release: publish v4.0.8 Right Context. Right Worker

README.md

@@ -16,7 +16,7 @@
 
 <p align="center">
   <a href="#quickstart"><img src="https://img.shields.io/badge/Interface-CLI%20First-111111?style=for-the-badge" alt="CLI first"></a>
-  <a href="https://github.com/sheawinkler/ContextLattice/releases/tag/v4.0.7"><img src="https://img.shields.io/badge/Release-v4.0.7-292929?style=for-the-badge" alt="ContextLattice v4.0.7"></a>
+  <a href="https://github.com/sheawinkler/ContextLattice/releases/tag/v4.0.8"><img src="https://img.shields.io/badge/Release-v4.0.8-292929?style=for-the-badge" alt="ContextLattice v4.0.8"></a>
   <a href="#quickstart"><img src="https://img.shields.io/badge/Runtime-Local%20First-404040?style=for-the-badge" alt="Local-first runtime"></a>
   <a href="LICENSE"><img src="https://img.shields.io/badge/License-Apache%202.0-575757?style=for-the-badge" alt="Apache License 2.0"></a>
 </p>
@@ -260,7 +260,7 @@ Security reports follow [SECURITY.md](SECURITY.md).
 | Harness and app integration | [Integration guide](https://contextlattice.io/integration.html) |
 | Architecture and scaling | [Architecture](https://contextlattice.io/architecture.html) · [Scaling memory](https://contextlattice.io/scaling-memory.html) |
 | Troubleshooting | [Troubleshooting guide](https://contextlattice.io/troubleshooting.html) |
-| Current behavior and release evidence | [Updates](https://contextlattice.io/updates.html) · [v4.0.7 release notes](docs/releases/v4.0.7.md) |
+| Current behavior and release evidence | [Updates](https://contextlattice.io/updates.html) · [v4.0.8 release notes](docs/releases/v4.0.8.md) |
 | Roadmap | [Public roadmap](https://contextlattice.io/roadmap.html) |
 | Agent hooks | [Agent hook contract](docs/agent-hooks.md) |
 | Retrieval trust | [Retrieval receipts](docs/retrieval-receipts.md) |
@@ -269,7 +269,7 @@ Security reports follow [SECURITY.md](SECURITY.md).
 | Local inference | [Local model options](docs/runtime/local-model-options.md) |
 | Full repository-backed manual | [Public field manual](docs/wiki/README.md) |
 
-The current release baseline is [`v4.0.7`](https://github.com/sheawinkler/ContextLattice/releases/tag/v4.0.7).
+The current release baseline is [`v4.0.8`](https://github.com/sheawinkler/ContextLattice/releases/tag/v4.0.8).
 
 ## License
 

config/commercial_truth.v1.json

@@ -4,8 +4,8 @@
   "contract_version": 1,
   "product": {
     "name": "ContextLattice",
-    "version": "4.0.7",
-    "stable_tag": "v4.0.7",
+    "version": "4.0.8",
+    "stable_tag": "v4.0.8",
     "release_train": "4.0",
     "category": "local_first_agent_intelligence_layer",
     "canonical_description": "The local-first intelligence layer that gives AI agents durable continuity, explainable retrieval, portable context, and verified learning across harnesses.",

contextlattice-dashboard/lib/billing/commercial.generated.ts

@@ -2,15 +2,15 @@
 
 export type CommercialPlanId = "free" | "starter" | "team" | "operator" | "enterprise";
 
-export const COMMERCIAL_CONTRACT_SHA256 = "2162fc8e0ec97cd0a7024117c37e9b7819589993826a850c8a3d48e070d723da";
+export const COMMERCIAL_CONTRACT_SHA256 = "d8b69f66ecb77b86365357ab85553bb67062cd4aefe00c8421b120a51a5ecbab";
 export const COMMERCIAL_TRUTH = {
   "schema_id": "contextlattice_commercial_truth.v1",
   "schema_version": 1,
   "contract_version": 1,
   "product": {
     "name": "ContextLattice",
-    "version": "4.0.7",
-    "stable_tag": "v4.0.7",
+    "version": "4.0.8",
+    "stable_tag": "v4.0.8",
     "release_train": "4.0",
     "category": "local_first_agent_intelligence_layer",
     "canonical_description": "The local-first intelligence layer that gives AI agents durable continuity, explainable retrieval, portable context, and verified learning across harnesses.",
@@ -777,7 +777,7 @@ export const COMMERCIAL_TRUTH = {
       ]
     }
   ],
-  "contract_sha256": "2162fc8e0ec97cd0a7024117c37e9b7819589993826a850c8a3d48e070d723da"
+  "contract_sha256": "d8b69f66ecb77b86365357ab85553bb67062cd4aefe00c8421b120a51a5ecbab"
 } as const;
 export const COMMERCIAL_PLANS = COMMERCIAL_TRUTH.plans;
 

docs/evals/v4.0.8-worker-identity-retention.json

@@ -3,7 +3,7 @@
   "feature": "external_task_worker_identity_retention",
   "lane": "shared_client_paid_private_runtime",
   "release_train": "v4.0.8",
-  "recorded_at": "2026-08-06T01:23:58Z",
+  "recorded_at": "2026-08-06T01:46:13Z",
   "issue": "https://github.com/sheawinkler/http-context-and-memory-orchestrator/issues/828",
   "objective": "Retain the exact resolved worker identity and prevent named external workers from claiming tasks assigned to another runner.",
   "baseline": {
@@ -55,9 +55,10 @@
     "agent_profile_parity": "passed_worktree_origin_public_public_paid",
     "open_core_boundary": "passed_zero_findings",
     "agent_context_audit": "change_relevant_checks_passed_overall_exit_1_from_preexisting_context_size_budget",
-    "cross_lane_projection": "pending",
-    "live_runtime": "pending",
-    "release": "pending"
+    "cross_lane_projection": "passed_source_42627dfd_public_62002d9e_public_paid_a2a48b58",
+    "live_runtime": "passed_isolated_source_bound_gateway_query_body_conflict_foreign_priority_and_persisted_receipt",
+    "release_readiness": "passed_local_candidate_gates",
+    "release_publication": "pending_until_immutable_tags_and_release_assets_exist"
   },
   "cost": {
     "provider_calls": 0,
@@ -80,7 +81,7 @@
   },
   "tool_calls": {
     "claim_http_requests_per_poll": 1,
-    "runtime_process_restarts": 0,
+    "runtime_process_restarts": 2,
     "runtime_container_restarts": 0,
     "unrelated_process_or_container_restarts": 0
   },
@@ -108,6 +109,12 @@
       "status": "preexisting_out_of_scope",
       "failure": "The active-user audit exits one because existing global skills and always-loaded instruction files exceed the configured size budgets.",
       "resolution": "No out-of-scope user configuration was changed; all change-relevant contract, hook, profile, installer, provider, and schema checks passed."
+    },
+    {
+      "stage": "isolated_runtime_build_identity",
+      "status": "resolved",
+      "failure": "The first isolated binary was built without release identity linker values, so its health payload correctly reported source_bound=false.",
+      "resolution": "Stop only that exact isolated PID after dependent inspection, rebuild from source commit 42627dfdf30b668a58928188d7246602cc1dde4e and tree 0e8c921135428e98602b20acd6f6e5f7b76972d9 with source-bound linker values, restart on the isolated state root, and require the exact identity in health before exercising task claims."
     }
   ],
   "reproduction": [
@@ -117,6 +124,8 @@
     "uv run --with pytest python -m pytest -q archive/services/orchestrator_legacy_python/tests/test_task_agent_worker_script.py",
     "python3 -m py_compile scripts/task_agent_worker.py scripts/tests/test_task_agent_worker_claim_identity.py",
     "python3 -m json.tool docs/evals/v4.0.8-worker-identity-retention.json",
+    "source-bound isolated gateway: enqueue a priority-100 codex task and priority-10 hermes-agent task, require a conflicting dual identity to return 400 without mutation, then require hermes-agent to claim only its matching task",
+    "source-bound isolated gateway: read the claimed task and owner-only task ledger, require worker=hermes-agent in the row, active lease, and latest claim-event metadata while the foreign higher-priority task remains queued",
     "git diff --check"
   ],
   "rollback": {

docs/public_overview/cli.html

@@ -30,7 +30,7 @@
       <h1>Install, launch, and validate Context Lattice from terminal in minutes.</h1>
       <p class="sub">Use these commands as the canonical local flow for public and premium lanes, including prompt-ready context compilation before expensive agent reasoning.</p>
       <!-- BEGIN GENERATED COMMERCIAL TRUTH: cli-release-summary -->
-      <p class="muted-note">Current release: <code>v4.0.7</code>. The CLI is the primary product interface; dashboard, HTTP, and MCP remain companion surfaces.</p>
+      <p class="muted-note">Current release: <code>v4.0.8</code>. The CLI is the primary product interface; dashboard, HTTP, and MCP remain companion surfaces.</p>
       <!-- END GENERATED COMMERCIAL TRUTH: cli-release-summary -->
     </section>
 
@@ -113,7 +113,7 @@ <h3>Installed wrappers for agents/operators</h3>
 contextlattice_pack "what should this agent know before solving the task?" --project contextlattice --pretty
 contextlattice_retrieval_plan "what evidence does this task owe?" --project contextlattice --pretty
 <!-- BEGIN GENERATED COMMERCIAL TRUTH: cli-release-claim -->
-contextlattice_claim_write --project contextlattice --subject release --predicate current_version --object 4.0.7 --pretty
+contextlattice_claim_write --project contextlattice --subject release --predicate current_version --object 4.0.8 --pretty
 <!-- END GENERATED COMMERCIAL TRUTH: cli-release-claim -->
 contextlattice_claim_query "what is current?" --project contextlattice --include-superseded --pretty
 contextlattice_synthesis_pack_v2 "what can the evidence prove?" --project contextlattice --pretty

docs/public_overview/commercial-truth.json

@@ -4,8 +4,8 @@
   "contract_version": 1,
   "product": {
     "name": "ContextLattice",
-    "version": "4.0.7",
-    "stable_tag": "v4.0.7",
+    "version": "4.0.8",
+    "stable_tag": "v4.0.8",
     "release_train": "4.0",
     "category": "local_first_agent_intelligence_layer",
     "canonical_description": "The local-first intelligence layer that gives AI agents durable continuity, explainable retrieval, portable context, and verified learning across harnesses.",
@@ -900,6 +900,6 @@
       ]
     }
   ],
-  "contract_sha256": "2162fc8e0ec97cd0a7024117c37e9b7819589993826a850c8a3d48e070d723da",
-  "commercial_truth_sha256": "ec4d6a9e81a1e9bd4f67630134c5b8fbe6d0dca1c20b986e56c1f701e10c94b7"
+  "contract_sha256": "d8b69f66ecb77b86365357ab85553bb67062cd4aefe00c8421b120a51a5ecbab",
+  "commercial_truth_sha256": "ef3da3fd128aa6f7a8306a030e97091fe505ee4b687432482a913111d207d8ab"
 }

docs/public_overview/docs/cli/index.html

@@ -31,7 +31,7 @@
 
   <div class="docs-tape" aria-label="Documentation status">
     <span><strong>Manual</strong> Repository-backed</span>
-    <span><strong>Release</strong> v4.0.7</span>
+    <span><strong>Release</strong> v4.0.8</span>
     <span><strong>Interface</strong> CLI first</span>
     <span><strong>Source</strong> Public/main</span>
   </div>
@@ -152,7 +152,7 @@ <h2 id="exit-discipline">Exit discipline<a class="heading-anchor" href="#exit-di
   </main>
 
   <footer class="site-footer">
-    <span>ContextLattice / docs / v4.0.7</span>
+    <span>ContextLattice / docs / v4.0.8</span>
     <nav aria-label="Footer">
       <a href="/installation.html">Install</a>
       <a href="/troubleshooting.html">Troubleshoot</a>

docs/public_overview/docs/concepts/index.html

@@ -31,7 +31,7 @@
 
   <div class="docs-tape" aria-label="Documentation status">
     <span><strong>Manual</strong> Repository-backed</span>
-    <span><strong>Release</strong> v4.0.7</span>
+    <span><strong>Release</strong> v4.0.8</span>
     <span><strong>Interface</strong> CLI first</span>
     <span><strong>Source</strong> Public/main</span>
   </div>
@@ -117,7 +117,7 @@ <h2 id="next">Next<a class="heading-anchor" href="#next" aria-label="Link to Nex
   </main>
 
   <footer class="site-footer">
-    <span>ContextLattice / docs / v4.0.7</span>
+    <span>ContextLattice / docs / v4.0.8</span>
     <nav aria-label="Footer">
       <a href="/installation.html">Install</a>
       <a href="/troubleshooting.html">Troubleshoot</a>

docs/public_overview/docs/getting-started/index.html

@@ -31,7 +31,7 @@
 
   <div class="docs-tape" aria-label="Documentation status">
     <span><strong>Manual</strong> Repository-backed</span>
-    <span><strong>Release</strong> v4.0.7</span>
+    <span><strong>Release</strong> v4.0.8</span>
     <span><strong>Interface</strong> CLI first</span>
     <span><strong>Source</strong> Public/main</span>
   </div>
@@ -130,7 +130,7 @@ <h2 id="next">Next<a class="heading-anchor" href="#next" aria-label="Link to Nex
   </main>
 
   <footer class="site-footer">
-    <span>ContextLattice / docs / v4.0.7</span>
+    <span>ContextLattice / docs / v4.0.8</span>
     <nav aria-label="Footer">
       <a href="/installation.html">Install</a>
       <a href="/troubleshooting.html">Troubleshoot</a>

docs/public_overview/docs/index.html

@@ -31,7 +31,7 @@
 
   <div class="docs-tape" aria-label="Documentation status">
     <span><strong>Manual</strong> Repository-backed</span>
-    <span><strong>Release</strong> v4.0.7</span>
+    <span><strong>Release</strong> v4.0.8</span>
     <span><strong>Interface</strong> CLI first</span>
     <span><strong>Source</strong> Public/main</span>
   </div>
@@ -104,7 +104,7 @@ <h2 id="product-and-support-links">Product and support links<a class="heading-an
   </main>
 
   <footer class="site-footer">
-    <span>ContextLattice / docs / v4.0.7</span>
+    <span>ContextLattice / docs / v4.0.8</span>
     <nav aria-label="Footer">
       <a href="/installation.html">Install</a>
       <a href="/troubleshooting.html">Troubleshoot</a>

docs/public_overview/docs/integrations/index.html

@@ -31,7 +31,7 @@
 
   <div class="docs-tape" aria-label="Documentation status">
     <span><strong>Manual</strong> Repository-backed</span>
-    <span><strong>Release</strong> v4.0.7</span>
+    <span><strong>Release</strong> v4.0.8</span>
     <span><strong>Interface</strong> CLI first</span>
     <span><strong>Source</strong> Public/main</span>
   </div>
@@ -131,7 +131,7 @@ <h2 id="next">Next<a class="heading-anchor" href="#next" aria-label="Link to Nex
   </main>
 
   <footer class="site-footer">
-    <span>ContextLattice / docs / v4.0.7</span>
+    <span>ContextLattice / docs / v4.0.8</span>
     <nav aria-label="Footer">
       <a href="/installation.html">Install</a>
       <a href="/troubleshooting.html">Troubleshoot</a>

docs/public_overview/docs/operations/index.html

@@ -31,7 +31,7 @@
 
   <div class="docs-tape" aria-label="Documentation status">
     <span><strong>Manual</strong> Repository-backed</span>
-    <span><strong>Release</strong> v4.0.7</span>
+    <span><strong>Release</strong> v4.0.8</span>
     <span><strong>Interface</strong> CLI first</span>
     <span><strong>Source</strong> Public/main</span>
   </div>
@@ -127,7 +127,7 @@ <h2 id="next">Next<a class="heading-anchor" href="#next" aria-label="Link to Nex
   </main>
 
   <footer class="site-footer">
-    <span>ContextLattice / docs / v4.0.7</span>
+    <span>ContextLattice / docs / v4.0.8</span>
     <nav aria-label="Footer">
       <a href="/installation.html">Install</a>
       <a href="/troubleshooting.html">Troubleshoot</a>

docs/public_overview/docs/releases/index.html

@@ -31,7 +31,7 @@
 
   <div class="docs-tape" aria-label="Documentation status">
     <span><strong>Manual</strong> Repository-backed</span>
-    <span><strong>Release</strong> v4.0.7</span>
+    <span><strong>Release</strong> v4.0.8</span>
     <span><strong>Interface</strong> CLI first</span>
     <span><strong>Source</strong> Public/main</span>
   </div>
@@ -69,13 +69,13 @@
       </div>
       <div class="docs-prose">
         <h1 id="releases">Releases<a class="heading-anchor" href="#releases" aria-label="Link to Releases">#</a></h1>
-<p>The current public release baseline is <code>v4.0.7</code>. Release identity comes from the canonical commercial truth contract, signed or attributable artifacts, exact source SHAs, and deterministic verification—not from a page label alone.</p>
+<p>The current public release baseline is <code>v4.0.8</code>. Release identity comes from the canonical commercial truth contract, signed or attributable artifacts, exact source SHAs, and deterministic verification—not from a page label alone.</p>
 <h2 id="before-upgrading">Before upgrading<a class="heading-anchor" href="#before-upgrading" aria-label="Link to Before upgrading">#</a></h2>
 <ul class="doc-list"><li>Read the <a href="https://github.com/sheawinkler/ContextLattice/releases/latest" target="_blank" rel="noreferrer">release notes</a>.</li><li>Record the current source SHA, runtime profile, and storage locations.</li><li>Preserve a bounded backup or snapshot appropriate to the active backends.</li><li>Run a representative context query and save its evidence.</li><li>Confirm enough free space for images, indexes, and any migration.</li></ul>
 <h2 id="install-or-upgrade">Install or upgrade<a class="heading-anchor" href="#install-or-upgrade" aria-label="Link to Install or upgrade">#</a></h2>
 <p>Source operators should use the repository instructions and <code>gmake quickstart</code>. Homebrew and installer users should use the matching artifact from the same release.</p>
 <div class="code-frame"><div class="code-frame-label"><span>zsh</span></div><pre><code class="language-zsh">git fetch --tags origin
-git checkout v4.0.7
+git checkout v4.0.8
 gmake quickstart</code></pre></div>
 <p>Do not move a production checkout across releases while its owned runtime is writing. Follow the repository release notes when a version includes migration or rollback guidance.</p>
 <h2 id="verify-after-upgrade">Verify after upgrade<a class="heading-anchor" href="#verify-after-upgrade" aria-label="Link to Verify after upgrade">#</a></h2>
@@ -118,7 +118,7 @@ <h2 id="follow-updates">Follow updates<a class="heading-anchor" href="#follow-up
   </main>
 
   <footer class="site-footer">
-    <span>ContextLattice / docs / v4.0.7</span>
+    <span>ContextLattice / docs / v4.0.8</span>
     <nav aria-label="Footer">
       <a href="/installation.html">Install</a>
       <a href="/troubleshooting.html">Troubleshoot</a>