Tags: oratis/deepcode

v0.3.0 — workspace governance layer

What the agent may touch, what it changed, and how to undo it.

Breaking: the CLI publishes as @deepcode/cli; unattended runs no longer inherit
a permissive permissions.defaultMode.

Added: file contract (path-axis permissions), change ledger with rollback,
No Silent Apply ceremony, runtime/capabilities protocol method, /combo skill
distillation, per-job trigger profiles.

See CHANGELOG.md for the full entry, docs/research/floatboat.md for the research
this derives from, and docs/FLOATBOAT_ADOPTION_PLAN.md for what was rejected and
where the implementation diverged from the plan.