pi-v0.5.0

# gentle-engram 0.5.0

Source: [`fe897f66`](https://github.com/Gentleman-Programming/engram/commit/fe897f66e964c58284bdc83e6e5447f9ba8364c0). Changes since **gentle-engram 0.4.2 / pi-v0.4.2** (the npm predecessor, not the older GitHub Pi release).

## Highlights

- Session-owned core startup/shutdown and bundled-store recovery across core upgrades.
- Align the default Pi memory tool profile with the Go-owned Agent contract and share compound workflow validation.
- Compact memory search and paginated observation history through the HTTP/Pi workflows.
- Canonical search/read/update memory workflow and unified protocol guidance.
- Package the Go-owned runtime comparison assets and add local package validation plus real HTTP workflow coverage.
- Keep post-compaction recovery instructions out of the system prompt to reduce unnecessary prompt re-reading.
- Isolate primary-runtime contract fixtures from inherited delegated-agent roles and improve Windows fixture portability.

## Upgrade from 0.4.2

Version 0.5.0 and the matching core setup pins include migration of the known managed 0.4.2 predecessor while preserving unrelated settings and MCP configuration (#1924).

## Compatibility and publication

**Core publication status:** [Engram 3.5.1 is published](https://github.com/Gentleman-Programming/engram/releases/tag/v3.5.1) from source `41f1254796d49233d7bcb11741093bc09eb386ff`. The original v3.5.0 tag remains unchanged after its checksum-preflight failure. The actual public Windows amd64 core 3.5.1/Pi 0.5.0 pair passed an independent 11-check runtime and managed-settings upgrade smoke. gentle-engram 0.5.0 remains on npm's `candidate` channel; `latest` promotion is a separate pending operation, not a package republication. Full Go/Pi semantic parity, real-user upgrades and every downstream Shell bundle upgrade are not claimed. Back up data and configuration before upgrading.

## Verification and limits

- Source CI passed for the exact release commit.
- Staged and actual public Windows amd64 core 3.5.1/Pi 0.5.0 artifacts passed separate isolated genuine Pi 1.3.0 native search/save/search, authentication, managed-settings migration and owned-process shutdown checks. The actual public probe ran once and exited 0 with all 11 checks passing. The Pi tarball matches the published package bytes; core archive hashes match GitHub API digests and `checksums.txt`.
- Core binaries report source revision `41f12547` with `vcs.modified=true` / `+dirty` and differ from staging; actual public runtime was tested rather than inheriting staging approval. No post-build tracked-clean proof or cryptographic signature-chain verification is claimed.
- No real-user database or installation was used. These checks do not certify every downstream Shell bundle upgrade.
- Windows binaries are not Authenticode-signed; Smart App Control and Defender reports remain separate open investigations (#1703, #1912).

## Contributors

Thank you @dnlrsls, @Alan-TheGentleman, @josegarvinvictoria and @pablon for changes in the Pi package/setup range. Credits below identify the associated contributions.

## Changes since pi-v0.4.2

* feat(pi): add canonical topic workflow to the memory protocol by @josegarvinvictoria in https://github.com/Gentleman-Programming/engram/pull/1653
* docs: unify memory protocol across all agent surfaces by @pablon in https://github.com/Gentleman-Programming/engram/pull/1787
* fix(pi): preserve fake CLI invocation logs on Windows by @dnlrsls in https://github.com/Gentleman-Programming/engram/pull/1829
* fix: recover bundled stores across core upgrades and stop session-owned servers with Pi by @Alan-TheGentleman in https://github.com/Gentleman-Programming/engram/pull/1854
* fix(pi): preserve owned startup fixture checks on Windows by @dnlrsls in https://github.com/Gentleman-Programming/engram/pull/1862
* feat(search): expose compact search through HTTP and Pi by @dnlrsls in https://github.com/Gentleman-Programming/engram/pull/1863
* feat(history): expose paginated observation history through HTTP and Pi by @dnlrsls in https://github.com/Gentleman-Programming/engram/pull/1869
* feat(release): add rejection-only candidate checker by @dnlrsls in https://github.com/Gentleman-Programming/engram/pull/1874
* feat(release): validate local Pi package tarballs by @dnlrsls in https://github.com/Gentleman-Programming/engram/pull/1882
* fix(pi): integrate Go-owned agent profile on main by @dnlrsls in https://github.com/Gentleman-Programming/engram/pull/1884
* test(pi): integrate real HTTP workflow coverage on main by @dnlrsls in https://github.com/Gentleman-Programming/engram/pull/1886
* feat(capture): preserve optional project provenance by @dnlrsls in https://github.com/Gentleman-Programming/engram/pull/1885
* feat(runtime-contract): generate current Go-owned HTTP projection by @dnlrsls in https://github.com/Gentleman-Programming/engram/pull/1893
* feat(pi): package Go runtime comparison assets by @dnlrsls in https://github.com/Gentleman-Programming/engram/pull/1904
* feat(release): guard companion publication order by @dnlrsls in https://github.com/Gentleman-Programming/engram/pull/1936
* fix(pi): keep compaction recovery out of the system prompt by @dnlrsls in https://github.com/Gentleman-Programming/engram/pull/1946
* fix(pi): isolate native contract fixtures from delegated roles by @dnlrsls in https://github.com/Gentleman-Programming/engram/pull/1950

* feat(release): prepare compatible session-owned candidate pair by @dnlrsls in https://github.com/Gentleman-Programming/engram/pull/1924

**Full repository comparison**: https://github.com/Gentleman-Programming/engram/compare/pi-v0.4.2...pi-v0.5.0