Skip to content
flow — gated build harness for coding agentsflow — gated build harness for coding agentsflow

Changelog

Current pairing: skill product v0.34.4, npm installer 0.7.11 on @latest. The two numbers version different things — --help prints both. See Two version numbers. GitHub Release: v0.34.4.

These are the changes most likely to affect how you use flow. The complete, unabridged history lives in the repository.

0.34.4 — machine-readable envelopes

Section titled “0.34.4 — machine-readable envelopes”
  • flow ready --json. Closed ready.report envelope (buildable cards, blocked reasons, warnings, advisory parallel groups) for host orchestrators. Unknown arguments now fail loudly instead of being ignored.
  • flow auto --parallel. Records the parallel policy in auto-state after the attested preflight and prints advisory first-fit waves. The host still places and waits.

0.34.3 — release automation

Section titled “0.34.3 — release automation”
  • Unified release pipeline. Fail-closed dual-axis coherence checks, non-mutating dry-run, and tag suppression to eliminate release drift.

0.34.2 — 21-harness market expansion

Section titled “0.34.2 — 21-harness market expansion”
  • Desk evaluations for 21 harnesses. Formally authored and validated intake evaluations across Tier 1–3 harnesses (Cursor, Zed, Cline, Windsurf, Aider, Copilot, Devin, SWE-agent and more).
  • Release pipeline. Automated coherence validation and fail-closed tag suppression.

0.34.1 — safer installs

Section titled “0.34.1 — safer installs”
  • Transactional installer. Upgrades use a receipt-driven transaction instead of destructive rm-then-copy: conflicts are surveyed read-only first, user files are preserved, and rollbacks are reported.
  • flow doctor registry. 12 registered checks with --list, --check <csv> and --json. Full installed-tree integrity verification.
  • Windows hardening. Junction refusal, path parsing fixes, and process containment.

0.34.0 — PIN v1 + runner hardening + brand identity

Section titled “0.34.0 — PIN v1 + runner hardening + brand identity”
  • PIN v1 status/resume contract. Exact STOP body excerpts reprinted after NEXT_VERB so compact hosts recover gate state.
  • Runner integrity. Pack-time SHA-256 hash verified via flow doctor (C1–C7 wave).
  • Brand identity. Gate symbol, wordmark, and production asset pack.

0.33.0 — status –json + Stage 05 heading map

Section titled “0.33.0 — status –json + Stage 05 heading map”
  • status --json / resume --json. One closed flow_context/v1 object so mid-tier hosts keep gate state after compact.
  • Stage 05 heading map. Eval reads gate-05.md directly; eval census 9→11.

0.32.0 — mid-tier gates, scanners, disclosure

Section titled “0.32.0 — mid-tier gates, scanners, disclosure”
  • Dispatcher. SKILL.md is host-agnostic (no YOU (Claude)); next-PASS extra is gate-examples.md only.
  • Mechanical scanners. Typed-web ≥3 research entries, L-above-A, PRD adjectives, OD>5 — FLAG after flow.sh PASS.
  • Coding law. Six portable MUST/NEVER rules in law/CODING.md.
  • NEXT_VERB=. Closed advisory enum from _next_action. Hosts must not auto-exec auto/skip.
  • Split gate-rules. Index + per-section files. Eval STOP held.

0.31.0 — eval hardening + host-agnostic parallel + value-first docs

Section titled “0.31.0 — eval hardening + host-agnostic parallel + value-first docs”
  • Eval hardening. Judge-input receipt, CI-only fixture-impossibility linter, doctor timeout line, cheaper isolated live-eval recipe.
  • Host-agnostic parallel law. Flow stays the discipline layer; own-runtime parked behind a named tripwire (ADR-0001).
  • Value-first docs. Landing + docs hub outcome-first, real heading anchors, i18n parity.
  • Cross-OS. macOS BSD grep hotfix in the bash suite.

0.30.0 — discipline-layer identity + CI/eval hardening

Section titled “0.30.0 — discipline-layer identity + CI/eval hardening”
  • Identity ADR. Flow owns gates and receipts, never the runtime.
  • /flow eval --record / --replay. Keyless artifact-eval replay. Not a fresh-judge; never counts toward the eval floor.
  • Named-artifact evidence. Done-evidence items must name the artifact or command that produced them.
  • CI. Manifest-driven suites, required all-checks-passed job, credentialless pack-rehearsal.

0.29.0 — spec-kit imports and converge

Section titled “0.29.0 — spec-kit imports and converge”
  • Open decisions. Unresolved product decisions are - [ ] bullets under an ## Open decisions heading on Scope, PRD, and Contract, counted by the existing gate scanner. /flow clarify prints them as an advisory, section-scoped list.
  • Card ## Independent test. Cards now name the user-visible slice proof, or infra / none. A leftover placeholder there fails check.
  • /flow converge. Append-only remainder cards reconciling present code against the plan. Transactional, never edits an existing card, and writes nothing when there is no gap.

0.28.x — attested execution

Section titled “0.28.x — attested execution”
  • Fingerprint-bound semantic_gate and live_verify receipts, plus /flow attest semantic|live-verify|status|recover and /flow auto stop.
  • Card risk fields, with an autonomous preflight that fails closed until every card has a classified risk.
  • Receipts detect subject staleness; they do not authenticate actors or resist a hostile host.

0.27.0 — harness authority continuity

Section titled “0.27.0 — harness authority continuity”
  • The durable layer is flow-owned, with a live authority table in the harness README.
  • Brownfield assessment gained evidence-ledger claim tags.

0.26.0 — hollow-done trust floor

Section titled “0.26.0 — hollow-done trust floor”
  • A mechanical floor on card evidence: process-only prose such as PR approvals, CI green, or release notes can no longer mark a card done.

Full history

Section titled “Full history”

Every release, including internal and test-only changes: CHANGELOG.md

Release procedure: docs/release-process.md