v1.1.1-ga

Changelog

• edb6a42 Merge castra/task/019e2c92-a4ad-7dd3-97f9-894d97e24d6c (ejhi1dibibgi90sn) into main
• 5bb4f8c docs(release): rename v1.1.1 unreleased → v1.1.2 (stale v1.1.1 tag exists from Feb 2026)
• 738d518 docs(release): rename v1.1.1 unreleased → v1.1.2 (stale v1.1.1 tag exists from Feb 2026)
• 5d12060 docs(release): rename v1.1.2 unreleased → v1.1.1-ga (corrected naming per Pa convention)
• 6e119e8 docs(task/0bggjens8rsffrxj): CHANGELOG v1.1.1 roll-up — 10 missing items from Stage 9 report
• 24134c6 docs(task/dvkmb551hyeloqlf): retro CHANGELOG entry — v46 bypass incident + schema_version drift doctrine
• 2feb31f docs(v1.1.1): project-level documentation uplift for v1.1.0-ga surface
• 372c2c5 feat(task/1p2a2ag9k773q9p1): v1.1.1-ga republish blocker: RevertDetector soft-fail when git unavailab (#88)
• d703935 feat(task/1s412t8byu5yy4jx): T-MATRIX-TIGHTEN: Forbid review→todo via task update (F4 sibling — r
• 9f9d6b1 feat(task/1s412t8byu5yy4jx): T-MATRIX-TIGHTEN: Forbid review→todo via task update (F4 sibling — r
• edaa784 feat(task/45y8fgur0qajs21y): T-MT-1: Atomic realign — pre-validate + transactional body+deps+notify
• dfde7d7 feat(task/4o9dibpyfwsznpup): Stage 2 sweep: prune 10 staticcheck orphans (v1.1.1)
• 9228d51 feat(task/95r460n4md1zd2s1): Stage 3 SE-4: audit + prune InsertMemory variants in irisdb/memory.go
• 76bfc5d feat(task/bcyoj2fp779gkc9n): Stage 3 SE-2: extract SendRPC[Req,Resp] generic for 6 exocortex RPC clie
• 9b46ba3 feat(task/dcen03fs5730z1x5): Stage 3 SE-3: dedupe persona DSL block-surgery primitives across 3 packa
• 7fcb2ee feat(task/id0fist7b2ydy96x): T-CH-3: Reverse-direction CLI roundtrip test (code → DSL coverage)
• 9afae4c feat(task/npgvabrrwem8uq9r): T-IRIS-PUBLIC-CLI-IMPL: Inject curated PublicIrisCLIBlock into irisPerso
• cbfe158 feat(task/odiloxny4ebo8unn): T-CH-2: Workflow text drift sweep + workflows.go Steps grammar property
• d075370 feat(task/qnq0o0t7gsjvb6tm): G1 impl: castra iris identity refresh verb with block-level semantic mer
• e96fc45 feat(task/tc83pxjitahhnt08): v1.1.1 doc: register v1.1.0-ga verbs in BaseCLIReferenceBlock + per-pers
• a2a3e6c feat(task/u1m78gfmp57a9ll5): T-MT-2: Canonical ResolveBlockingDeps resolver + edge_type filter at all
• 632cc78 feat(task/ul5fpr3ust281ntn): T-CH-1: Delete vestigial exocortex CLI stubs (S3 Option B)
• f435b5d feat(task/viv2umkviqs1awi3): T-WF-RBAC: Explicit RBAC gating for under-gated workflow verbs (F2)
• 03099f3 feat(task/wnfsg6y91ndnv40l): T-MIG-AUDIT: Migrations v44 + v45 reversibility audit (carry-forward)
• 03fb37f fix(ci): release verify — pipe version through head -n 1 before awk
• 0426716 fix(ci): restrict triggers to v-tags + fix exocortex env-dependent test
• c32185c fix(db): add migration v46 to remediate workflow_run tables skipped by v44 gap (v1.1.1 release blocker)
• 24ddac9 fix(db): merge v46 remediation migration for workflow_run tables (v1.1.1 release blocker)
• 8acd2b9 refactor(task/1i2jz3q6vva3k3aw): collapse ctx type-alias re-export sprawl across 13 surface packages

v1.1.0-ga

Changelog

• d725352 Merge origin/main into release/v1.1.0-ga (DAG unification — origin received ga.5-ga.8 via PR merge commits, local has equivalent content plus all v1.1.0-ga new work)
• 2639a0a Merge task/1448seleioayuwfi: F11 renderView+executeFIFOClaim segmentation
• 99b7ebb Revert "feat(task/oq08feonhdqogk3y): Pass:8_Iter:2_Engineer_E3 — extract internal/commands/task/ sub-packag"
• b029da0 [DRIFT] reconcile.ack fix already on main as ec9fb5a; this is empty-merge cycle to sync substrate state
• b483673 annotate(task/3gdq14185s6m7crd): orphan:keep pass on 7 test helpers — Pass-2 Iter-2
• 32a82b2 annotate: add orphan:keep to 17 reserved symbols across C6/C7/C8
• ad15002 chore(docs): move substrate-internal audit docs to docs/internal/ + gitignore
• 6f8abfc docs(canvas): append canvas-view-2 tree section to pass-10 log
• 03ebc76 docs(pass-8-iter-2): append CEO ratifications for 5 architect flags (Iris-orchestrator 2026-05-12)
• 04d5f7e docs(pass-8-iter-2): structural amendment — Pa CEO meta-grouping re-decision 2026-05-13
• 1b490ac docs(pass-9-iter-1/D5): refresh README.md documentation index — add all current docs/*.md with grouped tables
• 31ff0be docs(task/325001al4u4g23dr): add docs/ga/reconciliation-loop.md
• ba1dfc9 docs(task/5nd16pu2pbuccbvh): Pass:9_Iter:1_DocWriter_D3 — Refresh SECURITY.md stale path references to surface/ layout
• e4d6d94 docs(task/86kfc48lfo47c86m): update OPERATIONS.md backup/restore path refs to surface/db/
• 0f7edc4 docs(task/be4p05jkytbfxhgc): Pass-9 D1 — Refresh TECHNICAL_SPEC.md Package Inventory & CLI Command Index
• f781c3b docs(task/ei2spzr33wcs396q): Add Codebase Layout section to ARCHITECTURE.md
• 32dc31c feat(lint): wire failopen + namespace lint ratchets into Makefile and CI
• cc74f65 feat(task/01ze8s64kzibrd5y): Implement HATEOAS on worktree merge
• 10d00d0 feat(task/04vsn35pb672jtx6): Pass:5_Iter:1_Engineer_G1b — ResolverChain primitive (collapse 88× to
• fbeab33 feat(task/089771do403sev3m): S3: heartbeat cleanup (db close on shutdown + CLI tests + zero-time hand
• cebd0fc feat(task/09aiwhuzgbiay09v): ga.8: session lifecycle correctness — 10m heartbeat threshold + heartb
• 280cc43 feat(task/0bnhw7kfjv6lh4vw): Log chain F1: route MutatingCommand auto-audit through signed logs table
• 534f87d feat(task/0csu0ce9f61b183n): RBAC: add AllowedRoles() to LogAddCommand
• e49cd01 feat(task/0f24vf085sihuinh): Cluster cert CN vs client pin mismatch blocks mTLS handshake end-to-end
• 5f3dc3a feat(task/0fceabiqvw82j4hi): NT1.T2: namespaces + namespace_policy tables + CLI
• 0d2eedf feat(task/0h5cn1k6cjis0qmu): Pass:8_Iter:3_Engineer_E12 — Extract internal/commands/surface/milesto
• 6e58b0c feat(task/0i3h8s4h27jybfto): resolveModeAwareCertPaths hardcodes DefaultListenAddr, ignoring --listen
• 3f4cf6d feat(task/0jzcf0bzrmw7tton): MC1.T3: Clustering step (embedding similarity + rule-based fallback)
• a849c30 feat(task/0kfkjhjzrt7d2dpn): Pass:6_Iter:1_Engineer_Q9 — staticcheck U1000 dead-code removal (9 sit
• 51bac6a feat(task/0l6novzktq0s6jbz): Architect audit: pre-GA session-file export hardening (E4 SEC followup)
• f6f631c feat(task/0rou04d0g4l4gepe): Pass:8_Iter:2_Engineer_P2 — Rename cmdshared to internal/commands/shar
• 23d0a16 feat(task/12woc3nhcgrp3305): Pass:4_Iter:1_Engineer_C1 — rename internal/cli to internal/domain
• 248e48d feat(task/1448seleioayuwfi): Pass:4_Iter:2_Engineer_F11 — segment renderView + executeFIFOClaim in task_helpers.go
• 902d127 feat(task/14dtslc6ji9cj461): v1.0.1 SUBSTRATE: castra task update --depends-on cannot clear dependenc
• 9ff0dce feat(task/16vhrxm895cl7x9a): Pass:8_Iter:2_Engineer_E5 — extract internal/commands/exocortex/ sub-p
• f2c46dd feat(task/18yc7ecjdyxf5oyv): Fix timing oracle dummy: compare against token bytes not self
• ceb035c feat(task/1bp9rk3yqt1lsvhx): Pass-7 Q3: docstrings — commands/note, log, sprint, namespace_quota cl
• f391133 feat(task/1d23n0z8lea6tdvy): Bug: task claim ignores allowed_roles, gates on assigned_role only
• 5514469 feat(task/1fg94i1v9qzo23ep): NT1.T6: Session.namespace binding + persona namespace_override
• ed6e63d feat(task/1jbu5jkfih6kiwo5): iris init -g: write global AGENTS.md to ~/.config/amp/AGENTS.md for Sour
• b6d3623 feat(task/1k23cvi5yojhbl8q): PD1.T2: Generate JSON Schema from Go struct + CI diff check
• 51a6ab9 feat(task/1nxhsupggalhdwpa): add AddSignedTx + wire audit rows in worktree.Create and reconcile.ack
• 02e6ff1 feat(task/24zh6ejkwj7stwlm): Pass:5_Iter:2_Engineer_G12 — split commands/milestone.go by subcommand
• 403b51f feat(task/263xb5jy3ukc74jx): Fix audit-chain dual-write: Cancel/Assign/AddDep/RemoveDep implement bot
• 40ebe59 feat(task/26whvb4pupx33jbm): Pass:8_Iter:2_Engineer_E8 — Pass-8 Iter-2 consolidation verify (residu
• f922d47 feat(task/2a3mnzt5jx4ml7j9): Pass:5_Iter:1_Engineer_G1c — AuditStash mix-in (collapse 47× lastID/l
• 7e404f0 feat(task/2am3ishw0lzptc9y): Pass:1_Iter:8 — lint/pin ratchet preventing fail-OPEN-on-exec-error re
• 9791316 feat(task/2dm59bta51tlwi42): Rebuild discipline: documented install path + CI binary artifact
• 7a65864 feat(task/2t1ircikpnj2ekpz): Pass:1_Iter:4 — Worktree merge conflict-scan misses markers in resolve
• 0b98bf0 feat(task/2wu0nc5vmaqteb3e): Pass:5_Iter:2_Engineer_G14 — split commands/sovereign.go by subcommand
• 8aa1a9f feat(task/35uxl575u7scwrvz): Pass:4_Iter:2_Engineer_F15 — eliminate *TaskUpdateCommand pointer-thre
• e3917f0 feat(task/36rvl0maqgzvjne1): Pass:7_Iter:3_Engineer_B1 — Affordances backfill: persona ack/deactiva
• a803862 feat(task/37kyycui6rypjwq2): Pass:3_Iter:1_Engineer_C6 — sentinel Write/WriteAt + Verify/VerifyAt t
• ac56561 feat(task/3fiazoh11azrex1w): Pass-8 Iter-2 Architect — internal/commands/ god-package split path-fi
• 8b3a1e3 feat(task/3hsbwuapwkwu2ixw): CLI restrictions A2: rate-limit sys ovr break-glass OTP
• 8a944a1 feat(task/3qkrc4u2ln2fwli9): Wire VerifyStrict CLI flag for audit chain
• 33fce8c feat(task/3to7z962hynwxj5b): I1: atomic worktree merge transitions task doing->review
• e12832d feat(task/3vwiha89vvbbyuyt): Replace session.go silent unsigned fallback with audit-emitting warning
• fc1dff8 feat(task/3zwrjkd6wbzmx1sj): Pass:8_Iter:1_Engineer_C6 — relocate V3_RELEASE_SIGNOFF.md to docs/rel
• eb029cb feat(task/41xczgqiysoz1rln): Pass:5_Iter:1_Engineer_G2 — split commands/task.go + task_helpers.go b
• 3cb0fcc feat(task/49xse9ydzvnhhd26): v1.0.1 SUBSTRATE: 'castra task update --milestone' flag does not exist (
• 7c8a96d feat(task/4c1zujli3t9bsu0l): Pass:3_Iter:1_Engineer_C8 — generalize package_layering lint (forbidde
• c661014 feat(task/4cbqbj48y0tl8utd): TUI cross-namespace leak: add namespace scoping to data.go raw SQL queri
• 8fc8bd4 feat(task/4crmsiesorjsz0gw): Pass:5_Iter:1_Engineer_G3 — split internal/worktree/worktree.go by ver
• 29eb948 feat(task/4e8c0cewajdz1zlk): Pass:5_Iter:1_Engineer_G1a — FlagBuilder primitive, collapse 103× flag.NewFlagSet→ParseFlex
• e981f0e feat(task/4e8c0cewajdz1zlk): resolve squash-merge conflict in db_restore.go
• d6b3597 feat(task/4mrvo0fb64dfbgjg): Pass-7 Q7: docstrings — internal/persona package (registry + linter co
• ae93470 feat(task/4owbw18n6xctdxm1): Pass:8_Iter:2_Engineer_E6 — extract internal/commands/sprint/ sub-pack
• f7ce787 feat(task/4pzeqbk386m2bnm3): Pass:8_Iter:2_Engineer_P1 — Extract Context type to internal/commands/
• 6f4bd8c feat(task/4yd9dyxwgg45i11s): Pass:4_Iter:2_Engineer_F13 — segment mega-procedure orchestrators (cyc
• e9d3005 feat(task/4yu6jc126v2poodq): Vendor writer interface contract (Go)
• 077a5b7 feat(task/57dj6zy13a5bkor3): exocortex daemon: OS-level install integration (launchd + systemd) for s
• abce8b...

v1.0.0-ga.7

Changelog

• 6d26dbb feat(task/7s227ax8620ay9rt): v1.1 client-mode read routing: recent_mem + identity (close write/read s

v1.0.0-ga.5

Changelog

• 5411e72 feat(task/0i3h8s4h27jybfto): resolveModeAwareCertPaths hardcodes DefaultListenAddr, ignoring --listen
• 2277b0e feat(task/bx4b5gv2qyv25dwv): Cluster: iris session tokens minted on client don't validate on parent (
• 266d9fa feat(task/pe022hq4a1zzzl1l): certgen idempotency causes stale cluster cert CN when --listen changes b

v1.0.0-ga.4

Changelog

• 9e9daf8 feat(task/0f24vf085sihuinh): Cluster cert CN vs client pin mismatch blocks mTLS handshake end-to-end
• ad4ecc8 feat(task/lhg7ls2qok4pqvds): Wire cluster client/parent device config post-bootstrap (cluster_init +

v1.0.0-ga.8

Changelog

• 5bae493 feat(task/09aiwhuzgbiay09v): ga.8: session lifecycle correctness — 10m heartbeat threshold + heartb

v1.0.0-ga.6

Changelog

• fa3599f feat(task/kbpr7m0exfcry30m): Cluster enrollment writes parent-composed Iris identity to client's ~/.c
• f20074c fix(ci): Build workflow only fires on v*.. tag push

v1.0.0-ga.3

Changelog

• 9a571be feat(task/c670070fifikd7nu): CI surface/persona tests fail on fresh runner — extend HMAC bootstrap
• 1ae98dc fix(ci): release verify takes line 1 only

v1.0.0-ga.1

Changelog

• 1294201 Castra v1.0.0-ga: Sovereign Exocortex foundation (release)
• c3769e1 Release: Castra GA v1.0.0 (#71)
• 50a7d63 Revert "feat(task/wdb501lll9hmr7qq): castra family namespace prototype — gateway primitive for lattice substrate (#63)" (#65)
• ae818bb chore(task/ieeqwkkypo6ms99s): anchor AGENTS.md + CLAUDE.md gitignore at repo root, document castra sync post-clone (#59)
• eaa7474 docs(task/166c2psy03at7ezm): fix README CLI patterns post-substrate-fix + workspace.db stale refs (#60)
• b79e883 docs(task/277qq37whpl2c0v9): redact personal names from public docs (#56)
• 6c00980 docs(task/lp4ocoatd1zxxfh8): redact V3_RELEASE_SIGNOFF.md signatory (final post-audit leak) (#58)
• 48f2668 docs(task/u0yksga3jrfk4u0y): ARCHITECTURE diagrams reflect post-I1 + substrate-fix dual-gate flow (#61)
• 7cfc7eb feat(task/1500a222ao2in4fe): expand Diagnosis_Drift_Guard → Implementation_Drift_Guard (sibling-collapse + authoring trigger + throughput rationale) (#69)
• 647ffeb feat(task/wdb501lll9hmr7qq): castra family namespace prototype — gateway primitive for lattice substrate (#63)
• c7bedb1 feat(task/wdb501lll9hmr7qq): castra family namespace prototype — gateway primitive for lattice substrate (#64)
• ef4d0a9 fix(task/0l59yvovekomwbts): release.yml verify-release pattern matches GoReleaser asset naming (#55)
• 55b4daa fix(task/mr5n33q2gxqwuw57): redact personal names from source-code public surface (#57)

v1.0.0-ga.2

Changelog

• f5caaf4 feat(task/arbdjg9z0sqn9bfr): castra version should run init-free for fresh-checkout/CI compatibility
• 135a70c feat(task/ojzae5f0a1ugvhqb): CI surface/task tests fail on fresh runner — HMAC key bootstrap missin