chore(main): release 0.9.0

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "0.8.0"
+  ".": "0.9.0"
 }

CHANGELOG.md

@@ -11,6 +11,45 @@ commit list on its
 gaps between 0.3.1 and 0.5.0 are explained under
 [Release history notes](#release-history-notes).
 
+## [0.9.0] - 2026-08-20
+
+### Changed (breaking)
+- `focus_order` runs modules in the order it lists. The list was pushed onto
+  the CLIPS focus stack reversed, so the last module named ran first. A
+  multi-module ruleset that relied on the old behaviour must reverse its
+  list; single-module rulesets, and rulesets whose modules do not write
+  competing decisions, are unaffected.
+
+### Fixed
+- The Docker image builds again — `mkdir -p /rules` ran after the switch to a
+  non-root user — and CI now builds it, runs it, and checks the container's
+  identity on every pull request.
+- The TypeScript SDK no longer sits beside a second, stale API spec. The
+  repo-root `openapi.json`, frozen at 0.3.0, and the dead generated client
+  that was never imported are both gone;
+  `docs/reference/rest/openapi.json` is the only spec.
+
+### Security
+- Publishing is gated on green required checks and runs from tag pushes only.
+  `workflow_dispatch` is gone from the publish path, which previously let any
+  account with write access publish signed artifacts built from any ref, and
+  every third-party action in that path is pinned to a commit SHA.
+- Dependabot no longer auto-merges `github_actions` bumps: those PRs rewrite
+  the workflows that hold the signing key and the PyPI identity.
+- Every user-installable requirement carries an upper version bound, so a
+  future major release cannot be resolved into an install this release was
+  never tested against.
+
+### Changed
+- CI enforces the published performance targets (`bench`, with a documented
+  1.5x allowance for shared runners), the version numbers printed in prose,
+  the dependency diff on each pull request, and a build of
+  `packages/fathom-editor`.
+- A determinism test asserts the engine's core claim directly: the same facts
+  produce the same decision across repeated and re-ordered runs.
+- The release-signing guide scopes its guarantee to 0.5.0 and later; the five
+  earlier PyPI releases are unsigned.
+
 ## [0.8.0] - 2026-08-19
 
 ### Removed (breaking)

README.md

@@ -13,7 +13,7 @@
 
 > **Part of the [Kraken](https://github.com/KrakenNet) stack:** [**Fathom**](https://github.com/KrakenNet/fathom) (reasoning engine) · [Nautilus](https://github.com/KrakenNet/nautilus) (policy data broker) · [Stargraph](https://github.com/KrakenNet/stargraph) (agent-graph framework).
 
-**Current version:** 0.8.0 <!-- x-release-please-version -->
+**Current version:** 0.9.0 <!-- x-release-please-version -->
 
 **License:** MIT
 

docs/changelog.json

@@ -1,4 +1,26 @@
 [
+  {
+    "version": "0.9.0",
+    "date": "2026-08-20",
+    "added": [],
+    "changed": [
+      "`focus_order` runs modules in the order it lists. The list was pushed onto",
+      "CI enforces the published performance targets (`bench`, with a documented",
+      "A determinism test asserts the engine's core claim directly: the same facts",
+      "The release-signing guide scopes its guarantee to 0.5.0 and later; the five"
+    ],
+    "deprecated": [],
+    "removed": [],
+    "fixed": [
+      "The Docker image builds again \u2014 `mkdir -p /rules` ran after the switch to a",
+      "The TypeScript SDK no longer sits beside a second, stale API spec. The"
+    ],
+    "security": [
+      "Publishing is gated on green required checks and runs from tag pushes only.",
+      "Dependabot no longer auto-merges `github_actions` bumps: those PRs rewrite",
+      "Every user-installable requirement carries an upper version bound, so a"
+    ]
+  },
   {
     "version": "0.8.0",
     "date": "2026-08-19",

docs/index.md

@@ -13,7 +13,7 @@ Fathom is a deterministic reasoning runtime for AI agents, built on CLIPS via
 clipspy. Rules are authored in YAML, compiled to CLIPS constructs, and
 evaluated in microseconds with auditable traces.
 
-Current release: `fathom-rules` 0.8.0 (requires Python 3.12+). <!-- x-release-please-version -->
+Current release: `fathom-rules` 0.9.0 (requires Python 3.12+). <!-- x-release-please-version -->
 
 ## Start here
 

docs/llms-full.txt

@@ -6,7 +6,7 @@ Fathom is a deterministic reasoning runtime for AI agents, built on CLIPS via
 clipspy. Rules are authored in YAML, compiled to CLIPS constructs, and
 evaluated in microseconds with auditable traces.
 
-Current release: `fathom-rules` 0.8.0 (requires Python 3.12+). <!-- x-release-please-version -->
+Current release: `fathom-rules` 0.9.0 (requires Python 3.12+). <!-- x-release-please-version -->
 
 ## Start here
 

docs/reference/rest/openapi.json

@@ -375,7 +375,7 @@
   "info": {
     "description": "Deterministic reasoning runtime for AI agents",
     "title": "Fathom Rules Engine",
-    "version": "0.8.0"
+    "version": "0.9.0"
   },
   "openapi": "3.1.0",
   "paths": {

packages/fathom-ts/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fathom-rules/sdk",
-  "version": "0.8.0",
+  "version": "0.9.0",
   "description": "TypeScript SDK for the Fathom policy engine REST API",
   "license": "MIT",
   "main": "dist/index.js",

pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "fathom-rules"
-version = "0.8.0"
+version = "0.9.0"
 description = "Deterministic reasoning runtime for AI agents, built on CLIPS via clipspy"
 readme = "README.md"
 license = "MIT"

src/fathom/__init__.py

@@ -10,7 +10,7 @@
 )
 from fathom.models import AssertedFact, AssertSpec, EvaluationResult
 
-__version__ = "0.8.0"  # x-release-please-version
+__version__ = "0.9.0"  # x-release-please-version
 
 __all__ = [
     "__version__",