Nomos Release Notes

Multi-Agent Hook Protocol Normalization (nomos hook pre-tool, nomos hook post-tool)#

• Native @google/gemini-cli Hook Parity: Distinguishes Gemini CLI BeforeTool and AfterTool JSON hook payloads from Claude Code PreToolUse / PostToolUse events, emitting canonical {"decision":"allow"|"deny","reason":"..."} responses on BeforeTool and {"hookSpecificOutput":{"additionalContext":"..."}} diagnostics on AfterTool.
• Directory & Search Path Target Extraction: Inspects dir_path arguments across list_directory, glob, and search_file_content so directory scans targeting protected Harbor verifier or oracle paths (/logs/verifier, /solution, /tests) are deterministically blocked in --container-sandbox mode.

Container Sandbox Benchmark Mode (nomos hook --container-sandbox)#

• Runtime Anti-Reward-Hacking Guard: Physically blocks reads, writes, and shell commands targeting protected benchmark verifier and oracle paths (/logs/verifier, /solution, /tests) while permitting full-container OS sysadmin operations (/etc, /tmp, /var, sqlite3).
• Zero-Footprint Container Execution: Skips global SQLite telemetry initialization during nomos hook and nomos version invocations so disposable evaluation containers remain 100% free of ~/.nomos state.

Configurable Bilateral Intent Twin Enforcement (intent_twin_mode)#

• Opt-In Spec-vs-Code Twin Policy: Adds intent_twin_mode (off, feat, strict) to nomos.yaml and nomos.schema.json, defaulting to off for friction-free solo adoption while enabling feat or strict bilateral INT-*/SUB-* pairing on team and regulated repositories.

Brownfield Go Workspace & Verification Hardening (nomos init, nomos verify, nomos hook)#

• Ancestor go.work Discovery & Dynamic Go Directives: Honors explicit ancestor go.work module membership in nomos verify and derives transient go.work Go directives dynamically from module go.mod versions.
• Scoped Pre-Tool & Git Exclude Hygiene: Anchors operational .git/info/exclude entries cleanly, removes legacy jq shell fallback guards from hook templates, and scopes PreToolUse toolchain install guards to dirty or non-main trees.

Golden Conventional Commits & RFC 822 Git Trailers (nomos task commit, nomos verify)#

• Flowing Commit Bodies & Task: / Twin: Trailers: Upgrades commit schema enforcement from rigid Markdown headers to readable Golden Conventional Commits ([KEY] type(scope): summary) paired with machine-readable Task: and Twin: RFC 822 Git trailers.

Compositional Capability-Flow Graph & Cross-Tool Taint Guard (nomos hook pre-tool)#

• Cross-Tool Taint Propagation: Tracks untrusted external inputs across sequential tool invocations in PreToolUse so prompt-injected payloads read from files, web fetches, or logs cannot exfiltrate secrets or execute privileged shell mutations.
• Deterministic Pre-Flight Blocking: Evaluates compositional capability-flow rules in sub-millisecond compiled Go outside the model context window.

Zero-Trust MCP Boundary Interceptor & Information Flow Control (nomos verify, capbac)#

• Cross-Server Information Flow Control (IFC): Enforces explicit server-to-server trust boundaries across Model Context Protocol (MCP) tool calls, preventing untrusted third-party MCP tools from bridging into sensitive workspace capabilities.
• Self-Hosted JSON Schema Parity: Regenerates nomos.schema.json with MCP boundary and IFC policy fields verified by byte-identical AST schema parity tests.

Multi-Repo Ledger Isolation & Nomos Learn Signal Hygiene (nomos handshake, nomos mem)#

• Strict Per-Repository Ledger Scoping: Isolates wavefront and Living Ledger views per repo_id across multi-repository workstations.
• High-Signal Memory Curation: Refines Nomos Learn distillation thresholds and adds nomos mem dismiss to prune superseded episodic entries cleanly.

Pure Go AST & Reflected JSON Schema SSoT (nomos.schema.json)#

• Single Compiled Go SSoT: Retires external CUE runtime dependencies in favor of compiled Go struct contracts reflected directly into Draft 2020-12 nomos.schema.json.
• Zero-Copy IDE Autocompletion: Pins yaml-language-server $schema headers in nomos init templates to versioned GitHub raw schema URLs for instant editor validation.

Binary Footprint & Storage Hygiene (-32.8% Size Reduction)#

• Leaner Static Binary: Cuts the CGO_ENABLED=0 static Go binary footprint by nearly one-third (~28 MB) while accelerating startup and nomos verify cold-boot latency.
• Storage Table Pruning: Excises retired v3 journal and legacy telemetry tables from local SQLite state.

NCTE-100 Controlled English Engine & Succinct Action Lexicon (nomos directive)#

• Compiled NCTE-100 Lexicon & Grammar: Ships the deterministic Controlled Technical English validator (ncte.cue) and succinct operator-to-agent action lexicon CLI for unambiguous, token-disciplined agent steering.
• Agent-Steering Protocol Parity: Aligns JIT phase directives (IDLE -> PLAN -> EDIT -> REVIEW -> SYNC -> LEARN) and CLI guidance directly with the published Agent-Steering Protocol.

Software Physics CLI & Cobra Contract Completeness (nomos physics, nomos task)#

• Real-Time AST Mass & Collision Vectors: Wires nomos physics to inspect active worktree AST mass and detect real-time symbol and file collision vectors across concurrent task worktrees.
• Deterministic CLI & Probe Hardening: Adds complete --json and task filter flags across Cobra commands, closes nomos verify probe blind spots, and auto-hydrates Dual-Layer commit rationale sections from Living Ledger cards while rejecting canned commit shims.

Unified Lipgloss Terminal UI & Claude Code v2 Hook Compatibility#

• Adaptive Lipgloss Styling: Introduces a unified terminal theme across human-facing CLI outputs (nomos handshake, nomos status, nomos verify, nomos version) with crisp gradients, pill badges, and clean non-TTY fallback.
• Claude Code v2 PreToolUse Parity: Aligns nomos hook pre-tool with the Claude Code v2 PreToolUse JSON schema, adds Read environment-variable guards, and keeps background polling exempt from the 3-strike loop circuit-breaker.

Polyglot Wazero + Tree-sitter AST Engine (nomos verify)#

• Zero-CGO WebAssembly + Tree-sitter Evaluation: Combines a pure-Go wazero WebAssembly linear-memory source scanner (scan_source_bytes) with .scm S-expression structural evaluators across Go, TypeScript/Svelte, Python, Rust, C/C++, Java, Kotlin, and C#.
• Polyglot Test, Coverage & Anti-Skip Ratchets: Auto-detects go test, cargo test, pytest, gradle test, mvn test, and dotnet test, enforces LCOV + Cobertura XML coverage thresholds (>= 55%), and rejects reward-hacked skipped tests (t.Skip, #[ignore], @pytest.mark.skip, it.skip, @Disabled, [Fact(Skip=...)]).

Native Compiled nomos hook CLI & Loop Circuit-Breaker#

• Compiled Hook Subcommands: Replaces external shell hook scripts with sub-millisecond nomos hook session-start, nomos hook pre-tool, and nomos hook post-tool commands, preserving existing user hooks additively during nomos init.
• 3-Strike Loop Circuit-Breaker: Fingerprints tool invocations (ArgsDigest + file mtime in 0700 user-private XDG cache) to halt identical retry loops after 3 consecutive failures (0/20 runaway loops across the 95-task TraceTrial-Bench suite; 83.2% guarded pass rate vs 45.3% unguarded).

Fail-Closed 3-Section Task Cards & Supply-Chain Hardening#

• Structured Living Ledger Cards: Enforces ## Scope & Context, ## Acceptance Criteria, and ## Verification across nomos task create, chore, and pair with --scope, --ac, --verify, and --depends-on flags.
• Verified Supply-Chain Installer: Enforces mandatory SHA-256 archive verification against checksums.txt in install.sh and os.Lstat symlink/world-writable rejection across plugins and caches.

7x3 Canonical Invariant Suite (nomos verify)#

• 7 Laws & 21 Compiled Go AST Invariant Cells: Enforces complexity ceilings, explicit error handling, anti-shim detection, test-deletion guards, zero-alias singularity, and 2-plane separation in milliseconds.
• Fail-Closed Pre-Flight Verification: Zero reliance on probabilistic prompt honor systems; code mutations require exit code 0 and deterministic AST proof before review.

Hermetic Worktrees & 2PC Atomic Sync (nomos task)#

• Disposable Task Worktrees: Physically locks main as read-only and isolates every AI coding session inside worktrees/<repo>-<task> across the IDLE -> PLAN -> EDIT -> REVIEW -> SYNC -> LEARN state machine.
• Cryptographic Release Provenance: Attaches verifiable Git Notes receipts and enforces strict intent/ vs substrate/ plane separation.

Nomos Mneme Episodic Memory (nomos mem)#

• Repo-Scoped Local SQLite FTS5 Engine: Persists distilled architectural axioms and verified engineering pitfalls locally on your machine with sub-millisecond recall.

Zero-Lock-In Tier 1 Agent Harness (nomos init, nomos handshake)#

• Universal Indirect Control: Works out of the box with Claude Code, Cursor, Antigravity IDE, Windsurf, Cline, and OpenCode with zero cloud accounts, background daemons, or telemetry phone-home.
• Cross-Platform Single Binary (CGO_ENABLED=0): Precompiled linux, darwin, and windows (amd64 / arm64) archives published with SHA-256 checksums.txt.