# OpenClerk v0.1.0

This initial release ships the local-first OpenClerk AgentOps surface: the installed `openclerk` JSON runner, the Agent Skills-compatible OpenClerk skill, local SQLite/vault storage, and production eval evidence for routine knowledge-plane workflows.

## Changed

- Added the production `openclerk document` and `openclerk retrieval` runner surface for canonical markdown documents, source-linked synthesis, promoted records, service and decision projections, provenance events, projection freshness, and configured layout inspection.
- Added the Agent Skills-compatible `skills/openclerk/SKILL.md` contract so routine OpenClerk knowledge tasks use the installed runner and reject unsupported lower-level bypass requests before tools.
- Added release assets for platform runner archives, the skill archive, canonical source archive, installer, SHA256 checksums, SBOM, and GitHub attestations.
- Added recurring security operations and maintainer-isolation documentation for dependency review, advisory rehearsal, threat-model refreshes, untrusted pull request policy, and automation least privilege.

## Verification

- The current production OpenClerk AgentOps eval passed all 18 production scenarios with recommendation `use_agentops_runner_for_routine_openclerk_operations`.
- The production eval reported no direct generated-file inspection, broad repo search, module-cache inspection, direct SQLite access, or legacy source-built runner usage.
- Local release gates passed: release-doc validation, skill validation, formatting check, unit tests, linting, and committed-doc absolute-path policy grep.
