This release includes 1 breaking change for platform teams planning a safe upgrade.
✓ No known CVEs patched in this version
Topics
+4 more
ReleasePort's take
Light signalVersion v3.20.2 merges canonical and public‑paid source to be byte‑identical, removes developer‑only configuration from paid builds, adds pre‑compilation verification, and supersedes the prior public‑paid tag.
Why it matters: Ensures commercial releases are exactly identical to community sources; build pipeline now validates match before packaging; replaces v3.20.1-public-paid with asset‑free v3.20.2-public-paid.
Summary
AI summaryRemoved developer-only configuration from paid builds to ensure byte-identical commercial-truth sources.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Bugfix | Medium |
Test suite conditionally recognizes intentional absence of developer‑only configuration instead of deleting assertions per lane. Test suite conditionally recognizes intentional absence of developer‑only configuration instead of deleting assertions per lane. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Bugfix | Medium |
Adds pre‑compilation/package verification that paid candidate matches approved release proof. Adds pre‑compilation/package verification that paid candidate matches approved release proof. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Refactor | Medium |
Merges canonical and public‑paid source to be byte‑identical. Merges canonical and public‑paid source to be byte‑identical. Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Refactor | Low |
Supersedes `v3.20.1-public-paid` with asset‑free `v3.20.2-public-paid`. Supersedes `v3.20.1-public-paid` with asset‑free `v3.20.2-public-paid`. Source: llm_adapter@2026-07-18 Confidence: high |
— |
Full changelog
ContextLattice v3.20.2: One Source. Every Lane.
The release gate found two test files whose only difference was a deleted reference to developer-only configuration. Runtime behavior was identical. Source identity was not. ContextLattice stopped the paid installer before a single asset escaped.
v3.20.2 removes that split without smuggling developer-only configuration into paid builds. The same test source now treats premium_dev.env as an optional development fixture that is intentionally absent from distributed lanes.
The CLI remains the primary interface. HTTP remains the integration fallback.
What changed
- Canonical and public-paid now execute one byte-identical commercial-truth and boundary-test source.
- The shared tests conditionally recognize the intentional absence of developer-only configuration instead of deleting assertions per lane.
- The exact paid behavioral-source comparator now proves the tagged candidate against the approved release proof before compilation or packaging.
v3.20.1-public-paidremains asset-free and is superseded byv3.20.2-public-paid.
What did not change
- Utility Ledger recording, exact token accounting, outcome verification, analytics, advisory policy, durability, or rollback behavior.
- Paid entitlement boundaries remain unchanged, and distributed artifacts contain no developer-only profile.
- Public core boundaries, quickstart requirements, third-party harness policy, and the CLI-first product contract.
Verification
The patch must reproduce one source-identical canonical/paid test pair, pass both lane suites, regenerate the closed-world manifests, bind the exact release proof, and complete every installer job before assets publish.
Rollback
Use public v3.20.2 or paid v3.20.2-public-paid. Earlier paid patch tags intentionally carry no installer assets.
Breaking Changes
- Removed the mandatory inclusion of `premium_dev.env` from paid build sources; it is now an optional development fixture intentionally absent in distributed lanes.
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About sheawinkler/ContextLattice
Private-by-default memory and context layer for agents with Go/Rust runtime, staged retrieval across fused data backends, and long-horizon context continuity.
Related context
Related tools
Beta — feedback welcome: [email protected]