The 6.2.0 candidate improves Settings persistence, native macOS interactions, keyboard navigation and large-board behavior. Read the 6.2.0 release source for current changes and compatibility notes. Verification and publication remain separate stages in the candidate evidence packet.
The latest published stable release remains 6.1.7. Veritas Kanban 6.0.0 remains quarantined.
Veritas Kanban 6.1.6 is a focused desktop reliability and interface consistency release. It corrects chat and drag layout overflow, makes consecutive board moves reliable, polishes Settings and Command+K, removes the redundant desktop wordmark, unifies action and selected-navigation styling, refreshes maintained media, and updates vulnerable transitive dependencies.
Veritas Kanban 6.0.0 remains a quarantined prerelease. Version 6.1.6 was a supported stable v6 release and requires macOS 13 Ventura or later on Apple silicon.
| Issue or tracker | Operational outcome | Pull requests |
|---|---|---|
| #1360 | Patched qs, @xmldom/xmldom, and postcss-selector-parser dependency advisories |
#1373 |
| #1361 | Chat and drag interactions remain contained within the desktop app shell | #1367 |
| #1362 | Settings has one aligned modal title and close control | #1371 |
| #1363 | Command+K has clearer search, result, selection, and keyboard hierarchy | #1372 |
| #1364 | Desktop navigation keeps the icon and removes the redundant product wordmark | #1370 |
| #1365 | Consecutive board moves retain the latest task revision instead of failing stale | #1368 |
| #1366 | Page actions and selected navigation use one consistent size and color contract | #1369 |
| #1374 | Integrated 6.1.6 build, release validation, media, and distribution | Release PR |
The public REST API remains v1. Version 6.1.6 adds no SQLite migration and remains compatible with valid 6.1.5 workspaces. Rollback to 6.1.5 uses the complete matching application bundle and does not require a schema rollback.
Maintained screenshots, desktop and mobile GIFs, social previews, and the demo video show the integrated 6.1.6 interface. They are generated from an isolated workspace containing only public-safe dummy tasks with pnpm docs:capture-media.
| Issue or tracker | Operational outcome | Pull requests |
|---|---|---|
| #1295 | Command+K layout, scrolling, keyboard navigation, and focus recovery | #1318 |
| #1296 | Active Board Chat and Squad Chat controls now toggle closed as well as open or switch | #1317 |
| #1297 | Grouped Settings navigation and shared layouts across all twenty destinations | #1321, #1323, #1325, #1327, #1329, #1331, #1333 |
| #1298 | Memory pressure uses real process and host limits instead of ordinary V8 heap reservation | #1316 |
| #1299 | Progressive Overview, Plan, Run, Results, and History task workspace with an expanded presentation | #1342-#1349 |
| #1300 | Conflict notifications retain distinct events while adding task, action, revision, and recovery context | #1315 |
| #1301 | Semantic board color replaces generic edge highlighting across supported interaction and responsive states | #1319 |
| #1302 | Cross-column moves persist status and order atomically and reconcile after partial failure | #1314 |
| #1303-#1306 | Dependency proposals were reviewed and superseded by focused CodeQL, compatible dependency, and Electron PRs | #1311-#1313 |
| #1350 | Public docs exclude internal working artifacts and CI validates the publication boundary | #1353, #1355 |
| #1351 | Concurrent health probes use collision-safe temporary paths | #1352 |
The UI work changes the named Settings, task-workspace, board, palette, and chat interactions. It retains the existing Mantine and Tailwind component system and is not an app-wide visual rebrand.
Maintained screenshots, desktop and mobile GIFs, social previews, and the demo video now show the integrated 6.1.5 interface. They are generated from an isolated workspace containing only public-safe dummy tasks with pnpm docs:capture-media.
The native macOS About panel now keeps the displayed build identity concise, labels Apple silicon in familiar terms, links the project source, and identifies the MIT license alongside the Digital Meld copyright holder. Full build evidence remains available in copied support information.
The public REST API remains v1. Version 6.1.5 adds no SQLite migration and remains compatible with valid 6.1.4 workspaces. The repository-publication security boundary and patched fast-uri override shipped in 6.1.4 remain in place.
Repository publication accepts only canonical Git branch names and requires durable authority for the exact task, managed worktree, configured repository and origin, source and base branches, and captured commit. Pushes publish the captured commit through isolated Git transport and fail closed when authority is absent, stale, or mismatched. Existing valid hierarchical branch names remain supported, and existing remote task branches may advance only by safe fast-forward.
The public REST API remains v1. Version 6.1.4 adds no SQLite migration. Back up the complete stopped-writer workspace before upgrading and retain the backup until the upgraded runtime is accepted.
| Issue | Operational outcome | Pull request |
|---|---|---|
| #1247 | Governed file-backed Work Products | #1270 |
| #1248 | Effective Run Access summary | #1275 |
| #1249 | Deterministic recurring automation drafts | #1276 |
| #1250 | Passive rich artifact previews | #1278 |
| #1251 | Digest-bound run file provenance | #1277 |
| #1252 | Governed active Run Access transitions | #1279 |
| #1253 | Bounded standing-authority automation activation | #1280 |
| #1254 | Isolated HTML artifact previews | #1285 |
| #1255 | Provenance-aware execution approval | #1286 |
| #1256 | Accessible authentication validation | #1271 |
| #1257 | Keyboard and touch visibility for secondary actions | #1272 |
| #1258 | Standard macOS Window and Help menus | #1273 |
| #1259 | Explicit shared motion and stable status feedback | #1274 |
| #1291 | Correct packaged diagnostics menu label | #1292 |
Work Products can now retain downloadable file artifacts with exact workspace, product version, task, attempt, request, size, digest, media, state, and storage evidence. File and SQLite backends enforce the same idempotency, quarantine, deletion, and integrity contracts. Passive previews support bounded text, JSON, image, audio, video, PDF, archive, and isolated HTML surfaces without granting execution authority.
Run file provenance projects causal run events into digest-bound file history. Operators and agents can distinguish repository-baseline, agent-created, command-created, tool-created, attachment-derived, connector-derived, downloaded, operator-provided, and unknown bytes without persisting credential values.
Run-owned terminal execution now binds direct executable, script, loader, configuration, archive, and load-path inputs to the exact launch baseline or provenance record. External and unknown bytes require a fresh critical human decision. The server rechecks the task envelope, launch manifest, active phase, file bytes, provenance, and approval evidence immediately before spawn. Unsupported indirect or tool transports fail with typed blockers.
Operators now receive one redacted, digest-bound Run Access summary spanning filesystem, command, network, tools, integrations, credentials, budgets, provider support, and historical authority. Active access changes use server-owned targets, exact compare-and-set evidence, critical approval where authority expands, durable reversal, and the same phase contract used by dispatch.
Recurring automation drafts are deterministic and revisioned. Activation previews bind the effective Run Access ceiling, provider and workflow readiness, tools, integrations, targets, expiry, budgets, and blockers. Critical human approval is required before standing authority becomes active, and run claims remain bounded, idempotent, and auditable.
Authentication, setup, and recovery errors now expose field relationships and concise announcements without moving focus. Secondary task, review, and archive actions reveal on keyboard focus and remain available on coarse pointers, with target-specific accessible names for icon-only controls.
The macOS shell adds standard Window and Help menus while retaining the existing product commands. Shared primitives and high-frequency board, task, activity, template, and chat surfaces use explicit transition properties and stable running or unread states instead of broad or competing perpetual motion. Reduced-motion behavior remains intentional and immediate.
Admission snapshot appends now complete every byte before synchronization, and admission reads serialize with concurrent writers. ACP teardown contains detached reply-write failures without masking awaited transport errors. Workflow-run reads retry bounded regular-file replacements caused by atomic updates while continuing to reject symbolic links and persistently unstable paths.
Packaged macOS acceptance also found and corrected Electron’s mnemonic handling for the diagnostics Help item, so the native menu and accessibility tree expose the intended ampersand.
The release audit found no open Dependabot or secret-scanning alerts. One high-severity CodeQL password-hashing alert was dispositioned as a false positive after source review confirmed the SHA-256 input contains only workspace, task, attempt, event-kind, and event-identity metadata. Default-branch CodeQL remains at zero open alerts.
The complete release matrix is recorded in v6 Release Candidate Evidence Packet. Normal changes used focused tests. Full workspace units, critical-path coverage, lint, typecheck, builds, security gates, Playwright, load smoke, Docker contract, and macOS/Linux/Windows unsigned artifacts ran at the integration and release milestones.
Install or upgrade with Homebrew:
brew update
brew upgrade --cask bradgroux/tap/veritas-kanban
For a first installation:
brew install --cask bradgroux/tap/veritas-kanban
Manual installation uses the signed and notarized macOS arm64 DMG or ZIP from the v6.1.6 release. Version 6.1.6 requires macOS 13 Ventura or later. Back up the complete stopped-writer workspace before upgrading and keep the backup until the new runtime is accepted.
The public REST API remains v1, and 6.1.6 adds no database migration. Version 6.1.3 introduced SQLite migration 34 for governed work-product artifact storage and indexes. Upgrading directly from 6.1.2 does not rewrite existing Work Product rows, but an older binary must not open the migrated workspace.
Rollback from 6.1.6 to the complete 6.1.5 application bundle does not require a schema rollback. For rollback to 6.1.2 or earlier, stop every writer and restore the matching complete stopped-writer backup. Never copy an older database over a running instance.
Linux and Windows desktop artifacts remain unsigned verification previews. Signed and notarized macOS arm64 is the supported stable desktop distribution. Credential-gated provider smoke remains supplemental and cannot be inferred from deterministic fixtures. HTML previews remain passive, opaque-origin documents with restrictive content security policy and no bridge or run authority. Unsupported indirect file execution and uncertified tool execution remain blocked.
Exact release merge, annotated tag, GitHub release body, signed artifact names, sizes, checksums, updater metadata, signing, notarization, stapling, Gatekeeper, launch/reopen, and Homebrew evidence are recorded in v6 Release Candidate Evidence Packet.