RoleWeave v0.3.0 delivery — R1

DEC-ROLEWEAVE-358-001 · 2026-09-18T12:07:51Z · status=in-progress

Scope and decision

Publish the RoleWeave 0.3.0 desktop distribution. Candidate baseline: d5e028472a64a39465ebcc2f0b3c8c262988cbe1 (merged PR #320, current main). The final release commit will be the reviewed release-prep PR's squash commit, recorded before allocating the tag. Version 0.3.0 and its tag are currently unused on every declared channel (tag ref and GitHub Release both absent, verified 2026-09-18).

Delta since v0.2.0 (tag peels to c51621bbae03841d679cd585b79586bfbd415ea9, PR #272): #294/#295 conversation refinements (copy, re-edit, session history, JSONC settings drafts), #292/#293 post-creation employee profile editing, #289 persistent locked Agent selection, #305/#307 conversation restart control, #308 workspace reveal in the OS file manager, #316 initialize existing folders plus rail collapse polish, #312 frequency-ordered module rail, #329/#330 native phone shell and #334/#335/#336/#337 per-platform iOS/Android/HarmonyOS shells, #328/#344 Ontology Runtime R2 contract slice, #302/#303 GitHub-operations employee team, #276 bundled WorkBuddy engine, #283 encrypted host credential settings, #246/#255 semantic color configuration, #331/#297/#298/#301/#304 simplified employee creation, #319/#320 MCP grant warnings and rejections, #309/#318 oversized-body drain reporting, #326 budget declaration visibility, #269/#270 turn timeout and indeterminate copy, #237/#251 group message expansion, #274/#278 group dismiss with quota recovery, #324/#291 localization, #285 unified visual language, #263/#264/#282 org-tree drag fixes, #287 avatar clipping, #277 hire drawer alignment, plus server refactors #254/#280/#281 and changelog housekeeping #253/#273 that need no user-facing bullets. The versioned changelog section moves the full [Unreleased] history into [0.3.0] — 2026-09-18 verbatim; old work is not relabeled as new.

No release-workflow change is required: the reviewed release.yml on main remains the release machinery.

Declared channels

Supported architectures are macOS Apple Silicon arm64 and Windows x64. Apple notarization and Windows Authenticode signing are not claimed; company-level signing decisions remain open. The macOS update manifest carries an independent Ed25519 signature; that is not Apple code signing. Publishing v0.3.0 exposes its metadata to v0.2.0 clients checking the macOS update channel.

Tag protection readback

• immutable-release-tags (repository ruleset 22240705, active): conditions refs/tags/v* include-only; update and deletion rules; no bypass actors. Read back 2026-09-18.
• release-tag-creation (repository ruleset 22240738, active): conditions refs/tags/v* include-only; creation rule; single bypass actor RepositoryRole admin (bypass mode: always). Read back 2026-09-18. Tag creation will be a single annotated tag by the least-privileged eligible actor after the pre-tag gate.

Acceptance and verification

• AC-001: the release-prep PR passes all required checks on its exact final head and is squash-merged through protected main without an administrator bypass.
• AC-002: the pre-tag gate proves the recorded squash commit resolves exactly, is reachable from origin/main, and v0.3.0 is unused as tag and release; the annotated tag v0.3.0 peels to exactly that commit.
• AC-003: the release workflow run on the tag completes preflight, both build legs and publish; the release is public (not draft, not prerelease) and uses the frozen notes bytes.
• AC-004: every declared asset is read back from the API (nonzero sizes, digests, restored update-metadata names) and the macOS update manifest signature is verified. No reuse or overwriting of old releases/tags.

Rollback: before publication, halt and leave this record open. If a published artifact is defective, ship a new patch version; never move an immutable tag or replace published bytes.

Revision history

• R1 · 2026-09-18T12:07:51Z: release record opened for v0.3.0. Implementation: release-prep PR to follow. This record is not a completion claim.