# ReadyAgents changelog Newest first. Classes: `breaking` / `additive` / `fix` / `deprecation`. Tagged releases only. Unreleased work is in core [`CHANGELOG.md`](https://github.com/readyagentsdev/readyagents-core/blob/main/CHANGELOG.md). GitHub releases: [https://github.com/readyagentsdev/readyagents-core/releases.atom](https://github.com/readyagentsdev/readyagents-core/releases.atom) ## 2.0.12 — 2026-09-30 [Release notes](https://github.com/readyagentsdev/readyagents-core/releases/tag/v2.0.12) - **additive:** The approval decision audit line (approve and reject) now records prompt_sha256, the digest of the prompt the decision was made on. After a reapprove_required refusal the pause is re-baselined, so a re-approval's decision line carries the new prompt's digest, not the original pause's. ## 2.0.11 — 2026-09-30 [Release notes](https://github.com/readyagentsdev/readyagents-core/releases/tag/v2.0.11) - **additive:** Approve what you saw: an approval pause stores the sha256 of the rendered gate prompt (prompt_sha256) in the run file and the paused audit line. If the prompt changed before resume --approve, the approve is refused with exit 3 and a JSON reason field reapprove_required (plus expected_sha256 / actual_sha256), and the run stays paused on the new prompt. Loops can branch on the reason field. Reject is never blocked; runs paused before 2.0.11 resume as before with a warning. ## 2.0.10 — 2026-09-22 [Release notes](https://github.com/readyagentsdev/readyagents-core/releases/tag/v2.0.10) - **additive:** Decide eval suite: examples/eval/decide_triage/ (~20 keyless mechanism cases) and readyagents new --template decide. A keyless pass does not validate a threshold. Soft honesty: packs waitlisted; shim ≠ jev; do not advertise Jev as a general LLM. - **fix:** decide_triage after --approve human_review no longer fails with Missing template variable: summary on the keyless shim path. The shim stays uncalibrated (shim ≠ jev). - **fix:** Official MCP Registry tag-push waits until PyPI lists the tagged readyagentsdev version before publish. ## 2.0.9 — 2026-09-21 [Release notes](https://github.com/readyagentsdev/readyagents-core/releases/tag/v2.0.9) - **fix:** Keyless shim decide path: cold-pip readyagents new --from-example decide_triage + run reaches the human gate (exit 2) instead of NodeError. Heuristic is deterministic and uncalibrated; use on_low_confidence. Not a general LLM; shim ≠ jev. - **fix:** Confidence is uncalibrated; min_confidence still routes to the human gate. Doctor wording matches. Not a general LLM; shim ≠ jev. ## 2.0.8 — 2026-09-20 [Release notes](https://github.com/readyagentsdev/readyagents-core/releases/tag/v2.0.8) - **additive:** Phase 3 decide governance: state taint into decide, --sovereign preflight refuses hosted jev (names the node; shim + local OK), and policy deciders. allow/deny with optional allow_models / on_tainted (#10). - **additive:** type: decide stays experimental — not a general LLM node. shim ≠ jev. Cassette digests use pre-redact state. ## 2.0.7 — 2026-09-20 [Release notes](https://github.com/readyagentsdev/readyagents-core/releases/tag/v2.0.7) - **additive:** Decider protocol with optional TypeSafe Jev HTTP client and keyless shim (#7). Not a general LLM provider; shim ≠ jev (no calibrated confidence); jev-* ledger prices are estimates only. - **additive:** Phase 1: classify remainder can use a Decider instead of an LLM (#8). - **additive:** Experimental type: decide with sealed cassette replay (#9). CLI readyagents decide remains external approval injection, not the YAML node. ## 2.0.6 — 2026-09-19 [Release notes](https://github.com/readyagentsdev/readyagents-core/releases/tag/v2.0.6) - **fix:** `readyagents new --from-example` recursively copies type: include path: children (cycle/escape/depth guards) so pip-road include_demo and composed_gate run without a clone. - **additive:** Composition tour docs use --from-example instead of clone-only instructions. ## 2.0.5 — 2026-09-18 [Release notes](https://github.com/readyagentsdev/readyagents-core/releases/tag/v2.0.5) - **fix:** Cold-pip AGENTS.md emit now matches honesty pip-first path shipped on main. ## 2.0.4 — 2026-09-17 [Release notes](https://github.com/readyagentsdev/readyagents-core/releases/tag/v2.0.4) - **fix:** Rich no longer strips [mcp] from install hints in _fail. ## 2.0.3 — 2026-09-16 [Release notes](https://github.com/readyagentsdev/readyagents-core/releases/tag/v2.0.3) - **additive:** Wheel ships examples/; readyagents new --list-examples and --from-example make the PyPI path match the clone path. - **additive:** CLI --help grouped into a core panel and themed extras panels; cli.py split into readyagents.cli package. - **fix:** Package marked Beta; major covers the core contract only; v* publish requires green CI on the tagged commit. ## 2.0.2 — 2026-09-15 [Release notes](https://github.com/readyagentsdev/readyagents-core/releases/tag/v2.0.2) - **fix:** Settings no longer bind ambient $HOME into the run store (runs stay under ./.readyagents/runs unless READYAGENTS_HOME / config says otherwise). Migrate older ~/runs with: mkdir -p .readyagents && mv ~/runs .readyagents/runs - **fix:** README leads with core; opt-in extras live in docs/extras.md. - **additive:** Tag pushes publish server.json to the Official MCP Registry via OIDC. ## 2.0.1 — 2026-09-14 [Release notes](https://github.com/readyagentsdev/readyagents-core/releases/tag/v2.0.1) - **fix:** README no longer labels features that shipped in 2.0.0 as Unreleased. Caution caveats stay. ## 2.0.0 — 2026-09-13 [Release notes](https://github.com/readyagentsdev/readyagents-core/releases/tag/v2.0.0) - **additive:** Local distillation: plan, dataset, train (pack), evaluate with mandatory holdout, promote. Core never trains without the pack. No quality claim beyond operator fixtures. - **additive:** Local agent registry scan under declared roots only. Not a hosted registry. Annex VIII export is a draft, not a filing. - **additive:** Migration importers for n8n, LangGraph, CrewAI, and Zapier-shaped JSON. Structural translation only — not behavioural equivalence. - **additive:** Declared environments, pinned signed releases, promote/canary/rollback. Not a hosted deploy or cluster.