@cairnkeep/cli 2.13.1 → 2.14.0

package/CHANGELOG.md

@@ -5,6 +5,20 @@ All notable user-facing changes are documented here. This project follows
 
 ## [Unreleased]
 
+## [2.14.0] - 2026-08-17
+
+### Added
+
+- Add validation and immutable context-pack import for Open Knowledge Format
+  0.1/0.2 bundles, preserving structured source, trust, freshness, and gap
+  diagnostics without activating computations or instructions.
+- Add deterministic digest-keyed document links and the read-only,
+  closed-world `context_pack_related` MCP observation.
+- Add allowlist-only, redacted OKF 0.2 export for named project Markdown and
+  promoted shared notes, with a no-write preview and exact-digest atomic apply.
+- Add offline retrieval/freshness/gap regression fixtures and an explicit
+  decision gate for any future external knowledge-system adapter.
+
 ## [2.13.1] - 2026-08-17
 
 ### Fixed
@@ -356,7 +370,8 @@ stored memories.
 - Preserve executable permissions and Bash 3.2 portability on macOS.
 - Add backup-first uninstall and SQLite-safe memory export/import guidance.
 
-[Unreleased]: https://github.com/cairnkeep/cairnkeep/compare/v2.13.1...HEAD
+[Unreleased]: https://github.com/cairnkeep/cairnkeep/compare/v2.14.0...HEAD
+[2.14.0]: https://github.com/cairnkeep/cairnkeep/compare/v2.13.1...v2.14.0
 [2.13.1]: https://github.com/cairnkeep/cairnkeep/compare/v2.13.0...v2.13.1
 [2.13.0]: https://github.com/cairnkeep/cairnkeep/compare/v2.12.0...v2.13.0
 [2.12.0]: https://github.com/cairnkeep/cairnkeep/compare/v2.11.0...v2.12.0

package/README.md

@@ -322,7 +322,7 @@ search):
 | `CAIRN_AGENTFS_BASE_DIR` | Base dir for global memory scopes (default `~/.cairnkeep`) |
 | `CAIRN_MCP_TOOL_PROFILE` | Process override for MCP exposure: `full`, `read-only`, or `custom` |
 | `CAIRN_MCP_ALLOWED_TOOLS` | Comma-separated exact allowlist required by a custom process profile |
-| `CAIRN_CONTEXT_PACKS` | Opt in to local context-pack list/search/read tools (default off) |
+| `CAIRN_CONTEXT_PACKS` | Opt in to local context-pack list/search/read/related tools (default off) |
 | `CAIRN_CONTEXT_PACK_HTTP` | Separately consent to context-pack tools over authenticated HTTP (default off) |
 | `CAIRN_PACK_BASE_DIR` | Immutable pack objects, source records, pointers, and retrieval cache (default `~/.cairnkeep/packs`) |
 | `CAIRN_TRAJECTORY_CAPTURE` | Opt in to local structured session capture (`1`, `true`, `yes`, or `on`; default off) |
@@ -389,10 +389,12 @@ cannot bypass capability or feature gates. See
 
 Context packs are immutable, digest-addressed local document/skill bundles.
 They are installed and project-pinned manually; no background Git sync occurs.
-With `CAIRN_CONTEXT_PACKS=1`, enabled documents are searchable through three
-read-only MCP tools. Skills remain invisible until their exact file digest is
+With `CAIRN_CONTEXT_PACKS=1`, enabled documents are searchable and their local
+links traversable through four read-only MCP tools. Skills remain invisible until their exact file digest is
 approved, and are never copied or executed. See
-[Immutable context packs](docs/context-packs.md).
+[Immutable context packs](docs/context-packs.md). OKF 0.1/0.2 import and
+privacy-reviewed OKF 0.2 export are documented in
+[Open Knowledge Format exchange](docs/open-knowledge-format.md).
 
 ### Managed capability contract (opt-in)
 
@@ -581,6 +583,7 @@ exposes trajectory data. See the [operating guide](docs/operating.md#compaction-
 - **Privacy and data flow** — [docs/privacy-and-data-flow.md](docs/privacy-and-data-flow.md)
 - **MCP tool profiles** — [docs/mcp-tool-profiles.md](docs/mcp-tool-profiles.md)
 - **Immutable context packs** — [docs/context-packs.md](docs/context-packs.md)
+- **Open Knowledge Format exchange** — [docs/open-knowledge-format.md](docs/open-knowledge-format.md)
 - **Validated skill improvement** — [docs/skill-improvement.md](docs/skill-improvement.md)
 - **Git providers** — [docs/git-providers.md](docs/git-providers.md)
 - **Support** — [SUPPORT.md](SUPPORT.md)

package/docs/context-packs.md

@@ -61,9 +61,11 @@ switches only the named project.
 
 ## Retrieval and skill approval
 
-Set `CAIRN_CONTEXT_PACKS=1` and restart the memory server to register the three
-read-only, closed-world tools: `context_pack_list`, `context_pack_search`, and
-`context_pack_read`. Every file or search result includes pack ID, version,
+Set `CAIRN_CONTEXT_PACKS=1` and restart the memory server to register the
+read-only, closed-world tools: `context_pack_list`, `context_pack_search`,
+`context_pack_read`, and `context_pack_related`. The related tool is available
+for imported OKF bundles and traverses only deterministic local document links.
+Every file or search result includes pack ID, version,
 pack digest, path, kind, and file digest. Search uses the existing optional
 embedding configuration and falls back to deterministic substring matching if
 configuration or the endpoint is unavailable. Embedding cache data is stored
@@ -92,3 +94,11 @@ Authenticated HTTP deployments need the separate
 `CAIRN_CONTEXT_PACKS=1`, the existing bearer token, Host/CORS guards, and a
 project header. Pack digests prove integrity, not publisher authenticity.
 Publisher signatures remain future work.
+
+## Open Knowledge Format exchange
+
+Use `cairn pack validate-okf` and `cairn pack import-okf` to consume OKF 0.1 or
+0.2 as an immutable pack. Use the preview-and-confirm `cairn pack export-okf`
+workflow to export only named project Markdown and promoted shared notes. See
+[Open Knowledge Format exchange](open-knowledge-format.md) for the provenance,
+graph, privacy, regression, and external-adapter decision contracts.

package/docs/harness-compatibility.md

@@ -31,7 +31,7 @@ commands, hooks, agents, or automatic skill activation.
 
 Every MCP client receives complete tool annotations and may use a Cairnkeep
 least-authority profile independent of harness assets. Context-pack tools are
-ordinary read-only MCP tools and require the pack feature gate; authenticated
+ordinary read-only MCP tools (including imported-OKF link traversal) and require the pack feature gate; authenticated
 HTTP additionally requires separate pack-HTTP consent. Approved pack skills
 remain context documents, not native harness Skills or automatic instructions.
 

package/docs/learning/CURRICULUM-MAP.md

@@ -1,7 +1,7 @@
 # Curriculum Coverage Map
 
-**Baseline:** Cairnkeep 2.13.1
-**Last reviewed:** 2026-08-13
+**Baseline:** Cairnkeep 2.14.0
+**Last reviewed:** 2026-08-17
 
 This map prevents the course from drifting behind the product. It assigns each
 user-facing surface to a lesson and records whether the lesson is complete or
@@ -39,6 +39,7 @@ been rehearsed.
 | Native Windows x64 CLI, hooks, ACLs, scheduling, and recovery | L22 | L22 | Ready; PowerShell-native |
 | Guided project setup, selected harness state, and Git-less limitations | L03 | L03 and L23 | Ready |
 | Pi local stdio memory bridge, trusted annotation details, and explicit lifecycle | L23 | L23 | Ready; Pi 0.84.1 validated minimum |
+| OKF 0.1/0.2 validation/import, provenance, links, regressions, and reviewed 0.2 export | L24 | L24 | Ready; local/offline by default |
 
 ## Release Review
 
@@ -69,7 +70,7 @@ repository remains the canonical source for explanations and scripts.
 | `course-07-evaluation` | L16-L17 | Package-owned offline fixture and design boundary |
 | `course-08-graph` | L18 | Optional local structural graph workflow |
 | `course-09-skill` | L19 | Validated skill improvement in a disposable project |
-| `course-10-trust-context` | L20-L21 | MCP authority profiles and offline context-pack lifecycle |
+| `course-10-trust-context` | L20-L21 and L24 | MCP authority profiles, offline context-pack lifecycle, and reviewed OKF exchange |
 | `course-11-windows` | L22 | Native PowerShell lifecycle, ACL inspection, and reversible uninstall |
 | `course-12-guided-setup` | L23 | Deterministic setup, Pi local stdio, recovery, and backup-first uninstall |
 
@@ -92,7 +93,7 @@ against `cairn help` so a new command cannot bypass a curriculum decision.
 | `cairn evidence` | L13 |
 | `cairn capabilities` | L15 |
 | `cairn mcp-tools` | L20 |
-| `cairn pack` | L21 |
+| `cairn pack` | L21 and L24 |
 | `cairn notes` | L13 |
 | `cairn eval` | L16 |
 | `cairn skill` | L19 |

package/docs/learning/FEATURE-GUIDE.md

@@ -1,6 +1,6 @@
 # Cairnkeep feature guide
 
-**Baseline:** Cairnkeep 2.13.1
+**Baseline:** Cairnkeep 2.14.0
 
 This is the step-back map for choosing and operating Cairnkeep features. The
 [course labs](https://github.com/cairnkeep/cairnkeep-course-labs) provide one
@@ -15,6 +15,9 @@ trust. See [L03](lessons/L03-first-project.md) and
 Version 2.13 adds local Git-linked work evidence around all generated harness
 launchers; [L13](lessons/L13-session-evidence.md) covers its privacy and
 retention contract.
+Version 2.14 adds OKF 0.1/0.2 import, structured provenance,
+deterministic links, and reviewed OKF 0.2 export; see
+[L24](lessons/L24-okf-exchange.md).
 
 ## The three-layer model
 
@@ -43,7 +46,7 @@ Run setup in that order, then confirm `cairn doctor`, `cairn sync --check`, and
 | 7 | Evaluation and ablation | A concrete change needs bounded measurement |
 | 8 | Validated skill improvement | Repeated resolved hindsight warrants a measured skill change |
 | 9 | Least-authority MCP profiles | A client should receive fewer tools than the default catalog |
-| 10 | Immutable context packs | Reviewed external context should be pinned without becoming memory |
+| 10 | Immutable context packs and OKF exchange | Reviewed external context should be pinned or exchanged without becoming memory |
 
 Every stage is independently useful. Stages 4-8 are opt-in and are not
 prerequisites for ordinary memory.
@@ -73,6 +76,7 @@ prerequisites for ordinary memory.
 | Managed overlays | Separate distribution manifest, wrapper, profile lock, fleet and rollback gates | Policy and secrets belong in the private distribution/machine config, never core | `overlay info`, doctor, fleet dry run/current state, rollback | `course-04-operation` |
 | MCP tool profiles | `cairn mcp-tools set full|read-only|custom` | Strict mode-`0600` project config; process overrides take precedence; profile only removes tools | Inspect catalog/status digest; reset and restart MCP | `course-10-trust-context` |
 | Context packs | Manual local or commit-pinned Git install plus project enablement | Immutable objects and atomic pointers under `CAIRN_PACK_BASE_DIR`; no background sync | Validate, inspect digest, check/apply update, disable/remove | `course-10-trust-context` |
+| OKF exchange | `cairn pack validate-okf`, `import-okf`, and preview-confirm `export-okf` | Local import/export by default; explicit file/shared-note allowlist; redacted output | Inspect diagnostics/provenance/output list; exact-digest apply; disable/remove imported pack | `course-10-trust-context` |
 | Pi local stdio memory | Select Pi during setup, then explicitly run `cairn sync-pi --apply` | Local memory-server child; dynamic effective tool catalog; annotations retained in trusted details, not a native Pi field | `cairn sync-pi --check`, `cairn doctor`, cancel one call, then observe awaited shutdown with no orphan | `course-12-guided-setup` |
 
 ## Evidence, governance, and measurement

package/docs/learning/README.md

@@ -55,6 +55,7 @@ expanded only after their labs are executable.
 | L21 | [Immutable context packs and skill approval](lessons/L21-context-packs.md) | Ready | 40 min |
 | L22 | [Operate Cairnkeep on native Windows](lessons/L22-native-windows.md) | Ready | 30 min |
 | L23 | [Guided setup and Pi memory](lessons/L23-guided-setup.md) | Ready | 35 min |
+| L24 | [Reviewed knowledge exchange](lessons/L24-okf-exchange.md) | Ready | 35 min |
 
 The [curriculum coverage map](CURRICULUM-MAP.md) records where every public
 feature is introduced, practised, and operated. It also marks design-only work
@@ -73,7 +74,7 @@ Every complete lesson contains:
 
 The learner should never need optional infrastructure to complete L00-L06.
 Remote memory, RAG, routing, containers, graph indexing, structured capture,
-typed nodes, capability governance, evaluation, and context packs are separate
+typed nodes, capability governance, evaluation, context packs, and OKF exchange are separate
 opt-in modules. MCP profiles are restrictive and never activate an optional
 feature.
 

package/docs/learning/lessons/L00-why-cairnkeep.md

@@ -3,7 +3,7 @@
 **Status:** Ready
 **Track:** Quickstart
 **Time:** 10 minutes
-**Tested with:** Cairnkeep 2.13.1
+**Tested with:** Cairnkeep 2.14.0
 
 ## Outcome
 

package/docs/learning/lessons/L01-safe-trial.md

@@ -3,7 +3,7 @@
 **Status:** Ready
 **Track:** Quickstart
 **Time:** 15 minutes
-**Tested with:** Cairnkeep 2.13.1
+**Tested with:** Cairnkeep 2.14.0
 
 ## Outcome
 
@@ -26,7 +26,7 @@ ephemeral; the named course volume is persistent.
 1. Pull the public image:
 
    ```bash
-   podman pull ghcr.io/cairnkeep/cairnkeep:2.13.1
+   podman pull ghcr.io/cairnkeep/cairnkeep:2.14.0
    ```
 
 2. Start the stdio server with a read-only root filesystem and no Linux
@@ -38,7 +38,7 @@ ephemeral; the named course volume is persistent.
      --read-only --cap-drop=all --security-opt=no-new-privileges \
      --tmpfs=/tmp:rw,noexec,nosuid,size=64m,mode=1777 \
      --volume cairnkeep-course-data:/data:Z,U \
-     ghcr.io/cairnkeep/cairnkeep:2.13.1 stdio
+     ghcr.io/cairnkeep/cairnkeep:2.14.0 stdio
    ```
 
 3. The process waits quietly for MCP input. Press `Ctrl-C` after confirming it

package/docs/learning/lessons/L02-installation.md

@@ -3,7 +3,7 @@
 **Status:** Ready
 **Track:** Quickstart
 **Time:** 25 minutes
-**Tested with:** Cairnkeep 2.13.1 and Node.js 22 or newer
+**Tested with:** Cairnkeep 2.14.0 and Node.js 22 or newer
 
 ## Outcome
 
@@ -47,7 +47,7 @@ sync. Codex project trust remains an explicit operator decision.
 2. Install Cairnkeep:
 
    ```bash
-   npm install --global @cairnkeep/cli@2.13.1
+   npm install --global @cairnkeep/cli@2.14.0
    cairn --version
    ```
 

package/docs/learning/lessons/L03-first-project.md

@@ -3,7 +3,7 @@
 **Status:** Ready
 **Track:** Quickstart
 **Time:** 25 minutes
-**Tested with:** Cairnkeep 2.13.1
+**Tested with:** Cairnkeep 2.14.0
 
 ## Outcome
 

package/docs/learning/lessons/L19-validated-skill-improvement.md

@@ -3,7 +3,7 @@
 **Status:** Ready
 **Track:** Evidence and Evaluation
 **Time:** 50 minutes
-**Tested with:** Cairnkeep 2.13.1
+**Tested with:** Cairnkeep 2.14.0
 
 ## Outcome
 

package/docs/learning/lessons/L20-mcp-tool-profiles.md

@@ -1,7 +1,7 @@
 # L20 - Least-authority MCP tool profiles
 
 **Status:** Ready
-**Tested with:** Cairnkeep 2.13.1 and Node.js 22 or newer
+**Tested with:** Cairnkeep 2.14.0 and Node.js 22 or newer
 **Time:** 25 minutes
 
 ## Outcome

package/docs/learning/lessons/L21-context-packs.md

@@ -1,7 +1,7 @@
 # L21 - Immutable context packs and skill approval
 
 **Status:** Ready
-**Tested with:** Cairnkeep 2.13.1 and Node.js 22 or newer
+**Tested with:** Cairnkeep 2.14.0 and Node.js 22 or newer
 **Time:** 40 minutes
 
 ## Outcome
@@ -77,3 +77,7 @@ rm -rf "$lab"
 - `CAIRN_CONTEXT_PACKS=1` enables local read-only tools only after restart.
 - HTTP additionally requires `CAIRN_CONTEXT_PACK_HTTP=1` and existing auth.
 - A digest proves integrity, not publisher authenticity.
+
+Continue with [L24](L24-okf-exchange.md) for structured OKF provenance,
+deterministic related-document retrieval, regression diagnostics, and the
+privacy-reviewed export workflow.

package/docs/learning/lessons/L22-native-windows.md

@@ -3,7 +3,7 @@
 **Status:** Ready
 **Track:** Operator
 **Time:** 30 minutes
-**Tested with:** Cairnkeep 2.13.1, Windows x64, and Node.js 22 or newer
+**Tested with:** Cairnkeep 2.14.0, Windows x64, and Node.js 22 or newer
 
 ## Outcome
 
@@ -16,7 +16,7 @@ perform a reversible uninstall without relying on WSL or Git Bash.
 From PowerShell:
 
 ```powershell
-npm install --global @cairnkeep/cli@2.13.1
+npm install --global @cairnkeep/cli@2.14.0
 cairn version
 
 $Lab = Join-Path $env:TEMP 'Cairnkeep Windows Lab'

package/docs/learning/lessons/L23-guided-setup.md

@@ -3,7 +3,7 @@
 **Status:** Ready
 **Track:** Quickstart and Operator
 **Time:** 35 minutes
-**Tested with:** Cairnkeep 2.13.1; Pi 0.84.1; Node.js 22, 24, and 26
+**Tested with:** Cairnkeep 2.14.0; Pi 0.84.1; Node.js 22, 24, and 26
 
 ## Outcome
 
@@ -134,7 +134,7 @@ prompts, approve skills, create an autonomous loop, or add remote access.
 
 ## Release boundary
 
-Ready means this lesson and its deterministic contracts pass against v2.13.1.
+Ready means this lesson and its deterministic contracts pass against v2.14.0.
 Release readiness requires a non-skipping acceptance run
 against separate Pi 0.84.1 minimum and explicitly versioned registry-current
 installations, plus the documented Node.js, Bash 3.2, and native Windows matrix.

package/docs/learning/lessons/L24-okf-exchange.md

@@ -0,0 +1,111 @@
+# L24 - Reviewed knowledge exchange
+
+**Status:** Ready
+**Tested with:** Cairnkeep 2.14.0 and Node.js 22 or newer
+**Time:** 35 minutes
+
+## Outcome
+
+Validate and import an OKF bundle as immutable project context, inspect its
+structured provenance and deterministic links, then export an explicitly
+selected, redacted OKF 0.2 bundle without confusing exchange with durable
+memory or publisher trust.
+
+## Exercise
+
+Create a disposable OKF 0.2 bundle:
+
+```bash
+lab=$(mktemp -d)
+mkdir -p "$lab/source/concepts" "$lab/project"
+cat >"$lab/source/index.md" <<'EOF'
+---
+okf_version: "0.2"
+---
+# Local catalog
+
+* Policy
+EOF
+printf '%s%s\n' '* [Policy]' '(concepts/policy.md)' >>"$lab/source/index.md"
+cat >"$lab/source/concepts/policy.md" <<'EOF'
+---
+type: Policy
+title: Synthetic policy
+description: Offline course fixture.
+sources:
+  - resource: urn:course:fixture
+verified: { by: human:course-reviewer }
+---
+# Synthetic policy
+
+This content is deliberately non-sensitive.
+EOF
+export CAIRN_PACK_BASE_DIR="$lab/store"
+cairn pack validate-okf "$lab/source"
+cairn pack import-okf "$lab/source" --id course-okf \
+  --version 1.0.0 --license CC0-1.0 --json >"$lab/import.json"
+digest=$(node -e 'process.stdout.write(require(process.argv[1]).digest)' "$lab/import.json")
+cairn pack enable "$digest" --project "$lab/project"
+```
+
+Start the project memory server with `CAIRN_CONTEXT_PACKS=1`. Through an MCP
+client, confirm that list/search/read results contain `okf.version`, concept
+type, source, trust tier, freshness state, links, and diagnostics. Call
+`context_pack_related` for `concepts/policy.md`; it performs no URL fetch and
+returns only enabled files from the same digest-pinned pack.
+
+Now preview and apply an allowlist-only export:
+
+```bash
+mkdir -p "$lab/project/docs"
+printf '# Reviewed decision\n\nSynthetic approved text.\n' \
+  >"$lab/project/docs/decision.md"
+cairn pack export-okf --project "$lab/project" --output "$lab/export" \
+  --file docs/decision.md --check
+# Copy the printed preview digest only after inspecting the file list.
+cairn pack export-okf --project "$lab/project" --output "$lab/export" \
+  --file docs/decision.md --apply --confirm PREVIEW-DIGEST
+cairn pack validate-okf "$lab/export"
+```
+
+## Common failures
+
+- A concept without YAML `type`, a YAML alias, a symlink, invalid UTF-8, or an
+  unsafe path fails validation.
+- Git input needs an explicit `--ref`; local validation/import does not use the
+  network.
+- Export rejects broad private/runtime paths and accepts only named Markdown or
+  promoted shared notes.
+- Any selected-byte or redaction change invalidates the preview digest. An
+  existing output directory is never replaced.
+
+## Privacy and trust boundary
+
+Import metadata is reported, not vouched for. A pack digest proves byte
+integrity but not publisher authenticity, and OKF computation/attestation
+metadata is never executed. Optional embedding search can send chunks to the
+configured endpoint; substring search and link traversal stay local. Export
+applies redaction, but explicit review of both preview and output is still
+required before publication.
+
+An external knowledge adapter remains deferred unless a representative task
+demonstrates a necessary capability that memory, promoted notes, context packs,
+links, embeddings, and OKF exchange cannot provide with lower operational and
+privacy cost.
+
+## Recovery and acceptance
+
+```bash
+cairn pack disable course-okf --project "$lab/project"
+cairn pack remove "$digest"
+unset CAIRN_PACK_BASE_DIR
+rm -rf "$lab"
+```
+
+- Validation and import preserve OKF 0.1/0.2 provenance without modifying the
+  source.
+- Related-document retrieval is deterministic, closed-world, and read-only.
+- The regression fixture detects wrong top results, stale metadata, missing
+  provenance, and broken links.
+- Export check performs no writes; apply requires the exact recomputed digest
+  and creates only the reviewed destination.

package/docs/learning/tracks/operator.md

@@ -2,7 +2,7 @@
 
 **Audience:** advanced users and platform maintainers
 **Prerequisite:** Practitioner track; L13 before operating captured evidence
-**Total time:** about 5 hours 35 minutes
+**Total time:** about 6 hours 10 minutes
 
 1. [L09 - Domain knowledge with RAG](../lessons/L09-domain-knowledge.md)
 2. [L10 - Faster context exploration](../lessons/L10-context-exploration.md)
@@ -14,12 +14,15 @@
 8. [L21 - Immutable context packs and skill approval](../lessons/L21-context-packs.md)
 9. [L22 - Operate Cairnkeep on native Windows](../lessons/L22-native-windows.md)
 10. [L23 - Guided setup and Pi memory](../lessons/L23-guided-setup.md)
+11. [L24 - Reviewed knowledge exchange](../lessons/L24-okf-exchange.md)
 
 All modules are optional. The track is complete when the operator can add and
 remove each integration without breaking the standalone local workflow and can
 explain its storage, network, credential, and rollback boundaries. L23 adds the
 v2.11 setup/Pi lifecycle only after the earlier storage, governance, trust, and
 native-platform boundaries.
+L24 adds portable exchange only after the immutable-pack and privacy boundaries
+are understood.
 
 Hands-on spine: `course-04-operation`, `course-06-governance`, and
 `course-07-evaluation`, `course-10-trust-context`, and

package/docs/learning/video-scripts/V24-okf-exchange.md

@@ -0,0 +1,31 @@
+# V24 - Reviewed knowledge exchange
+
+**Companion lesson:** [L24](../lessons/L24-okf-exchange.md)
+**Target length:** 9 minutes
+
+## Recording outline
+
+1. State the boundary: OKF is portable context exchange, not a second memory
+   owner, agent loop, trust authority, or background sync service.
+2. Show a two-concept synthetic OKF 0.2 directory and run
+   `cairn pack validate-okf`.
+3. Import it with an ID, semantic version, and license; point out that the
+   source directory remains unchanged and the pack digest is authoritative.
+4. Enable the digest for one disposable project. Show structured `okf`
+   provenance in list/search/read and traverse one local link with
+   `context_pack_related`.
+5. Break a link and make a concept stale in a second fixture. Show diagnostics
+   without implying that Cairnkeep verified the source claims.
+6. Select one project Markdown file, run `export-okf --check`, and emphasize
+   that no output exists. Inspect the allowlist, redaction count, and digests.
+7. Apply with the exact preview digest and validate the result. Demonstrate one
+   rejected private path and one mismatched confirmation.
+8. Close with the external-adapter gate: demand a measured, otherwise
+   impossible workflow before accepting another network and data owner.
+
+## Recording cautions
+
+- Use only synthetic paths, content, sources, and credentials.
+- Keep embeddings disabled so the recording proves the offline fallback.
+- Do not claim publisher authenticity, semantic correctness, or quality gains.
+- Remove the disposable pack object and project pointer on camera.

package/docs/open-knowledge-format.md

@@ -0,0 +1,100 @@
+# Open Knowledge Format exchange
+
+Cairnkeep can ingest Open Knowledge Format (OKF) 0.1 and 0.2 bundles as
+immutable context packs and can export an explicitly reviewed subset of local
+knowledge as OKF 0.2. This is an exchange boundary, not a second memory store,
+an agent runtime, or a synchronization service.
+
+## Validate and import
+
+```bash
+cairn pack validate-okf ./knowledge
+cairn pack import-okf ./knowledge \
+  --id reviewed-knowledge --version 1.0.0 --license CC-BY-4.0
+cairn pack enable reviewed-knowledge --project ./project
+```
+
+The importer accepts a local directory without network access. A Git source
+requires `--ref`; Cairnkeep resolves and records the exact commit using the
+system `git` executable. Repository metadata is excluded. Import copies only
+validated UTF-8 bundle files into a new immutable object and never modifies the
+source.
+
+Validation rejects symlinks, devices, unsafe paths, invalid UTF-8, YAML aliases,
+missing concept `type`, duplicate YAML keys, and the normal context-pack size
+limits. Unknown concept metadata remains available for forward-compatible
+reading. A future OKF version produces a diagnostic and is consumed on a
+best-effort basis rather than being treated as fully supported.
+
+OKF 0.2 provenance is preserved in the `okf` field returned by
+`context_pack_list`, `context_pack_search`, and `context_pack_read`. It includes
+the format version, file role, concept identity and type, declared sources,
+generation and verification events, trust tier, status, staleness, links, and
+diagnostics. These are source assertions: Cairnkeep reports them but does not
+turn them into publisher authenticity or executable authority.
+
+## Deterministic links and retrieval
+
+With `CAIRN_CONTEXT_PACKS=1`, imported packs also expose the read-only,
+closed-world `context_pack_related` MCP tool. It traverses local Markdown links
+in `outbound`, `inbound`, or `both` directions. External URLs are never fetched.
+Broken and unsafe local links remain diagnostics. The derived graph cache lives
+outside immutable objects and is keyed by the authoritative pack digest; it can
+always be rebuilt from the object.
+
+Search still follows the context-pack retrieval contract: deterministic
+substring matching is always available, while configured embeddings are an
+optional enhancement with a clean lexical fallback. Regression fixtures cover
+the expected top result, source/trust preservation, stale-content warnings,
+missing-metadata diagnostics, broken links, and embedding-independent graph
+results.
+
+## Privacy-reviewed export
+
+Export is allowlist-only and uses a two-step confirmation:
+
+```bash
+cairn pack export-okf --project ./project --output ./reviewed-okf \
+  --file docs/decision.md --note shared-example --check
+
+cairn pack export-okf --project ./project --output ./reviewed-okf \
+  --file docs/decision.md --note shared-example \
+  --apply --confirm PREVIEW-DIGEST
+```
+
+`--check` writes nothing. It reads only the named Markdown files and promoted
+shared notes, applies the local redaction policy, and returns the exact output
+list, output digests, redaction count, and confirmation digest. `--apply`
+recomputes that plan and writes atomically only when the digest matches. It
+refuses an existing output directory.
+
+Private runtime directories, Git metadata, dependencies, and most planning
+state cannot be selected. The reviewed wiki subtree is the sole planning-state
+exception and is mapped to `wiki/`. Project hindsight and provenance notes are
+not exportable: only already-corroborated `shared` notes pass the note reader.
+The resulting bundle can still contain sensitive domain content, so review the
+preview and the output before publishing it.
+
+## External adapter decision gate
+
+No live external knowledge-system adapter is included. Native memory, promoted
+notes, immutable packs, deterministic links, optional embeddings, and OKF
+import/export already cover local capture, reviewed sharing, retrieval, and
+portable exchange.
+
+An adapter should be added only when a concrete workflow demonstrates all of
+the following:
+
+1. It needs a capability Cairnkeep cannot express through those native
+   surfaces, not merely another UI or duplicate graph.
+2. The benefit is measured on a representative task set and exceeds the added
+   privacy, availability, migration, and operational cost.
+3. Cairnkeep remains the sole owner of durable-memory mutations; the adapter is
+   read-only or has an explicit, reversible write boundary.
+4. Authentication, data egress, deletion, backup, and failure behavior are
+   testable without weakening local/offline defaults.
+5. A provider-neutral interface and fixture can be maintained without adding a
+   background agent loop or automatic activation.
+
+Until a use case passes that gate, OKF exchange is the smaller and safer
+integration seam.

package/docs/operating.md

@@ -1302,3 +1302,17 @@ an `--apply --confirm CANDIDATE-DIGEST`. Use `cairn pack skills` and exact-diges
 approval before a bundled skill can be read through MCP. HTTP needs the separate
 `CAIRN_CONTEXT_PACK_HTTP=1` flag and all existing authentication/Host/CORS
 controls. See [Immutable context packs](context-packs.md).
+
+Validate and import an OKF bundle without converting it by hand:
+
+```bash
+cairn pack validate-okf ./knowledge
+cairn pack import-okf ./knowledge --id reviewed-knowledge \
+  --version 1.0.0 --license CC-BY-4.0
+```
+
+Imported OKF packs preserve structured source/trust/freshness metadata and add
+read-only related-document traversal. Privacy-reviewed export is an explicit
+`export-okf --check` followed by `--apply --confirm PREVIEW-DIGEST`; only named
+Markdown files and promoted shared notes are eligible. See
+[Open Knowledge Format exchange](open-knowledge-format.md).

package/docs/privacy-and-data-flow.md

@@ -19,6 +19,8 @@ request unless the corresponding endpoint and credential are configured.
 | Local context-pack install/list/read/substring search | None | Verified immutable files and project pointers under `CAIRN_PACK_BASE_DIR` |
 | Embedding-ranked context-pack search | Enabled file chunks not already cached, plus the query | The explicitly configured embedding endpoint; failure falls back locally |
 | Authenticated HTTP context-pack retrieval | MCP requests and enabled document/approved-skill content | The explicit Cairnkeep HTTP server; requires separate pack HTTP consent |
+| Local OKF validation/import/link traversal | None | Source files are read locally; immutable object and digest-keyed graph cache remain under `CAIRN_PACK_BASE_DIR` |
+| Privacy-reviewed OKF export | None | Only explicitly named Markdown/promoted shared notes are redacted into the operator-selected local output directory after exact preview confirmation |
 | Optional Graphify workflow | The repository path, exact query/symbol names, root `graphify-out/` work directory, and local `.planning/graphs/` publication are passed to or produced by the operator-installed `graphify` executable | Local Graphify subprocess with a minimal environment and no provider credentials; managed build uses code-only `update`, never semantic document extraction |
 | Remote HTTP memory | MCP requests and responses, including memory content | The explicitly registered Cairnkeep HTTP server |
 | Opt-in trajectory capture | None | Local `<project>/.agentfs/trajectory.db` only; no model or HTTP path exists |

package/docs/storage.md

@@ -548,3 +548,9 @@ and switch only the named project after exact-digest confirmation.
 It never chooses a pack version or grants a skill approval. `cairn pack remove`
 refuses any referenced digest. Ordinary uninstall retains this directory even
 when memory is removed; `--purge-packs` is the separate backup-first consent.
+
+Imported OKF files live inside the same immutable object. The deterministic
+link index is derived data under `cache/graphs/<pack-digest>.json`; corruption
+or deletion does not affect identity and causes a rebuild from the object. OKF
+exports are not stored automatically: `export-okf --apply` creates a new
+operator-selected directory only after its preview digest is confirmed.

package/examples/eval/bundled-fake.json

@@ -1 +1 @@
-{"identifier":"cairn-offline-fake-v1","package_version":"2.13.1","schema_version":1,"task_set_digest":"13e95379f35839593047ec34521a65a8fa3ab92bd3993bca9dc8bf5c4a9ff36f"}
+{"identifier":"cairn-offline-fake-v1","package_version":"2.14.0","schema_version":1,"task_set_digest":"13e95379f35839593047ec34521a65a8fa3ab92bd3993bca9dc8bf5c4a9ff36f"}