# OpenClerk v0.2.10

This patch release promotes the relationship graph report and maintenance-plan surfaces, adds optional OCKP smoke-suite interop, and hardens runner URL and path-hint validation while preserving local-first runner boundaries.

## Changed

- Added read-only `graph_relationship_report` packaging for cited relationship paths, typed relationship candidates, direct-vs-derived evidence, freshness, and audit findings while keeping canonical markdown as relationship authority.
- Added `graph_relationship_maintenance_plan` for no-write relationship repair planning with candidate markdown sections, explicit next approved write requests, duplicate handling, rollback/audit notes, and failure modes.
- Completed the graph product story decision track and refreshed graph implementation evidence for graph context, relationship report, and relationship maintenance-plan surfaces.
- Added the optional non-authoritative Promptfoo smoke suite as an OCKP interoperability layer for fast installed-runner smoke checks; OCKP remains the production and release authority.
- Tightened repo-docs release-readiness dogfood so setup/help/skill-check detours cannot be committed as passing direct-runner evidence.
- Hardened runner path-hint validation for source, asset, artifact, and video placement inputs so invalid local or repo-escaping paths reject before durable writes.
- Hardened runner HTTP URL validation for source ingestion and artifact planning so unsupported schemes, credentials, missing hosts, and malformed URLs reject through runner validation.
- Removed impossible JSON marshal fallback branches from CLI response encoding and simplified graph option forwarding without changing the public runner contract.
- Preserved `ingest_source_url` update mode behavior from the v0.2 line: missing `source.mode` defaults to `create`, duplicate creates reject, `source.mode: "update"` re-ingests an existing `source.url`, and mismatched `path_hint` or `asset_path_hint` values conflict without writing extra docs or assets.
- Preserved same-SHA source URL update behavior: same-SHA updates are no-ops without `source_updated` provenance or projection invalidation churn.
- Preserved changed-PDF source URL update behavior: changed-PDF updates preserve source and asset paths, refresh searchable extracted text and citations, emit previous/new SHA provenance, and expose stale dependent synthesis through `projection_states`.

## Verification

- Local release-doc validation passed for `v0.2.10`.
- Local Agent Skill validation passed for `skills/openclerk/SKILL.md`.
- Local module skill validation passed for `modules/ollama-embeddings/skill/ollama-embeddings/SKILL.md`, `modules/gemini-embeddings/skill/gemini-embeddings/SKILL.md`, and `modules/tesseract-ocr/skill/tesseract-ocr/SKILL.md`.
- Local committed-artifact validation passed with repo-relative artifact paths and neutral raw-log placeholders.
- Local formatting, linting, and unit-test gates passed with the repository-pinned toolchain.
- The current production OpenClerk AgentOps gate is committed at `docs/evals/results/ockp-agentops-production.md`.
- Expanded repo-docs dogfood evidence is committed at `docs/evals/results/ockp-repo-docs-dogfood.md`, covering installed-runner retrieval, synthesis maintenance, decision-record explainability, release-readiness answers, read-side tag filtering, memory-router recall reports, and release synthesis freshness over this repository's committed public markdown docs.
- Targeted workflow-action evidence is committed at `docs/evals/results/ockp-compile-synthesis-workflow-action.md`, `docs/evals/results/ockp-source-audit-workflow-action.md`, and `docs/evals/results/ockp-evidence-bundle-workflow-action.md`, with safety, capability, and `workflow_action_acceptable` UX passing for the refreshed natural rows.
- Targeted source URL update evidence remains committed at `docs/evals/results/ockp-source-url-update-mode.md`, covering duplicate create rejection, same-SHA no-op behavior, changed-PDF stale synthesis visibility, and path-hint conflict no-write behavior for the shipped runner and skill.
- Live install, upgrade, and module-command smoke evidence is committed at `docs/evals/results/ockp-live-install-upgrade-module-smoke.md`.
