# Changelog

All notable changes to Chanora will be documented in this file.

This project is expected to follow a Conventional Commits style workflow.

## [Unreleased]

### Added

- Initial repository foundation files.
- Documentation-first project structure.
- `justfile` with `format`, `lint`, `test`, `verify-docs`, and
  `security-scan` targets, completing `repository-bootstrap-plan` v0.1.0 §3.
- `poc/tsclientlib-connect-spike/` — PoC proving protocol feasibility via
  `tsclientlib`. Verified against `cn.teamspeak.app` on 2026-05-13.
- `poc/flutter_rust_bridge_hello/` — PoC proving the Flutter↔Rust command
  and event-stream boundary via `flutter_rust_bridge` 2.12.0. Verified on
  Linux desktop on 2026-05-13.
- `poc/secure-storage-spike/` — PoC proving platform secure storage via
  a typed `SecretStorageRepository` trait and a Linux adapter selecting
  between Secret Service (libsecret) and kernel keyutils. Audit checks
  SS-AUD-001/002/003/005/006 and SS-TC-003 verified on 2026-05-13.
- `poc/sqlite-storage-spike/` — PoC proving SRS-089's "embedded data
  store + migration mechanism" acceptance criteria: forward-only schema
  migrator tracked via `PRAGMA user_version`, repository pattern with
  `BookmarkRepository` / `SettingsRepository` traits over
  `LocalDatabaseRepository`. 11/11 tests verified on 2026-05-13.
- `poc/diagnostics-redaction-spike/` — PoC proving the diagnostic
  redaction policy from `diagnostic-redaction-audit-report.md`:
  typed policy + regex rules + literal known-secret registry + bundle
  redaction. Audit cases REDACT-TC-001..010 verified on 2026-05-13.
- `poc/audio-capture-playback-spike/` — PoC proving platform audio
  capture/playback via cpal. Desktop half (Linux + PipeWire)
  empirically verified end-to-end on 2026-05-13; mobile half
  (Android Oboe / iOS AVAudioEngine) documented as an open gap.
- `poc/README.md` summarising PoC status against
  `docs/architecture/proof-of-concept-plan.md`.

### Changed

- `docs/architecture/proof-of-concept-plan.md` bumped to v0.2.0 to
  record PoC outcomes (5 PASS, 1 PARTIAL) and add a Status column.
- `docs/security/secure-storage-audit-report.md` bumped to v0.9.3:
  SS-AUD-001/002/003/005/006 status set to PoC Pass with evidence
  pointers; SS-TC-003 (Linux) Actual Result populated and Status set
  to PoC Pass; findings SS-FIND-001..003 added; non-Linux test cases
  marked Deferred.
- `docs/security/diagnostic-redaction-audit-report.md` bumped to
  v0.9.3: REDACT-TC-001..010 status set to PoC Pass with evidence
  pointers; export bundle policy §5 populated; findings
  REDACT-FIND-001..003 added.
- `docs/governance/product-decision-register.md` bumped to v0.9.3:
  owner-confirmed decisions recorded — DEC-014 Accepted
  (`flutter_rust_bridge` 2.x pinned), DEC-013.1 Accepted (`rusqlite`
  bundled), DEC-013.2 Accepted (Linux Secret Service preferred,
  keyutils fallback), DEC-011.1 Accepted (desktop `cpal`) / Deferred
  (mobile), DEC-022 Accepted (canonical implementation directory
  layout per README sketch + SAD §7.2), DEC-020 explicitly Deferred
  and remains a public-release blocker.

### Added (governance)

- `docs/governance/poc-results-summary.md` v0.1.0 — single-page
  reviewer-facing summary of the PoC phase, the toolchain exercised,
  the owner decisions taken, the audit coverage, and the open risks
  RISK-PoC-001..005.

### Fixed

- N/A

### Security

- N/A

## Versioning note

The project implementation has not reached a public release version yet.