Veritas Kanban 6.1.0 completes the agentic-control roadmap that followed the first stable v6 release. It gives Buzz, Grok Build, OpenAI Codex, Claude Code, GitHub Copilot CLI, Hermes, and OpenClaw one provider-neutral control plane while preserving explicit transport and capability differences. It also adds governed knowledge collections, durable execution supervision, run-scoped network enforcement, safe workspace rewind, and resilient output handling.
Agent harness control plane
Every supported harness is discovered, diagnosed, dispatched, observed, and completed through the same support-profile, runtime-manifest, launch-manifest, approval, tool, credential, sandbox, phase-authority, and completion contracts. Veritas probes exact provider builds and capabilities rather than treating provider names as proof. Unsupported controls fail before attempt creation, and unknown or changed builds invalidate cached conformance instead of silently falling through to another adapter.
Buzz Agent and Grok Build use ACP transports with exact handshake and capability evidence. Codex CLI, SDK, and app-server retain their distinct supervised lifecycles. Claude Code runs through its strict bare-mode stream, GitHub Copilot CLI remains bounded to its public-preview ACP contract, Hermes retains one-shot execution, and OpenClaw retains explicit gateway policy. Buzz relay communication remains separate from execution authority: Buzz transports signed messages while Veritas owns tasks, attempts, tools, approvals, and completion.
Governed execution
Run-scoped egress enforcement now resolves and pins allowed destinations, applies protocol, host, port, method, and normalized path rules, and records redacted decision evidence. Durable admission control applies capacity, budgets, fairness, cancellation, and circuit breaking to direct tasks, workflows, retries, fallbacks, continuations, child agents, and provider handoffs through one queue and execution-tree contract.
Append-only admission records now complete each serialized write before syncing, preventing short filesystem writes from truncating durable reservation state. Knowledge-collection routes also use the exact shared permission prefix so client discovery and server enforcement remain in fail-closed parity.
Durable goals survive turns, restarts, and provider continuations without inventing completion. Background commands and monitors are supervisor-owned, repetitive or stalled runs receive bounded recovery, oversized output spills into governed artifacts, and dependency-aware load shedding prevents unhealthy agent trees from amplifying pressure.
Knowledge and workspace safety
Workspace knowledge collections now support classified immutable sources, cited derived pages, reviewed ingestion, atomic apply and reversal, scoped search, query promotion, and cited export with file and SQLite parity. Deterministic integrity linting finds graph, schema, provenance, freshness, citation, canonical-term, contradiction, duplication, supersession, and evidence gaps. Material claims have attributable, evidence-linked, reversible lifecycle controls so conflicts remain visible and reviewable.
Turn-boundary checkpoints capture run-owned Git, index, file, exclusion, ownership, conversation, and attributable provider-diff state. Rewind is preview-first, digest-bound, conflict-aware, and limited to selected paths; ambiguous attribution, external edits, unsupported providers, and stale evidence fail closed.
Install or upgrade
Back up the complete stopped-writer workspace before upgrading and keep the backup until the new runtime is accepted. Version 6.1.0 advances SQLite through migrations 30 to 33 for knowledge collections and integrity operations. The public REST API remains mounted at v1.
brew update
brew upgrade --cask bradgroux/tap/veritas-kanbanFor a first installation:
brew install --cask bradgroux/tap/veritas-kanbanThe Assets section provides the signed and notarized macOS arm64 DMG and ZIP after the release workflow completes. Linux and Windows artifacts remain unsigned verification previews.
Compatibility and documentation
Provider support is evidence-bound, not feature-parity theater. Authentication, subscription availability, quota, and live inference remain external runtime facts even when deterministic compatibility passes. GitHub Copilot CLI ACP remains public preview; Buzz session resume and several relay projections remain unsupported; Grok Build and Claude Code certification remains pinned to exact reviewed release behavior.
See the full release notes, upgrade guide, harness matrix, provider guide, agent template, Buzz guide, and changelog.