opensocrates 1.2.0 → 1.3.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (7) hide show
  1. package/CHANGELOG.md +102 -0
  2. package/README.ko.md +186 -70
  3. package/README.md +195 -80
  4. package/SECURITY.md +11 -0
  5. package/VERSION +1 -1
  6. package/installer/opensocrates.mjs +2336 -97
  7. package/package.json +2 -2
package/README.md CHANGED
@@ -1,7 +1,19 @@
1
1
  <p align="center">
2
+
3
+ > OpenSocrates 1.3.0: decision-point retrieval and conservative Guided EN/KO presentation.
4
+ > See [release evidence and support limits](docs/v1.3.0-recovery/PROGRESS.md) and
5
+ > [migration and delivery modes](docs/decision-points.md).
6
+
2
7
  <img src="https://raw.githubusercontent.com/ParkerHwang/OpenSocrates/main/docs/assets/opensocrates-banner.jpg" alt="OpenSocrates" width="820">
3
8
  </p>
4
9
 
10
+ Bounded synthetic Codex tests with `gpt-5.6-luna` at `max` effort included
11
+ 300-second final-delivery timeouts, even when the requested file existed.
12
+ This release does not promise a fixed response time or demonstrated quality,
13
+ naturalness, token-cost or latency improvement. See the linked release evidence
14
+ for every attempt and its source/configuration boundary.
15
+
16
+
5
17
  # OpenSocrates
6
18
 
7
19
  **English** | [한국어](README.ko.md)
@@ -12,12 +24,14 @@
12
24
  [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
13
25
 
14
26
  OpenSocrates is a local integration and authored reasoning framework for
15
- Claude, Codex, Grok Build, and OpenCode. It detects requests that benefit from deliberate reasoning,
16
- uses a fresh host-native selector to choose relevant systems, and adds their
17
- complete theory and examples to the active task. Straightforward factual and
18
- mechanical work can pass through unchanged.
19
-
20
- Version `1.2.0` adds first-class OpenCode support to the 48 reasoning systems,
27
+ Google Antigravity, Claude, Codex, Cursor, Grok Build, and OpenCode. It preserves
28
+ each host's delivery model: Claude/Codex hidden trusted context leads with
29
+ teacher questions, Antigravity/Cursor/Grok expose question-led complete
30
+ procedures through skills, and OpenCode injects one such procedure in the same
31
+ turn with the native skill as fallback. Straightforward factual and mechanical
32
+ work can pass through unchanged.
33
+
34
+ Version `1.2.0` added first-class OpenCode support to the 48 reasoning systems,
21
35
  including stable same-turn activation, a native skill fallback, coordinated
22
36
  multi-host lifecycle management, and opt-in automatic updates on
23
37
  Apple-silicon macOS (`darwin-arm64`). It uses your existing host login and does
@@ -27,11 +41,9 @@ The native plugin archives intentionally ship only `bin/launch.sh`. That
27
41
  launcher accepts `darwin-arm64` only; macOS Intel, Linux, and Windows launchers
28
42
  and runtimes are not shipped or supported in this release.
29
43
 
30
- > **Latest release: OpenSocrates 1.2.0.** It adds experimental Antigravity and
31
- > Cursor skill packages, live-validated native Grok Build support, and OpenCode
32
- > 1.18.18+ with a stable `chat.message` bridge and native Agent Skill fallback.
33
- > Upgrade managed hosts together with
34
- > `npx --yes opensocrates@1.2.0 update --host all`.
44
+ > **OpenSocrates 1.3.0 release contents:** in-turn selective retrieval, unchanged
45
+ > canonical procedures, protected presentation-only EN/KO guidance and explicit
46
+ > host evidence levels. Chat cloud activation remains unvalidated.
35
47
 
36
48
  ## Host support
37
49
 
@@ -43,10 +55,10 @@ and runtimes are not shipped or supported in this release.
43
55
  | Grok Build TUI | Native plugin is shared with headless; activation receipt pending | `/opensocrates` | [TUI hook execution verified, native skill marker test pending; shipped package has no hooks](docs/grok-support.md) |
44
56
  | OpenCode TUI and `opencode run` | Yes; stable same-turn local bridge | Native `opensocrates` skill | [OpenCode 1.18.18 TUI, `opencode run`, and DeepSeek V4 Flash live smoke validated](docs/opencode-support.md) |
45
57
  | Codex CLI and Desktop | Yes, after one-time in-app hook approval | OpenSocrates plugin | Package and launcher release-validated on `darwin-arm64`; no live Codex hook-delivery receipt |
46
- | Claude Code CLI | Yes, through `UserPromptSubmit` | `/opensocrates` | Locally validated on `darwin-arm64` |
47
- | Claude Code desktop app | Yes, where Claude Code plugins run | `/opensocrates` | [Authenticated hook lifecycle locally validated](docs/claude-desktop-live-probe.md) |
48
- | Claude Cowork | Yes, in the tested local plugin upload | `/opensocrates` | [Native hook lifecycle locally validated; direct release upload, no marketplace sync](docs/claude-cowork-live-probe.md) |
49
- | Claude web and Desktop Chat | No hooks | `/opensocrates` | [Live upload and invocation validated](docs/claude-chat-upload-probe.md) |
58
+ | Claude Code CLI | Yes, through `UserPromptSubmit` | Plugin: `/opensocrates:opensocrates` | Locally validated on `darwin-arm64` |
59
+ | Claude Code desktop app, Local mode | Yes, where Claude Code plugins run | Plugin: `/opensocrates:opensocrates` | [Authenticated hook lifecycle locally validated](docs/claude-desktop-live-probe.md) |
60
+ | Claude Cowork with the local plugin | Yes, in the tested local plugin upload | Plugin: `/opensocrates:opensocrates` | [Native hook lifecycle locally validated; direct release upload, no marketplace sync](docs/claude-cowork-live-probe.md) |
61
+ | Claude web and Desktop Chat | No OpenSocrates hooks | Standalone skill: `/opensocrates` | [v1.3 archive export validated; cloud activation unvalidated](docs/claude-chat-upload-probe.md) |
50
62
 
51
63
  The status column uses four distinct levels. Do not read them as
52
64
  interchangeable:
@@ -60,10 +72,23 @@ interchangeable:
60
72
  receipt shows the host actually delivering the hook. `os capabilities show`
61
73
  reports these capabilities as `unknown`, not as available.
62
74
 
63
- Claude Chat surfaces do not run plugin hooks. They can use the generated
64
- skills, but automatic per-prompt selection is available only on Claude Code
65
- and Cowork surfaces that execute the plugin runtime. OpenSocrates fails open
66
- if a hook or selector is unavailable.
75
+ The Claude plugin's canonical explicit command is
76
+ `/opensocrates:opensocrates`, following Anthropic's
77
+ [plugin namespace contract](https://code.claude.com/docs/en/plugins). A current
78
+ Claude version can also offer `/opensocrates` as a bare alias when no other
79
+ command owns that name, but the alias is not the canonical plugin contract and
80
+ does not prove which skill source answered. The separately uploaded Chat ZIP
81
+ is a standalone skill and canonically uses `/opensocrates`. Chat surfaces do
82
+ not run the packaged OpenSocrates hooks; automatic per-prompt selection is
83
+ available only on Claude Code and Cowork surfaces that execute the plugin
84
+ runtime. OpenSocrates fails open if a hook or selector is unavailable.
85
+
86
+ Keep three Claude provenance states separate: the installer-managed local
87
+ plugin, a standalone ZIP manually uploaded to Chat, and any pre-existing
88
+ synced/custom skill. Local plugin status cannot prove or update either Cloud
89
+ state. Historical records report local plugin version 1.2.1, while the
90
+ pre-existing synced/custom observation is 1.1.2; neither is evidence that an
91
+ exact v1.2.1 standalone release ZIP was uploaded.
67
92
 
68
93
  The published v1.1.2 Claude plugin archive exceeded Cowork's documented
69
94
  compressed limit and observed uncompressed limit. A pre-release v1.1.3
@@ -94,7 +119,7 @@ before registering an owner-marked managed marketplace.
94
119
  ### Install every ready host
95
120
 
96
121
  ```bash
97
- npx --yes opensocrates@1.2.0 install --host all
122
+ npx --yes opensocrates@1.3.0 install --host all
98
123
  ```
99
124
 
100
125
  The all-host path detects supported, authenticated host CLIs, completes every
@@ -106,11 +131,74 @@ registration.
106
131
  Use the same host value for the complete lifecycle:
107
132
 
108
133
  ```bash
109
- npx --yes opensocrates@1.2.0 status --host all
110
- npx --yes opensocrates@1.2.0 update --host all
111
- npx --yes opensocrates@1.2.0 remove --host all
134
+ npx --yes opensocrates@1.3.0 status --host all
135
+ npx --yes opensocrates@1.3.0 update --host all
136
+ npx --yes opensocrates@1.3.0 remove --host all
112
137
  ```
113
138
 
139
+ ### Remove a registration, purge owned payloads, or reset Codex trust
140
+
141
+ Ordinary `remove` keeps its backward-compatible, narrow contract: it removes
142
+ the selected exact host registration and installer-managed root and reconciles
143
+ the updater, but it may leave host-owned OpenSocrates plugin caches and the
144
+ installer desired-state file. Its output names every remaining known
145
+ OpenSocrates path and the purge command to run next; it does not describe that
146
+ result as a complete uninstall.
147
+
148
+ After closing active hosts, request the explicit owned-payload purge:
149
+
150
+ ```bash
151
+ npx --yes opensocrates@1.3.0 remove --host all --purge
152
+ # One host: npx --yes opensocrates@1.3.0 remove --host claude --purge
153
+ # Also reset only OpenSocrates Codex hook trust:
154
+ npx --yes opensocrates@1.3.0 remove --host all --purge --reset-trust
155
+ # Codex only: npx --yes opensocrates@1.3.0 remove --host codex --purge --reset-trust
156
+ ```
157
+
158
+ Purge verifies canonical paths, the exact `opensocrates@opensocrates` package
159
+ identity, manifests, checksums, and installer ownership markers before deleting
160
+ anything. It covers the managed roots, exact Claude/Codex cache versions, empty
161
+ Claude OpenSocrates plugin-data directories, OpenCode's owned skill/bridge/
162
+ sidecar, the OpenSocrates LaunchAgent, known transaction residue, and—after the
163
+ lifecycle lock is released—the final known installer state files and an empty
164
+ state directory. It never recursively deletes broad host parents such as
165
+ `~/.claude/plugins`, `~/.codex/plugins`, or `~/.opensocrates`.
166
+
167
+ An active Claude cache with a live `.in_use/<pid>`, a missing host CLI that
168
+ prevents registration verification, a symlink, an invalid marker or manifest,
169
+ nonempty unverified plugin data, or a cleanup/permission failure makes the
170
+ result `pending` or failed and the command exits unsuccessfully. Close the
171
+ host or resolve the reported path and rerun the same purge command; a completed
172
+ purge is idempotent. Other plugins and user task, project, chat, plan, and
173
+ history data are preserved byte-for-byte.
174
+
175
+ The four removal surfaces remain separate:
176
+
177
+ - **Plugin registration:** ordinary remove and purge ask the selected host to
178
+ remove only the exact `opensocrates@opensocrates` registration.
179
+ - **Payload and installer state:** `--purge` verifies ownership before removing
180
+ the exact cache/data/managed-state paths described above.
181
+ - **Host security trust:** Codex hook approval is not payload. Purge preserves
182
+ it by default and reports that fact. Add `--reset-trust` explicitly with
183
+ `--host codex` or `--host all` to reset only the seven canonical
184
+ OpenSocrates hook approvals.
185
+ - **User history:** task, project, chat, plan, session, and history content is
186
+ never a removal target and remains byte-for-byte unchanged.
187
+
188
+ Codex CLI 0.145.0 has no supported narrow trust-removal command, so this opt-in
189
+ fallback targets only the exact `CODEX_HOME/config.toml`. It removes canonical
190
+ OpenSocrates sections for `pre_tool_use`, `post_tool_use`, `pre_compact`,
191
+ `session_start`, `session_end`, `user_prompt_submit`, and `stop`, without
192
+ hard-coding or printing their hashes. Other settings, plugins, comments, order,
193
+ whitespace, and LF/CRLF style are preserved. A symlink, noncanonical matching
194
+ section, unexpected key, invalid config, unsupported Codex validator, concurrent
195
+ change, or write/validation failure makes the purge partial. The original
196
+ config is retained or transactionally restored when rollback remains safe. If
197
+ a later external edit makes automatic rollback unsafe, that edit is not
198
+ overwritten and the owner-only recovery copy is preserved. No complete result
199
+ is claimed. Reinstallation is expected to present those seven hooks as new
200
+ approvals; that live approval flow still requires separate host evidence.
201
+
114
202
  A private `~/.opensocrates/desired-state.json` manifest records the selected
115
203
  channel, installed hosts, and desired active version. `status --host all`
116
204
  reports the desired and available versions, last check, last successful
@@ -121,13 +209,13 @@ automatic update, and per-host drift.
121
209
  Codex remains the default host for backward compatibility:
122
210
 
123
211
  ```bash
124
- npx --yes opensocrates@1.2.0 install
125
- # Equivalent: npx --yes opensocrates@1.2.0 install --host codex
126
- npx --yes opensocrates@1.2.0 install --host antigravity
127
- npx --yes opensocrates@1.2.0 install --host claude
128
- npx --yes opensocrates@1.2.0 install --host cursor
129
- npx --yes opensocrates@1.2.0 install --host grok
130
- npx --yes opensocrates@1.2.0 install --host opencode
212
+ npx --yes opensocrates@1.3.0 install
213
+ # Equivalent: npx --yes opensocrates@1.3.0 install --host codex
214
+ npx --yes opensocrates@1.3.0 install --host antigravity
215
+ npx --yes opensocrates@1.3.0 install --host claude
216
+ npx --yes opensocrates@1.3.0 install --host cursor
217
+ npx --yes opensocrates@1.3.0 install --host grok
218
+ npx --yes opensocrates@1.3.0 install --host opencode
131
219
  ```
132
220
 
133
221
  Antigravity installs a content-only plugin at
@@ -167,9 +255,9 @@ commands. The privacy-safe 2.1.226 fixture is under
167
255
  ### Opt-in automatic updates
168
256
 
169
257
  ```bash
170
- npx --yes opensocrates@1.2.0 auto-update enable --host all
171
- npx --yes opensocrates@1.2.0 auto-update status
172
- npx --yes opensocrates@1.2.0 auto-update disable
258
+ npx --yes opensocrates@1.3.0 auto-update enable --host all
259
+ npx --yes opensocrates@1.3.0 auto-update status
260
+ npx --yes opensocrates@1.3.0 auto-update disable
173
261
  ```
174
262
 
175
263
  Automatic updates are disabled until explicitly enabled. The macOS LaunchAgent
@@ -191,41 +279,51 @@ workspace paths. `auto-update disable` unloads and removes the LaunchAgent;
191
279
 
192
280
  ### Claude web and Desktop Chat skills
193
281
 
194
- These surfaces support plugin skills but not hooks. Download
195
- `opensocrates-1.2.0-claude-chat-skills.zip` from the release and upload it from
196
- Claude's **Customize → Skills → Upload skill** UI. The ZIP contains one
197
- top-level `opensocrates/` folder with `SKILL.md` directly inside, as required by
198
- the skill uploader. The package exposes exactly one
199
- `/opensocrates` skill; its 48 method procedures, rigor, evidence, and trace
200
- controls are internal supporting references. Automatic selection is absent
201
- because Chat does not execute plugin hooks. See Anthropic's
202
- [plugin surface guide](https://support.claude.com/en/articles/13837440-use-plugins-in-claude).
282
+ These surfaces can use a separately uploaded standalone skill but do not run
283
+ the local plugin hooks.
284
+
285
+ Chat standalone export: **archive contract validated; live activation unvalidated.**
286
+
287
+ The complete v1.3.0 standalone ZIP ships with all 48 methods in EN/KO. Its
288
+ layout/reference integrity and public release provenance are separate from an
289
+ account-level upload. Older custom/synced skills are not automatically upgraded
290
+ by the local installer. See [version-bound support evidence](docs/claude-chat-upload-probe.md).
291
+
292
+ When the exact release is published, verify its checksum before using Claude's
293
+ **Customize → Skills → Upload skill** UI. The ZIP must contain one top-level
294
+ `opensocrates/` folder with `SKILL.md` directly inside. It is not the Claude
295
+ Code/Cowork plugin archive. The standalone package exposes exactly one
296
+ canonical `/opensocrates` skill; its 48 method procedures, rigor, evidence, and
297
+ trace controls are internal supporting references. Automatic hook selection is
298
+ absent because Chat does not execute the packaged hooks. See Anthropic's
299
+ [custom skill guide](https://support.claude.com/en/articles/12512180-use-skills-in-claude).
203
300
 
204
301
  ### Install from a tagged GitHub source
205
302
 
206
- The same host option works without the npm registry:
303
+ The same host option works without the npm registry by using the published tag:
207
304
 
208
305
  ```bash
209
- npx --yes github:ParkerHwang/OpenSocrates#v1.2.0 install --host all
210
- npx --yes github:ParkerHwang/OpenSocrates#v1.2.0 install --host antigravity
211
- npx --yes github:ParkerHwang/OpenSocrates#v1.2.0 install --host claude
212
- npx --yes github:ParkerHwang/OpenSocrates#v1.2.0 install --host codex
213
- npx --yes github:ParkerHwang/OpenSocrates#v1.2.0 install --host cursor
214
- npx --yes github:ParkerHwang/OpenSocrates#v1.2.0 install --host grok
215
- npx --yes github:ParkerHwang/OpenSocrates#v1.2.0 install --host opencode
306
+ npx --yes github:ParkerHwang/OpenSocrates#v1.3.0 install --host all
307
+ npx --yes github:ParkerHwang/OpenSocrates#v1.3.0 install --host antigravity
308
+ npx --yes github:ParkerHwang/OpenSocrates#v1.3.0 install --host claude
309
+ npx --yes github:ParkerHwang/OpenSocrates#v1.3.0 install --host codex
310
+ npx --yes github:ParkerHwang/OpenSocrates#v1.3.0 install --host cursor
311
+ npx --yes github:ParkerHwang/OpenSocrates#v1.3.0 install --host grok
312
+ npx --yes github:ParkerHwang/OpenSocrates#v1.3.0 install --host opencode
216
313
  ```
217
314
 
218
315
  ### Manual release verification
219
316
 
220
- Download `opensocrates.mjs`, the host package, and its `.sha256` file from the
221
- [v1.2.0 release](https://github.com/ParkerHwang/OpenSocrates/releases/tag/v1.2.0).
222
- For Claude, for example:
317
+ After publication, download `opensocrates.mjs`, the host package, and its
318
+ `.sha256` file from the
319
+ [v1.3.0 release](https://github.com/ParkerHwang/OpenSocrates/releases/tag/v1.3.0).
320
+ Verify the named published assets before installation; for Claude:
223
321
 
224
322
  ```bash
225
- shasum -a 256 -c opensocrates-1.2.0-claude-plugin.zip.sha256
323
+ shasum -a 256 -c opensocrates-1.3.0-claude-plugin.zip.sha256
226
324
  node opensocrates.mjs install --host claude \
227
- --asset opensocrates-1.2.0-claude-plugin.zip \
228
- --checksum opensocrates-1.2.0-claude-plugin.zip.sha256
325
+ --asset opensocrates-1.3.0-claude-plugin.zip \
326
+ --checksum opensocrates-1.3.0-claude-plugin.zip.sha256
229
327
  ```
230
328
 
231
329
  Replace `claude` with `antigravity`, `codex`, `cursor`, `grok`, or `opencode` for the matching package.
@@ -240,7 +338,7 @@ what is installed, remove it explicitly:
240
338
  ```bash
241
339
  claude plugin uninstall opensocrates@OpenSocrates --scope user
242
340
  claude plugin marketplace remove OpenSocrates --scope user
243
- npx --yes opensocrates@1.2.0 install --host claude
341
+ npx --yes opensocrates@1.3.0 install --host claude
244
342
  ```
245
343
 
246
344
  Updating a managed v1.1.0 Claude installation replaces the complete package
@@ -249,31 +347,42 @@ commands are therefore removed rather than left visible as stale entries.
249
347
 
250
348
  ## Use
251
349
 
252
- Use Claude, Codex, or OpenCode normally. Before a submitted prompt, OpenSocrates may
253
- intervene when the request needs judgment, interpretation, diagnosis,
254
- explanation, planning, evidence reconciliation, or another structured
255
- reasoning process. On Claude/Codex native-runtime surfaces it:
350
+ Use any supported host normally. OpenSocrates may participate when a request
351
+ needs judgment, interpretation, diagnosis, explanation, planning, evidence
352
+ reconciliation, or another structured reasoning process. On Claude/Codex
353
+ native-runtime surfaces it:
256
354
 
257
- 1. starts a fresh, non-persistent selector in the current host;
258
- 2. chooses from the authored 48-system catalog;
259
- 3. writes the complete selected content to an owner-only Markdown file;
260
- 4. adds a bounded hidden context message with each method ID, content revision,
261
- and, when they fit, its exact `Do not use when` and `Stop conditions`; and
262
- 5. requires the active task to read the complete file before applying the
263
- method and to end a grounded response with an exact audit line such as
264
- `OpenSocrates grounding: triangulation@1`.
355
+ 1. emits lightweight native discovery guidance without choosing an initial method;
356
+ 2. lets the active agent retrieve eligible complete methods when a judgment changes;
357
+ 3. preserves goals, permissions, evidence/stop requirements and requested output;
358
+ 4. offers Guided locale-specific presentation rules without rewriting protected content; and
359
+ 5. distinguishes delivery and agent-reported availability from actual application.
360
+
361
+ Use the installed launcher with `decision codex --stream` for a persistent volatile
362
+ lookup session; a new process or context must not inherit an old read assertion.
265
363
 
266
364
  On OpenCode, the dependency-free stable hook instead selects locally and
267
- injects one complete authored procedure directly into the same message turn;
268
- it creates no artifact and makes no extra model call. See the
365
+ injects one complete authored procedure directly into the same message turn.
366
+ That compiled procedure starts with its three teacher questions, and the native
367
+ `/opensocrates` fallback reads the same procedure without a duplicate preamble;
368
+ the bridge creates no artifact and makes no extra model call. See the
269
369
  [OpenCode support boundary](docs/opencode-support.md).
270
370
 
371
+ Antigravity and Cursor use their explicit content skills; Grok Build uses native
372
+ skill selection or `/opensocrates`. In all three packages, a generated complete
373
+ procedure begins with teacher questions for the active agent to settle before
374
+ using the rest as a check. These content-only paths make no OpenSocrates hook
375
+ delivery claim.
376
+
271
377
  After installing for Codex, open one interactive Codex session and approve the
272
- OpenSocrates hooks before relying on automatic selection. Until that one-time
378
+ OpenSocrates hooks before relying on native discovery guidance. Until that one-time
273
379
  approval, non-interactive surfaces such as `codex exec` may silently continue
274
380
  without running the untrusted hooks.
275
381
 
276
- Claude hook surfaces prefer an owner-only `.opensocrates` artifact area inside
382
+ ### Retained legacy receipt adapter
383
+
384
+ The following describes the compatibility selector path, not the v1.3 default
385
+ discovery-only hook. In that legacy path, Claude hook surfaces prefer an owner-only `.opensocrates` artifact area inside
277
386
  the current workspace so Claude can read the selected content without an extra
278
387
  directory permission. Its self-contained `.gitignore` keeps the area out of
279
388
  `git status`; files are removed on turn/session cleanup. If the workspace is
@@ -303,15 +412,17 @@ injection and does not block the user's task.
303
412
  On Claude, explicitly invoke the same controller when desired:
304
413
 
305
414
  ```text
306
- /opensocrates <request>
307
- /opensocrates auto <request>
308
- /opensocrates trace
309
- /opensocrates status
415
+ /opensocrates:opensocrates <request>
416
+ /opensocrates:opensocrates auto <request>
417
+ /opensocrates:opensocrates trace
418
+ /opensocrates:opensocrates status
310
419
  ```
311
420
 
312
- Only `/opensocrates` appears in Claude's skill and command UI. The controller
313
- selects and loads internal method references; users do not need to browse the
314
- 48-system implementation catalog.
421
+ Those commands are for the Claude Code/Cowork plugin. The standalone Chat ZIP
422
+ uses `/opensocrates` instead. The plugin's registered command inventory names
423
+ `/opensocrates:opensocrates`; do not use a bare alias as source evidence. The
424
+ controller selects and loads internal method references, so users do not need
425
+ to browse the 48-system implementation catalog.
315
426
 
316
427
  The Claude selector uses one `claude --safe-mode -p` process with no session
317
428
  persistence. Safe mode disables user, project, and plugin customizations:
@@ -419,6 +530,7 @@ make lint
419
530
  make generated-check
420
531
  make content-check
421
532
  make docs-check
533
+ make governance-check
422
534
  make security-scan
423
535
  make smoke
424
536
  npm test
@@ -435,6 +547,7 @@ make release-check
435
547
  | `plugin-src/antigravity/` | Experimental Antigravity content-only plugin templates |
436
548
  | `plugin-src/cursor/` | Experimental Cursor Agent Plugin templates |
437
549
  | `plugin-src/grok/` | Native Grok Build content-only plugin templates |
550
+ | `plugin-src/opencode/` | OpenCode stable bridge and native skill templates |
438
551
  | `schemas/source/` | Canonical schema definitions |
439
552
  | `schemas/v1/` | Generated, versioned public schemas |
440
553
  | `installer/` | Dependency-free Node.js GitHub/npx installer |
@@ -460,3 +573,5 @@ license notice are preserved.
460
573
 
461
574
  OpenSocrates is an independent open-source project and is not affiliated with
462
575
  or endorsed by Anthropic or OpenAI.
576
+
577
+ Chat standalone export: **archive contract validated; live activation unvalidated.**
package/SECURITY.md CHANGED
@@ -34,6 +34,17 @@ severity, and the availability of a safe fix.
34
34
 
35
35
  ## Security boundary
36
36
 
37
+ The v1.3 default Claude/Codex submission entry emits discovery guidance only. It
38
+ selects no initial method, starts no selector model call and creates no grounding
39
+ artifact that an abandoned candidate must read at Stop. The decision command
40
+ loads fixed canonical content, keeps only volatile context-scoped delivery
41
+ identities and agent availability assertions, and never claims applied reasoning
42
+ from an assertion. It does not use CWD-controlled fallback content when its fixed
43
+ package/source content pair is absent. No disk state, raw prompt, conversation,
44
+ reasoning, screenshot, authentication call or telemetry is added by that command.
45
+ The selector and native receipt details below describe retained compatibility
46
+ adapters; they must not be presented as observations made by the new default path.
47
+
37
48
  OpenSocrates 1.x:
38
49
 
39
50
  - runs its integration locally through Claude or Codex and uses the user's
package/VERSION CHANGED
@@ -1 +1 @@
1
- 1.2.0
1
+ 1.3.0