$ cat ./products/af.md

Authority compatibility

Prerelease: af task start now captures and previews without dispatching Workers, including with --json. Review the plan, then run with --confirm-plan and its full captured ID. Automation must explicitly opt into --execute on start or on the first run of a plan. Admitted Tasks can resume and finished Tasks replay as before. This CLI confirmation never replaces signed developer approval for a generated plan. Existing .af authority remains supported; legacy .review migration and exact release pin verification still apply.

Changes

• Render captured Task plans as compact ASCII flows or expanded task explain --tree views, with embedded calls, actual Worker models/efforts/accounts, inputs, outputs, effects and limits.
• Stop new Tasks before execution and refuse stale plan confirmations, including a plan change before the writer lease is acquired. Explicit automation retains existing runtime admission.
• Keep JSON inspection schemas unchanged, sanitize terminal display text, and document the preview/approval workflow for Claude and Codex.

The live pilot and complete consumer migration/rollback acceptance remain pending. This candidate does not declare stable-release readiness or change the active consumer’s pin.

Authority compatibility

This is a prerelease for Task integration and migration validation. Live pilot acceptance and complete consumer migration/rollback verification remain pending; this candidate does not establish stable-release readiness or replace the known-good consumer installation.

New Task execution requires its versioned .af catalog, Pipeline/Worker contracts and lock. Every generated Execution Plan requires an authorized developer’s exact-plan approval. Local bindings do not travel with shared definitions. Existing .review consumers still need the supported af onboard --migrate --apply path; validate migrated authority together with the chosen released binary and its verified archive digests before switching launchers.

New Review executions use the common Task runtime. Historical paid Campaigns preserve their captured executor, authority and accounting; they are not rewritten into new Tasks. Keep the original Store and known-good release for historical continuation and rollback. An older binary must not reinterpret unsupported new state, and rollback cannot refund recorded usage or reopen completed work. Release-bound migration and rollback evidence are release gates.

Changes

• Make Task the common durable execution model for implementation, Review and documents, with typed Pipeline input/output contracts, captured context and shared budget accounting.

• Compose reusable Review Pipelines inside implementation, with independent acceptance and bounded repairs that retain Finding and Snapshot provenance.

• Select fitting shared Pipelines; persist generated definitions and plans for developer review when configured generation is needed; export definitions for subsequent reuse.

• Share versioned Pipeline/Worker packages and starter workflows through Git, with local Provider bindings, deterministic contract checks, Jira/local source capture and explicit delivery to a new local worktree.

• Preserve Provider usage and recovery evidence across cancellation, writer loss and storage failures, and capture explicit admission allowances in Task catalog V2.

• Preserve nested Jira requirements, resolve explicit relative refresh files from the caller’s directory, and retain plans when only unselected Jira fields or update timestamps change.

• Make identical authenticated plan-revocation requests idempotent and refuse revocation of decisions that were never approved.

• Reduce repeated captured Review validation, heartbeat and receipt-query work while retaining fresh artifact, lease, approval and usage checks; stream raw usage transcripts with bounded memory.

• Open the repository: install.sh installs from a public release with curl alone, verifies the release signature by default when minisign is present, and keeps gh only as a fallback; the release also ships LICENSE (Apache-2.0), SECURITY.md, CONTRIBUTING.md and a restructured docs/ (architecture, tasks, migration, non-goals, design notes).

• Account for every model reported by native Claude Task usage; preserve auxiliary charges and refuse unapproved auxiliary activity instead of accepting an Opus selector alone.

• Use native JSON schemas and structured output for typed Claude Task replies while retaining independent Kernel output validation and the existing legacy text transport.

• Preserve prerelease versions in migrated authority so the candidate can read its own output.

• Retry transient executable-busy process starts and correct concurrent Linux test allowances.

• Explain logged-out Provider status and install declared toolchain components in release jobs.

Validation boundary

The release workflow checks the tagged source on Linux and macOS, runs consumer fixtures, and signs archive checksums. These deterministic checks do not replace specialist reviews, live Task measurements or actual consumer migration and rollback rehearsals. See Task execution for the contracts; candidate publication does not claim those remaining acceptance gates have passed.

Authority compatibility

Requires af onboard --migrate --apply for a consumer still on .review/: legacy authority is no longer read for new Campaigns (ADR-0043). A repository already on .af/ keeps working, but re-pin it with af onboard --refresh-lock so the lock records the per-target archive digest this release binds to. A 0.7.1 default cannot read a lock written by 0.8.0 (its [af] table is an unknown field to the older parser), so it neither dispatches to 0.8.0 nor plans: run af self update first on such a machine.

Changes

• Route pipelines by changed paths; switch oversized Diffs to a bounded pipeline (#64)
• Show Campaign state on disk and reclaim it with af review gc (#66)
• One release train, a pin that binds bytes, and .review/ retired (ADR-0045) (#68)
• Commit the minisign release public key: every release from 0.8.0 ships a signed SHA256SUMS

What’s Changed

• docs: record v0.7.0 release by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/44
• Plan consumer policies with every built af by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/48
• Validate and migrate legacy .review/ policy in af onboard by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/49
• Refresh the hub consumer fixture: one correctness reviewer by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/51
• Make wall-clock, provider usage, and dispositions visible per review by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/54
• Let a Worker node declare its own Attempt cap by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/60
• Render a Worker’s exact input token-free by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/61
• Refuse a Worker input that exhausts its Attempt cap before admission by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/62
• Make af self-managed: clap tree, scoped help, completions, af self, dispatch, config ladder by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/63
• release: prepare v0.7.1 by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/65

Full Changelog: https://github.com/PakhomovAlexander/afactory/compare/v0.7.0...v0.7.1

What’s Changed

• Record v0.6.0 release by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/30
• Harden review planning and provider admission by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/31
• release: prepare v0.7.0 by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/43

Full Changelog: https://github.com/PakhomovAlexander/afactory/compare/v0.6.0...v0.7.0

What’s Changed

• Complete Review Kernel M7-M9 by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/28
• Release v0.6.0 by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/29

Full Changelog: https://github.com/PakhomovAlexander/afactory/compare/v0.5.0...v0.6.0

What’s Changed

• Record the v0.4.0 onboarding release by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/14
• Complete M3 grouping and M4 evidence resolution by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/18
• Fix remaining M4 verification findings by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/19
• Implement M6.3 broker handles by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/24
• Default review campaigns to light mode by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/25
• Release: prepare v0.5.0 by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/26

Full Changelog: https://github.com/PakhomovAlexander/afactory/compare/v0.4.0...v0.5.0

What’s Changed

• Record the v0.3.0 trusted-pilot release by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/12
• Add deterministic review onboarding by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/13

Full Changelog: https://github.com/PakhomovAlexander/afactory/compare/v0.3.0...v0.4.0

What’s Changed

• Complete V3.1 trusted client pilot delivery by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/11

Full Changelog: https://github.com/PakhomovAlexander/afactory/compare/v0.2.0...v0.3.0

What’s Changed

• M2.5: derive report scope from round subjects by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/5
• Fenced provider admission before reviewer dispatch by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/7
• feat: report Claude weekly and Fable limits by @apkhmv-agent in https://github.com/PakhomovAlexander/afactory/pull/6
• Release v0.2.0: complete M2 review authority and scope by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/9

Full Changelog: https://github.com/PakhomovAlexander/afactory/compare/v0.1.0...v0.2.0

What’s Changed

• Establish the Afactory CLI and private release boundary by @PakhomovAlexander in https://github.com/PakhomovAlexander/afactory/pull/2
• feat(reviewctl): show provider subscription status by @apkhmv-agent in https://github.com/PakhomovAlexander/afactory/pull/4

New Contributors

• @PakhomovAlexander made their first contribution in https://github.com/PakhomovAlexander/afactory/pull/2
• @apkhmv-agent made their first contribution in https://github.com/PakhomovAlexander/afactory/pull/4

Full Changelog: https://github.com/PakhomovAlexander/afactory/commits/v0.1.0