Changelog

Same source as /changelog.md and the feeds. Newest first.

Tagged releases only. Unreleased work is in core CHANGELOG.md.

2.0.12 — 2026-09-30

additive: The approval decision audit line (approve and reject) now records prompt_sha256, the digest of the prompt the decision was made on. After a reapprove_required refusal the pause is re-baselined, so a re-approval's decision line carries the new prompt's digest, not the original pause's.

additive: Approve what you saw: an approval pause stores the sha256 of the rendered gate prompt (prompt_sha256) in the run file and the paused audit line. If the prompt changed before resume --approve, the approve is refused with exit 3 and a JSON reason field reapprove_required (plus expected_sha256 / actual_sha256), and the run stays paused on the new prompt. Loops can branch on the reason field. Reject is never blocked; runs paused before 2.0.11 resume as before with a warning.

additive: Decide eval suite: examples/eval/decide_triage/ (~20 keyless mechanism cases) and readyagents new --template decide. A keyless pass does not validate a threshold. Soft honesty: packs waitlisted; shim ≠ jev; do not advertise Jev as a general LLM.
fix: decide_triage after --approve human_review no longer fails with Missing template variable: summary on the keyless shim path. The shim stays uncalibrated (shim ≠ jev).
fix: Official MCP Registry tag-push waits until PyPI lists the tagged readyagentsdev version before publish.

fix: Keyless shim decide path: cold-pip readyagents new --from-example decide_triage + run reaches the human gate (exit 2) instead of NodeError. Heuristic is deterministic and uncalibrated; use on_low_confidence. Not a general LLM; shim ≠ jev.
fix: Confidence is uncalibrated; min_confidence still routes to the human gate. Doctor wording matches. Not a general LLM; shim ≠ jev.

additive: Phase 3 decide governance: state taint into decide, --sovereign preflight refuses hosted jev (names the node; shim + local OK), and policy deciders.<name> allow/deny with optional allow_models / on_tainted (#10).
additive: type: decide stays experimental — not a general LLM node. shim ≠ jev. Cassette digests use pre-redact state.

additive: Decider protocol with optional TypeSafe Jev HTTP client and keyless shim (#7). Not a general LLM provider; shim ≠ jev (no calibrated confidence); jev-* ledger prices are estimates only.
additive: Phase 1: classify remainder can use a Decider instead of an LLM (#8).
additive: Experimental type: decide with sealed cassette replay (#9). CLI readyagents decide remains external approval injection, not the YAML node.

fix: `readyagents new --from-example` recursively copies type: include path: children (cycle/escape/depth guards) so pip-road include_demo and composed_gate run without a clone.
additive: Composition tour docs use --from-example instead of clone-only instructions.

fix: Cold-pip AGENTS.md emit now matches honesty pip-first path shipped on main.

additive: Wheel ships examples/; readyagents new --list-examples and --from-example make the PyPI path match the clone path.
additive: CLI --help grouped into a core panel and themed extras panels; cli.py split into readyagents.cli package.
fix: Package marked Beta; major covers the core contract only; v* publish requires green CI on the tagged commit.

fix: Settings no longer bind ambient $HOME into the run store (runs stay under ./.readyagents/runs unless READYAGENTS_HOME / config says otherwise). Migrate older ~/runs with: mkdir -p .readyagents && mv ~/runs .readyagents/runs
fix: README leads with core; opt-in extras live in docs/extras.md.
additive: Tag pushes publish server.json to the Official MCP Registry via OIDC.

fix: README no longer labels features that shipped in 2.0.0 as Unreleased. Caution caveats stay.

additive: Local distillation: plan, dataset, train (pack), evaluate with mandatory holdout, promote. Core never trains without the pack. No quality claim beyond operator fixtures.
additive: Local agent registry scan under declared roots only. Not a hosted registry. Annex VIII export is a draft, not a filing.
additive: Migration importers for n8n, LangGraph, CrewAI, and Zapier-shaped JSON. Structural translation only — not behavioural equivalence.
additive: Declared environments, pinned signed releases, promote/canary/rollback. Not a hosted deploy or cluster.