Changelog

Version stamps follow vMAJOR.MINOR until v1.0. Patch releases are tracked in the repo but not enumerated here.

v0.2 · Host Glass — in progress

The v0.2 cycle is the first cycle where the cockpit looks and feels like the product it has always been described as. The design language is now formalized as Host Glass — referenced in-product at the bottom-left status pill.

Shell

New welcome surface with the Doctrine Diamond: four-domain navigation (Research / Primary / Signal / Utility) around a central Unlock Cockpit node
Top chrome refresh: brand glyph, Local only pill, lavender Version 0.2 badge, search bar, clock with date
Bottom status pill: Host Glass label + lock/exit/network/audio/battery icons
Intelligence Rail collapsible right-side panel (Ambient → Model / Vault / Phase / Clock / Ports)

Operator Memory Cockpit

Five-tab navigation: Operate · Research · Memory · Signal · System
Project selector with Operator Memory default + New project quick-create
Per-project memory and search counts visible at all times in the Command Deck
Search-active-project-memory rail in the top bar

Vault Notes

Six structured templates: Blank, Briefing, Checklist, Runbook, Inventory, BioMedical
Tag-based filter chips with multi-select OR-semantics
Live Edit / Preview toggle with code/table rendering
Pin for cross-session persistence
Note-detail surface with breadcrumb path: Cockpit › Entry Surface › Vault Notes

Model Workspace

Plain-language model cards replace raw provider configuration
First two bundled model profiles:
- DeepNimSec / Security Model v1 — defensive review (Review risk · Normalize evidence · Map controls · Score findings)
- Citizen-AI / Project Blueprint — defensive cognition training (Lab scenarios · Bias recognition · Verification coaching · After-action review)
Advanced setup drawer for developer/builder configuration
ROS-managed local runtime detection with Test connection flow
Manual response fallback when no model is reachable

Trust posture

Lock workspace first-class button in Command Deck
Idle auto-lock threshold (configurable in Control Room, planned)
Explicit Nuke flow with confirmation token requirement
Lock-state semantics documented and enforced consistently

Known not-yet-shipping in v0.2

Full DNS-v1 weight distribution is release-channel gated, but the ROS model profile and prepare flow are bundled
F*Society LAN room is in design but not in this milestone
Trust Audit report (Enterprise tier) is specified, not implemented
Scheduled / automatic backup — manual only for now

v0.1 · Individual ROS · Apr 19, 2026

Initial public release. The minimum viable cockpit.

Shipped

Tauri 2 native desktop shell for macOS, Windows, Linux
Web/Vite beta build path for UI iteration
Rust core with Tauri IPC boundary for sensitive operations
Encrypted vault with master-passphrase key derivation
Six core modules: Overview, Vault Notes, Library, Research Vault, Profile Organizer, Control Room
ROS Comms (local/native messaging) — read-only state
Nostr Lounge sidecar — read-first
F*Society LAN discovery surface (native-only) — discovery only
Manual lock + master-passphrase re-entry
Backup bundle creation + restore

Architecture choices locked in

Local-first as a non-negotiable default, not a feature
Master passphrase non-recoverable by design
No telemetry, no phone-home, no anonymous metrics
Rust core owns trust boundary in native builds
Ollama assumed as the local model runtime

v0.3 · Operator Comms — next

Planned focus areas. Not committed scope.

ROS Comms write/send (currently read-only)
F*Society LAN room — discovery → discovery + chat + handoff notes + file send
Trust Audit metadata report (Enterprise tier)
Scheduled backup (Pro tier)
Passphrase rotation flow with re-key
Custom note templates beyond the six built-ins
Model card SDK for adding new cards without core changes