veritas-kanban/docs/V5-RELEASE-NOTES.md

v5.0 Release Notes

These notes describe the published Veritas Kanban v5.0 stable release line.

• GitHub release: Veritas Kanban v5.0.1
• Supported packaged install: brew tap BradGroux/tap && brew install --cask veritas-kanban
• Manual macOS install: Veritas-Kanban-5.0.0-mac-arm64.zip

v5.0.1 Patch

v5.0.1 is a small MCP/runtime patch release. It keeps the v5 storage, desktop, security, and migration posture unchanged from v5.0.0.

• MCP write tools now return concise confirmations instead of echoing the full task JSON and complete comment history on every mutation.
• Read tools remain the full-detail paths: get_task, list_tasks, and list_comments.
• The MCP documentation and response-contract tests cover the concise write behavior.
• The Mantine task detail Progress tab test was stabilized under CI load while validating the patch.
• The local macOS desktop packaging smoke check now follows the configured app bundle name.

Highlights

• Native macOS desktop app with bundled local server lifecycle, app data paths, safe-storage backed secrets, menus, notifications, deep links, setup diagnostics, updater status, and signed/notarized release workflow.
• SQLite-backed v5 storage with file-to-database migration, dry-run reports, migration journals, backup/export/import, rollback recovery, and dual-storage parity coverage.
• Multi-user workspaces with roles, memberships, invitations, scoped API tokens, device sessions, actor attribution, optimistic concurrency, and RBAC coverage across REST, WebSocket, CLI, MCP, and workflow paths.
• Remote/mobile access for trusted same-origin hosts, secure pairing, hardened realtime sync, responsive mobile surfaces, and PWA install support with static-shell-only offline behavior.
• Cohesive v5 work surfaces: Work View, action queue, readiness gates, durable work products, completion packets, universal search, workflow authoring, policy decision traces, maintenance center, product modes, skill capability profiles, skill security scanning, and orchestrator/subagent pipelines.
• Refreshed release documentation captures the current desktop shell, resizable Workbench bottom panel, Codex-default agent provider settings, task work view, Maintenance Center, and mobile/PWA shell using release-safe dummy content.

Breaking Changes And Migration Warnings

• v5 promotes SQLite as the primary GA storage backend. Run the migration dry run and preserve the pre-migration backup before accepting the SQLite database.
• Rolling back the app binary after a SQLite migration is only safe when the older app supports the current schema. Otherwise restore the pre-migration file-backed backup.
• Remote/server mode must not rely on localhost bypass. Enable auth, use HTTPS or a trusted VPN/tunnel, and validate /api, /ws, manifest, service worker, and static assets from the same origin.
• PWA/mobile offline support caches only the static shell. It does not cache API data, WebSocket events, tokens, task contents, comments, work products, or mutation responses.
• Owner/admin credentials are not for routine agents. Use scoped agent or service tokens and revoke lost devices or tokens from Settings.

Fresh Install

1. Install the signed Mac desktop app:

   brew tap BradGroux/tap
   brew install --cask veritas-kanban
   

   Manual install is also supported from the stable GitHub release ZIP.

2. Launch Veritas Kanban and choose Board Only unless you already need agent or remote setup.

3. Save the recovery key.

4. Verify Settings -> Maintenance health, storage, backup, and debug-bundle previews.

Upgrade

1. Back up the existing v4 file-backed project or desktop data directory.
2. Run migration dry-run.
3. Resolve warnings or record accepted risks.
4. Run migration and preserve the journal/report.
5. Verify board, task detail, search, workflows, chat, settings, work products, Maintenance Center, and audit history.
6. Run backup/export and restore verification before deleting old artifacts.

Release Artifacts

The v5.0.0 stable desktop release includes:

Artifact	SHA-256
Veritas-Kanban-5.0.0-mac-arm64.dmg	f3d0c3a70b66c27c27db527b2cdeb8ac86f174630c951a429eeb59b4080bf0ae
Veritas-Kanban-5.0.0-mac-arm64.zip	bfd1e57fc99b4468f9fd97418c2aa57b51a1e3087966539c60a75c848c595cb1
Veritas-Kanban-5.0.0-mac-arm64.dmg.blockmap	0d10746c0703e1ac1409b9a370ed2bd8195dc25fc8f9e1384f909140f5e00a0e
Veritas-Kanban-5.0.0-mac-arm64.zip.blockmap	2eb8b8a93cca84f1579736ce06bf5107edd688c9d941ce83ba3876982ec52d09
latest-mac.yml	535cd6da5e95dff8dcf869fa2b236a2b1ddcc4dff118f325b41265cb96f14db1

Checksum sidecars are published as Veritas-Kanban-5.0.0-mac-arm64.dmg.sha256 and Veritas-Kanban-5.0.0-mac-arm64.zip.sha256.

The GitHub release also includes the source archive and links to the upgrade, desktop install, remote/mobile, admin, compatibility, and GA checklist docs.

Documentation

• v5 Upgrade, Install, Remote, And Admin Guide
• v5 Visual Tour
• v5 Compatibility And Release Policy
• v5 GA Checklist
• Post-GA Desktop Agent Workbench Spec
• Post-GA Native Mobile Offline ADR
• Post-GA Cloud Sync And Hosted SaaS ADR
• Desktop Release
• Migration Recovery
• Self-Hosting Guide
• PWA Install
• Identity, Workspace, And RBAC
• Maintenance Center
• v5 Security Review
• v5 Performance And Load Test Notes

Post-GA Follow-Up

• Linux and Windows unsigned desktop artifacts remain preview-only, non-GA validation outputs documented in Desktop Release.
• Native mobile apps with offline execution are scoped in ADR 0003.
• Cloud sync and hosted SaaS are scoped as optional post-GA work in ADR 0004.
• Deeper desktop agent workbench features are scoped in Post-GA Desktop Agent Workbench Spec.