Rivet v0.8.0

What's Changed

• fix(docs-check): tighten --coverage rule 3 + add --warn-only mode (#248) by @avrabe in #250
• feat(cli): cited-source --strict, --strict-cited-source-stale, schema migrate --list (#249) by @avrabe in #251
• fix(docs): stale literals + extend rivet docs check with EmbeddedVersionLiterals / EmbeddedFlagReferences / EmbeddedTodoMarkers (#247) by @avrabe in #252
• chore(release): v0.8.0 — dogfood follow-ups by @avrabe in #256

Full Changelog: v0.7.0...v0.8.0

Rivet v0.7.0

What's Changed

• feat(validate): warn when prose names an artifact id without a typed link (#207) by @avrabe in #234
• fix(ci): make Release workflow idempotent on existing tag by @avrabe in #244
• feat(docs-check): subcommand-coverage gate — walk clap tree + assert each path has an embedded doc by @avrabe in #241
• feat(schema): rivet schema migrate Phase 2 — conflict markers + --continue / --skip / --edit by @avrabe in #242
• chore(release): v0.7.0 — schema migrate Phase 2 + docs coverage gate by @avrabe in #246

Full Changelog: v0.6.0...v0.7.0

rivet 0.6.0

rivet 0.6.0 — schema migrate + cited-source

Theme: schema migration + cited-source faithfulness. Two marquee
features landing together — both surfaced during the post-0.5.0
fresh-user dogfood (#236, #237).

Highlights:

• rivet schema migrate (#238) — git-rebase-style preset/version
  migration with snapshot/abort. Phase 1 ships: diff engine,
  plan/apply/abort/status/finish state machine, full pre-migration
  snapshot for rollback, and one canned dev-to-aspice recipe.
  Conflict markers + --continue / --skip deferred to Phase 2.

• cited-source typed schema field + sha256 stamp (#239) — first-class
  affordance for artifacts citing external sources. Phase 1 ships the
  kind:file backend: rivet validate re-reads the cited file,
  recomputes sha256, emits cited-source-drift on mismatch
  (Severity::Warning, promotable via --strict-cited-sources).
  URI scheme allowlist mitigates exfiltration / SSRF surface.
  New rivet check sources [--update [--apply]] for the audit flow.
  Remote backends (url/github/oslc/reqif/polarion) deferred to
  Phase 2; LLM-judge layer deferred to Phase 3 (opt-in Info only,
  if at all).

Workspace, vscode-rivet, and npm root package versions bumped to
0.6.0. Platform packages stay on the release-npm.yml override path.

Honest status: one documented Verus assume() and one Rocq Admitted
remain (REQ-004 follow-ups; closure pending in PR #228).

rivet 0.5.1

rivet 0.5.1 — first-contact polish

Theme: post-0.5.0 dogfood-driven polish. Two clean-room fresh-user
passes plus three scenario-based ones (safety / STPA, compliance /
Polarion-import, AI integrator / MCP) surfaced two real bugs and one
big doc gap. All three are fixed.

Highlights:

• docs(quickstart): rewrite for fresh-user clarity (#230). New
  "What is rivet?" preamble, preset-branched step 2/3, complete
  copy-pasteable ASPICE overlay, sw-req → system-req →
  stakeholder-req stub-parent chain, common-gotchas appendix
  G.1–G.7. Wall-time wins: STPA 13min → 36s; Polarion → ASPICE
  7min → 3.8min.
• fix(aspice): seed validates clean after init (#233). The shipped
  aspice preset's seed failed rivet validate out of the box with
  2 errors (undeclared allocated-from, missing stakeholder-req
  parent). Now returns PASS with 0 warnings.
• feat(mcp): discoverability (#231). New rivet mcp --list-tools
  and --probe flags (no JSON-RPC required to enumerate the tool
  catalog or smoke-test the server) plus a new rivet docs mcp
  topic covering wire format, handshake, the 15-tool catalog, and
  the response-envelope gotcha.

Honest status: one documented Verus assume() and one Rocq Admitted
remain (REQ-004 follow-ups; closure pending in PR #228).

rivet 0.5.0

rivet 0.5.0

Theme: oracle-gated agent pipelines + restored formal-method backstops +
agent-first quickstart.

Highlights:

• Embedded rivet quickstart (10-step oracle-gated walkthrough)
• Three-pillar README + intro-talk template + one-pager
• Mythos slop-hunt scaffold v2.2 (rank → discover → validate → emit)
• Verus + Rocq + Kani all running as real CI gates
• EU AI Act Annex IV dashboard self-audit
• Variant scoping coherent across 8 dashboard handlers
• Mutation testing 16-shard with ~125 surviving mutants killed
• ReqIF round-trip and OSLC push (diff-then-POST-or-PUT)

Honest status: one documented Verus assume() and one Rocq Admitted remain
(both REQ-004 follow-ups; closure pending in PR #228).

Rivet v0.4.3

What's Changed

• feat(ci): rivet-delta SVG render for email/mobile + classification priority fix by @avrabe in #193
• test(sexpr): audit predicate matrix + fuzz + doc examples + linked-from source-arg fix by @avrabe in #194
• feat(clippy): SCRC Phase 1 lint escalation — restriction family at warn by @avrabe in #195
• feat(sexpr): count-compare + matches parse-time regex + accessor docs by @avrabe in #196
• feat(variant): rivet variant features/value/attr for 7 build systems by @avrabe in #197
• docs(variant): build-system emitter walkthrough + exit-code contract by @avrabe in #198
• feat(variant): rivet variant explain for debugging solve outcomes by @avrabe in #199
• chore(release): v0.4.3 by @avrabe in #200
• chore(release): bump vscode-rivet/package.json to 0.4.3 by @avrabe in #201

Full Changelog: v0.4.2...v0.4.3

Rivet v0.4.2

What's Changed

• v0.4.2: UX polish + 10 bug fixes (4 silent-accept, 2 LSP, 4 quality-of-life) by @avrabe in #189
• docs: sync v0.4.2 rivet artifacts + stamp bug fixes (pre-tag) by @avrabe in #192

Full Changelog: v0.4.1...v0.4.2

Rivet v0.4.1

What's Changed

• fix(feature-model): cross-tree constraints silently pass by @avrabe in #156
• fix(validate): salsa path silently drops adapter + external artifacts by @avrabe in #157
• docs: Polarion and ReqIF export fidelity analysis by @avrabe in #169
• fix(init): preserve manual content in AGENTS.md / CLAUDE.md via managed-section markers by @avrabe in #167
• fix(mythos): 4 one-liner silent-accept bugs (validate/coverage/yaml_hir/formats) by @avrabe in #168
• fix: audit followups — real hard gates, /graph budget, PLE self-apply, v0.4.0 artifacts by @avrabe in #155
• fix(mcp): set_fields rejects reserved keys; add top-level description by @avrabe in #158
• fix(serve): Cmd+K search URL persistence + embed discoverability design by @avrabe in #159
• test: YAML + CLI fuzzer targets + empirical evidence for 5 silent-accept bugs by @avrabe in #160
• docs: CLI gaps + severity backlog (real-world 3400-artifact project) by @avrabe in #161
• docs: s-expression artifact format — honest cost analysis, recommend Option A by @avrabe in #162
• feat(release): VSIX on GitHub Release + actually publish to Marketplace by @avrabe in #163
• docs(iso26262): artifact mapping + gap analysis by @avrabe in #164
• build(npm): add @pulseengine/rivet distribution by @avrabe in #166
• docs: reality-check audit of documentation-vs-code by @avrabe in #171
• docs: AI-evidence trend research by @avrabe in #173
• docs: AI-assisted safety + cyber engineering — HITL contract by @avrabe in #176
• docs: v0.4.1 positioning — Evidence as Code frame by @avrabe in #172
• fix(v0.4.1): 5 user-reported pain points (#3, #4, #6, #7, #8) by @avrabe in #174
• fix(reqif): 6 fidelity bugs — provenance, typed fields, tags, creation-time, enum, dangling relations by @avrabe in #175
• feat(cli): v0.4.1 CLI polish — fail-on, stats counts, coverage gate, JSON schemas by @avrabe in #177
• feat(serve): variant selector + filtering in dashboard by @avrabe in #179
• v0.4.1 embeds: mermaid fix + {{query}}/{{group}}/{{stats:type}} + rivet docs embeds + rivet query by @avrabe in #180
• feat: docs-check gate (recurring doc-vs-reality CI check) by @avrabe in #178
• chore(release): v0.4.1 by @avrabe in #181
• fix(serve): variant banner link missing hx-push-url (v0.4.1 release hotfix) by @avrabe in #182
• fix(docs-check): derive known_embeds from registry + add audit markers (v0.4.1 hotfix #2) by @avrabe in #183

Full Changelog: v0.4.0...v0.4.1

Rivet v0.4.0

What's Changed

• feat: JUnit import, LSP diagnostic fix, document validation by @avrabe in #88
• feat(api): oEmbed provider and Grafana JSON API endpoints by @avrabe in #94
• feat: document embeds Phase 1 — parser, renderers, CLI, provenance by @avrabe in #95
• feat: embed phases 2+5 — diagnostics, matrix, snapshots, docs by @avrabe in #96
• feat: release-to-release delta in export + CI snapshot workflow by @avrabe in #97
• feat: schema, LSP fixes, EU AI Act, salsa default, STPA analysis by @avrabe in #101
• feat: convergence tracking, rivet get, MCP server, LSP doc validation by @avrabe in #108
• feat: GSN safety cases + STPA-for-AI schemas with bridges by @avrabe in #109
• chore: dogfood tracking — artifacts, STPA, STPA-Sec for v0.3.1 work by @avrabe in #110
• fix: STPA traceability chain + stpa-dev bridge by @avrabe in #111
• feat: yaml-section schema metadata for schema-driven parsing by @avrabe in #112
• feat: rowan-based lossless YAML CST parser (Phase 1 of unified parsing) by @avrabe in #114
• feat: domain schemas — IEC 61508, IEC 62304, DO-178C, EN 50128 (#102) by @avrabe in #115
• docs: comprehensive documentation refresh + STPA-sec fix (#113) by @avrabe in #116
• feat: ISO/PAS 8800 + SOTIF schemas with STPA bridges (#106) by @avrabe in #117
• feat: rivet schema validate command (#93) by @avrabe in #118
• feat: rowan HIR extraction (Phase 2) + MCP 9 tools + pre-commit hook by @avrabe in #119
• feat: schema-driven YAML extraction — the stpa.rs replacement (Phase 3) by @avrabe in #120
• feat: salsa integration (Phase 5) + dogfood tracking by @avrabe in #121
• feat: Phase 4 doc spans + round-trip equivalence tests by @avrabe in #122
• feat: Phase 6 rowan migration + #93 #98 #99 #104 Phase 1 by @avrabe in #123
• fix: edge case hardening + STPA artifacts + schema fixes + MCP tests by @avrabe in #124
• feat: parallel improvements — JSON tests, security UCAs, EU AI Act export, MCP HTTP, 99.8% coverage by @avrabe in #126
• fix(ci): resolve Miri, cargo-deny, and cargo-audit failures by @avrabe in #131
• feat: forall/exists quantifiers + reachable graph traversal (PLE Phase 2) by @avrabe in #134
• feat(proofs): Kani bounded model checking for s-expression evaluator by @avrabe in #133
• feat(lsp): code actions for missing link diagnostics by @avrabe in #135
• feat(export): Zola static site export with multi-project namespacing by @avrabe in #136
• fix(test): Playwright E2E count comparison by @avrabe in #137
• feat: feature model schema + constraint solver (PLE Phase 3) by @avrabe in #138
• feat(export): Zola docs export with resolved wiki-links by @avrabe in #139
• fix(export): Zola TOML escaping, title fallback, date field, mermaid diagrams by @avrabe in #140
• feat(cli): variant subcommand — check, list, solve with bindings by @avrabe in #141
• test(mcp): integration tests for query, modify, link, unlink, remove by @avrabe in #142
• feat: sphinx-needs JSON import adapter (migration path) by @avrabe in #143
• fix: harden Zola export, hook paths, and filter store access by @avrabe in #144
• test: proptest fuzz testing for variant constraint solver (REQ-052) by @avrabe in #145
• fix(ci): Miri green + getting-started docs for all new features by @avrabe in #146
• feat(cli): rivet validate --variant for variant-scoped validation by @avrabe in #147
• feat(stpa): AI-in-the-loop safety and security analysis by @avrabe in #148
• fix: clear warnings — REQ-054..059 via rivet batch by @avrabe in #149
• feat: verification pyramid — STPA-Sec tests, formal proof CI, Kani expansion by @avrabe in #150
• test(e2e): fix playwright regressions pre-release by @avrabe in #151
• chore(release): v0.4.0 by @avrabe in #152
• fix(windows): gate chmod behind cfg(unix) to unblock v0.4.0 release by @avrabe in #153

Full Changelog: v0.3.1...v0.4.0

v0.3.1

What's New

Draft-Aware Validation (FEAT-070)

Missing required links on status: draft artifacts now produce Info-level diagnostics instead of errors. Active/approved artifacts enforce full traceability as before.

Full Render Module Extraction

All 28 serve views extracted to shared render/ module. serve/views.rs reduced from 5,271 to 409 lines. Single source of truth for HTML rendering across serve, LSP, and export.

HTML Export

rivet export --format html --output ./dist generates a standalone static HTML site with all pages, CSS, Mermaid, and navigation. 532 pages for the self-dogfooding project.

VS Code Extension Improvements

• All views in explorer tree (Graph, Matrix, Coverage, Source, Traceability, Doc Linkage)
• Artifact search — Cmd+Shift+F in explorer opens QuickPick with live LSP search
• Custom graph shapes — diamonds (decisions), hexagons (features), triangles (hazards), octagons (constraints)
• Enhanced schema detail — fields table, link fields, traceability rules, per-type Mermaid diagram, example YAML
• Help linkage diagram — domain subgraphs (ASPICE, Safety, Dev)
• Source line navigation — clicks jump to exact artifact line in YAML
• Auto-refresh on save — WebView updates when YAML files change
• Stale diagnostics fix — cleared diagnostics no longer persist after fixes
• Auto-detect rivet.yaml — searches workspace up to 2 levels deep

VS Code Marketplace CI

Release workflow builds VSIX and publishes to VS Code Marketplace (requires VSCE_PAT secret).

New Artifacts (492 total, PASS, 0 warnings)

• SysML v2 roadmap (REQ-037/038, FEAT-067/068/069)
• Test report lifecycle (REQ-040, FEAT-071/072)
• Draft-aware validation (REQ-039, FEAT-070, DD-040)
• Render architecture (DD-041)

Testing

• 320 Playwright E2E tests (75 new)
• Functional VS Code extension tests (commands, LSP, WebView, tree view)
• Draft validation unit tests

Full Changelog

v0.3.0...v0.3.1