---
title: "Changelog"
---

> Documentation Index
> Fetch the complete documentation index at: https://nclsppr.github.io/project-foundation/llms.txt
> Use this file to discover all available pages before exploring further.

# Changelog

This file describes foundation versions. It is historical and non-normative.

## Unreleased

- Configures engineering skills to use GitHub Issues, the default triage labels, and one domain context backed by the existing decision records.
- Uses structured issue reads and explicit list limits so triage does not omit queued work.
- Adds `P20` to require English for all deliverables, communications, documentation, code comments, logs, and other technical content.
- Applies the principles of ASD-STE100 and applicable ISO/IEC/IEEE 24765 terminology without declaring formal conformance with ASD-STE100.
- Propagates the rule to adapters, documentation gates, and generated-pack tests.
- Migrates maintained documentation, templates, validation messages, and the Nimbus locale from French to English.
- Documents the invariant, its limited preservation cases, and its verification in ADR-0006.
- Adds `P21` to require safe, structured, and actionable first-party runtime log records.
- Requires a stable event name for machines and a short controlled-English message for people. It keeps public error codes separate from internal event names.
- Defines portable `DEBUG`, `INFO`, `WARN`, and `ERROR` semantics from operational effect. It requires one final failure record and prohibits message-text consumers.
- Adds data-minimization, correlation, audit separation, sampling, volume-protection, and alerting boundaries.
- Applies the logging contract to project templates, profiles, completion gates, bootstrap guidance, and generated-pack tests. ADR-0007 records the decision and external references.
- Adds an audience-filtered Nimbus publication build and rejects content outside the authorized visibility set.
- Publishes public and reference documentation through GitHub Pages with the correct repository base path. Internal and archive content remain excluded.
- Clears Astro and Nimbus content caches before each build so a filtered publication cannot retain a page from a previous complete build.
- Records the Project Foundation publication decision in ADR-0008 and links the deployed Nimbus site from the README.

## 0.5.2 - 2026-07-30

- Runs `scripts/check_compose.py` directly in the Foundation workflow and the generated project workflows before the canonical gate.
- Makes the documentation checker reject removal of the Compose integration from `scripts/verify.sh` or `.github/workflows/verify.yml`.
- Adds two adversarial tests that remove each call from a generated project.
- Keeps the trust boundary explicit. Only a GitHub rule that makes the workflow required prevents simultaneous changes to the check and workflow.

## 0.5.1 - 2026-07-30

- Runs the Compose documentation job in an anonymous workspace and mounts source files as read-only.
- Prevents the job that runs as root from leaving files that the runner user cannot replace during tag verification.
- Replaces `v0.5.0` as the recommended version. Its `main` run passes, but its tag run identified this Linux permission error.

## 0.5.0 - 2026-07-30

- Adds `P19`, an invariant that requires a root `compose.yaml` file and Docker Compose as the canonical path for integrated local execution.
- Adds `scripts/check_compose.py` to reject missing files, empty durable packs, external images without a digest, and long-running services without a health check.
- Generates `compose.yaml`, the Compose checker, and a GitHub Actions workflow in all four packs.
- Adds a finite service that is pinned by digest to verify the foundation documentation in Compose.
- Tests bypass attempts that remove the file, checker, or workflow. Also tests mutable images and missing health checks.
- Documents the decision in ADR-0005 and the migration from `v0.4.0`.
- Records the first actual adoption. Parkventory uses the `v0.4.0` snapshot, remains independent after a clean public clone, and passes its CI gate at SHA `d9a50adb04ad1c7e038d7c672723c6dd4bba07d4`.
- Marks adoption-test phase F02 as `done` before the Parkventory upgrade to this release.

## 0.4.0 - 2026-07-30

- Adds `P18`, an invariant that requires a commit and push for each coherent and verified work unit when the task permits repository changes.
- Requires `main` as the direct target when it is writable. Requires a dedicated branch when the canonical branch is protected or requires review.
- Prevents a local exception from silently keeping completed work only in the worktree or local history.
- Aligns `AGENTS.md` adapters, the definition of done, bootstrap, delivery evidence, adoption, and the release process with this discipline.
- Adds a bootstrap test that verifies propagation of `P18` and its operational implementation to all packs.
- Documents the decision in ADR-0004 and the migration from `v0.3.1`.

## 0.3.1 - 2026-07-27

- Corrects Nimbus guide links so that they remain valid in a generated project and do not depend on files specific to the Project Foundation repository.
- Adds the Nimbus build, search, and lint for a generated Full pack to the bootstrap tests.
- Verifies that the copied Nimbus lockfile remains identical to the release lockfile.
- Replaces `v0.3.0` as the recommended version for each new adoption.

## 0.3.0 - 2026-07-27

- Makes Nimbus mandatory in all packs, including Minimal.
- Adds the official Nimbus `0.6.3` scaffold, pinned `@cloudflare/nimbus-docs` `0.8.2`, and its npm lockfile.
- Pins `yaml` `2.9.0` to resolve the security advisory in the scaffold version.
- Adds a generic adapter that generates the Nimbus collection from classified Markdown files.
- Adds conversion tests, type checking, build, Pagefind, and Nimbus lint to `verify` and CI.
- Automatically enables `documentation-nimbus` during bootstrap and prevents its local removal.
- Supersedes ADR-0002 with ADR-0003 and documents the incompatible migration from `v0.2.0`.
- Requires Node `22.12.0` or later and npm to verify an adopted project.
- Makes `CHANGELOG.md` mandatory in all packs and requires an ADR to trace important product decisions.

## 0.2.0 - 2026-07-27

- Adds a contract that classifies each maintained Markdown file as public, internal, reference, or archive.
- Adds a manifest, complete catalog, and orphan Markdown check to all packs.
- Adds the Nimbus profile as an optional default for durable published documentation, without a web dependency in the core.
- Adds a procedure for adoption from the official repository and upgrade by tag and SHA.
- Prohibits silent changes to the vendored snapshot. A foundation challenge requires a change in the Project Foundation Git repository and a new release.
- Publishes the repository and its tags on `nclsppr/project-foundation` without adding a default license.

## 0.1.0 - 2026-07-26

- Creates invariants, defaults, and bootstrap rules.
- Adds the definition of done for each change type.
- Adds profiles for web, backend and data, production infrastructure, and experiments.
- Adds profiles for generated artifacts and dependency changes.
- Adds templates for the project, brief, status, roadmap, agents, ADR, design, runbook, and delivery evidence.
- Adds Minimal, Standard, Full, and Critical packs with a safe initializer.
- Adds local and CI verification for the foundation.
- Rejects bootstrap from a dirty worktree and removes credentials from provenance.
- Verifies structure, profiles, and placeholders in generated projects.
- Adds a canonical version that is checked against the repository, changelog, and tag.
- Documents the cross-audit of Surplasse, the personal website, Papers Empire, and the VPS runbook.

Source: https://nclsppr.github.io/project-foundation/changelog/index.mdx