[irparent]

0.21.0

The release PR, per docs/launch/release-checklist.md.

• Versions. package.json 0.21.0. npm run version:sync wrote server.json (its MCPB identifier included), mcpb/manifest.json, package-lock.json, both Claude Code plugin manifests (the capture plugin now pins 0.21.0), the Cursor plugin, the gate action, the README, docs/ci-gate.md and website/public/.well-known/mcp.json. npm run version:check passes. The LangChain handler's range on the server admits 0.21.0, so it is unchanged.
• SECURITY.md. 0.21.x is supported; 0.20.x gets security fixes until 2027-01-23, 90 days after this release; 0.19.x and older get none.
• CHANGELOG.md. The notes become ## [0.21.0] - 2026-10-25, led by a summary and a Check before upgrading paragraph naming the three BREAKING entries and who they reach. The release page carries the section whole: about 17,000 characters, inside its budget.
• Proof regenerated at 0.21.0: results, composite, transcripts, invariants and the outside sample. Only the version stamps and the measured latency moved (median 0.837 → 0.854 ms); no accuracy figure changed.
• The renders: the truthbase, llms.txt and llms-full.txt, the release notes on the site, the .well-known manifest and the listing copy.

Checks

• The truthbase was captured on this branch with nothing failed or skipped: root 4,877 of 4,877, dashboard 443 of 443. claims:check, claims:check-hardcoded, llms:check, mcp-json:check and version:check exit 0, run unpiped, and scripts/check-product-claims.sh passes.
• The built server was started against a copy of a long-lived ~/.iris (a database last written by 0.18.0): it copied the file, migrated it, answered initialize as 0.21.0, listed its 12 tools and answered get_traces.

After merge: tag v0.21.0 on the squash commit.

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
website	Ready	Preview	Oct 25, 2026 8:52pm UTC

[github-actions]

Iris gate — 1 of 2 tripped --fail-on detector_veto

iris-eval ingest: 3 stored, 1 tripped --fail-on detector_veto (2 of 3 evaluated in dataset "release-gate")

Trace	Verdict	Basis	Rules, classes or missing inputs	Evidence
146ee37ba9e1c6c55ae5574e8d1af23c	failed	detector_veto + risk_over_loss	no_pii, pii_leak, credential_leak	no_pii: AWS Access Key (output 45–65)

Verdict basis	Traces
detector_veto	2
clean	1

Unjudged questions: task_completed (3), tool_use_correct (3) — a trace that did not carry what a rule needs.

_{tests/fixtures/ci-gate/traces.ndjson · 3 evaluated · dataset release-gate: 2 in the gate · exit 1 · what the bases mean}

[github-actions]

Iris gate — 1 stored, nothing tripped --fail-on any

iris-eval ingest: 1 stored, 0 tripped --fail-on any

Verdict basis	Traces
clean	1

Unjudged questions: task_completed (1), tool_use_correct (1) — a trace that did not carry what a rule needs.

_{tests/fixtures/ci-gate/clean.ndjson · 1 evaluated · exit 0 · what the bases mean}