# OpenClerk v0.2.14

This patch release adds the read-only Chronicler `openclerk clerk` MVP, makes vault sync ignore hidden/system directories by default with SQLite-backed custom ignore configuration, and tightens local-first runner boundaries around source URLs, CSV output, sync diagnostics, and optional semantic retrieval behavior.

## Changed

- Added the optional read-only Chronicler orchestration surface with `openclerk clerk run --once`, `inbox_scan`, and `context_pack` commands for local inbox candidate planning and task context packaging without durable writes.
- Added built-in vault sync ignores for `.stversions`, `.git`, `.openclerk`, and `.backups`, plus SQLite `runtime_config` persistence for custom `vault_ignore_paths` configured through `openclerk config` with an empty list clearing custom paths while built-in defaults remain.
- Updated vault sync pruning, direct document writes, `inspect_layout`, and sync diagnostics so ignored paths are treated as non-live, rejected for direct writes, and reported with ignored counts, ignored path rules, and sampled ignored paths.
- Hardened source URL validation and CSV-facing output behavior while preserving runner-owned public URL intake boundaries and local-first approval separation.
- Added the read-only Chronicler boundary and consumer infrastructure roadmap docs, refreshed comparison docs, and updated README/capabilities/help text for the new `clerk` and vault-ignore configuration surfaces.
- Updated optional semantic retrieval adapter behavior and tests while keeping semantic retrieval module-gated and preserving default lexical retrieval behavior.
- Preserved `ingest_source_url` update mode behavior from the v0.2 line: missing `source.mode` defaults to `create`, duplicate creates reject, `source.mode: "update"` re-ingests an existing `source.url`, and mismatched `path_hint` or `asset_path_hint` values conflict without writing extra docs or assets.
- Preserved same-SHA source URL update behavior: same-SHA updates are no-ops without `source_updated` provenance or projection invalidation churn.
- Preserved changed-PDF source URL update behavior: changed-PDF updates preserve source and asset paths, refresh searchable extracted text and citations, emit previous/new SHA provenance, and expose stale dependent synthesis through `projection_states`.

## Verification

- Local release-doc validation passed for `v0.2.14`.
- Local Agent Skill validation passed for `skills/openclerk/SKILL.md`.
- Local module skill validation passed for `modules/ollama-embeddings/skill/ollama-embeddings/SKILL.md`, `modules/gemini-embeddings/skill/gemini-embeddings/SKILL.md`, and `modules/tesseract-ocr/skill/tesseract-ocr/SKILL.md`.
- Local committed-artifact validation passed with repo-relative artifact paths and neutral raw-log placeholders.
- Local formatting, linting, and unit-test gates passed with the repository-pinned toolchain.
- The current production OpenClerk AgentOps gate is committed at `docs/evals/results/ockp-agentops-production.md` with 30/30 production scenarios passing.
- Expanded repo-docs dogfood evidence is committed at `docs/evals/results/ockp-repo-docs-dogfood.md`, covering installed-runner retrieval, synthesis maintenance, decision-record explainability, release-readiness answers, read-side tag filtering, memory-router recall reports, and release synthesis freshness over this repository's committed public markdown docs.
- Targeted workflow-action evidence is committed at `docs/evals/results/ockp-compile-synthesis-workflow-action.md`, `docs/evals/results/ockp-source-audit-workflow-action.md`, and `docs/evals/results/ockp-evidence-bundle-workflow-action.md`, with safety, capability, and `workflow_action_acceptable` UX passing for the refreshed natural rows.
- Targeted source URL update evidence remains committed at `docs/evals/results/ockp-source-url-update-mode.md`, covering duplicate create rejection, same-SHA no-op behavior, changed-PDF stale synthesis visibility, and path-hint conflict no-write behavior for the shipped runner and skill.
- Live install, upgrade, and module-command smoke evidence is committed at `docs/evals/results/ockp-live-install-upgrade-module-smoke.md`.
- Optional Promptfoo smoke validation and eval passed against a current-checkout runner binary as non-authoritative interoperability checks; OCKP remains the release authority.
- Optional local release bundle construction passed for `v0.2.14`, including platform archives, skill archive, source archive, SBOM, checksums, and installer generation.
