Skip to content

Changelog

All notable changes to WORLDLINE are recorded here. The format follows Keep a Changelog and versions follow Semantic Versioning (pre-1.0: minor bumps may break the CLI or file formats).

Entries are generated by scripts/release.py from git log since the previous tag and grouped conventional-ish (feat:, fix:, docs:, ci: prefixes when present, keywords otherwise). Hand-written notes under Unreleased are carried into the next release entry. To cut a release:

uv run python scripts/release.py patch --dry-run   # preview the entry
uv run python scripts/release.py patch             # bump, write this file, commit, tag vX.Y.Z (no push)
git push gitlab HEAD vX.Y.Z                         # tag pipeline: kernel gate, release, package, package-image

See docs/INSTALL.md for installing a published release.

Unreleased

0.2.0 - 2026-10-27

Added

  • Installable distribution: wheel and sdist with bundled scenarios, invariants, release policy and kernel public key (worldline/_data), project metadata and URLs, version single-sourced from worldline/__init__.py.
  • worldline/resources.py: locate bundled data in a checkout or an installed wheel; worldline resources (--json, --copy-to DIR) and --version helpers in worldline/cli/version.py.
  • Dockerfile.cli: the CLI as a container (docker run --rm worldline demo).
  • .gitlab/ci/package.yml: package publishes to the project PyPI registry and package-image pushes the CLI image to the container registry with kaniko, both on tags after the kernel gate.
  • scripts/release.py, this changelog and docs/INSTALL.md.
  • Real-service adapter: the substrate drives a FastAPI service over HTTP; explore, minimize and genome challenge run against real request handling (worldline http) (e440957).
  • Real-data scenario: the USGS Kamchatka M8.8 sequence as recorded truth with provenance; the genome transfers both ways; worldline real usgs (144d0b4).
  • Viewer redesign: narrative Story view, plain-language timeline, evidence stepper, live verify button; Inspect views restyled (803abee).
  • Viewer: accessibility and layout fixes from the e2e audit (42/42 passing), windowed strategy support; ui-e2e job in CI (face672)

CI and releases

  • Docker build independent of gitignored output; .gcloudignore keeps experiments/out (e5b7556).
  • deploy-gcp builds from the full explore output; copy-data requires index.json (6dad507).
  • Dockerfile: copy bundled package data before building the wheel (6a309c2)
  • Authoring: JSON schema, validate and init commands, triage_board scenario, tutorial. Packaging: wheel data, version/resources, release jobs, changelog. Verifier hardening: logging, security headers, rate limits, readiness, release verify endpoint, runbook. Docs site wired into Pages. (95dc2b7)
  • GitLab workflow: MR evidence comment, investigation issue job, templates, merge checks; kernel soft-fails on MR pipelines (c00c3cd)

Documentation

  • Public verifier live on Cloud Run: URL and usage (88dc037).
  • Report: release and Cloud Run deployment from the pipeline (4858186).
  • README: real data, real service, invariant library, install, current counts (4b21667)

Changed

  • Explorer: equivalence reduction, windowed strategy, parallel runs, analytic flip thresholds; benchmark updated (074ba49)
  • Viewer: landing and navigation polish, verify tool with live gate check, Inspect views rebuilt around one question each, plain-English labels, accessibility (50fee36)
  • Invariant library: latency bound, causal ordering, duplicate suppression, source quorum, fault-attributed witness, permitted-only knowledge (d37f668)

0.1.3 - 2026-10-27

Tagged v0.1.3-transcend. Proof-carrying releases.

CI and releases

  • Proof-carrying releases on tags: release-assets uploads the signed evidence bundle and the kernel's authorization to the generic package registry and writes release notes; security scanning templates (SAST, secret detection, dependency scanning); Skeptic flow trigger goals (6375f70).
  • deploy-gcp runs in the pages stage after authorize (55033da).
  • Releases created through the Releases API with the job token (1bfce46).

0.1.2 - 2026-10-26

Untagged. Public verifier service.

Added

  • Public verifier service for Cloud Run: the viewer plus the kernel API (verify, authorize, evidence); deploy-gcp CI job (b844c88).

0.1.1 - 2026-10-26

Untagged. Repair contract and public documentation.

Changed

  • Specimen vs product scenarios in the repair contract; CONTRIBUTING and SECURITY; code-owner approval on main (a9dc2f1).

Documentation

  • README describes the repository; roadmap labels tidied (accfdbb); structure tree (12e646d).
  • Public docs wording cleanup (e6bb2d1); thesis states claims plainly, report uses neutral model wording (a404c87).

0.1.0 - 2026-10-26

Tagged v0.1.0-transcend. First end-to-end release: the kernel's first run on GitLab denied the release on an UNKNOWN test claim, as designed.

Added

  • Core substrate: Event v1, hash-chained log, virtual clock, forkable RNG; architecture contracts (a2b6bfc).
  • Worlds runner, interventions, invariants, evidence kernel, explorer, genome, GitLab CI and Duo config, UI scaffold (74831d6).
  • CLI: run, explore, minimize, genome, report, verify, authorize, keygen, demo; benchmark experiment; kernel public key; CI challenge scenario (abed0b1).
  • Immune negative-control scenario; LF .gitattributes (214d16d).
  • GitLab Duo: catalog setup script and three custom agents created via GraphQL (a0ccf3a); flow definitions accepted by the GitLab schema (bced003); agents and flows enabled with triggers (15dafba).
  • Viewer reads real pipeline output: strategy toggle, benchmark card, challenge controls (da82507).

Fixed

  • Oracle tolerates time-rule violations (abed0b1); alert-ack invariant aligned with scenario event kinds (d8d95aa).
  • Duo agent-config setup_script as a single string for server validation (1b10ea9).
  • Repair contract requires non-vacuity: the non-default decision must stay reachable (59e077b).

CI and releases

  • report.xml passed to downstream jobs so the kernel can type tests:unit (2ff6b1f).

Tests

  • Explorer and genome tests (d8d95aa).

Documentation

  • README and technical report from measured pipeline output (b8e54f6); Devpost submission draft and demo shot list (8bf7109); agent loop results, vacuous-repair finding, Skeptic trigger defect (c17ddd3); real Duo session and merge request links (a567a16); first kernel run report (2c4c6ec).