# Changelog

All notable changes to this project are recorded here. Dates use ISO 8601.

## [Unreleased]

### Fixed

- Static review-document footers now link to the existing browser-rendered
  licence and attribution notice instead of the extensionless repository
  `LICENSE` path. This keeps the MIT boundary visible in browsers that block
  extensionless file responses, without changing corpus or semantic bytes.

### Added

- Governed static-document publication through validated frontmatter,
  deterministic safe HTML, an automatically generated document index and a
  source-to-output SHA-256 manifest. A changed-path dependency gate permits a
  smaller local validation route only when the diff is confined to the
  documentation overlay and fails closed for corpus, semantic, schema,
  workflow or other changes. The draft product requirements are nominated and
  rendered for the review library. Pull requests and merges remain
  publication-free; the frozen corpus is not rebuilt or modified. The base
  transporter now recovers a drifted documentation handoff from the exact
  verified publication commit, preventing later repository documentation from
  changing any manifest-bound base byte.

- HTML-first AI retrieval layer generated deterministically from the governed
  journey projection: one compact catalogue and 293 complete family records
  carrying stable IDs, explicit applicability, ordinary and exception steps,
  official source URLs, provenance, review state and limitations. This fixes a
  public-review finding in which Microsoft 365 Copilot could retrieve short
  narrative material but not the 7.2 MB raw projection, and therefore
  correctly abstained on several requested fields. The full projection remains
  unchanged as the canonical audit artefact. Provider-neutral prompts now use
  catalogue selection followed by one small complete record, with a visible
  save-and-attach fallback for approved organisational use.

- Owner-authorised Explore OKF public-review surface comprising the root
  `explore-okf.json` descriptor, secure standalone `en-GB` journey view,
  governed projection and schema, endpoint-label index, data manifest, review
  hub and a curated beginner-readable documentation library. The overlay
  replaces only the root landing page after matching its frozen SHA-256 and
  adds all other review targets without changing the exact `okf-explorer.json`
  descriptor or any corpus and relationship-runtime byte. The documentation-
  only re-freeze synchronises affected browser handoffs and their manifest
  bindings. The interface
  exposes all 293 families, 24 domains, 48 processes, 586 episodes, 881 steps
  and 879 linked official sources with explicit ordering, jurisdiction, review
  and provenance boundaries. Local deterministic build/check, publication-
  overlay, documentation, schema, security and unit validation pass. The
  surface remains exploratory, noindex and not release-grade; exact public URLs
  remain unverified until the authorised deployment passes browser checks.
  The learning route includes provider-neutral copy-and-paste AI prompts that
  use direct public entry points, require evidence-bearing answers and abstention,
  warn against personal information and treat embedded commands as untrusted
  data rather than executable instructions.
  British English is used throughout affected prose; exact schema values,
  identifiers and legacy filenames retain their contract spellings.

- Provider-neutral AI-consumer gold pack, structured answer contract, bounded
  offline evaluator and isolated two-condition runner for all 104 governed
  competency questions. The answer-blind development preflight records exact
  runner, prompt, schema, question-source, descriptor, projection and
  publication-closure identities. Local answer-blind development runs were
  used to diagnose prompt, jurisdiction and decision-boundary ambiguities; the
  receipt boundary does not support a published behavioural result. Two later
  no-retry comparison attempts were preserved privately
  and stopped before completion. The evaluator does not yet bind each supplied
  answer to its immutable runner receipt, so no response counts, scores or
  model comparison from those attempts are published as evidence. Raw model
  prose and run artefacts remain ignored. All 104 questions are now
  development-calibration material, promotion claims are disabled, and a new
  held-out set, receipt binding and independent review are required for any
  future performance or product-promotion claim.

- A 1,814-file publication freeze for the rich relationship runtime generated
  at reviewed main commit `c38f927…`. The manifest pins every served SHA-256,
  262 rich-runtime files and the updated population-assurance identity without
  changing semantic authority, corpus scope, release grade or the zero-snapshot
  boundary. The manual workflow now requires the exact protected-main merge
  commit and will not deploy on a pull request or ordinary merge.

- Cross-repository OKF 0.2 semantic contract in `okf.semantic.json` plus
  repository-local agent guidance for the additive Bundle Wiki YAML-LD
  profile. The deterministic large-corpus build now emits all 15,810 directed
  relationships with absolute entity, predicate and assertion IRIs, validated
  local routes, preferred and inverse labels, status, scope, authority,
  derivation, observation time, evidence and rights. The YAML-LD/JSON-LD graph
  carries both each direct triple and its evidence-bearing reified assertion;
  a digest-pinned local copy of the shared Draft 2020-12 assertion schema now
  validates all 15,810 semantic assertions and all 15,810 runtime rows before
  a conformance receipt can be emitted. The finalized pin requires both `kind`
  and `label` and canonical, credential-free HTTP(S) authority, evidence,
  evidence-resource and rights URLs. The canonical 16-file profile is now
  vendored with its digest lock, and the canonical assertion schema is pinned
  byte for byte. Explorer can hydrate the same assertions from two bounded,
  active authority planes through digest-bound gzip shards and a SHA-256 route
  locator whose per-plane commitments cover every incident assertion.
  Projection checks and the full unit suite pass. This local regeneration does
  not modify or republish the frozen population preview.

- Public deployment evidence for workflow run `31297841419`, deployment
  `5815993749`, the exact manifest and descriptor hashes, and the verified
  search-to-GOV.UK Explorer journey.
- Server-enforced sole-developer `main` protection requiring pull requests and
  resolved conversations while requiring zero approvals or remote checks.

- Dated population-preview UI-efficiency review covering six concise keyword
  queries, three conversational questions, one complete narrative/graph/source
  journey and a real-browser GOV.UK handoff.
- Publication-attempt evidence recording GitHub's HTTP 422 private-repository
  Pages plan constraint without changing repository visibility or sharing an
  unverified URL.

- Owner-authorised population-complete preview publication unit with an
  original landing page, a publication-scoped Explorer descriptor and a
  comprehensive 1,549-file SHA-256 manifest rooted in the frozen candidate.
- Manual-only GitHub Pages workflow using pinned official actions; it validates
  and copies frozen bytes without rebuilding the corpus or acquiring sources.
- Publication contract tests preserving the non-release-grade boundary, 291
  specialist-review warnings, zero snapshots and the exact public topology.

- Deterministic whole-corpus coverage, omission, link-health, review-status,
  provenance and population-completion assurance reports, plus an offline drift
  checker and regression tests.
- Frozen local population-complete candidate with SHA-256 identities for the
  exact Explorer descriptor, search, relationship, resource, validation,
  JSON-LD and YAML-LD artefacts.
- Six visible Explorer acceptance journeys spanning national, devolved, local,
  health, legal and private-dependency discovery from search through Narrative,
  Graph and official source.

- Pack 8 population for all 41 approved identities across holidays/volunteering/
  living overseas, later life and death/bereavement, adding 38 compact dossiers
  and narratives while preserving the three deeper death/notification/estate
  vertical slices.
- Forty-seven current official link-only sources with body-free receipts and 13
  natural-language competency questions, completing 293-family search coverage
  across all 24 life-course domains.

- Pack 7 population for all 36 approved families across citizenship/democracy,
  starting/running an organisation and ideas/creativity/research, with original
  summaries, jurisdiction variants, ordinary and exception journeys and
  specialist-review boundaries.
- Forty-five current official link-only sources with body-free receipts and 13
  natural-language competency questions covering immigration, elections,
  participation, organisation operation, intellectual property, funding and
  research publication.
- Deterministic browser-handoff replacement now tolerates the macOS Finder
  race that can recreate `.DS_Store` during removal, while still failing on any
  other unexpected generated-file residue.

- Pack 6 population for all 36 approved families across relationships/family
  change, health throughout life and disability/care/support, with original
  summaries, four-nation variants, ordinary and exception journeys and
  specialist-review boundaries.
- Forty-five current official link-only sources with body-free receipts and 13
  natural-language competency questions covering family change, routine and
  urgent health, care assessment, capacity, safeguarding and redress.

- Pack 5 population for all 36 approved identities across transport
  enforcement, shopping/consumer rights and police/legal services, adding 35
  compact dossiers and narratives while preserving the reviewed
  speeding-notice vertical slice.
- Forty-four current official link-only sources with body-free receipts and 13
  natural-language competency questions covering statutory and private
  penalties, consumer remedies, emergencies, legal help and appeals.

- Pack 4 population for all 36 approved identities across housing/community,
  rubbish/street and public/private transport, adding 35 compact dossiers and
  narratives while preserving the deeper missed-rubbish vertical slice.
- Forty-four current official link-only sources with body-free receipts and 13
  natural-language competency questions covering all three domains, four
  nations, local delivery, exceptions and redress.

- Pack 3 population for all 36 approved families across finding work,
  employment and money/tax/benefits, with original summaries, four-nation
  variants, ordinary and exception journeys and specialist-review boundaries.
- Forty-five current official link-only sources with body-free receipts, 13
  natural-language competency questions and a dated HSE OGL rights decision.
- Deterministic large-data replacement now tolerates the macOS Finder race that
  can recreate `.DS_Store` during removal, while still failing on any other
  unexpected generated-file residue.

- Pack 2 population for all 36 approved identities across school years,
  transition to adulthood and further education/university/research, adding 35
  compact dossiers and narratives while preserving the deeper learning-to-drive
  vertical slice.
- Three further domain registers, domain narratives, 44 current official
  link-only sources with body-free receipts and 13 natural-language competency
  questions across the three domains and all four nations.
- Explicit `preserve_existing` validation and rendering behaviour so later
  corpus packs cannot overwrite a reviewed vertical-slice dossier or narrative.

- Pack 1 population for all 36 approved families across before birth, the
  newborn period and early years, with original summaries, aliases,
  four-nation route variants, ordinary and exception journeys, actors,
  dependencies, evidence dimensions, redress and specialist-review status.
- Three compact `life-course-domain-register.v1` authoring registers, a
  deterministic renderer for 36 family dossiers, 36 service narratives and
  three domain narratives, and drift checks that keep those surfaces aligned.
- Forty-five current official links with body-free metadata receipts, dated
  host-rights decisions and explicit national-discovery limitations; no source
  response body or snapshot is retained.
- Thirteen natural-language Pack 1 competency questions and executable search
  acceptance for every canonical title and alias, process retrieval, expected
  top-ten results and unmatched-query behaviour.
- Local visible-Explorer evidence for alias search, authored Narrative,
  family-centred Graph and typed official-source access.

- Current shared authority registry with 382 principal-authority areas, 19
  strategic/combined authorities, 397 dated GSS geographies and 438 reusable
  authority, regulator, redress and provider-role records.
- Ten-sector regulator/register and redress mappings, explicit publisher-paired
  bilingual identity rules and current ESD Services mapping-only policy.
- Reviewed metadata-only authority refresh and link-audit commands plus seven
  active `source-link-receipt.v1` records with no retained response bodies.
- Searchable authority/geography concepts in the JSON-LD and YAML-LD data plane,
  with shared identities reused by existing dossier graph relationships.
- Deterministic multi-chunk record and search-result hydration with a
  real-browser regression for corpora larger than 1,000 concepts.

- Six population-complete `life-course-family.v1` dossiers for the three
  reviewed vertical slices, resolving exactly the existing 53 authoritative
  reference records without acquiring source bodies or snapshots.
- Per-family authored Explorer narratives, ordinary and exception episodes,
  route variants, actors, jurisdictions, dependencies and regulator or
  redress boundaries.
- Deterministic 602-concept projection with 1,025 evidence-bearing governed
  relationships, 53 typed link-only resources, record locator, relationship
  adjacency, JSON-LD, YAML-LD and SHACL-style validation reports.
- Offline dossier/source-resolution checks and regression tests.

- Owner-authorised `life-course-population-contract.v1` for staged local
  implementation of all 293 families with separate population-complete,
  release-grade and publication-ready gates.
- Forty-eight normalised enclosing processes that map every approved family
  exactly once without asserting official classification or jurisdictional
  equivalence.
- `life-course-family.v1`, metadata-only source-link receipt and SHACL-style
  validation contracts plus a 16-predicate governed semantic registry.
- Offline population-contract validation and regression tests for all 293
  family mappings, eight pack counts, zero snapshots and the publication gate.

- Planned domain profile, source inventory and three vertical-slice fixtures.
- Delivery planning and tracking ledgers with lockstep documentation rules.
- Pull-request publication-status template and explicit manual GitHub Pages
  gate.
- Locked `uv` project environment and local-only validation commands.
- Draft `okf-domain-profile.v1` machine contract and human review handoff.
- Three synthetic vertical-slice fixture contracts covering ordinary and
  exception journeys for rubbish collection, driving enforcement and death.
- Executable profile and fixture-contract validation with unit tests.
- Bounded missed-rubbish source register containing 13 official linked
  references and no acquired snapshots.
- First vertical slice with four local service routes, four jurisdiction
  contexts, responsible councils, external-redress bodies, a normalised
  service family and ontology module, and a synthetic journey.
- Semantic slice validation and regression tests for authority, jurisdiction,
  provenance, assertion status and anti-generalization boundaries.
- Bounded learning-to-drive and speeding register with 20 official linked
  references and no acquired snapshots.
- Second vertical slice with separate Great Britain and Northern Ireland
  learning routes; GB notice, England-and-Wales court, Scottish prosecution
  and Northern Ireland speeding branches; public/private actor boundaries;
  normalised ontology; and a synthetic evidence-lineage journey.
- Driving-slice semantic checks for exact providers, jurisdictions, source
  sets, assertion status, graph completeness and non-universal deadlines.
- Bounded death, bereavement and estate register with 20 official linked
  references and no acquired snapshots.
- Third vertical slice with separate national registration routes; Tell Us
  Once and Northern Ireland manual notification boundaries; England-and-Wales
  probate, Scottish confirmation and Northern Ireland probate routes; private
  dependencies; normalised ontology; and a synthetic journey.
- Bereavement semantic checks for exact authority, jurisdiction, source-set,
  notification-coverage, estate-process and graph-completeness boundaries.
- MIT licence for repository-authored code, documentation and ontology terms.
- Dated machine-readable rights decisions covering every registered source
  host, OGL attribution, CPSV-AP, Open Referral UK and HSDS.
- Rights validation and regression tests for source-host coverage, exact OGL
  attribution, standards terms, zero snapshots and generated projections.
- Attribution and third-party notices for downstream users.
- Explicit three-slice review-to-publication plan with integrated-review,
  Explorer-compatibility, release-scope, frozen-candidate, manual Pages and
  real-browser verification gates.
- Dated local OKF Explorer 0.5.7 review evidence, exact consumer and bundle
  inputs, fixture traceability, and a four-item finding ledger.
- Owner-authorised exhaustive reference-family inventory with 89 new external
  references, inclusion of the 53 implemented-slice references, 120 assessed
  domain/jurisdiction cells, original summaries and zero snapshots.
- Actionable twelve-item gap analysis covering local topology and leaf routes,
  Welsh delivery sources, health permissions, private dependencies, redress,
  legal review, freshness, bilingual identity and Explorer large-corpus facets.
- Offline inventory validation and regression tests for the declared
  denominator, source metadata, dated rights decisions and publication limits.
- Owner-approved 293-family denominator with 24 domains, three staged waves and
  executable count, identity, scope and authorisation checks.
- Corpus-acquisition policy for exhaustive-authority plus representative and
  exception local coverage, dated GSS and applicable ODS identifiers, manual
  health links, regulator-first private dependencies, governed sector redress
  and role-based specialist review.
- Governed `okf-relationship-assertion.v2` projections with explicit authority,
  assertion scope/status, derivation, evidence, observation and rights fields.
- Deterministic browser-renderable handoffs for authored Markdown, YAML,
  licensing decisions, notices and the machine rights register.
- First-class licensing and attribution evidence in the small bundle.
- Owner-approved `okf-explorer-large-corpus.v1` local projection with 293
  searchable planning records, seven reconciled colour facets and filter
  postings, zero acquired source content and publication disabled.
- Visible-browser evidence closing `REV-001` through `REV-004` and validating
  large-corpus search and colour-filter journeys in OKF Explorer 0.5.7.

### Changed

- Repository visibility changed from private to public after explicit owner
  authorisation, exposing the complete source and history and unblocking Pages.
- `PAGES-001`, `VERIFY-001` and the verified preview handoff are complete; the
  preview remains non-release-grade and the Explorer UI findings remain open.

- Publication authorisation remains a separate descriptor envelope and dated
  receipt so that the owner-authorised candidate bytes and hash are unchanged.
- Manual Pages transport and local publication validation now pin publication
  merge `980c7a9…`, so later lockstep documentation cannot alter the frozen
  1,549-file unit.
- `PAGES-001` is blocked on an explicit repository-visibility/publication-host
  choice; conversational search, zero-result domain browsing and display
  density remain tracked Explorer follow-ups.

- Completed `SCOPE-001`, `CAND-001` and `PUB-001` for the full
  population-complete preview after explicit owner authorisation; advanced
  `PAGES-001` to active while public-browser verification remains pending.

- Completed `ASSURE-001` after reconciling 293 families, 24 domains, 48
  processes, 104 competency questions, 9,757 concepts, 879 resources and 15,810
  relationships with zero blocking omissions. Population completion is true;
  release grade and publication remain false.
- Disposed all twelve historical reference gaps against the population gate
  while retaining named specialist review, reviewed freshness, bilingual and
  future-automation boundaries for later work.

- Advanced `PACK-008` to complete and `ASSURE-001` to active after the full
  293-family, 9,757-concept, 879-resource and 15,810-relationship projection
  passed locked local validation and visible Explorer review.

- Advanced `PACK-007` to complete and `PACK-008` to active after the 255-family,
  8,645-concept, 802-resource and 13,972-relationship projection passed locked
  local validation and visible Explorer review.

- Advanced `PACK-006` to complete and `PACK-007` to active after the 219-family,
  7,613-concept, 761-resource and 12,377-relationship projection passed locked
  local validation and visible Explorer review.

- Advanced `PACK-005` to complete and `PACK-006` to active after the 183-family,
  6,587-concept, 629-resource and 10,424-relationship projection passed locked
  local validation.

- Advanced `PACK-004` to complete and `PACK-005` to active after the 148-family,
  5,567-concept, 524-resource and 8,599-relationship projection passed locked
  local validation.

- Advanced `PACK-003` to complete and `PACK-004` to active after the 113-family,
  4,535-concept, 384-resource and 6,622-relationship projection passed locked
  local validation.

- Advanced `PACK-002` to complete and `PACK-003` to active after the 77-family,
  3,496-concept, 300-resource and 4,850-relationship projection passed locked
  local validation.

- Advanced `PACK-001` to complete and `PACK-002` to active after the 42-family,
  2,485-concept, 160-resource and 2,894-relationship projection passed all
  deterministic and visible-browser checks.
- Replaced six-family/53-resource projection assertions with current-stage
  reconciliation derived from authored dossiers and 1,000-record chunks.

- Expanded dated host decisions from 25 to 28 for the ONS Open Geography
  portal, its ArcGIS query service and the ESD standards help service without
  relaxing link-and-summary-only source use.
- Advanced `POP-004` to complete after offline validation, live metadata
  receipts and local Explorer search, detail, bilingual and graph journeys.

- Recorded OKF Explorer PR #72 as merged with authored large-record narratives
  and typed link/JSON/XML/text source access after the full three-browser gate.
- Replaced the planning-only zero-resource and zero-relationship projection
  for the six reviewed families while preserving all 293 family routes and
  distinct family versus total-concept counts.

- Superseded the three-slices-only implementation boundary with the explicit
  2026-08-08 owner authorisation for the staged 293-family population while
  keeping link-and-summary-only acquisition, local evaluation and no Pages
  publication.

- Recorded owner approval of `okf-domain-profile.v1` and the three fixture
  contracts, authorising bounded source registration and slice implementation.
- Connected the explicitly authorised private GitHub repository while keeping
  remote CI and GitHub Pages disabled.
- Recorded the private-plan branch-protection limitation while retaining the
  sole-developer PR-only policy for `main`.
- Advanced the missed-rubbish fixture acquisition state to
  `linked_references_registered`.
- Advanced the driving fixture to `linked_references_registered` before its
  implementation merged in PR #4.
- Recorded PR #4 as merged and advanced the bereavement fixture to
  `linked_references_registered`; all three approved denominators are now
  registered.
- Replaced pending reuse markers with recorded source-family decisions while
  retaining link-and-summary-only use and prohibiting source-content and
  snapshot redistribution.
- Recorded PR #5 and PR #6 as merged and advanced the bounded sample to
  integrated review, while keeping publication separately gated.
- Executed the first visible-browser integrated review, recording four real
  provenance, source-handoff and licence-notice failures that were subsequently
  remediated and closed by the local rerun.
- Expanded dated rights decisions from 16 to 25 source hosts and added ONS,
  NHS ODS, W3C,
  LGSL and OKF Explorer determinations without relaxing link-and-summary-only
  source use or authorising publication.
- Recorded explicit owner authorisation for exhaustive link-only reference
  discovery while preserving the snapshot, redistribution, unbounded or unstaged leaf
  acquisition, CI and GitHub Pages gates.
- Recorded owner approval of all six corpus-governance decisions while keeping
  individual legal and clinical appointments, CI and publication separately
  gated.
- Locked the small-bundle Explorer consumer contract for local evaluation and
  activated the large-corpus approval after all four prerequisites passed.

## [0.0.0] - 2026-08-07

### Added

- Fail-safe local repository bootstrap with source/generated boundaries.
- OKF v0.2 root, section indexes and deterministic small-bundle builder.
- Citizen life-course research overview with the original generating prompt.
- Authoring guidance, implementation roadmap, validation tests and disabled CI
  scaffold.
