Releases and evidence on Harbor Self-Evolving

0.10.2 — stable Workbench styling

Mon, 01 Jan 0001 00:00:00 +0000

Released 2026-09-27. Formal source tag: v0.10.2.

Fixed

Each live Harbor client-plugin lifetime owns its own stylesheet tag, so disposing an older duplicate or hot-reloaded instance cannot remove the active Workbench styles.
Job status text stays at the card’s top-right corner without stretching to the title height.
The status background bubble is removed while completion, running, attention and failure colors and symbols remain visible.
Plugin, Skill and Python Adapter identities align at 0.10.2.

Verification

The 0.10.2 archive records the targeted lifecycle/layout checks and coordinated package publication evidence.

0.10.1 — trustworthy scientific evaluation loop

Mon, 01 Jan 0001 00:00:00 +0000

Released 2026-09-26. Formal source tag: v0.10.1.

Shipped

Formal Candidate Experiments execute only the exact harbor-dsh-evaluator/v2 bundle through a strict private Dataset adapter; Dataset verifiers and v1 fallback cannot become score authority.
Trusted Evaluation Reports, content-addressed Job bundles, cross-artifact Evaluator identity, score suppression and execution-failure handling keep invalid evidence out of quality conclusions.
Repeat-aware Experiments, paired uncertainty, immutable Promotion reports, exact Policy snapshots and stronger Docker/environment invariants make governed comparison auditable.
Historical diagnosis, Candidate-bound business observations, independent Ground Truth meta-evaluation and confirmed badcase drafts preserve their distinct evidence boundaries.
Diagnostic, experiment and governed product profiles reveal only the controls justified by their evidence level.
Plugin, Skill and Python Adapter identities align at 0.10.1, with 34 public schemas in both packages.

Release repair

0.10.0 published to npm, but clean Linux tag/PyPI workflows exposed two release-test portability issues before any Python artifact was built. Public tags and package versions were not moved or overwritten. 0.10.1 contains the same runtime behavior with stable test-helper imports and a bounded shared-runner response budget, and supersedes 0.10.0.

0.10.0 — incomplete publication

Mon, 01 Jan 0001 00:00:00 +0000

Tagged 2026-09-26 at 97a385062ba194d5496ba2d98c45a3701d08c01d.

Warning

Publication was incomplete. npm 0.10.0 published successfully, but clean Linux tag/PyPI workflows failed before any Python artifact was built. The tag and npm package remain immutable; use 0.10.1 instead.

Intended source scope

The source introduced the exact Evaluator v2 execution boundary, sealed trusted reports, repeat-aware scientific Experiments, governed Gate invariants, hardened Historical/business/meta evidence and three product profiles. Runtime behavior is carried forward by 0.10.1.

0.9.8 — Host path translation fix

Mon, 01 Jan 0001 00:00:00 +0000

Released 2026-09-21. Formal source tag: v0.9.8.

Shipped

Host command translation preserves paths already resolved into the Trial host directory.
Historical Session Observation and Candidate commands no longer receive a duplicate host-root prefix.
A HostEnvironment integration test executes the complete SessionObservationAgent upload, digest verification and artifact write path.
Plugin, Skill and Python Adapter identities align at 0.9.8.

Verification

The 0.9.8 archive records focused and complete automated checks. Publication and evidence status are reported separately.

0.9.7 — Context contracts and bilingual site

Mon, 01 Jan 0001 00:00:00 +0000

Released 2026-09-20. Formal source tag: v0.9.7.

Shipped

Candidate Context v3 is valid in Dashboard overview and Job detail; eligible Jobs can use Compare/Gate.
Historical Context v2 is recognized explicitly by protocol, including context-only pending Jobs.
Setup persists the complete installation identity. Settings only copies a reviewable exact update command and never executes registry packages.
Plugin, Skill and Python Adapter identities align at 0.9.7.
The bilingual product/documentation site covers all 19 tools, the Skill, Adapter, evaluation concepts, evidence boundaries and roadmap.

Verification

The 0.9.7 archive records automated Node/Python/package/site checks, public package identities and release assets. Publication and evidence status are reported separately.

0.9.6 — Host-first execution

Mon, 01 Jan 0001 00:00:00 +0000

Released 2026-09-19. Formal source tag: v0.9.6.

Shipped

Host is the default execution environment; Docker remains explicit opt-in.
Candidate Context records execution environment so Host and Docker are not silently comparable.
Plugin, Skill and Python Adapter package identities align at 0.9.6.
The normal registry setup path remains the supported installation.

Verification

The archive records automated Node/Python/package checks and public release identities. Evidence types are kept separate from business acceptance.

0.10.3 — actionable project-directory recovery

Mon, 01 Jan 0001 00:00:00 +0000

Released on 2026-09-27. Formal source tag: v0.10.3.

What changed

Directory-read denials now use the stable HARBOR_PROJECT_ROOT_ACCESS_DENIED code without exposing a local path.
The Workbench explains that the failure is not a network issue, provides macOS recovery and alternative project-location steps, keeps technical details collapsed, and can copy the recovery instructions.
Classification is limited to directory reads so ordinary EACCES file operations are not mislabeled.
Source-development setup explicitly includes locked dev dependencies even when the Host runs with NODE_ENV=production.
Plugin, Skill and Python Adapter identities align at 0.10.3.

Evidence boundary

The 0.10.3 archive records targeted service/client/setup checks, the generated client bundle, source setup and matched public npm/PyPI artifacts. It does not claim complete cross-platform TCC/ACL coverage or fix desktop Host signing and permission declarations.