Changelog
v0.1 — 2026-05-13
Initial pre-release. Spec docs published for partner review. Not yet stable — breaking changes expected through v1.0.
Added
- Connector author guide — narrative getting-started guide covering the port contract, capability tiers, slot mapping, intent declaration, and the conformance checklist.
- Canonical slot vocabulary (v0.1, 106 slots across matter, contact, PNC, and billing-entry entities) with status and policy-tier annotations.
- Identity contract — IDP-agnostic JWT shape, required vs. optional claims, storage contract, and IDP adapter interface.
- Audit-pack signing protocol — Ed25519 signature scheme, manifest layout, key lifecycle (active / verified_only / revoked), well-known endpoint, and verifier algorithm.
- Conformance suite (
@govern/conformance) — CLI + library + 8 golden test cases with normative error vocabulary.
Known gaps
govern.describe_slotsMCP method is specified but not yet live. Ships in Workstream A.2 when the second connector integration opens.- Slot vocabulary normalization (cross-PMS
pnc.→lead.prefix rename) is deferred to v2 until a second non-CB connector concretely needs it. - IDP physical refactor (
entra-auth.ts→idp/entra.ts) deferred to A.0 to avoid two refactors instead of one. govern_firm_idp_configschema migration (generalizing fromgovern_firm_centerbase_config) deferred to A.0.- Billing-entry write tools reference catalog field IDs directly today; migration to slot-resolved writes is Workstream A.2 scope.
- Centerbase organizational counter-signature layer on audit packs is deferred to v1.5.
- HSM-backed signing keys deferred to v1.5.
- Spec-branded public-key discovery host (
verify.govern-spec.orgor similar) deferred until the open-spec domain is finalized per ADR-022.
Future versions will be listed here. Governance: breaking changes to core.* slot keys require a spec PR and a major version bump. Minor additions are non-breaking.