Where wonder
meets rigor.

Release

Forty-eight tools were retired and two added, taking the published surface from 98 to 52. A retired name now returns an error naming its replacement, or naming what was lost where no replacement preserved the effect — an advertised fold that does not preserve the effect is worse than an honest dead end, because the caller believes the work landed. One signal ledger carries a single unacknowledged count across honks, watchman sweeps, proposals, halts, decisions, guardian findings and threads, and its certificate says null rather than zero for any source it could not read. A seat is identified over a Unix socket with no credential at all, from the calling process's own environment, rather than by a name the caller supplies. The sweep behind those reads went from 265 seconds inside the process that answers every tool call to 0.335 seconds on a worker thread, measured on a copy of the live corpus. And the test suite stopped writing into the operator's live spiral state: one full-suite log carried 139 refusals of that write, and they were refusals only because that run happened to be sandboxed.

Instrument · Living · Live heartbeat

Release

The harness layer both Claude Code and the DeepSeek Harness inject is now public: shared skills, a reader for the host harness's own session logs, and an MCP shim (0.4.0) that gives a local model running on the machine read access to the chronicle. The shim opens seven named read-only doors — recall, latest, open threads, arrival, standing law, the signal summary, the heartbeat — over one of two transports chosen by configuration and never guessed: the seat socket, which carries no credential at all, or a scoped grant. It never carries the master key; the default that used to load it is deleted rather than bypassed, and the variable that named it is now a startup refusal. Law 8 of the repo's conventions makes the landing path written rather than customary — a pull request against main with the checks green on the head being merged, enforced by a GitHub ruleset — and says plainly that the second-seat review it also asks for is observed, not yet enforceable. A canary suite mutates each gate in turn and demands the probe leak before restoring it, because CI cannot see a check that was removed.

Release · Published · Publicly verifiable

Release

Five releases in one day, all of one shape: a surface answering confidently about something it had not established. handoff_archaeology reached 286 handoffs that were preserved on disk and returnable to nobody, because the method that returned them had sat there since inception with no callers. The aperture — what exists behind a surface, what the default hands you, and how to ask for more — reached the door arriving seats actually call, then grew a write side answering the mirror question: what a seat wrote that never landed, and who it is waiting on. Risk scoring learned to look at what a write points at, after a proposal acknowledging a message that existed nowhere sat pending for fifty-five days, rated low on the strength of its tool name. And record_insight stopped accepting a writer's name and discarding it: a write carrying a wholly fabricated argument had been returning ok:true, so an unknown argument now raises instead of being dropped in silence.

Instrument · Living · Live heartbeat