tighten: update README to v4.0, pyproject.toml for PyPI, mark completed tasks

Author: Douglas Jones

.kiro/specs/v4-language/tasks.md

@@ -0,0 +1,78 @@
+# Codifide v4.0 — Tasks
+
+## REQ-V4-1: Runtime type enforcement
+
+- [x] **V4-1-1** Add `TypeViolation` to `codifide/runtime/errors.py`
+- [x] **V4-1-2** Implement `_check_type(value, declared_type)` in interpreter
+- [x] **V4-1-3** Call type check at every user-function call boundary (args + return)
+- [x] **V4-1-4** Add `TypeViolation` to capability manifest errors list
+- [x] **V4-1-5** Write `tests/test_type_enforcement.py` (20 tests)
+- [x] **V4-1-6** Verify all existing tests still pass (450 passing)
+- [ ] **V4-1-7** Sable audit of type enforcement implementation
+- [x] **V4-1-8** File Quill/Glyph dispatch
+
+## REQ-V4-2: Standard library
+
+### V4-2a: File I/O
+- [x] **V4-2a-1** Add `io.read`, `io.write`, `io.exists` to `primitives.py`
+- [x] **V4-2a-2** Add `io.read` and `io.write` effects to capability manifest
+- [x] **V4-2a-3** Path traversal defense tests
+- [x] **V4-2a-4** Size bound test
+
+### V4-2b: HTTP client
+- [x] **V4-2b-1** Add `http.get`, `http.post` to `primitives.py`
+- [x] **V4-2b-2** Add `http.fetch` effect to capability manifest
+- [x] **V4-2b-3** HTTPS-only enforcement test
+- [x] **V4-2b-4** Timeout and size bound tests
+
+### V4-2c: JSON primitives
+- [x] **V4-2c-1** Add `json.parse`, `json.encode` to `primitives.py`
+- [x] **V4-2c-2** Add to capability manifest (pure — no effect)
+- [x] **V4-2c-3** Round-trip tests
+
+### V4-2d: Date arithmetic
+- [x] **V4-2d-1** Add `clock.today`, `clock.parse`, `clock.add_days`, `clock.format` to `primitives.py`
+- [x] **V4-2d-2** Add to capability manifest
+- [x] **V4-2d-3** Tests
+
+### V4-2 shared
+- [x] **V4-2-10** Write `tests/test_stdlib.py` (44 tests)
+- [x] **V4-2-11** Update `docs/AGENT_QUICKREF.md` with new primitive groups
+- [ ] **V4-2-12** Add cookbook entries for stdlib patterns
+- [ ] **V4-2-13** Sable audit of stdlib (path traversal, HTTPS enforcement, JSON injection)
+- [x] **V4-2-14** File Quill/Glyph dispatch
+
+## REQ-V4-3: Public registry
+
+- [x] **V4-3-1** Write `docs/REGISTRY.md`
+- [ ] **V4-3-2** Publish the five canonical pipeline symbols to codifide.com (blob write API pending)
+- [x] **V4-3-3** Add `registry` field to capability manifest — deferred (no field defined yet)
+- [ ] **V4-3-4** Add cookbook entry for publish-and-resolve workflow
+- [ ] **V4-3-5** Verify `run --registry https://codifide.com` resolves pipeline symbols
+- [x] **V4-3-6** File Quill/Glyph dispatch
+- [x] **V4-3-7** Registry browser at codifide.com/registry
+
+## REQ-V4-4: Network-safe server — DEFERRED
+
+All tasks deferred. No adoption evidence for network-exposed server.
+
+## Session Close
+
+- [x] **SC-1** `python3 -m codifide dispatch-check` exits 0
+- [x] **SC-2** All open Quill readouts have paired Glyph YAMLs
+- [x] **SC-3** session-close.readout.md and session-close.yaml filed
+- [x] **SC-4** CHANGELOG.md updated
+- [x] **SC-5** ROADMAP.md updated
+- [x] **SC-6** publicsite updated (capability.json, capability.cbor, index.html)
+
+## Open items (post-v4.0)
+
+- [ ] Sable audit of type enforcement (V4-1-7)
+- [ ] Sable audit of stdlib (V4-2-13)
+- [ ] Cookbook entries for stdlib patterns (V4-2-12)
+- [ ] Cookbook entry for publish-and-resolve workflow (V4-3-4)
+- [ ] Fix blob store write API — query params not headers (in progress)
+- [ ] Seed registry with pipeline symbols (blocked on blob write fix)
+- [ ] Verify end-to-end registry resolution (blocked on seeding)
+- [ ] Publish to PyPI
+- [ ] Run unstructured agent session for organic adoption signal

README.md

@@ -67,10 +67,10 @@ agents naming the same hash see the same bytes, the same contracts, and the
 same intent. Intent is part of a definition's canonical form; you cannot
 rename or re-intend a symbol without minting a new identity.
 
-The language is small. v1.0 shipped on 2026-05-11. The
+The language is small. v4.0 shipped on 2026-05-14. The
 properties it pins down are the ones that matter before scale, not after.
 
-## What's in v1.0
+## What's in v4.0
 
 - Canonical JSON and CBOR forms for the hypergraph, with a deterministic canonical byte
   form and SHA-256 content hash. CBOR is the primary hash format.
@@ -83,19 +83,26 @@ properties it pins down are the ones that matter before scale, not after.
   - Cost-based candidate selection — `min(cost, declaration_index)` among satisfied candidates.
   - Belief dispatch on runtime confidence.
   - Inline conditional expression (`if ... then ... else`) with short-circuit evaluation.
-  - First-class refusal (`bottom` / `⊥`) with explicit propagation.
-  - Eight typed error kinds; host exceptions do not leak.
+  - First-class refusal (`bottom` / `⊥`) with optional reason string and explicit propagation.
+  - Runtime type enforcement — `sig` declarations checked at every call boundary.
+  - Ten typed error kinds; host exceptions do not leak.
   - Configurable call-depth bound with a typed `RecursionLimitError`.
+- Standard library: file I/O (`io.read`, `io.write`, `io.exists`), HTTP client
+  (`http.get`, `http.post`), JSON (`json.parse`, `json.encode`), date arithmetic
+  (`clock.today`, `clock.parse`, `clock.add_days`, `clock.format`).
 - Indexed primitives: `slice`, `at`, `char_at`, `indexof`.
 - Content-addressed symbol store with Git-style sharded loose objects, atomic
   writes, hash-verified reads, idempotent writes, and garbage collection via declared roots.
 - Content-addressed imports (`import foo = sha256:...`) and index modules with
   `from <identity> import name1, name2` resolved at parse time.
-- Rust canonical crate (`crates/codifide-canonical/`) with byte-level conformance
-  to the Python reference on every example program, including CBOR-input subcommands.
+- **Public registry** at `https://codifide.com/symbols/<hash>` — publish symbols,
+  resolve them from any machine. Browse at `https://codifide.com/registry`.
+- Rust interpreter and Rust parser with byte-level conformance to the Python reference.
+- Parallel evaluator with full import support.
+- Remote symbol resolution (`--registry` flag, `store push` command).
 - Three-persona system: Quill (human readouts), Glyph (agent dispatches),
   Sable (adversarial audits).
-- 216 Python tests passing, 28 Rust canonical tests passing, 0 skipped.
+- 450 Python tests passing, 28 Rust canonical tests passing, 0 skipped.
 
 ## What working Codifide code looks like
 
@@ -148,15 +155,45 @@ def main
 ## Quickstart
 
 ```bash
+pip install codifide
 python3 -m codifide run examples/greet.cod
 python3 -m codifide run examples/sort.cod
 python3 -m codifide run examples/classify.cod
 python3 -m codifide test
 ```
 
+Or clone and run from source:
+
+```bash
+git clone https://github.com/codifide/codifide-programming-language
+cd codifide-programming-language
+pip install -e .
+python3 -m codifide agent-quickstart
+```
+
 See `GETTING_STARTED.md` for a walk-through that stores a symbol, mints an
 index, and consumes it from a second module.
 
+## Public registry
+
+The canonical pipeline symbols are published at `https://codifide.com/registry`.
+Any agent can resolve them by hash:
+
+```bash
+# Import from the public registry in your .cod file
+import classify_content = sha256:377099c5bddb8cebe9e8bc6b8499bb00ea99083798d1b064799ac82c55636fae
+
+# Run with registry resolution
+python3 -m codifide run my_program.cod --registry https://codifide.com
+```
+
+Publish your own symbols:
+
+```bash
+python3 -m codifide store put my_module.cod
+python3 -m codifide store push sha256:<hash> --registry https://codifide.com
+```
+
 ## Layout
 
 ```

dispatches/INDEX.md

@@ -9,6 +9,13 @@ Filename convention:
 - `<date>-<slug>.md`         — standalone dispatch (rare)
 
 
+## 2026-05-15
+
+| slug | subject | readout | yaml | audit |
+|---|---|---|---|---|
+| `session-close` |  | [md](./2026-05-15-session-close.readout.md) | [yaml](./2026-05-15-session-close.yaml) |  |
+| `v4-retrospective` | v4.0 retrospective — state of Codifide, team review | [md](./2026-05-15-v4-retrospective.readout.md) | [yaml](./2026-05-15-v4-retrospective.yaml) |  |
+
 ## 2026-05-14
 
 | slug | subject | readout | yaml | audit |
@@ -23,6 +30,8 @@ Filename convention:
 | `gpt4o-v3-case-study` |  | [md](./2026-05-14-gpt4o-v3-case-study.readout.md) | [yaml](./2026-05-14-gpt4o-v3-case-study.yaml) |  |
 | `gpt4o-v3-session-close` |  | [md](./2026-05-14-gpt4o-v3-session-close.readout.md) | [yaml](./2026-05-14-gpt4o-v3-session-close.yaml) |  |
 | `gpt5-case-study` | GPT-5.4 case study — live content moderation pipeline run | [md](./2026-05-14-gpt5-case-study.readout.md) | [yaml](./2026-05-14-gpt5-case-study.yaml) |  |
+| `registry-browser` | Registry browser — codifide.com/registry live | [md](./2026-05-14-registry-browser.readout.md) | [yaml](./2026-05-14-registry-browser.yaml) |  |
+| `registry-deploy` | Registry deployment — Dockerfile, fly.toml, seed script, deploy guide | [md](./2026-05-14-registry-deploy.readout.md) | [yaml](./2026-05-14-registry-deploy.yaml) |  |
 | `relay-v2-case-study` | Relay v2.0 KPI validation — Claude Sonnet 4.6 content-moderation case study | [md](./2026-05-14-relay-v2-case-study.readout.md) | [yaml](./2026-05-14-relay-v2-case-study.yaml) |  |
 | `session-close` | session close — v3.0 session: V3-1 and V3-2 shipped | [md](./2026-05-14-session-close.readout.md) | [yaml](./2026-05-14-session-close.yaml) |  |
 | `task-spec-effects-reminder` |  | [md](./2026-05-14-task-spec-effects-reminder.readout.md) | [yaml](./2026-05-14-task-spec-effects-reminder.yaml) |  |
@@ -42,6 +51,12 @@ Filename convention:
 | `v3-3-refusal-reasons` |  | [md](./2026-05-14-v3-3-refusal-reasons.readout.md) | [yaml](./2026-05-14-v3-3-refusal-reasons.yaml) |  |
 | `v3-complete-session-close` |  | [md](./2026-05-14-v3-complete-session-close.readout.md) | [yaml](./2026-05-14-v3-complete-session-close.yaml) |  |
 | `v3-roadmap` | v3.0 roadmap — four requirements, evidence-driven | [md](./2026-05-14-v3-roadmap.readout.md) | [yaml](./2026-05-14-v3-roadmap.yaml) |  |
+| `v4-3-vercel-registry` | V4-3 Vercel registry complete — BlobStore, serverless functions, deploy guide | [md](./2026-05-14-v4-3-vercel-registry.readout.md) | [yaml](./2026-05-14-v4-3-vercel-registry.yaml) |  |
+| `v4-3-vercel-registry-g0` | V4-3 Vercel registry G0 — Vercel Blob backend approved | [md](./2026-05-14-v4-3-vercel-registry-g0.readout.md) | [yaml](./2026-05-14-v4-3-vercel-registry-g0.yaml) |  |
+| `v4-3-vercel-registry-sable` |  |  |  | [md](./2026-05-14-v4-3-vercel-registry-sable-audit.md) |
+| `v4-complete` | v4.0 complete — type enforcement, standard library, registry | [md](./2026-05-14-v4-complete.readout.md) | [yaml](./2026-05-14-v4-complete.yaml) |  |
+| `v4-session-close` |  | [md](./2026-05-14-v4-session-close.readout.md) | [yaml](./2026-05-14-v4-session-close.yaml) |  |
+| `vercel-registry-session-close` |  | [md](./2026-05-14-vercel-registry-session-close.readout.md) | [yaml](./2026-05-14-vercel-registry-session-close.yaml) |  |
 
 ## 2026-05-13
 

pyproject.toml

@@ -4,23 +4,39 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "codifide"
-version = "2.0.0"
-description = "A programming language for agentic AI"
+version = "4.0.0"
+description = "A programming language for agentic AI — intent, effects, contracts, confidence, and refusal as first-class enforced properties"
 readme = "README.md"
 requires-python = ">=3.9"
 license = { text = "MIT" }
 authors = [
   { name = "Codifide contributors" },
 ]
-keywords = ["programming-language", "agentic-ai", "canonical-form"]
+keywords = ["programming-language", "agentic-ai", "canonical-form", "content-addressing", "ai-agents"]
 classifiers = [
   "Development Status :: 4 - Beta",
   "Intended Audience :: Developers",
+  "License :: OSI Approved :: MIT License",
   "Programming Language :: Python :: 3",
   "Programming Language :: Python :: 3.9",
+  "Programming Language :: Python :: 3.10",
+  "Programming Language :: Python :: 3.11",
+  "Programming Language :: Python :: 3.12",
   "Topic :: Software Development :: Compilers",
+  "Topic :: Software Development :: Interpreters",
+  "Topic :: Scientific/Engineering :: Artificial Intelligence",
 ]
 
+[project.urls]
+Homepage = "https://codifide.com"
+Repository = "https://github.com/codifide/codifide-programming-language"
+Documentation = "https://codifide.com/docs/FOR_AGENTS.md"
+Registry = "https://codifide.com/registry"
+Changelog = "https://github.com/codifide/codifide-programming-language/blob/main/CHANGELOG.md"
+
+[project.optional-dependencies]
+blob = ["vercel_blob>=0.3.0"]
+
 [project.scripts]
 codifide = "codifide.__main__:main"