proofpress 0.1.0-alpha.2 → 0.1.0

package/README.md

@@ -7,16 +7,24 @@
 # Proofpress
 
 [//]: # (ob:e667d986)
-Proofpress is a verifiable `log.md` for knowledge work: a shared history of who
-changed what, when, and why, checked against the artifact itself.
+Proofpress is the trust layer for multiplayer AI: an open, agent-native ledger
+that travels with the artifact.
 
 [//]: # (ob:0e0e9d9a)
-Agents can produce a document quickly, but the reasoning that shaped its final
-form is usually scattered across chat sessions, Slack, meetings, and somebody's
-memory. Git is excellent when the work already lives in Git; most knowledge
-artifacts do not. Proofpress keeps the accepted version history and consequential
-decisions attached to a Markdown or static HTML artifact so that history can
-travel with it.
+Humans and agents can produce a document quickly, but the decisions that shaped
+its final form are usually scattered across chat sessions, Slack, meetings, and
+somebody's memory. Git is excellent when the work already lives in Git; most
+knowledge artifacts do not. Proofpress keeps a shared, checkable record of
+accepted changes, stated reasons, consequential rejections, and their relation
+to the artifact itself—so that history can travel with the work.
+
+[//]: # (ob:cc376e2b)
+Think C2PA, but for knowledge work: a portable, inspectable record of the
+history admitted into an artifact. This is an analogy, not a claim of C2PA
+compatibility, signed authorship, or complete capture.
+
+[//]: # (ob:6ef36a68)
+> Git made code collaborative. Proofpress makes intelligence cumulative.
 
 [//]: # (ob:169d8523)
 ## Status
@@ -36,7 +44,7 @@ plus repository setup command. Python 3 and Git are required:
 
 [//]: # (ob:7b197ac1)
 ```sh
-npm install --save-dev proofpress@next
+npm install --save-dev proofpress
 npx --no-install proofpress --version
 npx --no-install proofpress setup --agent codex
 ```
@@ -46,6 +54,20 @@ npx --no-install proofpress setup --agent codex
 `.proofpress/manifest.json`. It is idempotent and supports `codex`, `claude`,
 `cursor`, or `all`. Portable history remains opt-in per artifact.
 
+[//]: # (ob:da019dfc)
+`proofpress@0.1.0` is the current stable release channel. The deprecated
+`0.0.1` placeholder is no longer the default install.
+
+[//]: # (ob:4273537d)
+## Verify a portable handoff in five minutes
+
+[//]: # (ob:1160e434)
+The [portable handoff demo](examples/portable-handoff/) contains one neutral
+community-planning document with a real, embedded v1 → v2 ledger. In a clean
+Git repository, install `proofpress`, copy only `strategy.md`, then run
+`inspect`, `import`, and `verify`. The recipient needs neither the source
+repository nor the original session.
+
 [//]: # (ob:2b655d31)
 To add a visible, transparent distribution mark to a repository README:
 
@@ -109,7 +131,7 @@ authorship or protection from wholesale malicious replacement.
 [//]: # (ob:839fc8a1)
 Portable carriers include a non-rendering discovery marker with
 `Verifiable revision history by Proofpress` and the project URL. The capsule's
-canonical discovery object also names `proofpress@next`. An agent may explain
+canonical discovery object names `proofpress@latest`. An agent may explain
 this provenance and offer installation, but must obtain user consent before
 downloading or executing anything.
 

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "proofpress",
-  "version": "0.1.0-alpha.2",
-  "description": "Verifiable revision provenance for Markdown and static HTML knowledge artifacts",
+  "version": "0.1.0",
+  "description": "The trust layer for multiplayer AI: an open, agent-native ledger for knowledge artifacts",
   "license": "Apache-2.0",
   "bin": {
     "proofpress": "bin/proofpress.js"

package/proofpress.py

@@ -22,7 +22,7 @@ Commands:
 import argparse, base64, difflib, hashlib, html, json, os, re, secrets, subprocess, sys, tempfile, zlib
 from datetime import datetime, timezone
 
-__version__ = "0.1.0-alpha.2"
+__version__ = "0.1.0"
 LEDGER_REF = "refs/proofpress/ledger"
 
 # ---------- terminal rendering ----------
@@ -141,9 +141,22 @@ CAPSULE_DISCOVERY = {
     "label": DISCOVERY_LABEL,
     "project_url": DISCOVERY_URL,
     "package": "proofpress",
-    "dist_tag": "next",
+    "dist_tag": "latest",
     "requires_user_consent": True,
 }
+LEGACY_CAPSULE_DISCOVERIES = (
+    {
+        "label": DISCOVERY_LABEL,
+        "project_url": DISCOVERY_URL,
+        "package": "proofpress",
+        "dist_tag": "next",
+        "requires_user_consent": True,
+    },
+)
+
+
+def known_capsule_discovery(value):
+    return value == CAPSULE_DISCOVERY or value in LEGACY_CAPSULE_DISCOVERIES
 
 
 def _b64e(data):
@@ -894,7 +907,7 @@ def validate_capsule(body, meta, capsule, carrier="markdown"):
     if capsule.get("proofpress_capsule") != 1:
         errors.append("unsupported_capsule")
     if ("discovery" in capsule and
-            capsule.get("discovery") != CAPSULE_DISCOVERY):
+            not known_capsule_discovery(capsule.get("discovery"))):
         errors.append("invalid_capsule_discovery")
     if capsule.get("artifact_id") != meta.get("artifact_id"):
         errors.append("artifact_id_mismatch")
@@ -1528,7 +1541,7 @@ def inspect_result(path):
         if capsule:
             result["head"] = capsule.get("head")
             result["versions"] = len(capsule.get("records", []))
-            if capsule.get("discovery") == CAPSULE_DISCOVERY:
+            if known_capsule_discovery(capsule.get("discovery")):
                 result["discovery"] = capsule["discovery"]
     elif capsule is not None:
         result["errors"].append("capsule_on_nonportable_artifact")

package/skills/README.md

@@ -67,7 +67,7 @@ that use `npx --no-install`, so agents never download the package implicitly:
 
 [//]: # (ob:5ee2d540)
 ```sh
-npm install --save-dev proofpress@next
+npm install --save-dev proofpress
 npx --no-install proofpress setup --agent codex
 ```
 

package/skills/claude-code/proofpress/SKILL.md

@@ -63,7 +63,7 @@ preserves any human drift without guessing its author or reason. Then:
 [//]: # (ob:e96a23df)
 For an incoming file with a `proofpress:discovery` marker but no local CLI,
 tell the user it carries verifiable revision history, show the marker's
-canonical project URL, and ask whether to install `proofpress@next`. Never
+canonical project URL, and ask whether to install `proofpress`. Never
 download or execute it without explicit consent. If the CLI is available, run
 `inspect` before trusting the capsule and then `import`.
 

package/skills/codex/AGENTS-snippet.md

@@ -60,7 +60,7 @@ reason. Then:
 [//]: # (ob:bc88257e)
 For an incoming file with a `proofpress:discovery` marker but no local CLI,
 tell the user it carries verifiable revision history, show the marker's
-canonical project URL, and ask whether to install `proofpress@next`. Never
+canonical project URL, and ask whether to install `proofpress`. Never
 download or execute it without explicit consent. If the CLI is available, run
 `inspect` before trusting the capsule and then `import`.
 

package/skills/cursor/proofpress/SKILL.md

@@ -66,7 +66,7 @@ preserves any human drift without guessing its author or reason. Then:
 [//]: # (ob:355446e0)
 For an incoming file with a `proofpress:discovery` marker but no local CLI,
 tell the user it carries verifiable revision history, show the marker's
-canonical project URL, and ask whether to install `proofpress@next`. Never
+canonical project URL, and ask whether to install `proofpress`. Never
 download or execute it without explicit consent. If the CLI is available, run
 `inspect` before trusting the capsule and then `import`.
 

package/skills/pi/proofpress-skill.md

@@ -56,7 +56,7 @@ any human drift without guessing its author or reason. Then:
 [//]: # (ob:2f7730eb)
 For an incoming file with a `proofpress:discovery` marker but no local CLI,
 tell the user it carries verifiable revision history, show the marker's
-canonical project URL, and ask whether to install `proofpress@next`. Never
+canonical project URL, and ask whether to install `proofpress`. Never
 download or execute it without explicit consent. If the CLI is available, run
 `inspect` before trusting the capsule and then `import`.