ltcai 4.7.2 → 5.1.0

package/README.md

@@ -7,25 +7,33 @@
 [![CI Status](https://github.com/TaeSooPark-PTS/LatticeAI/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/TaeSooPark-PTS/LatticeAI/actions/workflows/ci.yml)
 [![License](https://img.shields.io/badge/license-MIT-green)](LICENSE)
 
-**Lattice AI v4.7.2 is the local-first Living Brain intuitive UX release.**
-It keeps the v4 Brain Core, StorageEngine, FastAPI localhost API, Tauri shell,
-backup, restore, model runtime, graph, and portability architecture intact while
-making the normal user surface easier for non-technical users: safer login,
-clearer model setup, one-click Memory/Topic/Relationship/Graph views, and
-visible feedback when conversation becomes Brain memory. Admin logs, role
-permissions, security events, retention posture, and Brain operations remain in
-the separate Admin Console.
-
-The product opens by stating the core reason to exist: models will change, but
-the user's knowledge should not. It creates a private local profile, studies the
-computer, recommends a replaceable model voice, asks before install/download/load
-work, then lands in Brain Chat with starter prompts for durable decisions,
-projects, documents, and context. The Brain home now gives direct buttons for
-memory, topics, relationships, and the full graph, so the graph is still real
-and searchable without becoming the first screen or a separate dashboard.
+**Your private AI memory layer. Keep your knowledge. Switch any model.**
+
+**모델은 바꿔도, 내 지식은 남는 로컬 AI 브레인.**
+
+Lattice AI is a local-first Digital Brain for your conversations, documents,
+decisions, project history, relationships, and workflows. It is not a ChatGPT
+clone, a model launcher, a graph database, or a note app. The model is the voice
+you use today. The Brain is the durable asset you keep.
+
+Use Lattice AI when you want to:
+
+- remember project decisions across weeks or months and see the source later;
+- preserve context when switching between local, cloud, or future models;
+- connect documents, conversations, files, notes, and decisions into one Brain;
+- export, backup, inspect, verify, and move the Brain as an encrypted
+  `.latticebrain` archive;
+- avoid cloud lock-in and keep knowledge local by default;
+- get an honest unavailable state instead of a fake answer when no model or
+  evidence is available.
+
+By default, Lattice binds to localhost, stores the Brain on your machine, keeps
+model downloads and cloud calls behind explicit consent, and separates normal
+Brain use from the Admin Console. Korean and English UI copy share the same
+underlying Brain, so language preference changes the interface, not your data.
 
 External package registries are owner-published and can lag behind this GitHub
-Release. Release uploads must use the exact v4.7.2 artifact filenames below.
+Release. Release uploads must use the exact v5.1.0 artifact filenames below.
 
 ## Living Brain Flow
 
@@ -34,17 +42,17 @@ Release. Release uploads must use the exact v4.7.2 artifact filenames below.
 First launch opens to Login only. The local profile is the beginning of the
 Brain, not a dashboard, graph, or setup grid. The first screen frames Lattice as
 a durable knowledge home where models are replaceable and ownership stays with
-the user. v4.7.2 also prevents an email typo or wrong saved-user password from
+the user. v5.1.0 also prevents an email typo or wrong saved-user password from
 silently creating a new empty Brain.
 
-![Login](output/release/v4.7.2/screenshots/01-login.png)
+![Login](output/release/v5.1.0/screenshots/01-login.png)
 
 ### 2. Environment Analysis
 
 Lattice reads the machine locally and summarizes what kind of Brain this
 computer can support.
 
-![Environment Analysis](output/release/v4.7.2/screenshots/02-environment-analysis.png)
+![Environment Analysis](output/release/v5.1.0/screenshots/02-environment-analysis.png)
 
 ### 3. Recommended Models
 
@@ -52,7 +60,7 @@ The model step is a short recommendation list. It avoids catalog noise and keeps
 runtime/install details behind clear user consent. Users who do not know which
 model to choose can start with the recommended model in one click.
 
-![Recommended Models](output/release/v4.7.2/screenshots/03-recommended-models.png)
+![Recommended Models](output/release/v5.1.0/screenshots/03-recommended-models.png)
 
 ### 4. Install And Load
 
@@ -61,7 +69,7 @@ and load progress. No model download or runtime install starts silently, and the
 screen explains that large downloads may take minutes without inventing fake ETA
 data.
 
-![Install and Load](output/release/v4.7.2/screenshots/04-install-load-progress.png)
+![Install and Load](output/release/v5.1.0/screenshots/04-install-load-progress.png)
 
 ### 5. Brain Chat
 
@@ -70,7 +78,7 @@ stays present while the user types, recalls context, and receives responses. The
 home now includes a compact Brain overview for recent memories, older memories,
 and major topics, plus saved-to-memory feedback after chat.
 
-![Brain Chat Home](output/release/v4.7.2/screenshots/05-brain-chat-home.png)
+![Brain Chat Home](output/release/v5.1.0/screenshots/05-brain-chat-home.png)
 
 ## Brain Depths
 
@@ -79,26 +87,26 @@ while revealing more structure.
 
 | Depth | Experience | Evidence |
 | --- | --- | --- |
-| Level 1 | Living Brain presence | ![Living Brain Level 1](output/release/v4.7.2/screenshots/06-living-brain-level-1.png) |
-| Level 2 | Memory Layer | ![Memory Layer](output/release/v4.7.2/screenshots/07-memory-layer.png) |
-| Level 3 | Knowledge Layer | ![Knowledge Layer](output/release/v4.7.2/screenshots/08-knowledge-layer.png) |
-| Level 4 | Relationship Layer | ![Relationship Layer](output/release/v4.7.2/screenshots/09-relationship-layer.png) |
-| Level 5 | Knowledge Graph with nodes, edges, search, and focus detail | ![Knowledge Graph Layer](output/release/v4.7.2/screenshots/10-knowledge-graph-layer.png) |
+| Level 1 | Living Brain presence | ![Living Brain Level 1](output/release/v5.1.0/screenshots/06-living-brain-level-1.png) |
+| Level 2 | Memory Layer | ![Memory Layer](output/release/v5.1.0/screenshots/07-memory-layer.png) |
+| Level 3 | Knowledge Layer | ![Knowledge Layer](output/release/v5.1.0/screenshots/08-knowledge-layer.png) |
+| Level 4 | Relationship Layer | ![Relationship Layer](output/release/v5.1.0/screenshots/09-relationship-layer.png) |
+| Level 5 | Knowledge Graph with nodes, edges, search, and focus detail | ![Knowledge Graph Layer](output/release/v5.1.0/screenshots/10-knowledge-graph-layer.png) |
 
 Walkthrough:
 
-![v4.7.2 Living Brain walkthrough](output/release/v4.7.2/gifs/v4.7.2-living-brain-walkthrough.gif)
+![v5.1.0 Living Brain walkthrough](output/release/v5.1.0/gifs/v5.1.0-living-brain-walkthrough.gif)
 
 Model setup status evidence:
 
-![Model setup status](output/release/v4.7.2/screenshots/11-model-setup-status.png)
+![Model setup status](output/release/v5.1.0/screenshots/11-model-setup-status.png)
 
 Separate admin console evidence:
 
-![Admin Console](output/release/v4.7.2/screenshots/12-admin-console.png)
+![Admin Console](output/release/v5.1.0/screenshots/12-admin-console.png)
 
 Screenshot index and capture notes:
-[output/release/v4.7.2/SCREENSHOT_INDEX.md](output/release/v4.7.2/SCREENSHOT_INDEX.md)
+[output/release/v5.1.0/SCREENSHOT_INDEX.md](output/release/v5.1.0/SCREENSHOT_INDEX.md)
 
 ## Architecture At A Glance
 
@@ -128,7 +136,7 @@ Screenshot index and capture notes:
   rebuild controls live under the separate `#/admin` console. Admin history,
   audit, stats, and sensitivity reads honor the active workspace when present.
 
-See [ARCHITECTURE.md](ARCHITECTURE.md) for the detailed v4.7.2 architecture.
+See [ARCHITECTURE.md](ARCHITECTURE.md) for the detailed v5.1.0 architecture.
 
 ## Installation
 
@@ -160,13 +168,13 @@ pip install "ltcai[local]"
 
 ## Release Artifacts
 
-Validated v4.7.2 artifacts:
+Validated v5.1.0 artifacts:
 
-- `dist/ltcai-4.7.2-py3-none-any.whl`
-- `dist/ltcai-4.7.2.tar.gz`
-- `ltcai-4.7.2.tgz`
-- `dist/ltcai-4.7.2.vsix`
-- `src-tauri/target/release/bundle/dmg/Lattice AI_4.7.2_aarch64.dmg`
+- `dist/ltcai-5.1.0-py3-none-any.whl`
+- `dist/ltcai-5.1.0.tar.gz`
+- `ltcai-5.1.0.tgz`
+- `dist/ltcai-5.1.0.vsix`
+- `src-tauri/target/release/bundle/dmg/Lattice AI_5.1.0_aarch64.dmg`
 
 Attach only those exact files to the GitHub Release. Do not upload `dist/*`.
 
@@ -195,7 +203,7 @@ npm run test:unit
 npm run test:integration
 npm run test:visual
 npm run desktop:tauri:check
-node scripts/run_python.mjs scripts/wheel_smoke.py --wheel dist/ltcai-4.7.2-py3-none-any.whl
+node scripts/run_python.mjs scripts/wheel_smoke.py --wheel dist/ltcai-5.1.0-py3-none-any.whl
 npm pack --dry-run
 npm run docs:check-links
 ```
@@ -211,14 +219,16 @@ npm run docs:check-links
 - Agent/workflow simulation without a loaded LLM is deterministic and does not call a model.
   It is labeled as LLM-free/model-free rather than presented as autonomous model
   success.
-- Historical artifacts can remain in `dist/`; uploads must use exact v4.7.2
+- Historical artifacts can remain in `dist/`; uploads must use exact v5.1.0
   filenames.
 
 ## Release History
 
 | Version | Theme |
 | --- | --- |
-| 4.7.2 | Intuitive Brain UX Release: adds role permissions, audit search/severity filters, log retention status, and separated Admin Console data loading while keeping the user Brain simple |
+| 5.1.0 | Product Trust & Clarity Release: clarifies the private AI memory-layer promise, hardens CSP/secret/auto-read/download gates, adds trust/privacy docs, and refreshes v5.1.0 evidence |
+| 5.0.0 | Multilingual Brain Foundation Release: adds persisted Korean/English language choice across first-run onboarding, Brain home, graph exploration, and Admin Console while preserving the v4 runtime foundations |
+| 4.7.2 | Intuitive Brain UX Release: safer login, one-click recommended setup, direct Brain views, memory-save feedback, and exact v4.7.2 artifacts |
 | 4.7.0 | Admin Separation Release: added the separate Admin Console for users/logs/security/Brain operations, refreshed screenshots/GIFs, synchronized release docs, and built exact v4.7.0 artifacts |
 | 4.6.1 | Living Brain Release Refresh: publishable version bump after v4.6.0 PyPI immutability, refreshed README/screenshots/GIFs, synchronized release docs, and exact v4.6.1 artifacts |
 | 4.6.0 | Living Brain Experience: made Brain plus conversation the home product, added an animated living Brain presence, and moved graph exploration to the deepest intentional layer |
@@ -237,19 +247,23 @@ npm run docs:check-links
 
 ## Current Documentation
 
-- [ARCHITECTURE.md](ARCHITECTURE.md) - v4.7.2 architecture.
+- [ARCHITECTURE.md](ARCHITECTURE.md) - v5.1.0 architecture.
+- [docs/WHY_LATTICE.md](docs/WHY_LATTICE.md) - why Lattice AI exists.
+- [docs/TRUST_MODEL.md](docs/TRUST_MODEL.md) - local-first trust model.
+- [PRIVACY.md](PRIVACY.md) - privacy and external communication policy.
 - [docs/PRODUCT_DIRECTION_REVIEW.md](docs/PRODUCT_DIRECTION_REVIEW.md) -
   Brain-first product direction review.
 - [FEATURE_STATUS.md](FEATURE_STATUS.md) - current feature status and historical
   status ledger.
 - [RELEASE_NOTES.md](RELEASE_NOTES.md) - release notes index.
-- [RELEASE_NOTES_v4.7.2.md](RELEASE_NOTES_v4.7.2.md) - v4.7.2 intuitive Brain UX release notes.
+- [RELEASE_NOTES_v5.1.0.md](RELEASE_NOTES_v5.1.0.md) - v5.1.0 Product Trust & Clarity release notes.
+- [RELEASE_NOTES_v5.0.0.md](RELEASE_NOTES_v5.0.0.md) - v5.0.0 multilingual foundation history.
 - [RELEASE_NOTES_v4.6.1.md](RELEASE_NOTES_v4.6.1.md) - v4.6.1 release refresh history.
 - [RELEASE_NOTES_v4.6.0.md](RELEASE_NOTES_v4.6.0.md) - v4.6.0 Living Brain history.
 - [RELEASE.md](RELEASE.md) - release checklist and exact artifact guidance.
 - [SECURITY.md](SECURITY.md) - security posture.
 - [docs/CHANGELOG.md](docs/CHANGELOG.md) - changelog.
-- [docs/V4_7_1_ADMIN_OPERATIONS_REPORT.md](docs/V4_7_1_ADMIN_OPERATIONS_REPORT.md) - v4.7.2 admin operations report.
+- [docs/V4_7_1_ADMIN_OPERATIONS_REPORT.md](docs/V4_7_1_ADMIN_OPERATIONS_REPORT.md) - v4.7.1 admin operations history.
 - [docs/V4_7_0_ADMIN_SEPARATION_REPORT.md](docs/V4_7_0_ADMIN_SEPARATION_REPORT.md) - v4.7.0 admin separation history.
 - [docs/V4_6_1_RELEASE_REFRESH_REPORT.md](docs/V4_6_1_RELEASE_REFRESH_REPORT.md) - v4.6.1 release refresh report.
 - [docs/V4_6_0_LIVING_BRAIN_EXPERIENCE_REPORT.md](docs/V4_6_0_LIVING_BRAIN_EXPERIENCE_REPORT.md) - v4.6.0 Living Brain design notes.

package/docs/CHANGELOG.md

@@ -3,6 +3,106 @@
 The top entry is the current release-preparation target. Older entries are
 historical and may describe behavior as it existed at that release.
 
+## [5.1.0] - 2026-06-14
+
+> Product Trust & Clarity Release. v5.1.0 clarifies Lattice AI as a
+> local-first private AI memory layer / Digital Brain, then adds security,
+> privacy, honesty, and architecture gates so the product does not overclaim.
+
+### Changed
+
+- Rewrote the README first screen around the positioning lines
+  `Your private AI memory layer. Keep your knowledge. Switch any model.` and
+  `모델은 바꿔도, 내 지식은 남는 로컬 AI 브레인.`
+- Added practical use cases for preserving project decisions, switching models,
+  connecting documents/conversations/files/notes/decisions, encrypted Brain
+  archive portability, cloud lock-in avoidance, and honest no-model states.
+- Added and refreshed trust documentation: `PRIVACY.md`, `docs/WHY_LATTICE.md`,
+  `docs/TRUST_MODEL.md`, `SECURITY.md`, `ARCHITECTURE.md`, and
+  `FEATURE_STATUS.md`.
+- Removed `csp:null` from Tauri production config and added an app-shell CSP
+  response header.
+- Centralized secret redaction for logs, audit payloads, security exports, and
+  builtin hook packets.
+- Changed chat auto-file handling so `LATTICEAI_AUTO_READ_CHAT_PATHS` remains
+  off by default and does not silently read arbitrary local paths even if
+  enabled.
+- Added explicit `allow_download=true` consent for model download requests.
+- Added config, security, and Brain runtime builder seams in `app_factory.py`
+  while preserving the existing API shape.
+- Hardened release artifact cleanup so `release:artifacts` removes stale
+  `dist/ltcai-*` and root `ltcai-*.tgz` files before rebuilding exact v5.1.0
+  artifacts only.
+- Made `npm run test:integration` self-contained by starting a local uvicorn
+  server, waiting for `/health`, running the integration suite, and shutting the
+  server down.
+- Fixed a SQLite Brain restore TOCTOU race where transient `-wal` / `-shm`
+  siblings could disappear between probe and copy during archive restore.
+- Bumped synchronized package/runtime/static versions to `5.1.0`, including
+  Python metadata, npm package metadata, VSIX metadata, Tauri metadata,
+  `latticeai`, `lattice_brain`, runtime constants, and static asset metadata.
+
+### Added
+
+- v5.1 trust validation tests for CSP, secret redaction, audit redaction,
+  auto-file-read blocking, public/network auth posture, `shell=True`
+  production-path scanning, and Brain Core import isolation.
+- A deterministic regression test for restore-time WAL sibling disappearance.
+- v5.1 release evidence paths under `output/release/v5.1.0`.
+
+### Preserved
+
+- v5.0.0 and older sections remain historical.
+- External package publishing remains owner-run; this release prepares exact
+  artifacts and GitHub Release assets without registry publish automation.
+
+### Artifacts
+
+- `dist/ltcai-5.1.0-py3-none-any.whl`
+- `dist/ltcai-5.1.0.tar.gz`
+- `dist/ltcai-5.1.0.vsix`
+- `ltcai-5.1.0.tgz`
+- `src-tauri/target/release/bundle/dmg/Lattice AI_5.1.0_aarch64.dmg`
+
+## [5.0.0] - 2026-06-14
+
+> Multilingual Brain Foundation Release. v5.0.0 starts the major-version cleanup
+> line by preserving the existing AgentRuntime, ToolRegistry, Brain Core, Admin
+> Console, and graph foundations while making the product usable in Korean or
+> English from first launch through Brain exploration.
+
+### Changed
+
+- Added a persisted `lattice.language` preference with Korean and English
+  choices available on first-run onboarding, the Brain home, and the separated
+  Admin Console header.
+- Localized first-run login, environment analysis, model recommendation,
+  install/download/load status, Brain quick views, starter prompts, memory save
+  feedback, overview panels, and graph focus fallback copy.
+- Updated visual tests so the Korean path is explicitly selected before running
+  existing first-run and Brain depth assertions.
+- Bumped synchronized package/runtime/static versions to `5.0.0`, including
+  Python metadata, npm package metadata, VSIX metadata, Tauri metadata,
+  `latticeai`, `lattice_brain`, runtime constants, and static asset metadata.
+- Captured collaboration guidance from pts_claudecode and pts_grok: the next
+  technical refactor order is config centralization, KG stabilization,
+  ToolRegistry characterization, AgentRuntime extraction, then app factory
+  decomposition.
+
+### Preserved
+
+- v4.7.2 and older sections remain historical.
+- External package publishing remains owner-run; this release prepares exact
+  artifacts and GitHub Release assets without registry publish automation.
+
+### Artifacts
+
+- `dist/ltcai-5.0.0-py3-none-any.whl`
+- `dist/ltcai-5.0.0.tar.gz`
+- `dist/ltcai-5.0.0.vsix`
+- `ltcai-5.0.0.tgz`
+- `src-tauri/target/release/bundle/dmg/Lattice AI_5.0.0_aarch64.dmg`
+
 ## [4.7.2] - 2026-06-14
 
 > Intuitive Brain UX Release. v4.7.2 makes the Living Brain easier for

package/docs/TRUST_MODEL.md

@@ -0,0 +1,66 @@
+# Lattice AI Trust Model
+
+Lattice AI's trust model is local-first, opt-in for external communication, and
+honest when something is unavailable.
+
+## Local By Default
+
+By default, Lattice AI binds the API to `127.0.0.1`, stores Brain data under the
+local data directory, and does not send prompts, documents, graph content, or
+archives to Lattice-owned servers.
+
+Local data includes:
+
+- local profile and sessions;
+- conversations and memory records;
+- Knowledge Graph nodes, edges, provenance, and search indexes;
+- uploaded document blobs;
+- audit and admin operation logs;
+- backups and encrypted `.latticebrain` archives.
+
+## Explicit External Paths
+
+Some features can contact third parties, but they require explicit user/admin
+action or configuration:
+
+- model downloads from model registries;
+- cloud model API calls after keys are configured and a cloud model is chosen;
+- Telegram bridge after the integration is enabled;
+- Brain Network peer actions after pairing/initiating network flows;
+- Docker/Postgres setup after opt-in scale configuration;
+- update checks only when update checking is enabled;
+- remote marketplace/registry refreshes only through explicit user actions.
+
+Token presence alone must not start external communication.
+
+## Consent And Honesty Gates
+
+Lattice AI should fail closed or report unavailable state for:
+
+- no model loaded;
+- local model not installed;
+- installed model not loaded;
+- missing cloud key;
+- deterministic/model-free preview;
+- dry-run versus real execution;
+- no graph/context evidence available;
+- unavailable external integration;
+- wrong archive passphrase;
+- archive path traversal or tampering.
+
+## Admin Boundary
+
+The normal user product is Brain Chat, memory, topics, relationships, graph
+exploration, model state, and Brain ownership. Admin Console is for users,
+roles, audit logs, security events, retention, and operations. Admin visibility
+does not mean secrets should appear in clear text.
+
+## Known Limitations
+
+- Local files are only as protected as the user's machine, account, backups, and
+  disk encryption.
+- Cloud model prompts follow the selected provider's policy.
+- A local admin can inspect local files and process memory outside Lattice AI.
+- Marketplace and model registries are third-party services when explicitly
+  contacted.
+

package/docs/WHY_LATTICE.md

@@ -0,0 +1,54 @@
+# Why Lattice AI Exists
+
+**Your private AI memory layer. Keep your knowledge. Switch any model.**
+
+**모델은 바꿔도, 내 지식은 남는 로컬 AI 브레인.**
+
+AI models change quickly. A model you use today may be replaced next month, and
+the conversation history, project context, decisions, and sources you built
+around it can become scattered across tools. Lattice AI exists so the durable
+asset is not the model. The durable asset is your Brain.
+
+## The Problem
+
+Most AI products begin with a model and treat your context as temporary prompt
+material. That works for short questions, but it fails for long-running work:
+
+- project decisions disappear into old chats;
+- documents and notes are disconnected from conversations;
+- switching models often means losing useful context;
+- graph or database tools expose implementation details before user value;
+- cloud-only products make it hard to inspect, back up, or move your knowledge.
+
+## The Lattice Answer
+
+Lattice AI is a local-first private AI memory layer. It keeps conversations,
+documents, decisions, relationships, and project history in a Brain that belongs
+to the user. Models can be local, cloud, current, or future. The Brain remains.
+
+The graph is real, but it is not the product identity. Users start with Brain
+Chat, memory, topics, relationships, ownership, backup, and graph exploration.
+Advanced admin logs, roles, hooks, workflows, Telegram, Brain Network, Docker,
+Postgres, and plugin details stay outside the normal user flow.
+
+## Practical Reasons To Use It
+
+- Ask what the team decided last week and see the source.
+- Drop in documents and build a searchable personal memory.
+- Prepare for a meeting from past notes, project decisions, and files.
+- Preserve context when moving from one model to another.
+- Export or back up the Brain as an encrypted `.latticebrain` archive.
+- Use Korean or English without changing the underlying Brain.
+- Avoid fake answers when no model or evidence is available.
+
+## What Lattice AI Is Not
+
+- Not a hosted SaaS by default.
+- Not just a model launcher.
+- Not just a graph viewer.
+- Not a generic dashboard.
+- Not a note-taking clone.
+- Not a ChatGPT or Claude clone.
+
+Lattice AI is for people who want their knowledge to survive model changes.
+