VERSION HISTORY
Every change.
Its original record.
Release notes, historical tags and published code milestones are distinguished—not silently treated as equivalent releases.
Copy the existing-user upgrade prompt →
Published release
1.17.3 →
An update no longer stops because a harness command is slow to start: the installer finds harness commands on PATH instead of timing them, and the updater gives the reason when a harness cannot be verified. Signed lifecycle drills passed on six hosted Windows/macOS/Linux Node 18/24 cells, upgrading from 1.17.2 and 1.17.1.
Published release
1.17.2 →
The suite pack and the Setup Center and ledger self-tests no longer fail when MOMM_EVIDENCE_HOME is set (an independent tester got 74 of 97 on 1.17.1); reviews themselves were not affected. Signed lifecycle drills passed on six hosted Windows/macOS/Linux Node 18/24 cells, upgrading from 1.17.1 and 1.17.0.
Published release
1.17.1 →
Copilot reviews work again on recent Copilot CLI versions (new events, fenced and narrated answers), CLI/model compatibility shown at preflight, and twenty reliability improvements so failures explain themselves. Signed lifecycle drills passed on six hosted Windows/macOS/Linux Node 18/24 cells, upgrading from 1.17.0 and 1.16.1.
Published release
1.17.0 →
Role-preserving review with versioned roles, typed claims, role cover and second looks; POSIX launch containment, Codex and Grok review isolation, command-bound capabilities, and private original-run diagnostics. Signed lifecycle drills passed on six hosted Windows/macOS/Linux Node 18/24 cells, including interrupted-upgrade recovery.
Published release
1.16.1 →
a reviewed project can no longer choose the executable MOMM runs on Windows; committed-range reviews, capability expiry and tool-produced verification records; reviewer-CLI update notice; Grok and Codex reviews isolated from your own setup; failure details that keep nothing MOMM sent.
Published release
1.16.0 →
Per-CLI token and cost accounting, reviewer ratings and 30-day route reliability, guidance layers behind a trust gate, --split with per-piece quorum and governor-direct scope, a modality registry with capability-aware routing, an event-driven update clock with an off-by-default automatic-update setting, update --check-all, Windows hardening (private evidence folder, tools resolved to absolute paths), opt-in --retry-invalid, and one design system shared by the Setup Center and the private ledger.
Published release
1.15.1 →
Corrects gitsign staging discovery and adds a genuine signed preview/apply gate before publication. Retains every 1.15.0 improvement and provides a verified bootstrap for affected installations.
Published release
1.15.0 →
Explicit signed updates and recovery, per-harness receipts, protocol acceptance, stricter completion evidence, CLI maintenance and attributed version history. Fresh-install testing then found an updater staging defect; use the 1.15.1 correction and bootstrap guidance.
Published release
1.14.1 →
Made FAQ answers visible, stripped ANSI/OSC before JSON parsing, published the route table as Markdown and refined the footer.
Published release
1.14.0 →
Corrected public claims; added evidence tables, prose corroboration, quick/deep tiers, invalid-output diagnostics, broader redaction and explicit installer targets.
Published release
1.13.0 →
Reconciled the published 1.10.x and installed 1.11/1.12 development lines; corrected supervisor timeouts and ledger speech, and refreshed walkthroughs and evidence.
Published release
1.10.2 →
Fixed narrow provider-card layouts after asynchronous hydration and extended UI tests to hydrated headers and maintenance actions.
Published release
1.10.1 →
Packaged the corrective 1.10 release, removed the rigid layout minimum, stabilized a terminal-exit fixture and clarified setup-probe boundaries.
Published release
1.10.0 →
Corrected provider authority and commands; added isolated synthetic setup probes, explicit connection states, shared OAuth environment policy and setup security contracts.
Historical tag · no Release record
1.9.1 →
Hardened Host validation, stale verification, terminal-launch errors, newline-command refusal and Windows timeout budgeting.
Public code history · no release tag
1.9.0 →
Introduced a loopback Setup Center with controller selection, provider maintenance, version diagnostics, explicit interactive actions and terminal onboarding.
Historical tag · no Release record
1.5.0 →
Added cached daily version notices, NO_UPDATE_CHECK opt-out, version-format validation and a cache-path symlink guard.
Historical tag · no Release record
1.4.0 →
Added owner-only POSIX evidence permissions and surfaced private ledger links through structured events, the live interface and stderr.
Historical tag · no Release record
1.3.1 →
Moved Copilot and Antigravity contracts into prompt files; corrected redaction offsets, merged-severity downgrades and Grok doctor command resolution.
Public code history · no release tag
1.3.0 →
Completed reviews rebuild the private dashboard and expose evidence.ledger_url plus a stderr link; added POSIX, Windows-drive and UNC file-URL tests.
Published release
1.2.0 →
Published the public evidence site and introduced private per-workspace dashboards rebuilt and opened with ledger.mjs --open.
Published release
1.1.0 →
Published five reviewer routes including Grok, personas, input-scaled timeouts, run labels, opt-in stored input, minimum-success gates and stale-input detection.
Public code history · no release tag
1.0.0 →
Added install/login guidance, candidate-CLI detection, report schema/version fields, a Node 18 guard, troubleshooting tables and README flowcharts.
Published release
0.1.0 →
First public multi-llm-review predecessor: OAuth peer reviews through Codex, Claude Code and Antigravity, governor self-exclusion, reproduction-gated findings and recorded suggestion dispositions.