grid columns holding code; multi-line wrapper check in test 09940fdf45d
site carry the GitHub Pages path prefix on every generated path06e85990f
site make --no-css genuinely need no Nodeb24691ce9
site set core.hooksPath in pages, and stop citing generated files as sources2738c69f6

Performance perf 23

ui the audit drives a pool of tabs, and covers more for less1e8f5f658
context read the scope once and the document keys in-shell9f0c26824
shell path normalisation without a subprocessd280bedde
why the search text is built once, with the cataloguee6996ac62
context the coverage walk is one awk pass, not sixteen hundred subshells1b182f1f5
cockpit the pages are benchmark targets, timed with the routes they sit besidea277e0509
pages a publication path separate from the merge gatesb959046cd
site one generation per build and check, not threedd846ec08
site-probe one browser process per route, three widths as iframes, a bounded poolc764ed3c7
mcp one git ls-files per build, listings as prepared bytes, a cheaper fingerprint1880cd434
capabilities list summaries, not schemas; derive the object view schema oncee2a674459
generator JSON strings and arrays without a process eachc578fefe5
plan the milestones, issues and graphs as JSON in one pass each5f14cb32b
generator load the plan model and every flat input into variables oncecf4ad7560
knowledge hash every source in one process, and read each kind in one pass79a47a48d
I0833 knowledge nodes and edges read each source once
yaml flatten many files in one awk, and load the plan with four processesb974e02fe
doctor load a flat file into variables once, and check the plan keys in one awk9494aba9c
project one unknown-key check per file, and the id check on the row pass144621957
I0819 The project model is loaded with one flatten per file and no per-file lookups I0818 The command registry is read in one pass
commands read the command and event registries in one pass3a39694d7
I0818 The command registry is read in one pass
doctrine read the registry as rows, once, in the dispatcher and the wiring check4f5907e29
rules load, check and register the rule set in one pass per file8d1dffb38
rules load, check and register the rule set in one pass per file59a5deb72
yaml one process per key lookup, and refuse an unclosed rule front mattere6321032e

Changed refactor 13

rules a project rule gets a gate, not a doctrinec0bb1bc29
web the router asks the topology instead of naming its routes797a88d7a
skills the hand-deploy procedure becomes a canonical skill1e862ddb6
site derive the number of why-moments instead of writing five373da8770
site derive the number of why-moments instead of writing five0cac92302
doctrine derive enforcement from portable rule objects220fd264c
context make provider files thin .ai bootstraps and remove the provider bodya1ce10c82
ai move this repository's canonical data into .ai/repo and its state into .ai/localbd7cb2a57
projection detach provenance from legacy .majordomus stated1848ab0e
paths separate tool distribution from repository ai state66e318813
plan an M003 issue claims the case files it owns, not the whole directory7ca51d2ce
M003 A session is a durable envelope, and knowledge is compiled from what is already canonical I0804 Close a session into an envelope derived from the ledger I0808 Extract nodes with identities that survive a rebuild
site every count on the site is rendered, never written20f94850e
plan one counts builder, and the milestone chain the gate makes redundant8917efa90
I0301 Define the execution record, including what an absence looks like I0206 Publish the runtime-adapters claim with the test that proves it and the limits it does not cover I0401 Define an accepted outcome, and join it to its measurements without storing the join I0305 Publish the telemetry claim and record what remains unmeasured I0501 Group comparable work from what the records already carry I0404 Publish the cost-per-outcome claim with its unit defined beside it I0601 Let a policy name a shared source it does not copy I0504 Prove the recommendation is advisory and publish it as such I0201 Declare which profile axis may become which runtime limit

Documentation docs 82

deploy a preview publication is visible, and says so on the pagee40cefe9f
ci the reference gate in the model, and out of the suite's way2eb2c01bb
consolidation the forensic findings and the plan they justify95d9a773c
references every path a document names is a path that is theredf7dcc385
the directories say what lives in them, and every schema reference resolves17d3e1b23
why the schema paths and the assertion name the identity, not the old file029f26260
adr the capability graph is composed, not centralised, and projected twice665f1c4e8
session the working context declares itself where every other record does24af4a5de
use-cases the directory hierarchy is a question a client can askc81090d13
context a carried subtree is released by name, and the tool knows no names0704b1faf
why the schema paths the merge moved, and the assertion that quoted onec50befe3f
adr the episode decision takes 0017, and every projection followsef57411b4
claims the command line's documentation is a guarantee, not an accidentfb7a30f95
use-cases the directory hierarchy is a question a client can askfb30b23cf
context a carried subtree is released by name, and the tool knows no names1e0d176e7
use-cases the directory hierarchy is a question a client can ask9fa28449a
context a carried subtree is released by name, and the tool knows no namese8cd3339b
rules the case for a floor, from the branch that hit it70a299939
web the surface a reader can navigate, and the one a developer extendsfa0d8245d
web the Swagger UI is at /swagger, and a quoted URL is not a linkbc77bf6b0
claims what the two web-surface guarantees mean, and how to see them4e25cfc18
cockpit the Cockpit on the matrix it belongs to, and what it will not doc43f8bc9a
adr web surfaces are discovered from their producer and projected once8cee64583
cockpit the decision, the reference, and a use case that names it27f55987d
pages the publication path, its budgets and its evidence2e2299401
ai a native command exists only with its documentation and its executable examples8375d9ddf
use-cases the doctrine, the workflow, ADR 5 and the concepte358be230
ci the pages job publishes through scripts/site-deploy; the wiring case accepts ita7db43652
scope the doctrine, the claim, case 93 and the documentation104533222
one contributor workflow (just derive, just derive-check); the benchmark-policy edge tested; long path links wrap at 320px0aa1ce285
scope the doctrine, the claim, case 93 and the documentation8aa2e0051
architecture the documentation projection graph — stages, boundary, ownership, classification — with its claims and gates97e3986f1
adr ADR 5, one projection plan over named canonical owners, the site as a view of the registry312be2a1f
claims name the test file of mcp-uri-resolution as committed47e6aa520
openapi claim openapi-inferred, case 92, and the projection rows2f39b57a7
adr ADR 5, one projection plan over named canonical owners, the site as a view of the registrycdbe95c70
openapi claim openapi-inferred, case 92, and the projection rowsecdce9d01
scope the doctrine, the claim, case 93 and the documentation0240a2652
claims name the test file of mcp-uri-resolution as committed99f2137ee
adr ADR 5, one projection plan over named canonical owners, the site as a view of the registry3fad40b7f
ai codify the shared server's resilience as doctrineb806960a2
capability resolve the intra-doc links to the module macros2bba3cf88
mcp the shared server, peers and client auto-start, with their claims195b19416
capabilities the capability model as doctrine, with its claims, ADR, CI gates and the every-interface case56a5f4063
rust document every public item, add executable examples, raise coverage to 91%b070d3796
cli document the Rust executable and its MCP surface, and wire it into the checks7e2f5484f
ai codify simplicity and extensibility doctrine7e826bf4c
claims file the layer and migration claims under the layer responsibility46bfff17b
ai say exactly what init writes and what the bootstrap check detectsab450a1ce
ai rewrite README, CLI, CONCEPTS and DESIGN for the layer as it is82128fcf9
claims state the .ai layer's guarantees and bring the matrix to master semantics20a804d4c
ai document the manifest, the vendored package and the knowledge sources; sweep the last legacy paths4ec84dfdd
rules list exits 2 and 13, and say doctor does not read rule objects yet0d3e125f6
ai sweep the pre-.ai paths out of docs, claims and the sitee637f763c
readme the profiles row no longer says how many there aree7766ad40
continuity a session is the seventh record, and it is an envelope9c13909ca
I0802 Specify the session record before writing one
design the boundary excludes semantic machinery, not a table of stated references3c9ba2f1c
I0801 Narrow the Clean Extraction Boundary and record what was adopted
ledger record why no rule guards a declared readerfb43dfa07
architecture the de-hardcoding ledger and the ownership rules behind it503edce06
schemas decisions.md names the commands that read it4f9f55aee
plan evidence states what a command showed, not a count that goes stale2dc3f514a
M000 Milestone and DAG driven development
claims the roadmap version comes from the milestone, not from prosee0d0e054c
claims task-dependencies says what is refused, not that no graph existscfd0f594e
correct why the input order diverged, and record the environment lessond48f9a636
M000 Milestone and DAG driven development M001 A blocking question survives a handover
plan the planning semantics, the dogfooding rule, and the schemas behind them879efbd30
say that doctrines exist, where people actually readd7c9fa174
memory the continuity model, its schemas, and twelve claims with evidence2c4bbb4c2
complete the documentation index and correct claims that outran the codefb1be3eab
region projections, dispatcher wiring, and a flag that never existed87bbd51ae
economics cost decomposition, ledger-measurable metrics, per-outcome unit0107a0bad
record the base-path lesson as the cleaner two-writers example967a95b55
site document the deployment prefix and the Node-free generation moded24538f7c
site document the derived Pages architecture and content ownership5521c5da5
add logo, social card, and website link to README6a224ad8b
record the two-writers-one-checkout limitation observed while building v0.167c99d730
cross-reference CLI and schema specs from design and report0c7abaebf
expand README and add CLI, schema, contributing, and security docs6136dc3c5
point README at design, extraction report, and contract54a869e29
add extraction report, repo operating contract, and docs index9ce093642
design add typed outcomes, check --explain, presentation layerf0b4bc6ad
add v0.1 design specification232b2797b
add design-phase README556e524c2

Tests test 52

lib a fixture carries what the templates read, not what one generator names3a0b38c13
lib a command can be quiet when it works and speak when it does not22c18f959
registry the removal case takes a capability the catalogue does not need77e2a7a17
ci three cases read the repository as it is33b52ebf6
rules the DAG case and the CLI reference read the enforcement column as it is printedae48c7051
ui the two cases this branch invalidated, both read from the model now1ccc432bf
generate the document schemas are projected where they belong, and proved so78cd4fae5
ci a gate that refuses a document naming a file that is not there368cd4ce9
ci a workflow is legitimate when it has a model, not when there are two of themc79ab0cef
cli every refusal of the documentation contract, provokedab94b74bb
generate a projected JSON Schema is JSON by its own contract6206079f4
ci a workflow is legitimate when it has a model, not when there are two of them0f67cd5fb
continuity the populated page, and a determinism check that stopped watching the clock537c54000
continuity the populated page, and a determinism check that stopped watching the clocke328d2f79
web the vocabulary, the selection and the renderings the gate had not seenb312f32ec
web the reserved names and the derived page, proven over a sockete3d8895b7
cockpit every route the server serves, and the interactions, in a real browser2614422a0
use-case prove the refusal of an undocumented directory by running iteb4ecf267
pages the fast path is held to the shape that makes it fast8a8925a67
suite the timing cases and the API page case run alone; two cases clear MAJORDOMUS_BIN2ca48d4bf
scope case 93 reads the diagnostics where mcp --inspect nests themb6468d87e
scope case 93 reads the diagnostics where mcp --inspect nests them7d8cd469b
projections the plan test writes nothing outside the fixture root6ca6a2cd7
site a capability that joins or leaves the registry manifest gains or loses its route; a broken manifest is refused6791e9e16
suite a bounded parallel runner, exclusive cases, and MAJORDOMUS_BIN for the Rust casese5de81170
cases a mutation case copies the site tree whole and reads the input list from --inputs2a73067c1
http replay every route's cases over a socket and time every routebbab30282
projections the plan test writes nothing outside the fixture root11a0acd67
http replay every route's cases over a socket and time every route82406d309
scope case 93 reads the diagnostics where mcp --inspect nests them8ec5922a9
bench the objects.get run has one result per declared case, not one14d958ebb
rust prove the Rust gates are wired, as three claims and case 77015e55aeb
cli the no-share check runs inside an initialised repositorye78732848
site fixtures carry every path the claims matrix namesff7d1a7fc
capabilities registry invariants, cross-projection identity, HTTP black box, cross-protocol parity, generate --check1e7761cb1
cli black-box coverage for the CLI, discovery, metadata, index, stdio MCP and extensibility68fde4bee
constructs allow the context-document scratch files in the write allow-list9a7adc757
context black-box cases for context impact and check-sync, against the contract62ce65ced
rules prove the rule DAG by mutation, dispatch `rules`, document rule objectsc58893378
site mutate the state reference the scanner now resolves20e0bac56
plan capture output instead of piping it into grep -qa08ecde76
plan capture output instead of piping it into grep -q646308dea
an empty derivation is a fault in the derivation, not an answerb559ce3b5
plan the roadmap graph gets its own mutation propagation proof955031ad9
site the committed derived artifacts are checked against this repository05423af46
plan cross-surface consistency and mutation propagation; CI gates the modelc4c12ac21
cli derive the command surface from the dispatch table359b45e2d
renumber the continuity cases to 20-26c31159b9d
memory behavioural, negative and integration cases, wired into CI3b22af408
lint the derived site for mobile-first and responsive constructs870c45ecd
portable file-mode check; gate the derived site in validate57e85e1fb
scan the tool's own source for forbidden constructsf3daaca36

Pipeline ci 14

plan the cockpit probe is gated on an output the plan job declares40cf65522
pages the workflow's paths block follows the model again817ea7ba2
site one documentation source, two base pathsda48cba98
cockpit the stylesheet is a generated artifact, so a gate proves it currentf710d3472
suite the jobs that run the suite check out the whole historyc991d86cb
master runs are independent of one another; only deployments queue1e6edeafc
structure actionlint from a pinned release, not from install-action94926fa72
the workflow parses, and actionlint is part of the lint gate50056aa3f
one workflow over the plan; the site deploys from the run that verified itf0623b631
pages the site does not deploy from a stale registry dataset or bootstrapfea04fad7
pages the site does not deploy from a stale registry dataset or bootstrapb935ae090
pages the site does not deploy from a stale registry dataset or bootstrape80ded65f
site the complete probe runs in validate, and master's shellcheck is greena27dd1cfa
install site build dependencies in validate so the derived-site tests rune64e7af34

Build build 1

derive one entry point for every derived artifact, one read-only gate, and the commit out of the derived data58e2cd45b

Housekeeping chore 153

release 0.3.1, the version the fixed pipeline releases032cc0025
derive the projections follow the merges1fd5e32e0
derive the projections follow the merge with master748de838d
derive the claim is an object of the index once it is tracked3d649ae3b
derive the projections follow the gate and the versionfb5bbeb01
derive the projections follow the merges51a39cacc
derive the projections follow the fold89aec9654
derive the projections follow the mergesf9a1a4482
derive the projections follow the merged treeeac7c97ba
derive the projections follow the merge of masterdb64b42bf
derive the projections follow the merge of mastera568ee4c4
derive the projections follow the rebase onto masterdfcc21f19
sessions record two feature/ai-artifacts episodesbfffc0b1f
derive the projections follow the merge with master4bca63379
derive every projection regenerated over the integrated treec83f763fb
derive the projections follow the merged tree347c94342
sessions record two feature/ai-artifacts episodesc027ef6ea
plan I1003 done, with the evidence the contract asked for701d3780c
I1003 Skills, rules, decisions, documents, use cases and benchmarks enter the graph as themselves
plan I1025 done, with the evidence the contract asked fora1fc8d8ac
I1025 The federated model and its two projections are an architecture decision
plan I1004 done, with the evidence the contract asked for5b817c2eb
I1004 Availability and visibility are metadata, not conditions in a template
plan I1002 done, with the evidence the contract asked for46da8089d
I1002 Relations are typed, inferred from stable identities, and never dangle
derive the plan projection follows the two new milestones72544e632
derive the projections follow the capture fixes3fa38210f
plan I1001 done, with the evidence the contract asked fora4979a09b
I1001 One typed graph composes the registries that already own their facts
derive the projections follow the merge with master988e928ee
derive every projection regenerated over the merge5961be109
derive every projection regenerated over the mergebb93f91d8
derive the site registry settlesedba7a9c5
derive the projections follow the rebase onto master730f4b167
derive every projection regenerated over the merge5ba3d60b6
derive the site registry follows the tree1f7955968
derive the mirrored status page settles on the second pass67a17cea1
derive the site follows the ported schema and the use case33fca6129
derive regenerate the projections after the rebase305b7f743
derive the registry dataset over the capture fix5d0e628ef
derive the registry dataset over the objects the last commits addedb3d05ae1d
derive the pages status over the inputs as they finally area2bb43fca
derive the site dataset and the formatting the rebase left behind4137b87bc
derive the registry over the tree master merged into0a13b50e3
derive the site dataset follows the rebased treec79b16c6e
derive the registry regenerated over the rebased tree32572bc9f
sessions the episodes that built this, closed by the events they addedacb0c173a
derive regenerate after rebasing the claim onto master0b0c104ba
derive the site registry follows the treec7f35c23c
derive the mirrored status page settles on the second passae4072bbc
derive the site follows the ported schema and the use case12668bb7b
derive regenerate the projections after the rebase42319a792
derive regenerate over the mergeb46d727e7
derive the registry dataset over the objects the last commits added2af35cbc3
derive the pages status over the inputs as they finally areced26b02c
derive regenerate over the merge, migrate one use case, renumber the ADR to 0016df138c2e5
derive the projections follow the strict gate onto the merged tree0169c885e
derive regenerate the projections after the rebasea70fdbc34
derive the site dataset and the formatting the rebase left behinde08bfcc77
derive regenerate over the merged session work6a584e688
derive the projections follow the tree, so the site can publish againd4e0ed7fb
derive regenerate after the merges, so the publication path accepts the tree0d9c347b3
derive the registry over the tree master merged into86ce0e7d8
derive the site dataset follows the rebased tree44d2806a6
derive the registry regenerated over the rebased tree6a585031e
sessions the episodes that built this, closed by the events they added921ab6b16
derive regenerate over the merge129bfe1a8
derive settle the mirrored status page7da59b1c1
derive regenerate over the merged treee17a73ead
derive regenerate over the merged treed847b3226
derive regenerate every derived artifact after the session lifecycle landedc852dea59
derive every projection regenerated from the merged tree62b71b3b6
site the plan projection follows the two new milestones73e76c1f1
derive the second pass the index needs after the first4658856fe
derive regenerate every projection over the merged tree235c47106
derive the projections follow the web command and its reports56372e100
web the generated web root is ignored, like every other derived tree9bb67d64c
site the website follows the registry and the docs index, regeneratedef755d41c
cockpit vendor the module build the page actually loads, and the dataset0d26ed9c5
derive the site dataset follows the two assertions that movedeaad9f682
derive one registry for one tree, at the tip9e224d050
derive regenerate the projections this branch owns, from a clean tree53b1d1c6c
derive the pages-status stamp, current with the inputs it was computed overde48006e3
derive regenerate over the decision subsystem and its two use casesbc32cac72
derive the pages-status page, current with the document it projectseba8bdbda
derive regenerate for the generator and performance-doc changedefed0c27
derive regenerate after integrating the prompt capturea0ccbc9e2
derive regenerate the derived artifacts over the integrated tree8cab3ebcf
derive regenerate the derived artifacts after merging the Pages fast path8e14274b6
derive regenerate the registry dataset over the tracked tree02b2e3e9f
derive regenerate for the third skill and the skills use caseef2136dc3
derive regenerate the site data and the registry dataset for the two skills9525f6280
site regenerate the derived data for the hero branch2cdc96310
derive regenerate on the merged treefa9db2be4
derive regenerate the registry dataset after the usecase library changec06271f54
derive regenerate on the merged treee90b347f0
derive regenerate every projection and the site data on the merged tree629ebf8a3
derive regenerate after merging PR #38 onto the scope policy31acaf90d
derive regenerate the projections, the OpenAPI document and the site data after the mergese31aceb75
derive regenerate the registry dataset and the site data after rebasing onto 4bbd72655452d619
derive regenerate the site data and the registry dataset after merging PR #304bbd7266d
bench re-record the macos-aarch64-debug baseline with its host (Apple M5 Pro/18)5f538d4c7
derive regenerate the derived data after merging origin/master32f796175
derive regenerate the site data and the registry dataset after rebasing onto 0481024b1be56192
site-data regenerate after the case 65 change1282a3630
derive regenerate the site data and the registry dataset after rebasing onto 77e28a804221ad38
derive regenerate the site data and the registry dataset after rebasing onto b9f1091080adee37
derive regenerate the site data and the registry dataset after rebasing onto cb9dc625b845f33a
site regenerate the registry dataset after its own claim joined the index24bb212a2
site-data regenerate after the test-case change0bf5f316d
derive regenerate the derived data after integrating PR #30, #31, #32 and #335b0e3e807
derive regenerate the site data and the registry dataset after rebasing onto b9f10914656b0be5
derive regenerate the site data and the registry dataset after rebasing onto cb9dc6281921eec1
site regenerate the registry dataset after its own claim joined the index5afb9bf57
bench re-record the macos-aarch64-debug baseline with its host (Apple M5 Pro/18)ff078af73
site-data regenerate for the case 28 probe changeb9f109147
derive regenerate the site data and the registry dataset after rebasing onto cb9dc62614b7b13a
site regenerate the registry dataset after its own claim joined the index1b017bad4
site-data regenerate the derived data after merging feature/mcp-shared-servercb9dc62b1
bench record the macos-aarch64-debug baseline from a clean tree at 1acda1d65ccf7835
projections restamp AGENTS.md and CLAUDE.md for the merged policy38093b339
generated regenerate the reference, the registry manifest and the site data after the merges08a235cf6
site-data regenerate after rebasing onto the merged Rust CLIda14b6414
site-data regenerate the plan status after the rebase onto master9d6339b14
site-data regenerate after the context claims and rule joined the inputs5e10fda21
rules a maintainer entry point for the shipped package manifestcbce33c79
site-data regenerate after the layer responsibility change6aba73108
rules wire the layer's claims into the rules that back theme2406d9cb
state close the plan-page task and start the .ai transformation task6d3b73b2e
state checkpoint that v0.1.0 is taggede85269422
site-data regenerate source.json at the checkpoint commitaabee071b
state checkpoint the responsibilities and argv work31f8b7bdc
state record why the enforcement gap was taken outside the plan29a5879ef
gitignore ignore local scratch directoriesca66fca22
state close the stale-base task and reopen at the current commit7ba86aeb8
site-data regenerate after RESPONSIBILITIES.yaml joined the inputsd6aca744e
state session records for the derived-plan-page task31965b1dc
site regenerate derived data after merging master07a71d563
site regenerate derived data after merging mastere792ebe8a
site regenerate after merging the doctrine brancha726e3cfc
site regenerate derived data after merging master94d2180ad
site regenerate after the merge5ea2fa7ec
site regenerate the derived data after merging master8c26a8e72
plan the suite evidence cites the run that covers every case40b6f3bfd
I0010 Behavioural tests for schema, status, graph and command M000 Milestone and DAG driven development
site regenerate after the self-derivation and shellcheck fixes252a0dab2
site regenerate the derived data after merging the plan work99053b8c1
site regenerate derived data after the rebase7e88948fe
state checkpoint at the end of M0006563fc4a3
M000 Milestone and DAG driven development
state the merge brought .gitignore into this task's diff rangeee0a12849
state close the stale-base task and start again at the current commit615c2b298
state widen the task scope to the projection targets and the README2dd5915d6
site regenerate after rebasee818a9d5e
site regenerate after rebase; new claims landed upstreama785baef2
state the audit task was scoped for writing, not for finding1555bf5b7
state close the worktree-ownership task; its base predates a peer's commits1e2bcfe50
state close the active task; it was gating other worktreesd95773ad7
state record the scope violation and the task that follows itbeb7b074c
site regenerate derived site data after the rebase477239041

Formatting style 6

rust the crate is formatted as rustfmt wants it, and the projections follow7515a2b49
rust the crate is formatted, so the rust gate can fail for a reason5ae59e5fc
rust cargo fmt over the integrated tree, and the scope fixture's own limit1dbacfeb2
rust the crate is formatted as rustfmt wants itfead190a1
rust cargo fmt over the merged tree088ba7c86
tests one line rustfmt rewraps, so the rust gate can reach the rest6a2509c21

Integration merge 2

the rule, the case, the base-path gate and the generated route reference90ec4556c
the contract-working hero99b117832

Other other 3

cockpit wip: the legibility work as the working tree held it643e75ea2
Merge origin/master into fix/home-path-gated63e2467d
Merge origin/master into fix/derived-merge-driver-enforcede37f21a03

Published

What this version put on the release, with the digest the record read off each file. The installer resolves the same names.

target	file	sha256
`macos-aarch64`	majordomus-v0.3.1-aarch64-apple-darwin.tar.gz	549269f08e9f2f1d53173f72d8c86caecc39526fd53a42ae547c1adeaaba6d58
`macos-x86_64`	majordomus-v0.3.1-x86_64-apple-darwin.tar.gz	084a5956f06c4d5934b9161a179f1a0aafe16b3edbf14651cf3af2ee80dbfcbd
`linux-x86_64-gnu`	majordomus-v0.3.1-x86_64-unknown-linux-gnu.tar.gz	d4b34c5efeab749bfd7187d5fc47880d3056594cbe35e703797aa5ed8630f0f9
`linux-x86_64-musl`	majordomus-v0.3.1-x86_64-unknown-linux-musl.tar.gz	504f168f868cca99aec018242480cafe468f7d3b4e6ca1e58e48d930b863eb12
`linux-aarch64-gnu`	majordomus-v0.3.1-aarch64-unknown-linux-gnu.tar.gz	6e7d865c6b4c540c7e12b985cfc04cda7fc6250527b193d0e187677439d4ab50
`linux-aarch64-musl`	majordomus-v0.3.1-aarch64-unknown-linux-musl.tar.gz	6ca046c0dd7061826232d6e67d3380aee573bd4ee9cb09d58430e38f722da836