ltcai 8.5.0 → 8.7.0

package/README.md

@@ -1,6 +1,6 @@
 # Lattice AI
 
-**Lattice AI 8.5.0 is the local-first Digital Brain platform. This release hardens the Tool Registry (now drift-free and ready) and improves dependency injection for configuration (e.g. timezone flows through Config to automation runtimes) after full codebase scan and targeted refactors.**
+**Lattice AI 8.7.0 is the local-first Digital Brain platform. This release hardens runtime state ownership, refreshes the checked-in release evidence, and synchronizes package, desktop, extension, and documentation metadata to the 8.7.0 line.**
 
 **Lattice AI는 모델이 바뀌어도 내 지식과 맥락을 보존하는 로컬 우선 AI 브레인입니다.**
 
@@ -11,7 +11,7 @@ downloads, update checks, and other external communication happen only after
 explicit consent.
 
 It is not a ChatGPT clone, a model launcher, a graph database, or a note app.
-It is the finished private AI memory layer wrapped in a Living Brain experience — with ToolRegistry readiness, Config-driven DI for automation, and continued AgentRuntime/Tool wiring seams.
+It is the finished private AI memory layer wrapped in a Living Brain experience — with desktop source capture that uses native folder selection, ToolRegistry readiness, Config-driven DI for automation, and continued AgentRuntime/Tool wiring seams.
 
 [![PyPI Version](https://img.shields.io/pypi/v/ltcai?label=PyPI)](https://pypi.org/project/ltcai/)
 [![npm Version](https://img.shields.io/npm/v/ltcai?label=npm)](https://www.npmjs.com/package/ltcai)
@@ -41,7 +41,7 @@ You need Lattice AI when:
 
 - Chat with a Brain that remembers useful context instead of treating every
   session as disposable.
-- Add documents, local folders, notes, screenshots, and conversations with
+- Add documents, selected local folders, notes, screenshots, and web pages with
   source-aware memory.
 - See recent memories, older memories, topics, relationships, and the full
   knowledge graph when you want deeper structure.
@@ -65,9 +65,9 @@ You need Lattice AI when:
 ## Living Brain Flow
 
 The screenshots below are the latest checked-in visual evidence captures from
-the 8.2 Brain Home release. The 8.3 line keeps that first-run flow focused on
-the Brain while adding clearer onboarding, stronger workflow/runtime
-boundaries, and better ingestion proof behind the scenes.
+the 8.7.0 release. They keep the first-run Brain flow, memory graph, source
+capture, model library, system view, admin console, and review center visible as
+release gates.
 
 ### 1. Wake Brain
 
@@ -79,21 +79,21 @@ confirm owner, check the computer, choose the Brain voice.
 Choose the owner of the Brain. The profile is not a SaaS account by default; it
 is the local identity for the knowledge you keep.
 
-![Login](output/release/v8.2.0/screenshots/01-login.png)
+![Login](output/release/v8.7.0/screenshots/01-login.png)
 
 ### 3. Recommended Models
 
 Start with a short list: safest recommendation, faster model, stronger model.
 Advanced details stay available without overwhelming first-time users.
 
-![Recommended Models](output/release/v8.2.0/screenshots/02-recommended-models.png)
+![Recommended Models](output/release/v8.7.0/screenshots/02-recommended-models.png)
 
 ### 4. Install And Load
 
 Download and load only after consent. Lattice explains model size, local
 execution, and network use before work starts.
 
-![Install and Load](output/release/v8.2.0/screenshots/03-install-load-progress.png)
+![Install and Load](output/release/v8.7.0/screenshots/03-install-load-progress.png)
 
 ### 5. Brain Chat
 
@@ -101,14 +101,14 @@ Talk normally. Useful decisions and context become memory, then appear later as
 topics, relationships, graph structure, and the concentric memory rings around
 the Brain.
 
-![Brain Brief Home](output/release/v8.2.0/screenshots/04-brain-chat-home.png)
+![Brain Brief Home](output/release/v8.7.0/screenshots/04-brain-chat-home.png)
 
 ### 6. Review Center
 
 Automation results are staged for review before they become durable decisions.
 Snooze, unsnooze, run now, approve, and dismiss actions stay explicit.
 
-![Review Center](output/release/v8.2.0/screenshots/12-review-center.png)
+![Review Center](output/release/v8.7.0/screenshots/12-review-center.png)
 
 ## Brain Depths
 
@@ -124,10 +124,10 @@ The user travels inward from everyday memory to deeper structure:
 
 Walkthrough:
 
-![v8.2.0 Living Brain walkthrough](output/release/v8.2.0/gifs/v8.2.0-living-brain-walkthrough.gif)
+![v8.7.0 Living Brain walkthrough](output/release/v8.7.0/gifs/v8.7.0-living-brain-walkthrough.gif)
 
 Screenshot index and capture notes:
-[output/release/v8.2.0/SCREENSHOT_INDEX.md](output/release/v8.2.0/SCREENSHOT_INDEX.md)
+[output/release/v8.7.0/SCREENSHOT_INDEX.md](output/release/v8.7.0/SCREENSHOT_INDEX.md)
 
 ## Install
 
@@ -190,7 +190,6 @@ Main validation set:
 
 ```bash
 npm run check:python
-node scripts/run_python.mjs -m ruff check .
 npm run lint
 npm run typecheck
 npm run test:unit
@@ -200,36 +199,36 @@ npm run desktop:tauri:check
 npm run docs:check-links
 ```
 
+`npm run lint` includes the Python Ruff baseline, frontend TypeScript lint
+gate, visual smoke syntax checks, and i18n literal checks.
+
 See [docs/DEVELOPMENT.md](docs/DEVELOPMENT.md) for developer workflow details.
 
 ## Current Release
 
-The current release is **8.5.0 — Tool Registry Readiness & Config DI**:
+The current release is **8.7.0 — Runtime State Hygiene & Release Evidence Refresh**:
 
-- Brain Chat now routes explicit file create/write/save/edit requests through
-  the governed workspace file tool instead of treating them as ordinary prose
-  generation.
-- Requests such as `hello.md 파일 만들어줘` are executed through
-  `write_file`/`edit_file` style tool paths, and created artifacts are returned
-  in the chat response.
-- Normal Q&A stays on the low-friction `/chat` generation path; only explicit
-  side-effect requests move into the tool-running agent loop.
-- The release keeps the 8.3.0 managed legacy inventory, AgentRuntime/workflow
-  boundaries, unified graph ingestion, and workspace-safe duplicate content
-  protections active.
+- Internal model-runtime logic now reads from the typed `ModelRuntimeState`
+  object instead of the legacy module-global compatibility surface.
+- `sync_to_module_globals()` remains available for external shims, but now emits
+  a `DeprecationWarning` so new code does not rebuild global-state coupling.
+- The 8.7.0 release evidence refresh updates screenshots, walkthrough GIF/WebM,
+  package/runtime/static/Tauri metadata, and current-release documentation.
+- The 8.6 desktop Capture reliability and 8.5 ToolRegistry/Config DI hardening
+  remain active release guarantees.
 
-Expected artifacts for 8.5.0 release must use exact filenames:
+Expected artifacts for 8.7.0 release must use exact filenames:
 
-- `dist/ltcai-8.5.0-py3-none-any.whl`
-- `dist/ltcai-8.5.0.tar.gz`
-- `ltcai-8.5.0.tgz`
-- `dist/ltcai-8.5.0.vsix`
-- `src-tauri/target/release/bundle/dmg/Lattice AI_8.5.0_aarch64.dmg`
+- `dist/ltcai-8.7.0-py3-none-any.whl`
+- `dist/ltcai-8.7.0.tar.gz`
+- `ltcai-8.7.0.tgz`
+- `dist/ltcai-8.7.0.vsix`
+- `src-tauri/target/release/bundle/dmg/Lattice AI_8.7.0_aarch64.dmg`
 
 Do not use wildcard artifact uploads. Package registry publishing remains owner-run.
 
 See [docs/ROADMAP_RECOMMENDATIONS.md](docs/ROADMAP_RECOMMENDATIONS.md) for the
-strategic roadmap slices applied through 8.5.0 and the follow-up tracks.
+strategic roadmap slices applied through 8.7.0 and the follow-up tracks.
 
 ## Known Limitations
 
@@ -246,6 +245,9 @@ strategic roadmap slices applied through 8.5.0 and the follow-up tracks.
 
 | Version | Theme |
 | --- | --- |
+| 8.7.0 | Runtime State Hygiene & Release Evidence Refresh: model-runtime internals prefer typed state over legacy globals, compatibility sync is deprecated, 8.7.0 visual evidence is refreshed, and all release metadata/docs are synchronized |
+| 8.6.0 | Desktop Capture & Navigation Reliability: native folder selection works from the Tauri localhost app, picker failures surface in Capture, web saving remains one-action, and the Brain shell sidebar/admin flow is CI-covered |
+| 8.5.0 | Tool Registry Readiness & Config DI: ToolRegistry drift removed, `tz_name` flows through central Config into automation runtimes, and current-release documentation is synchronized |
 | 8.4.0 | Action-Aware Brain Chat: explicit file create/write/save/edit requests from Brain Chat route into the governed workspace file tool so files are actually created instead of returned as code-only answers |
 | 8.3.0 | Orchestrated Brain Readiness: managed legacy shim inventory, stronger AgentRuntime/workflow boundaries, unified graph ingestion, workspace-safe duplicate content, first-run onboarding, and explicit community/plugin growth path |
 | 8.2.0 | Brain Brief: evidence-backed home briefing, honest empty-state guidance, recall/graph/model-proof next actions, and continued model/workspace runtime extraction |

package/desktop/electron/main.cjs

@@ -1,10 +1,21 @@
-const { app, BrowserWindow } = require("electron");
+const { app, BrowserWindow, dialog, ipcMain } = require("electron");
 const { spawn } = require("node:child_process");
 const path = require("node:path");
 
 const origin = process.env.LATTICEAI_DESKTOP_BACKEND_ORIGIN || "http://127.0.0.1:8765";
 let backend = null;
 
+ipcMain.handle("lattice:select-folder", async (event) => {
+  const win = BrowserWindow.fromWebContents(event.sender);
+  const options = {
+    title: "Choose a folder for Lattice AI",
+    properties: ["openDirectory"],
+  };
+  const result = win ? await dialog.showOpenDialog(win, options) : await dialog.showOpenDialog(options);
+  if (result.canceled || !result.filePaths.length) return null;
+  return result.filePaths[0];
+});
+
 function startBackend() {
   if (process.env.LATTICEAI_DESKTOP_NO_BACKEND) return;
   const command = process.env.LATTICEAI_DESKTOP_BACKEND_CMD || "python3 ltcai_cli.py --host 127.0.0.1 --port 8765";
@@ -25,6 +36,7 @@ function createWindow() {
     minHeight: 720,
     title: "Lattice AI",
     webPreferences: {
+      preload: path.join(__dirname, "preload.cjs"),
       contextIsolation: true,
       nodeIntegration: false,
       sandbox: true,

package/desktop/electron/preload.cjs

@@ -0,0 +1,5 @@
+const { contextBridge, ipcRenderer } = require("electron");
+
+contextBridge.exposeInMainWorld("latticeDesktop", {
+  selectFolder: () => ipcRenderer.invoke("lattice:select-folder"),
+});

package/docs/CHANGELOG.md

@@ -6,6 +6,52 @@ existed at that release.
 
 ## [Unreleased]
 
+## [8.7.0] - 2026-07-05
+
+### Added
+- Added unit test coverage for model-runtime `STATE` source-of-truth behavior
+  and deprecation warnings on legacy global synchronization.
+- Added refreshed 8.7.0 screenshots, walkthrough GIF/WebM, and capture notes
+  under `output/release/v8.7.0/`.
+
+### Changed
+- Reduced internal reliance on bare module globals in
+  `latticeai/services/model_runtime.py`; implementation logic now consistently
+  reads from the `ModelRuntimeState` instance while globals remain as a legacy
+  compatibility surface.
+- Added `DeprecationWarning` to `sync_to_module_globals()` while preserving the
+  external shim behavior.
+- Removed a loose `as any` cast from `frontend/src/pages/Act.tsx`.
+- Version bumped to 8.7.0 across Python, npm, VS Code extension, Tauri, static
+  metadata, README evidence links, release notes, and current-release
+  documentation.
+
+### Fixed
+- Internal model-runtime functions now prefer the typed state object per the
+  project preference for composition over global mutable state.
+
+## [8.6.0] - 2026-07-05
+
+### Added
+- Added Tauri localhost remote capability coverage so the desktop app can keep
+  using local IPC commands after navigating to the FastAPI-served `/app`.
+- Added a regression trust gate for the Tauri localhost capability.
+
+### Changed
+- Improved the Capture source flow: desktop users can choose a folder with the
+  native folder picker and immediately scan/connect it, while web page capture
+  now supports paste, Enter-to-save, and `https://` normalization for bare
+  domains.
+- Updated Visual Smoke coverage for the new Brain shell sidebar and admin
+  console entry flow.
+- Version bumped to 8.6.0 across Python, npm, VS Code extension, Tauri, static
+  metadata, readiness gates, and current-release documentation.
+
+### Fixed
+- Fixed native folder selection from the Tauri production app's localhost
+  webview and added visible fallback feedback when the picker is unavailable.
+- Removed negative letter spacing from updated frontend shell styling.
+
 ## [8.5.0] - 2026-07-01
 
 ### Added

package/docs/COMMUNITY_AND_PLUGINS.md

@@ -1,9 +1,11 @@
 # Community And Plugins
 
-Current release: **8.5.0 - Registry Polish & Config DI**.
+Current release: **8.7.0 — Runtime State Hygiene & Release Evidence Refresh**.
 
-LatticeAI defines the path from a strong local-first framework (8.4.0 action-aware baseline, 8.5.0 registry+DI hardening) to a
-product ecosystem. The immediate goal is small and practical: make it clear how
+LatticeAI defines the path from a strong local-first framework (8.4.0
+action-aware baseline, 8.5.0 registry+DI hardening, 8.6.0 capture/navigation
+reliability, and 8.7.0 runtime-state hygiene) to a product ecosystem. The
+immediate goal is small and practical: make it clear how
 contributors can extend the Brain without weakening local-first trust,
 workspace scoping, or release quality.
 

package/docs/DEVELOPMENT.md

@@ -1,10 +1,10 @@
 # Lattice AI Development
 
-Current release: **8.5.0 — Tool Registry Readiness & Config DI**.
+Current release: **8.7.0 — Runtime State Hygiene & Release Evidence Refresh**.
 
 This document is for contributors working on the local-first Digital Brain
 codebase. Product positioning and quick start stay in `README.md`; release
-history is intentionally limited to 7.0.0-8.5.0 in `docs/CHANGELOG.md` and
+history is intentionally limited to 7.0.0-8.7.0 in `docs/CHANGELOG.md` and
 `RELEASE.md`.
 
 ## Product Contract
@@ -49,13 +49,15 @@ API, UI, or release work, run:
 
 ```bash
 npm run check:python
-node scripts/run_python.mjs -m ruff check .
 npm run lint
 npm run typecheck
 npm run test:unit
 npm run docs:check-links
 ```
 
+`npm run lint` runs the Python Ruff baseline, frontend TypeScript lint gate,
+visual smoke syntax checks, and i18n literal checks.
+
 Use these when the change touches the relevant surface:
 
 ```bash
@@ -112,10 +114,10 @@ For user-facing, API, runtime, release, or packaging changes, check:
 Release/publish examples must use exact target-version filenames. Do not
 document wildcard artifact upload commands.
 
-For 8.5.0 release work, exact artifacts are:
+For 8.7.0 release work, exact artifacts are:
 
-- `dist/ltcai-8.5.0-py3-none-any.whl`
-- `dist/ltcai-8.5.0.tar.gz`
-- `ltcai-8.5.0.tgz`
-- `dist/ltcai-8.5.0.vsix`
-- `src-tauri/target/release/bundle/dmg/Lattice AI_8.5.0_aarch64.dmg`
+- `dist/ltcai-8.7.0-py3-none-any.whl`
+- `dist/ltcai-8.7.0.tar.gz`
+- `ltcai-8.7.0.tgz`
+- `dist/ltcai-8.7.0.vsix`
+- `src-tauri/target/release/bundle/dmg/Lattice AI_8.7.0_aarch64.dmg`

package/docs/LEGACY_COMPATIBILITY.md

@@ -1,14 +1,14 @@
 # Legacy Compatibility Map
 
-Current release: **8.5.0 — Tool Registry Readiness & Config DI**.
+Current release: **8.7.0 — Runtime State Hygiene & Release Evidence Refresh**.
 
 Lattice AI is moving toward a smaller, modular architecture centered on
 `lattice_brain`, `latticeai.services`, `latticeai.api`, and `latticeai.runtime`.
 Some root-level modules remain packaged for compatibility with older imports,
 CLI entrypoints, or extension workflows. Their presence does not define the
-current 8.5.0 architecture.
+current 8.7.0 architecture.
 
-8.5.0 also tracks the inner compatibility layers that sit below the root
+8.7.0 also tracks the inner compatibility layers that sit below the root
 modules. The managed inventory lives in `latticeai.core.legacy_compatibility`
 and groups shims by layer:
 

package/docs/ONBOARDING.md

@@ -1,6 +1,6 @@
 # Lattice AI Onboarding
 
-Current release: **8.5.0 — Tool Registry Readiness & Config DI**.
+Current release: **8.7.0 — Runtime State Hygiene & Release Evidence Refresh**.
 
 The first-run goal is a five-minute path from "I opened the app" to "my Brain
 has a source, a question, and proof." This page is the product contract behind
@@ -12,8 +12,8 @@ read the docs first.
 1. Wake the Brain and confirm the local owner profile.
 2. Let Lattice inspect local model/runtime readiness.
 3. Pick the recommended Brain voice or skip model loading.
-4. Add one source: upload a file, connect a folder, save a note, or capture a
-   browser/source event.
+4. Add one source: upload a file, choose and scan a folder, save a note, or
+   capture a browser/source event.
 5. Ask one grounded question and inspect the answer proof.
 6. Open the Knowledge Graph only when the user wants source-level evidence.
 7. Back up the Brain once useful memory exists.
@@ -32,7 +32,7 @@ read the docs first.
 
 ## Release Gate
 
-8.5.0 treats onboarding as a release gate, not marketing copy. The current
+8.7.0 treats onboarding as a release gate, not marketing copy. The current
 machine-checkable product readiness report requires this five-minute contract,
 the Brain Home surface, setup helpers, graph ingestion tests, and exact release
 artifact documentation before the release can be called complete.

package/docs/TRUST_MODEL.md

@@ -1,6 +1,6 @@
 # Lattice AI Trust Model
 
-Current release: **8.5.0 — Tool Registry Readiness & Config DI**.
+Current release: **8.7.0 — Runtime State Hygiene & Release Evidence Refresh**.
 
 Lattice AI is local-first, explicit about external communication, and honest
 when a capability is unavailable.

package/docs/WHY_LATTICE.md

@@ -1,6 +1,6 @@
 # Why Lattice AI Exists
 
-Current release: **8.5.0 — Tool Registry Readiness & Config DI**.
+Current release: **8.7.0 — Runtime State Hygiene & Release Evidence Refresh**.
 
 **Lattice AI is a local-first Digital Brain that keeps your knowledge durable
 across any AI model.**
@@ -32,7 +32,7 @@ The graph matters, but it is not the product identity. The product identity is a
 local-first Digital Brain: a place where the user can talk, add sources, watch
 memory grow, and inspect the Knowledge Graph when they need proof.
 
-In 8.5.0 the first screen is intentionally not a dashboard. The living Brain,
+In 8.7.0 the first screen is intentionally not a dashboard. The living Brain,
 conversation composer, evidence-backed Brain Brief, and five-minute onboarding
 path appear together so the user immediately knows what matters, what to add,
 and why the answer is grounded in local memory.

package/docs/kg-schema.md

@@ -1,6 +1,6 @@
 # Knowledge Graph Schema
 
-Current release: **8.5.0 — Tool Registry Readiness & Config DI**.
+Current release: **8.7.0 — Runtime State Hygiene & Release Evidence Refresh**.
 
 명세 출처: `lattice_ai_full_spec.pptx` 슬라이드 20·21·22
 구현: `kg_schema.py`

package/lattice_brain/__init__.py

@@ -26,7 +26,7 @@ from .storage import (
     storage_from_env,
 )
 
-__version__ = "8.5.0"
+__version__ = "8.7.0"
 
 __all__ = [
     "AgentRuntime",

package/lattice_brain/runtime/multi_agent.py

@@ -21,7 +21,7 @@ from typing import Any, Callable, Dict, List, Optional
 from .contracts import multi_agent_contract
 
 
-MULTI_AGENT_VERSION = "8.5.0"
+MULTI_AGENT_VERSION = "8.7.0"
 
 AGENT_ROLES = ("researcher", "planner", "executor", "reviewer", "release")
 CORE_PIPELINE = ("planner", "executor", "reviewer")

package/latticeai/__init__.py

@@ -1,3 +1,3 @@
 """Lattice AI - modular server package."""
 
-__version__ = "8.5.0"
+__version__ = "8.7.0"

package/latticeai/app_factory.py

@@ -107,7 +107,7 @@ def _build(config: "Optional[Config]" = None) -> Dict[str, Any]:
         enforce_rate_limit as _enforce_rate_limit,
     )
     from latticeai.core.audit import (
-        get_audit_log as _get_audit_log,
+        get_audit_log as _get_audit_log,  # noqa: F401 - legacy server_app attr exported via locals()
         classify_sensitive_message as _classify_sensitive_message,
         build_sensitivity_report as _build_sensitivity_report,
         build_admin_audit_report as _build_admin_audit_report,
@@ -992,7 +992,7 @@ def _build(config: "Optional[Config]" = None) -> Dict[str, Any]:
         create_admin_router=create_admin_router,
         require_admin=require_admin,
         get_history=get_history,
-        get_audit_log=_get_audit_log,
+        get_audit_log=get_audit_log,
         audit_file=AUDIT_FILE,
         public_user=public_user,
         load_vpc_config=load_vpc_config,

package/latticeai/core/config.py

@@ -43,7 +43,12 @@ def _bool(env: Mapping[str, str], key: str, default: bool = False) -> bool:
     raw = env.get(key)
     if raw is None:
         return default
-    return raw.strip().lower() in {"1", "true", "yes", "on"}
+    normalized = raw.strip().lower()
+    if normalized in {"1", "true", "yes", "on"}:
+        return True
+    if normalized in {"0", "false", "no", "off"}:
+        return False
+    return default
 
 
 def _int(env: Mapping[str, str], key: str, default: int) -> int:
@@ -56,6 +61,13 @@ def _int(env: Mapping[str, str], key: str, default: int) -> int:
         return default
 
 
+def _port(env: Mapping[str, str], key: str, default: int) -> int:
+    port = _int(env, key, default)
+    if 1 <= port <= 65535:
+        return port
+    return default
+
+
 @dataclass(frozen=True)
 class Config:
     """Everything a caller must know about app-level settings.
@@ -146,7 +158,7 @@ class Config:
         is_public = app_mode == "public"
 
         host = _value(env, "LATTICEAI_HOST", "127.0.0.1")
-        port = _int(env, "LATTICEAI_PORT", 4825)
+        port = _port(env, "LATTICEAI_PORT", 4825)
         network_exposed = not host_is_loopback(host)
 
         cors_extra = [item.strip() for item in _value(env, "LATTICEAI_CORS_ALLOWED_ORIGINS", "").split(",") if item.strip()]

package/latticeai/core/marketplace.py

@@ -11,7 +11,7 @@ from copy import deepcopy
 from typing import Any, Dict, List, Optional
 
 
-MARKETPLACE_VERSION = "8.5.0"
+MARKETPLACE_VERSION = "8.7.0"
 TEMPLATE_KINDS = ("plugin", "workflow", "agent")
 
 

package/latticeai/core/workspace_os.py

@@ -49,7 +49,7 @@ __all__ = [
     "remove_skill_directory",
 ]
 
-WORKSPACE_OS_VERSION = "8.5.0"
+WORKSPACE_OS_VERSION = "8.7.0"
 
 # Workspace types separate single-user Personal workspaces from shared
 # Organization workspaces. Both keep the same local-first JSON store; the type

package/latticeai/models/router.py

@@ -13,8 +13,9 @@ import time
 from dataclasses import dataclass
 from pathlib import Path
 
-# Set MLX_VLM_DRAFT_KIND to 'mtp' to enable the Gemma 4 assistant MTP drafter.
-os.environ["MLX_VLM_DRAFT_KIND"] = "mtp"
+# Default Gemma 4 assistant drafting to MTP without overriding an operator's
+# explicit MLX runtime choice.
+os.environ.setdefault("MLX_VLM_DRAFT_KIND", "mtp")
 
 from concurrent.futures import ThreadPoolExecutor
 from typing import AsyncIterator, Dict, Optional, Tuple, List

package/latticeai/runtime/router_registration.py

@@ -162,16 +162,22 @@ def build_auth_admin_security_router_bundle(
         append_audit_event=append_audit_event,
     )
 
-    def security_audit_events_safe() -> list[dict[str, Any]]:
+    def audit_log_events_safe() -> list[dict[str, Any]]:
         try:
-            return get_audit_log(audit_file)
+            return get_audit_log()
+        except TypeError:
+            try:
+                return get_audit_log(audit_file)
+            except Exception as exc:  # pragma: no cover - defensive legacy behavior
+                logger.warning("security audit events load failed: %s", exc)
+                return []
         except Exception as exc:  # pragma: no cover - defensive legacy behavior
             logger.warning("security audit events load failed: %s", exc)
             return []
 
     def security_list_uploaded_files() -> list[dict[str, Any]]:
         files: list[dict[str, Any]] = []
-        for idx, event in enumerate(security_audit_events_safe()):
+        for idx, event in enumerate(audit_log_events_safe()):
             if event.get("event_type") != "document_upload":
                 continue
             files.append({
@@ -191,7 +197,7 @@ def build_auth_admin_security_router_bundle(
     security_router = create_security_router(
         require_admin=require_admin,
         get_history=get_history,
-        get_audit_events=security_audit_events_safe,
+        get_audit_events=audit_log_events_safe,
         classify_sensitive_message=classify_sensitive_message,
         build_sensitivity_report=build_sensitivity_report,
         list_uploaded_files=security_list_uploaded_files,
@@ -205,7 +211,7 @@ def build_auth_admin_security_router_bundle(
         "security_router": security_router,
         "_graph_stats_safe": graph_stats_safe,
         "_product_hardening_status": product_hardening_status,
-        "_security_audit_events_safe": security_audit_events_safe,
+        "_security_audit_events_safe": audit_log_events_safe,
         "_security_list_uploaded_files": security_list_uploaded_files,
     }
 

package/latticeai/services/architecture_readiness.py

@@ -1,6 +1,6 @@
 """Machine-checkable architecture readiness gates for release work.
 
-8.5.0 keeps the major architecture priorities under an explicit release
+8.7.0 keeps the major architecture priorities under an explicit release
 contract while product maturity work reduces visible beta seams. AgentRuntime, ToolRegistry,
 central Config, decomposed server runtime, and Knowledge Graph stabilization
 must remain discoverable, ordered, and backed by tests before the release can be
@@ -17,7 +17,7 @@ from typing import Any, Dict, List
 from latticeai.core.legacy_compatibility import legacy_shim_report
 
 
-ARCHITECTURE_VERSION_TARGET = "8.5.0"
+ARCHITECTURE_VERSION_TARGET = "8.7.0"
 
 PREFERRED_REFACTORING_ORDER = [
     "agent-runtime",