ltcai 4.6.0 → 4.7.0

package/README.md

@@ -7,187 +7,159 @@
 [![CI Status](https://github.com/TaeSooPark-PTS/LatticeAI/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/TaeSooPark-PTS/LatticeAI/actions/workflows/ci.yml)
 [![License](https://img.shields.io/badge/license-MIT-green)](LICENSE)
 
-**Lattice AI v4.6.0 is a local-first Living Brain desktop workspace.** It runs
-as a Tauri desktop app with a localhost FastAPI sidecar, stores the user's brain
-locally by default, and makes the Brain plus conversation the primary product
-experience.
+**Lattice AI v4.7.0 is the local-first Living Brain admin separation release.**
+It keeps the v4 Brain Core, StorageEngine, FastAPI localhost API, Tauri shell,
+backup, restore, model runtime, graph, and portability architecture intact while
+making the normal user surface simpler and moving logs, users, security events,
+and Brain operations into a separate Admin Console.
 
-This README describes the v4.6.0 release-preparation tree, which preserves the
-v4.4.0 physical `lattice_brain` extraction, v4.5.0 capability recovery, and
-v4.5.1 product shell while repositioning the graph as a deep exploration layer.
-First launch now follows a Brain-first product flow: Login, friendly environment
-analysis, recommended models, guided install/download/validate/load, then the
-living Brain conversation. Memories, knowledge, relationships, and the advanced
-graph are progressively disclosed beneath the Brain.
-External package registries are owner-published; the badges above link to
-package pages and may show the most recently published owner-controlled registry
-version, which can lag behind the GitHub Release.
+The product opens by stating the core reason to exist: models will change, but
+the user's knowledge should not. It creates a private local profile, studies the
+computer, recommends a replaceable model voice, asks before install/download/load
+work, then lands in Brain Chat with starter prompts for durable decisions,
+projects, documents, and context. The graph is still real and searchable, but it
+now grows out of the Brain as the deepest exploration layer instead of acting
+like a separate dashboard.
 
-## What Was Verified
+External package registries are owner-published and can lag behind this GitHub
+Release. Release uploads must use the exact v4.7.0 artifact filenames below.
 
-- Desktop app starts and serves the React/Vite product shell from the FastAPI
-  sidecar.
-- First launch opens to Login only, then guides environment analysis,
-  recommendations, install/download/validate/load, and finally the Brain.
-- After model loading, the home route opens to a living Brain presence plus
-  durable conversation, with the Brain always visible during the primary chat
-  flow.
-- The Brain presence reacts to conversation, recall, model readiness, and
-  agent/workflow activity with neural movement, memory pulses, and status
-  changes.
-- Memories, Knowledge, Relationships, and Graph are ordered as progressive
-  disclosure layers; the graph is no longer the product's first impression.
-- Capture uploads a document through `/upload/document` and shows indexed
-  documents from the backend.
-- Act exposes workflow create/run surfaces and agent runtime status without
-  presenting simulation as real success. When no LLM-backed model is loaded,
-  deterministic model-free agent simulation is reported honestly and does not call a model.
-- Model setup recommends a short ranked list for the current computer instead
-  of exposing a catalog or runtime internals.
-- Gemma 4 MLX models are checked against their local `config.json` before load:
-  Gemma 4 12B `gemma4_unified` now shows **Runtime update needed** when the
-  installed MLX-VLM lacks `mlx_vlm.models.gemma4_unified`, while Gemma 4 26B
-  A4B stays on the working `gemma4` MLX-VLM path.
-- System exposes storage, backup health, archive, Brain Network, device
-  identity, and admin status through real APIs.
-- Backup, restore dry-run, archive verify, archive import dry-run, and
-  `.latticebrain` portability flows were exercised.
+## Living Brain Flow
 
-## Product Tour
+### 1. Login
 
-### Desktop Startup
+First launch opens to Login only. The local profile is the beginning of the
+Brain, not a dashboard, graph, or setup grid. The first screen frames Lattice as
+a durable knowledge home where models are replaceable and ownership stays with
+the user.
 
-The v4.6.0 DMG build launches a visible Tauri app, starts the FastAPI sidecar on
-localhost, and shuts that sidecar down on normal macOS quit.
+![Login](output/release/v4.7.0/screenshots/01-login.png)
 
-![Desktop startup and local sidecar](output/audits/v4.3.2-rc/screenshots/13-desktop-sidecar-startup.png)
+### 2. Environment Analysis
 
-Evidence:
+Lattice reads the machine locally and summarizes what kind of Brain this
+computer can support.
 
-- Health log: `output/audits/v4.3.2-rc/logs/desktop-sidecar-health-after-shutdown-fix.json`
-- Shutdown log: `output/audits/v4.3.2-rc/logs/desktop-shutdown-after-fix.txt`
+![Environment Analysis](output/release/v4.7.0/screenshots/02-environment-analysis.png)
 
-### Living Brain
+### 3. Recommended Models
 
-Brain opens on a living presence and conversation. The visual Brain is not a
-logo or static decoration: it changes state while the user types, when memories
-are recalled, while a response streams, and when agent/workflow activity is
-reported.
+The model step is a short recommendation list. It avoids catalog noise and keeps
+runtime/install details behind clear user consent.
 
-The advanced graph still exists, but it is intentionally opened from the Graph
-layer after the user moves through Brain, Memories, Knowledge, and
-Relationships.
+![Recommended Models](output/release/v4.7.0/screenshots/03-recommended-models.png)
 
-![Brain graph explorer](output/audits/v4.3.2-rc/screenshots/02-graph-explorer-before.png)
+### 4. Install And Load
 
-![Graph product walkthrough](output/audits/v4.3.2-rc/gifs/graph-product-walkthrough.gif)
+The install screen keeps consent visible and shows install, download, validate,
+and load progress. No model download or runtime install starts silently.
 
-### Conversation
+![Install and Load](output/release/v4.7.0/screenshots/04-install-load-progress.png)
 
-Conversation uses backend conversation, model, and memory APIs. If no model is
-loaded, the UI shows a ready/unavailable state instead of fabricating an answer
-while still keeping nearby memory and source signals visible.
+### 5. Brain Chat
 
-![Conversation with context and no-model honesty](output/audits/v4.3.2-rc/screenshots/14-ask-context.png)
+After setup, the home experience is the living Brain plus conversation. The Brain
+stays present while the user types, recalls context, and receives responses.
 
-### Capture
+![Brain Chat Home](output/release/v4.7.0/screenshots/05-brain-chat-home.png)
 
-Capture sends files through the backend upload/ingestion path and shows indexed
-documents returned by the backend. The screenshot below includes a note uploaded
-during release-prep evidence capture.
+## Brain Depths
 
-![Capture document ingestion](output/audits/v4.3.2-rc/screenshots/15-capture-ingestion.png)
+The user travels inward through the Brain. Each depth keeps conversation nearby
+while revealing more structure.
 
-Upload evidence: `output/audits/v4.3.2-rc/logs/readme-upload-note.json`
+| Depth | Experience | Evidence |
+| --- | --- | --- |
+| Level 1 | Living Brain presence | ![Living Brain Level 1](output/release/v4.7.0/screenshots/06-living-brain-level-1.png) |
+| Level 2 | Memory Layer | ![Memory Layer](output/release/v4.7.0/screenshots/07-memory-layer.png) |
+| Level 3 | Knowledge Layer | ![Knowledge Layer](output/release/v4.7.0/screenshots/08-knowledge-layer.png) |
+| Level 4 | Relationship Layer | ![Relationship Layer](output/release/v4.7.0/screenshots/09-relationship-layer.png) |
+| Level 5 | Knowledge Graph with nodes, edges, search, and focus detail | ![Knowledge Graph Layer](output/release/v4.7.0/screenshots/10-knowledge-graph-layer.png) |
 
-### Act
+Walkthrough:
 
-Act exposes agents, workflows, approvals, hooks, and runtime status through
-existing backend APIs. The audited workflow path created a real workflow record;
-agent runtime simulation remains honestly unavailable as product success when no
-LLM-backed model is loaded.
+![v4.7.0 Living Brain walkthrough](output/release/v4.7.0/gifs/v4.7.0-living-brain-walkthrough.gif)
 
-![Workflow create and run surfaces](output/audits/v4.3.2-rc/screenshots/09-workflow-create-run.png)
+Model setup status evidence:
 
-![Agent runtime status](output/audits/v4.3.2-rc/screenshots/10-agent-runtime-status.png)
+![Model setup status](output/release/v4.7.0/screenshots/11-model-setup-status.png)
 
-### Library
+Separate admin console evidence:
 
-Library shows models, skills, MCP, and marketplace/configuration state with
-availability reported from runtime APIs. Optional model runtimes are not treated
-as loaded unless the runtime is actually available. Model setup now follows the
-explicit Environment Analysis -> Recommended Models -> Install -> Download
-Progress -> Validate -> Load -> Ready path, with download/install consent kept
-visible.
+![Admin Console](output/release/v4.7.0/screenshots/12-admin-console.png)
 
-![Library model status](output/audits/v4.3.2-rc/screenshots/12-library-model-status.png)
+Screenshot index and capture notes:
+[output/release/v4.7.0/SCREENSHOT_INDEX.md](output/release/v4.7.0/SCREENSHOT_INDEX.md)
 
-### System
-
-System exposes account/workspace status, storage mode, backup health, archive
-operations, device identity, Brain Network, and admin hardening state. External
-integrations remain opt-in.
-
-![System storage status](output/audits/v4.3.2-rc/screenshots/08-system-storage-status.png)
-
-![Brain Network and device identity](output/audits/v4.3.2-rc/screenshots/11-brain-network-device-identity.png)
-
-### Backup / Restore
-
-Backup and restore flows are backed by the knowledge-graph portability APIs.
-The retained v4.3.2 product audit exercised backup health, backup creation, restore dry-run, and
-archive restore surfaces.
-
-![Brain backup and portability controls](output/audits/v4.3.2-rc/screenshots/06-brain-portability-backup.png)
+## Architecture At A Glance
 
-### `.latticebrain` Portability
+- **Desktop shell**: Tauri 2 is the release desktop shell and starts the
+  localhost sidecar.
+- **Frontend**: React, TypeScript, Vite, TanStack Query, Zustand, Cytoscape.js,
+  React Flow, Tailwind/shadcn-style primitives, and generated OpenAPI types.
+- **Backend**: FastAPI on localhost is the UI source of truth.
+- **Brain Core**: independent `lattice_brain` package for graph, memory,
+  context, conversations, ingestion, runtime, workflow, storage, and
+  portability. Isolation tests prevent `lattice_brain` from importing
+  `latticeai`.
+- **Storage**: `StorageEngine` abstraction with SQLite default and optional
+  PostgreSQL/pgvector scale mode.
+- **Portability**: encrypted `.latticebrain` archives plus backup, restore,
+  inspect, verify, import dry-run, and confirmed restore/import flows. The
+  Brain home keeps conversation first and surfaces the everyday "Care for my
+  Brain" ownership path as a collapsed control with export, backup, archive,
+  inspect, and restore preview actions while keeping destructive confirmed
+  restore in Settings. Restore operations create pre-restore backups and roll
+  back failed DB/blob swaps so the current Brain is not left half-restored.
+- **Privacy**: local-first and private-first by default. Cloud models, Telegram,
+  Brain Network, Docker/Postgres setup, model downloads, and update checks are
+  opt-in paths.
+- **Admin separation**: user chat and Brain ownership stay in the main Brain
+  surface; user directory, audit logs, security events, policies, and index
+  rebuild controls live under the separate `#/admin` console. Admin history,
+  audit, stats, and sensitivity reads honor the active workspace when present.
+
+See [ARCHITECTURE.md](ARCHITECTURE.md) for the detailed v4.7.0 architecture.
+
+## Installation
+
+Run from Python:
 
-The portable brain format is an encrypted `.latticebrain` archive. The audited
-System flow exercised archive export, inspect, verify, import dry-run, and
-restore dry-run/restore controls through FastAPI.
+```bash
+pip install ltcai
+LTCAI
+```
 
-![System archive flows](output/audits/v4.3.2-rc/screenshots/07-system-archive-flows.png)
+Run from npm:
 
-Archive evidence:
+```bash
+npm install -g ltcai
+ltcai
+```
 
-- Create: `output/audits/v4.3.2-rc/logs/archive-create.json`
-- Verify: `output/audits/v4.3.2-rc/logs/archive-verify.json`
-- Import dry-run: `output/audits/v4.3.2-rc/logs/archive-import-dry-run.json`
+Open the local app:
 
-## Architecture At A Glance
+```text
+http://127.0.0.1:4825/app
+```
 
-- **Desktop shell**: Tauri 2 primary shell; Electron remains fallback-only.
-- **Frontend**: React, TypeScript, Vite, TanStack Query, Zustand, Cytoscape.js,
-  React Flow, Tailwind/shadcn-style primitives, generated OpenAPI client.
-- **Backend**: FastAPI on localhost is the source of truth for the UI.
-- **Brain Core**: independent Python package `lattice_brain` (graph, memory,
-  context, conversations, ingestion, agent/hook runtime, workflow,
-  portability, storage) physically hosted in the package, imported by FastAPI,
-  CLI, tests, and future tools, and guaranteed by tests to never import
-  `latticeai`.
-- **Storage**: `StorageEngine` abstraction with SQLite default and optional
-  PostgreSQL/pgvector scale mode.
-- **Portability**: encrypted `.latticebrain` archive plus backup/restore and
-  migration tooling.
-- **Privacy**: local-first by default; cloud models, Telegram, Brain Network,
-  Docker, model downloads, and update checks require explicit opt-in paths.
+Apple Silicon local model extras:
 
-See [ARCHITECTURE.md](ARCHITECTURE.md) for the detailed v4 architecture. v4.6.0
-does not redesign the v4.4.0 Brain Core extraction, StorageEngine, FastAPI,
-Tauri, backup/restore, or portability architecture.
+```bash
+pip install "ltcai[local]"
+```
 
-## Installation And Release Artifacts
+## Release Artifacts
 
-Validated v4.6.0 artifacts are produced from the Living Brain tree:
+Validated v4.7.0 artifacts:
 
-- `dist/ltcai-4.6.0-py3-none-any.whl`
-- `dist/ltcai-4.6.0.tar.gz`
-- `ltcai-4.6.0.tgz`
-- `dist/ltcai-4.6.0.vsix`
-- `src-tauri/target/release/bundle/dmg/Lattice AI_4.6.0_aarch64.dmg`
+- `dist/ltcai-4.7.0-py3-none-any.whl`
+- `dist/ltcai-4.7.0.tar.gz`
+- `ltcai-4.7.0.tgz`
+- `dist/ltcai-4.7.0.vsix`
+- `src-tauri/target/release/bundle/dmg/Lattice AI_4.7.0_aarch64.dmg`
 
-For a public release, attach only those exact artifacts to the GitHub Release.
-Package-registry publishing is reserved for the owner.
+Attach only those exact files to the GitHub Release. Do not upload `dist/*`.
 
 ## Local Development
 
@@ -196,20 +168,14 @@ npm install
 npm run dev
 ```
 
-Open the local app:
-
-```text
-http://127.0.0.1:4825/app
-```
-
-Build the release artifacts:
+Build and validate release artifacts:
 
 ```bash
 npm run release:artifacts
 npm run release:validate
 ```
 
-Run the main validation set:
+Main validation set:
 
 ```bash
 npm run check:python
@@ -217,80 +183,65 @@ node scripts/run_python.mjs -m ruff check .
 npm run lint
 npm run typecheck
 npm run test:unit
-LTCAI_TEST_BASE_URL=http://127.0.0.1:4932 npm run test:integration
+npm run test:integration
 npm run test:visual
 npm run desktop:tauri:check
-node scripts/run_python.mjs scripts/wheel_smoke.py --wheel dist/ltcai-X.Y.Z-py3-none-any.whl
+node scripts/run_python.mjs scripts/wheel_smoke.py --wheel dist/ltcai-4.7.0-py3-none-any.whl
 npm pack --dry-run
+npm run docs:check-links
 ```
 
 ## Known Limitations
 
 - External package registries are owner-published and can lag behind the GitHub
   Release.
-- PostgreSQL/pgvector is optional scale mode and is not required for default
-  local use.
-- Docker is never auto-started by default.
-- Model downloads and cloud model calls require explicit user action/consent.
+- PostgreSQL/pgvector is optional scale mode. SQLite is the default local brain.
+- Docker, model downloads, cloud model calls, Telegram, Brain Network, and
+  update checks require explicit user action.
 - Conversation does not fabricate answers when no model is loaded.
-- Historical artifacts may remain in `dist/`; release uploads must use exact
-  v4.6.0 filenames for this release.
+- Agent/workflow simulation without a loaded LLM is deterministic and does not call a model.
+  It is labeled as LLM-free/model-free rather than presented as autonomous model
+  success.
+- Historical artifacts can remain in `dist/`; uploads must use exact v4.7.0
+  filenames.
 
 ## Release History
 
 | Version | Theme |
 | --- | --- |
+| 4.7.0 | Admin Separation Release: keeps the user Brain simple, adds a separate Admin Console for users/logs/security/Brain operations, refreshes screenshots/GIFs, synchronizes release docs, and builds exact v4.7.0 artifacts |
+| 4.6.1 | Living Brain Release Refresh: publishable version bump after v4.6.0 PyPI immutability, refreshed README/screenshots/GIFs, synchronized release docs, and exact v4.6.1 artifacts |
 | 4.6.0 | Living Brain Experience: made Brain plus conversation the home product, added an animated living Brain presence, and moved graph exploration to the deepest intentional layer |
 | 4.5.1 | Product Reimagining RC: replaced the desktop shell, navigation model, onboarding journey, first-viewport hierarchy, and visual system while preserving capabilities and local-first architecture |
 | 4.5.0 | Product Experience Recovery RC: restored first-run setup, workspace/model onboarding, explicit model install/download/validate/load flow, Gemma 4 runtime compatibility gating, Basic-mode polish, and graph discoverability |
-| 4.4.0 | Brain Engine Extraction: Brain Core physically moved into `lattice_brain` (graph/memory/context/conversation/ingestion/runtime/workflow/portability), latticeai paths reduced to compatibility shims, isolation tests guaranteeing no `latticeai` imports |
-| 4.3.3 | Dead-Code Cleanup Release: post-audit cleanup, architecture documentation correction, Vercel/static-docs readiness, README badge restoration, exact-current artifacts |
-| 4.3.2 | Product Polish & Graph UX Overhaul RC: evidence-based README, graph UX, structured product state, archive UX, desktop sidecar cleanup, publishing readiness |
-| 4.3.1 | End-User Audit Repair RC: desktop sidecar startup, npm clean install, default-off downloads, honest agent/workflow states |
-| 4.3.0 | Portability & Product Hardening RC: encrypted `.latticebrain` archives, backup/restore hardening, local-only startup guards |
-| 4.2.0 | Brain Core & Storage Rebuild: independent `lattice_brain`, StorageEngine abstraction, SQLite default, opt-in Postgres/pgvector |
-| 4.1.0 | Frontend & Desktop Rebuild: React/Vite SPA, Tauri shell, generated OpenAPI client |
-| 4.0.1 | Digital Brain maintenance: durable async runs, identity/workspace state, `/app` parity |
+| 4.4.0 | Brain Engine Extraction: Brain Core physically moved into `lattice_brain` with isolation tests |
+| 4.3.3 | Dead-Code Cleanup Release |
+| 4.3.2 | Product Polish & Graph UX Overhaul RC |
+| 4.3.1 | End-User Audit Repair RC |
+| 4.3.0 | Portability & Product Hardening RC |
+| 4.2.0 | Brain Core & Storage Rebuild |
+| 4.1.0 | Frontend & Desktop Rebuild |
+| 4.0.1 | Digital Brain maintenance |
 | 4.0.0 | Digital Brain Platform foundation |
 | 3.0.0 | v3 local-first AI workspace platform |
 
 ## Current Documentation
 
-- [ARCHITECTURE.md](ARCHITECTURE.md) - v4 architecture.
+- [ARCHITECTURE.md](ARCHITECTURE.md) - v4.7.0 architecture.
+- [docs/PRODUCT_DIRECTION_REVIEW.md](docs/PRODUCT_DIRECTION_REVIEW.md) -
+  Brain-first product direction review.
 - [FEATURE_STATUS.md](FEATURE_STATUS.md) - current feature status and historical
   status ledger.
-- [RELEASE_NOTES.md](RELEASE_NOTES.md) - current release notes index.
-- [RELEASE_NOTES_v4.6.0.md](RELEASE_NOTES_v4.6.0.md) - v4.6.0 Living Brain release notes.
-- [RELEASE_NOTES_v4.5.1.md](RELEASE_NOTES_v4.5.1.md) - v4.5.1 RC release notes.
-- [RELEASE_NOTES_v4.5.0.md](RELEASE_NOTES_v4.5.0.md) - v4.5.0 RC release notes.
-- [RELEASE_NOTES_v4.4.0.md](RELEASE_NOTES_v4.4.0.md) - v4.4.0 release notes.
-- [RELEASE_NOTES_v4.3.3.md](RELEASE_NOTES_v4.3.3.md) - v4.3.3 release notes.
+- [RELEASE_NOTES.md](RELEASE_NOTES.md) - release notes index.
+- [RELEASE_NOTES_v4.7.0.md](RELEASE_NOTES_v4.7.0.md) - v4.7.0 admin separation release notes.
+- [RELEASE_NOTES_v4.6.1.md](RELEASE_NOTES_v4.6.1.md) - v4.6.1 release refresh history.
+- [RELEASE_NOTES_v4.6.0.md](RELEASE_NOTES_v4.6.0.md) - v4.6.0 Living Brain history.
 - [RELEASE.md](RELEASE.md) - release checklist and exact artifact guidance.
 - [SECURITY.md](SECURITY.md) - security posture.
 - [docs/CHANGELOG.md](docs/CHANGELOG.md) - changelog.
-- [docs/V4_3_2_DEADCODE_AUDIT_REPORT.md](docs/V4_3_2_DEADCODE_AUDIT_REPORT.md) - v4.3.3 cleanup basis.
-- [docs/V4_3_3_VALIDATION_REPORT.md](docs/V4_3_3_VALIDATION_REPORT.md) - v4.3.3 validation report.
-- [docs/V4_5_0_PRODUCT_EXPERIENCE_RECOVERY_REPORT.md](docs/V4_5_0_PRODUCT_EXPERIENCE_RECOVERY_REPORT.md) - v4.5.0 product recovery report.
-- [docs/V4_5_0_VALIDATION_REPORT.md](docs/V4_5_0_VALIDATION_REPORT.md) - v4.5.0 validation report.
-- [docs/V4_5_1_PRODUCT_REIMAGINING_REPORT.md](docs/V4_5_1_PRODUCT_REIMAGINING_REPORT.md) - v4.5.1 product reimagining report.
-- [docs/V4_5_1_UX_REPORT.md](docs/V4_5_1_UX_REPORT.md) - v4.5.1 UX report.
-- [docs/V4_5_1_VISUAL_DESIGN_REPORT.md](docs/V4_5_1_VISUAL_DESIGN_REPORT.md) - v4.5.1 visual design report.
-- [docs/V4_5_1_NAVIGATION_REPORT.md](docs/V4_5_1_NAVIGATION_REPORT.md) - v4.5.1 navigation report.
-- [docs/V4_5_1_ONBOARDING_REPORT.md](docs/V4_5_1_ONBOARDING_REPORT.md) - v4.5.1 onboarding report.
-- [docs/V4_5_1_MODEL_EXPERIENCE_REPORT.md](docs/V4_5_1_MODEL_EXPERIENCE_REPORT.md) - v4.5.1 model experience report.
-- [docs/V4_5_1_GRAPH_EXPERIENCE_REPORT.md](docs/V4_5_1_GRAPH_EXPERIENCE_REPORT.md) - v4.5.1 graph experience report.
-- [docs/V4_5_1_VALIDATION_REPORT.md](docs/V4_5_1_VALIDATION_REPORT.md) - v4.5.1 validation report.
-- [docs/V4_5_1_RC_ARTIFACTS.md](docs/V4_5_1_RC_ARTIFACTS.md) - v4.5.1 screenshot, GIF, and RC artifact manifest.
-- [docs/V4_6_0_LIVING_BRAIN_EXPERIENCE_REPORT.md](docs/V4_6_0_LIVING_BRAIN_EXPERIENCE_REPORT.md) - v4.6.0 Living Brain design and validation notes.
-- [docs/V4_3_2_GRAPH_UX_REPORT.md](docs/V4_3_2_GRAPH_UX_REPORT.md) - graph UX report.
-- [docs/V4_3_2_PRODUCT_POLISH_REPORT.md](docs/V4_3_2_PRODUCT_POLISH_REPORT.md) - product polish report.
-- [docs/V4_3_2_SELF_AUDIT_REPORT.md](docs/V4_3_2_SELF_AUDIT_REPORT.md) - self-audit evidence.
-- [docs/V4_3_2_VALIDATION_REPORT.md](docs/V4_3_2_VALIDATION_REPORT.md) - RC validation report.
-- [docs/V4_3_2_DOCUMENTATION_CLEANUP_REPORT.md](docs/V4_3_2_DOCUMENTATION_CLEANUP_REPORT.md) - release-prep documentation cleanup report.
-- [docs/V4_3_2_GITHUB_VERCEL_CHECK_REPORT.md](docs/V4_3_2_GITHUB_VERCEL_CHECK_REPORT.md) - GitHub/Vercel readiness report.
-- [docs/V4_3_2_INDEPENDENT_AUDIT_PACKAGE.md](docs/V4_3_2_INDEPENDENT_AUDIT_PACKAGE.md) - package for an independent reviewer.
-- [docs/V4_3_2_DEADCODE_AUDIT_REPORT.md](docs/V4_3_2_DEADCODE_AUDIT_REPORT.md) - independent dead-code, architecture, and runtime audit.
-- [docs/V4_DIGITAL_BRAIN_RECOVERY.md](docs/V4_DIGITAL_BRAIN_RECOVERY.md) - transformation recovery file.
+- [docs/V4_7_0_ADMIN_SEPARATION_REPORT.md](docs/V4_7_0_ADMIN_SEPARATION_REPORT.md) - v4.7.0 admin separation report.
+- [docs/V4_6_1_RELEASE_REFRESH_REPORT.md](docs/V4_6_1_RELEASE_REFRESH_REPORT.md) - v4.6.1 release refresh report.
+- [docs/V4_6_0_LIVING_BRAIN_EXPERIENCE_REPORT.md](docs/V4_6_0_LIVING_BRAIN_EXPERIENCE_REPORT.md) - v4.6.0 Living Brain design notes.
 
 ## License
 

package/docs/CHANGELOG.md

@@ -3,9 +3,147 @@
 The top entry is the current release-preparation target. Older entries are
 historical and may describe behavior as it existed at that release.
 
+## [4.7.0] - 2026-06-14
+
+> Admin Separation Release. v4.7.0 keeps the Living Brain as the simple user
+> surface and moves users, logs, security events, policies, and Brain operations
+> into a dedicated Admin Console with synchronized release metadata and
+> publishable artifacts.
+
+### Changed
+
+- Added a separate `#/admin` Admin Console so the normal `/app` user experience
+  remains Brain + conversation instead of becoming an admin dashboard.
+- Added admin overview metrics, user directory, audit log rows, security event
+  rows, policy chips, and Brain index rebuild controls to the admin-only
+  surface.
+- Scoped admin history, audit, stats, and sensitivity endpoints by
+  `X-Workspace-Id` / `workspace_id` when a workspace is selected, while keeping
+  legacy global records visible in Personal workspace compatibility mode.
+- Added frontend API helpers for `/admin/stats` and `/admin/security/events`,
+  reusing the existing FastAPI admin/security backend rather than inventing a
+  parallel logging store.
+- Updated visual validation so the Admin Console route is checked separately
+  from the user Brain surface.
+- Bumped synchronized package/runtime/static versions to `4.7.0`, including
+  Python metadata, npm package metadata, VSIX metadata, Tauri metadata,
+  `latticeai`, `lattice_brain`, runtime constants, and static asset metadata.
+- Refreshed release screenshots/GIF paths and docs for v4.7.0, including Admin
+  Console evidence.
+- Updated README, RELEASE.md, ARCHITECTURE.md, SECURITY.md, FEATURE_STATUS.md,
+  VS Code extension docs, release notes, and release report for the current
+  v4.7.0 release line.
+
+### Preserved
+
+- v4.6.1 and older sections remain historical.
+- Local-first ownership, `.latticebrain` portability, rollback-safe restore,
+  and the deepest-layer Knowledge Graph behavior are preserved.
+
+### Artifacts
+
+- `dist/ltcai-4.7.0-py3-none-any.whl`
+- `dist/ltcai-4.7.0.tar.gz`
+- `dist/ltcai-4.7.0.vsix`
+- `ltcai-4.7.0.tgz`
+- `src-tauri/target/release/bundle/dmg/Lattice AI_4.7.0_aarch64.dmg`
+
+## [4.6.1] - 2026-06-14
+
+> Living Brain release refresh and publishable version bump after the v4.6.0
+> PyPI immutability block. v4.6.1 keeps the Living Brain implementation and
+> synchronizes release metadata, README evidence, architecture docs, artifacts,
+> and owner publishing commands to exact `4.6.1` filenames.
+
+### Changed
+
+- Added a Brain-first product direction review and synchronized philosophy /
+  Knowledge Graph docs so the graph is documented as infrastructure inside the
+  Brain rather than the product center.
+- Added a compact "Care for my Brain" ownership panel to the Brain home
+  experience, surfacing local-first/private/portable guarantees plus existing
+  export, backup, encrypted archive, inspect, and restore dry-run actions
+  without making the Knowledge Graph the product center.
+- Refined the Brain home so conversation remains the primary surface and the
+  "Care for my Brain" ownership controls open only when requested, with action
+  results now reflecting the last completed ownership action.
+- Strengthened first-run and empty-Brain product messaging around the core
+  promise that models are replaceable while the user's knowledge, decisions,
+  projects, and context are durable.
+- Hardened Knowledge Graph backup restore and encrypted `.latticebrain` restore
+  so DB/blob replacement is staged with pre-restore backups and rollback on
+  partial failure.
+- Bumped synchronized package/runtime/static versions to `4.6.1`, including
+  Python metadata, npm package metadata, VSIX metadata, Tauri metadata,
+  `latticeai`, `lattice_brain`, runtime constants, and static asset metadata.
+- Refreshed README around the current Living Brain flow: Login -> Environment
+  Analysis -> Recommended Models -> Install & Load -> Brain Chat.
+- Replaced stale README screenshot/GIF references with fresh v4.6.1 release
+  evidence for Login, setup, Brain Chat, Living Brain, Memory Layer, Knowledge
+  Layer, Relationship Layer, and Knowledge Graph.
+- Updated `ARCHITECTURE.md` for the current Tauri shell, React/Vite frontend,
+  FastAPI localhost API, independent `lattice_brain` Brain Core, StorageEngine,
+  SQLite default, PostgreSQL/pgvector opt-in, backup/restore, and
+  `.latticebrain` portability architecture.
+- Added `RELEASE_NOTES_v4.6.1.md` and the v4.6.1 release refresh report.
+
+### Preserved
+
+- v4.6.0 and older sections remain historical. They were not rewritten as
+  v4.6.1 claims.
+- No backend architecture redesign, package publishing, service deployment, or
+  registry upload is part of this refresh.
+
+### Artifacts
+
+- `dist/ltcai-4.6.1-py3-none-any.whl`
+- `dist/ltcai-4.6.1.tar.gz`
+- `dist/ltcai-4.6.1.vsix`
+- `ltcai-4.6.1.tgz`
+- `src-tauri/target/release/bundle/dmg/Lattice AI_4.6.1_aarch64.dmg`
+
+## [4.6.x Brain Exploration Update] - 2026-06-14
+
+> The Brain is now the true interactive entry point to the user's knowledge.
+> Clicking the living Brain progressively reveals deeper layers of the mind:
+> Level 1 living presence -> memories -> concepts -> relationships -> the
+> emergent full Knowledge Graph. The graph never appears abruptly; it grows out
+> of the Brain as the user travels inward.
+
+### Changed
+- Rebuilt `LivingBrain` as a recognizable anatomical Brain with animated
+  hemispheres, folds, memory ripples, thought particles, and state-specific
+  responses for listening, recalling, thinking, planning, and acting.
+- BrainHome now manages five progressive depths. Level 1 shows only the living
+  Brain; Level 2 reveals memory fragments; Level 3 reveals concepts; Level 4
+  reveals relationship threads; Level 5 reveals the searchable Knowledge Graph.
+- Layered emergence uses the existing memory and graph APIs but presents them
+  as unfolding layers inside one central Brain experience rather than separate
+  pages, tabs, or a bottom depth bar.
+- Level 5 now includes graph nodes, edges, search filtering, and focus details
+  in an emergent graph panel.
+- Conversation remains available at every depth; the Brain presence changes
+  intensity as the user travels inward or streams a response.
+- Updated visual validation to assert the new depth contract, graph emergence,
+  graph search, chat streaming, mobile overflow, and legacy entry compatibility.
+
+The user should feel they are moving inward through their own mind, with the graph as the deepest, most structured layer that grew from the living presence.
+
+### Changed (Frontend — full replacement of the previous prototype)
+- The entire post-onboarding surface is now a single immersive "Brain Space". The Brain presence is large, always visible, and the primary emotional and visual object.
+- Conversation is the central, intimate way you live with the Brain. No traditional app chrome, dock, or page shell in the primary experience.
+- LivingBrain component completely rewritten as a reactive, layered, breathing organism with memory ripples, thought particles, state-driven animation, and click-to-respond behavior.
+- Progressive discovery enforced in the UI: from the Brain you gently descend into Memory, Knowledge, Connections, and The Map (the graph). The graph is never the landing experience.
+- Onboarding (ProductFlow) reframed as a quiet, ceremonial awakening ritual with the Brain presence participating at every step.
+- New warm, private, organic visual language (deep ember-gold presence, soft teal memory pulses, generous space, contemplative typography). Old dashboard aesthetics and navigation chrome suppressed on the primary path.
+- Depth chambers are full-bleed, slow, human rooms — not feature pages. A small living trace of the Brain stays visible for continuity.
+- All backend functionality (chat streaming, memory, hybrid search, graph, model prepare/load, portability, agents, etc.) is preserved and reachable. The old navigation remains for deep-link compatibility but is not the product surface.
+
+The technology was already a Digital Brain. This release makes the *experience* one.
+
 ## [4.6.0] - 2026-06-13
 
-> Living Brain Experience release after the v4.5.1 product shell reset.
+> Living Brain Experience release after the v4.5.1 product shell reset. (Previous iteration — this RC supersedes the visual and structural approach while keeping the capability foundation.)
 
 ### Changed