Unreleased
- Added the deterministic DEP-01 controlled CRAF comparison with shared-snapshot control, memory-eclipsing, and protected-critical-recall arms; evaluator-only conservative classification; source-preservation and influence-localization evidence; and model-free replay of the closed adaptive-state transition.
- Clarified the reserved remote-inference design with explicit target identities, endpoint and peer controls, deadlines and cancellation semantics, credential and redaction rules, outbound-data approval, residual cloud-cost boundaries, and post-M1 acceptance requirements. No remote client or executable inference profile was added.
0.1.0 — 2026-07-16
- Added a model-independent local-reference safety profile and versioned operator contracts.
- Added the deterministic DEP-01 pure-read baseline, evidence bundles, verification, replay, and reports.
- Added stable agent-operable JSON commands while preserving human-readable CLI output.
- Reserved separate non-executable local/lab and remote public-HTTPS inference profiles and documented their future target, credential, budget, evidence, and network controls.
- Documented the optional integration boundary without adding an inference client or dependency.
- No experimental findings or vulnerability claims.