Nomos Release Notes

Polyglot Wazero + Tree-sitter AST Engine (nomos verify)#

• Zero-CGO WebAssembly + Tree-sitter Evaluation: Combines a pure-Go wazero WebAssembly linear-memory source scanner (scan_source_bytes) with .scm S-expression structural evaluators across Go, TypeScript/Svelte, Python, Rust, C/C++, Java, Kotlin, and C#.
• Polyglot Test, Coverage & Anti-Skip Ratchets: Auto-detects go test, cargo test, pytest, gradle test, mvn test, and dotnet test, enforces LCOV + Cobertura XML coverage thresholds (>= 55%), and rejects reward-hacked skipped tests (t.Skip, #[ignore], @pytest.mark.skip, it.skip, @Disabled, [Fact(Skip=...)]).

Native Compiled nomos hook CLI & Loop Circuit-Breaker#

• Compiled Hook Subcommands: Replaces external shell hook scripts with sub-millisecond nomos hook session-start, nomos hook pre-tool, and nomos hook post-tool commands, preserving existing user hooks additively during nomos init.
• 3-Strike Loop Circuit-Breaker: Fingerprints tool invocations (ArgsDigest + file mtime in 0700 user-private XDG cache) to halt identical retry loops after 3 consecutive failures (0/20 runaway loops across the 95-task TraceTrial-Bench suite; 83.2% guarded pass rate vs 45.3% unguarded).

Fail-Closed 3-Section Task Cards & Supply-Chain Hardening#

• Structured Living Ledger Cards: Enforces ## Scope & Context, ## Acceptance Criteria, and ## Verification across nomos task create, chore, and pair with --scope, --ac, --verify, and --depends-on flags.
• Verified Supply-Chain Installer: Enforces mandatory SHA-256 archive verification against checksums.txt in install.sh and os.Lstat symlink/world-writable rejection across plugins and caches.

7x3 Canonical Invariant Suite (nomos verify)#

• 7 Laws & 21 Compiled Go AST Invariant Cells: Enforces complexity ceilings, explicit error handling, anti-shim detection, test-deletion guards, zero-alias singularity, and 2-plane separation in milliseconds.
• Fail-Closed Pre-Flight Verification: Zero reliance on probabilistic prompt honor systems; code mutations require exit code 0 and deterministic AST proof before review.

Hermetic Worktrees & 2PC Atomic Sync (nomos task)#

• Disposable Task Worktrees: Physically locks main as read-only and isolates every AI coding session inside worktrees/<repo>-<task> across the IDLE -> PLAN -> EDIT -> REVIEW -> SYNC -> LEARN state machine.
• Cryptographic Release Provenance: Attaches verifiable Git Notes receipts and enforces strict intent/ vs substrate/ plane separation.

Nomos Mneme Episodic Memory (nomos mem)#

• Repo-Scoped Local SQLite FTS5 Engine: Persists distilled architectural axioms and verified engineering pitfalls locally on your machine with sub-millisecond recall.

Zero-Lock-In Tier 1 Agent Harness (nomos init, nomos handshake)#

• Universal Indirect Control: Works out of the box with Claude Code, Cursor, Antigravity IDE, Windsurf, Cline, and OpenCode with zero cloud accounts, background daemons, or telemetry phone-home.
• Cross-Platform Single Binary (CGO_ENABLED=0): Precompiled linux, darwin, and windows (amd64 / arm64) archives published with SHA-256 checksums.txt.