# OpenClerk v0.2.7

This patch release promotes routine UX workflow surfaces and public-corpus autonomy evidence while preserving the v0.2 runner contract, local-first boundaries, and source URL update behavior.

## Changed

- Added runner-owned routine UX workflow surfaces for source discovery, decision lookup, workflow guidance, and compile-synthesis handoff so common agent tasks can start from natural runner actions instead of long prompt choreography.
- Added security hardening for retrieval reports, artifact candidate planning, source ingestion, semantic adapter tests, and process-group cleanup so lower-level bypasses and child processes remain bounded by the installed runner contract.
- Added a real-vault routine UX telemetry lane and follow-up decision evidence that separates safety, capability, and UX quality before accepting or deferring simpler OpenClerk surfaces.
- Promoted public Kubernetes docs vault evidence and added public Go docs and Moby-Dick autonomy lanes so disposable public-corpus validation covers technical and non-technical corpora without committing raw local logs or machine paths.
- Added explicit autonomy mode reporting for public-vault lanes, including approval, drafting, write-target, citation, privacy, and audience modes, while keeping those lanes as eval evidence rather than new runner APIs.
- Included the latest Dependabot maintenance updates for `github/codeql-action`, `actions/dependency-review-action`, and `modernc.org/sqlite`, plus a runtime-config initialization mutex that keeps concurrent SQLite setup stable with the updated dependency.
- Updated `skills/openclerk/SKILL.md` for the narrower promoted workflow surfaces and public-vault autonomy guidance without adding broad browser acquisition, HTTP/MCP bypasses, direct SQLite access, hidden vector stores, or approval-free durable writes.
- Preserved `ingest_source_url` update mode behavior from the v0.2 line: missing `source.mode` defaults to `create`, duplicate creates reject, `source.mode: "update"` re-ingests an existing `source.url`, and mismatched `path_hint` or `asset_path_hint` values conflict without writing extra docs or assets.
- Preserved same-SHA source URL update behavior: same-SHA updates are no-ops without `source_updated` provenance or projection invalidation churn.
- Preserved changed-PDF source URL update behavior: changed-PDF updates preserve source and asset paths, refresh searchable extracted text and citations, emit previous/new SHA provenance, and expose stale dependent synthesis through `projection_states`.

## Verification

- Local release-doc validation passed for `v0.2.7`.
- Local Agent Skill validation passed for `skills/openclerk/SKILL.md`.
- Local module skill validation passed for `modules/ollama-embeddings/skill/ollama-embeddings/SKILL.md`, `modules/gemini-embeddings/skill/gemini-embeddings/SKILL.md`, and `modules/tesseract-ocr/skill/tesseract-ocr/SKILL.md`.
- Local committed-artifact validation passed with repo-relative artifact paths and neutral raw-log placeholders.
- Local formatting, linting, and unit-test gates passed with the repository-pinned toolchain.
- Core release bundles were built locally for `v0.2.7`, with checksums verified before tagging.
- The current production OpenClerk AgentOps gate is committed at `docs/evals/results/ockp-agentops-production.md`.
- Expanded repo-docs dogfood evidence is committed at `docs/evals/results/ockp-repo-docs-dogfood.md`, covering installed-runner retrieval, synthesis maintenance, decision-record explainability, release-readiness answers, read-side tag filtering, memory-router recall reports, and release synthesis freshness over this repository's committed public markdown docs.
- Targeted workflow-action evidence is committed at `docs/evals/results/ockp-compile-synthesis-workflow-action.md`, `docs/evals/results/ockp-source-audit-workflow-action.md`, and `docs/evals/results/ockp-evidence-bundle-workflow-action.md`, covering the promoted narrow workflow-action surfaces with safety, capability, and `workflow_action_acceptable` UX passing after `oc-nft5` hardening.
- Public-corpus autonomy evidence is committed at `docs/evals/results/ockp-public-vault-kubernetes-docs.md`, `docs/evals/results/ockp-public-vault-go-docs.md`, and `docs/evals/results/ockp-public-vault-moby-dick.md`, covering promoted disposable public-vault lanes without adding a new runner API.
- Representative private-vault runtime evidence is committed at `docs/evals/results/ockp-real-vault-dogfood.md`, with reduced aggregate counts and neutral placeholders only.
- Real-vault routine UX telemetry evidence is committed at `docs/evals/results/ockp-real-vault-routine-ux.md`, with lane policy and private-input boundaries documented at `docs/evals/real-vault-routine-ux-telemetry.md`; the lane used a local-only private task manifest and committed only sanitized Markdown.
- Targeted source URL update evidence remains committed at `docs/evals/results/ockp-source-url-update-mode.md`, covering duplicate create rejection, same-SHA no-op behavior, changed-PDF stale synthesis visibility, and path-hint conflict no-write behavior for the shipped runner and skill.
- Live install, upgrade, and module-command smoke evidence is committed at `docs/evals/results/ockp-live-install-upgrade-module-smoke.md`.
