NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
Nomos 2 Dart client — generated domain values, intent payloads and application lifecycle types over the typed Nomos kernel protocol and USDA custody model.
Last release 3 days ago
05 Oct 2026
Ships fairly regularly
a new release about every 10 days
Nearly every release is documented
notes for 60 of the last 60 stable releases
Nothing withdrawn
no release was ever pulled
3 months old
113 releases · first in 2026
One column per month.
Breaking: regenerate generated Dart clients with this compiler.
Breaking: regenerate generated Dart clients with this compiler.
lawUnitSet and
lawPackageSha256 in place of applicationBirthContract, and no generated offer carries a law expectation;
the kernel selects current law from the workspace's own state. OpenReceivingGroupRequest.contract is retired:
a Home is born under the law its platform serves. Pass unitSet to NomosApprovedModel (nomos_types 0.13.0).NmsRowsMerge, NomosRows), and NomosRowProjection redoes only those rows
(CAP-731, CAP-751).CustodianWarmingPosture, not as an error (CAP-769).--dart-define=NOMOS_TRACE=true writes an opt-in [nomos-trace] timeline across the save path (CAP-741).NmsTestPeer stands on an explicit NmsTestPeerHost; NOMOS_TEST_PEER_HOST=native runs AppSim on the
real Apple native host (CAP-717). NOMOS_PEER_CLASSES selects the Node peer's classes, e.g.
personal-device (CAP-722).Bundles the 0.113.4 runtime: owed watch re-reads never starve the Peer Office's maintenance.
Git custody upkeep backing off after a failure is reported as upkeepRetrying, not retrying: the workspace is ready meanwhile, so it no longer shows as
upkeepRetrying, not retrying: the workspace is
ready meanwhile, so it no longer shows as a sync problem (CAP-693).A write sent over the live link has its receipt converge on the custodian's admission: the live desk reports the admitted intent ids of its own batch,
receipt.converged resolves (CAP-656).Retain the completed browser runtime: durable custody receipts, independent WebSocket follows, correct admission of HTTP-relayed sealed offers, and no
Keep the browser Peer Office alive when a shallow outbox reaches omitted ancestry. Request bounded history in the background and let unrelated workspa
Restaged the generated runtime bridge: regenerated vendored runtime assets. Published pub.dev archives are immutable, so regenerated bytes ride their
Restaged the generated runtime bridge: regenerated vendored runtime assets. Published pub.dev archives are immutable, so regenerated bytes ride their
Share the existing typed platform-effect handler with browser background work, so console enrolment, device identity and law acquisition can complete
Prepare delayed workspace enrollment inside Peer Office and retry a proven non-admitted write once. Generated applications can observe preparation whi
Recover sync after loss of the upstream bookmark by fetching provider history and allowing the kernel to verify a shared ancestor. Preserve pending lo
Let reception close promptly when presentation stream listeners are paused.
Resolve the Node runtime runner through @githolon/runtime, the public name for the application runtime package.
@githolon/runtime, the public name for the application runtime package.Generate parent-law authentication cascades that wait for both provider and signer custody, without a child self-enrolment shortcut.
ready plus stable-identity differences, while explicit counterfactual results remain
outside ordinary law adoption.Preserve complete typed birth lineage and recover existing workspaces through the authenticated installed-controller lifecycle without falling back to
Publish the generated nominal application call and query surfaces required by current DSL output, so Flutter consumers retain typed USDA calls instead
Consume the generated typed offer-admission ABI from nomos_types 0.9.0 and keep current birth certificate evidence as structured USDA values rather th
nomos_types 0.9.0 and keep current birth
certificate evidence as structured USDA values rather than JSON envelopes.Recover expired or missing sync credentials from typed failures. Preserve authorization and domain refusals without refreshing credentials based on di
Resolve kernel compatibility through typed OSGi Contract Namespace requirements and OpenUSD candidate custody, removing the private JSON selection and
Restaged with the current kernel candidate: regenerated vendored assets (kernel release identity is baked into them). Published pub.dev archives are i
Keep the typed birth certificate on the birth offer only, so preliminary signer enrolment can settle before generated business APIs open.
Converge arbitrary historical generated-model backlogs while failing a genuinely repeated immutable lifecycle step with a typed stall error.
Prove a restored generated-application device is enrolled before exposing business APIs, including recovery from an interrupted bootstrap journal.
Restage the validated intent-offer byte gate and deterministic signer-posture reader into the immutable Dart runner.
Restaged with the current kernel candidate: regenerated vendored assets (kernel release identity is baked into them). Published pub.dev archives are i
Restaged with the current kernel candidate: regenerated vendored assets (kernel release identity is baked into them). Published pub.dev archives are i
Make https://nomos.cafe the sole default Nomos Cloud surface used by the WebView bridge. The published Dart runtime no longer points at the retired Ca
https://nomos.cafe the sole default Nomos Cloud surface used by the
WebView bridge. The published Dart runtime no longer points at the retired
Captain App hostname.Restaged with the current kernel candidate: regenerated vendored assets (kernel release identity is baked into them). Published pub.dev archives are i
Rebuild the vendored Dart runner from @githolon/client 0.105.8. Web-client source is an input to this immutable pub.dev archive, so the Dart package n
@githolon/client 0.105.8. Web-client source is an input to
this immutable pub.dev archive, so the Dart package now advances whenever that source changes.Restaged with the current kernel candidate: regenerated vendored assets (kernel release identity is baked into them). Published pub.dev archives are i
Rebuild the self-contained runner without the retired structural-interface sidecar assumption; compatibility is carried by the generated client and of
nomos_types 0.8.7 so JSON-valued domain objects retain fields alongside value.connect() no longer manufactures a custody verdict from an unrelated failure. A boot error propagates as itself; nomos.custody.snapshot_corrupt is rai
nomos.custody.snapshot_corrupt is raised only by the snapshot reader that
found the bytes unreadable, so a transient network fault cannot trigger quarantine-and-reclone of
healthy local custody.NEW: Realm.snapshot(name) — export one workspace's exact resident custody without manufacturing a runner session. A generated birth can leave a child
Realm.snapshot(name) — export one workspace's exact resident custody without manufacturing a
runner session. A generated birth can leave a child resident in the shared kernel before
application code acquires it, so host persistence cannot be defined as "every connected session":
mounted, parked and born-but-unopened residents all export. This is what makes a locally-born
estate survive a close.NEW: bridge.localWorkRejectedEvents — a typed stream of NomosLocalWorkRejectedEvent (from nomos_types 0.8.6) forwarded over the runner bridge, so apps
bridge.localWorkRejectedEvents — a typed stream of NomosLocalWorkRejectedEvent (from
nomos_types 0.8.6) forwarded over the runner bridge, so apps render honest UX ("queued, will
retry" vs "preserved for review — contact support") instead of scraping raw refusal prose.parentSignerEnrollment gains remote: true — force the CLOUD-gateway read even when this holon
IS the parent: the seated barrier's proof-by-read (enrolled there ⇒ durably in custody, not merely
locally folded).Rebuild the bundled runner assets from @githolon/client 0.105.3: fixes ensureParentSignerEnrollment routing enrollFirstDevice when the caller is alrea
ensureParentSignerEnrollment
routing enrollFirstDevice when the caller is already connected directly to the target workspace
(parent === workspace) — the local structural lookup can never find it (deliberately absent from
public business OpenAPI), and the framework-route fallback was previously gated to skip exactly this
case.Restaged with the current kernel candidate: regenerated vendored assets (kernel release identity is baked into them). Published pub.dev archives are i
Rebuild the bundled runner assets from @githolon/client 0.104.0 (the evolve-on-read release). Published pub.dev archives are immutable, so regenerated
Rebundle the runner runtime (node-entry.mjs, offline-install.mjs) generated from @githolon/client 0.103.19, which carries the evolve-gate fix: promote
node-entry.mjs, offline-install.mjs) generated from @githolon/client 0.103.19, which carries the evolve-gate fix: promoteDomain dispositions are read from the law that DECLARES the call, so a law upgrade with a genuine field/aggregate removal can pass the offer lane.DomainClientModelAdoptionRequired.accept gains an optional dispositions parameter, threaded through to the bridge's nomosFrameworkAdoptGeneratedModel
DomainClientModelAdoptionRequired.accept gains an optional dispositions parameter, threaded through to the bridge's nomosFrameworkAdoptGeneratedModel — a tenant can now acknowledge a genuine field/aggregate removal ({"retired": [sid, ...]}) from a generated client's model.adopt() decision instead of only via a raw adapter script.Resolve framework-private first-device offers through the application law's concrete home route, and distinguish a merely installed model from the mod
Preserve cross-replica foreign-read identity with the canonical USDA state root while treating the Git commit as a replica-local custody hint; the sha
Preserve a clean resident unborn workspace across successive offers so framework genesis remains colocated until its first durable push; only an actua
Single-flight each generated child open on the process-wide kernel plane, reuse resident sibling custody for foreign reads, and restore every generate
Deduplicate structurally identical workspace and application status snapshots while still seeding every new listener, preventing periodic metrics refr
Bound generated application startup and referenced-workspace opens, preserving typed custody failures and retryable custody while keeping law adoption
Publish the complete generated-application runtime already present in the coordinated source release, including typed operation receipts, model change
Consume nomos_types 0.8.3 so custody object identities remain typed through generated clients.
nomos_types 0.8.3 so custody object identities remain typed through generated clients.Require generated applications to seed explicit child-birth and workspace policies before first use; missing law remains a typed kernel refusal instea
Single-flight generated child-workspace acquisition and continuous sync so concurrent references share one open, one lifecycle result and one error ra
Execute generated applications through the typed USDA-native kernel boundary, including native read recipes, sealed offer diagnostics and lawful self-
Resolve a compiled OpenUSD application as one ordered package set in generated offline and connected scenarios, keeping reference-only control law off
Generate one self-documenting application object: intent-shaped business actions at the root, typed aggregate collections for reads and navigation, ag
NomosRef<T>; secondary ensures keep their aggregate identity through
compilation and admission.Make automatic sync a truthful client-owned lifecycle: local acceptance is durable, offline/restored sessions remain usable, reconnect converges paren
Generated clients now expose business-first conflict policy, schema-aware merge continuation and recursive organisation descriptions. The client priva
Make NomosTestHarness own a complete, verifiable local trust lineage. Tests still bind a business actor and call the generated birth method; the harne
NomosTestHarness own a complete, verifiable local trust lineage. Tests still bind a business actor
and call the generated birth method; the harness privately mints its test root, seats the signer and
delegation, lands the warrant in order, and refuses any child whose full chain does not replay to that root.Align the public Dart documentation with the one Flutter application entry point: identity comes from the token passed to NomosScope.home(application:
NomosScope.home(application:, authToken:); application code no longer supplies a subject
or device-token callback.Generated business clients expose one birth(payload) method. The bound session supplies its verified principal from the authentication token, and Nomo
birth(payload) method. The bound session supplies its verified
principal from the authentication token, and Nomos owns the identity, provenance, persistence, and
recovery ceremony beneath the business call.cloudBound seeds the KEYLESS enroll-once delegation (mintKeylessDelegation) so a keyless private home is born with a well-formed cert chain (was: plat
cloudBound works against PRIVATE platforms/homes (declared read caps — the co2 shape): the device ceremony uses a LOCAL scratch session (never clones
Runner entry resolution prefers the BUILT @githolon/client/runner/node-entry.mjs (published consumers: node refuses type-stripping under node_modules,
@githolon/client/runner/node-entry.mjs (published consumers:
node refuses type-stripping under node_modules, so the raw .ts entry only booted in-repo — DEFECT P3-002).Your coding agent can read these notes before it upgrades. Set up the MCP server →