docs: expand changelog details for v3.2.0–v3.7.0

CHANGELOG.md

@@ -268,6 +268,23 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
   references; persisted in `~/.config/cleveragents/personas/`.
 - **TUI session export/import** — full JSON round-trip and Markdown transcript export
   (`--format md`).
+- **Permission workflows and guardrails** (#1307, #1268) — Added the diff-driven `PermissionsScreen`
+  overlay and inline permission question widget so tool writes in TUI require explicit
+  approval with clear diff context and keyboard shortcuts for allow/deny decisions.
+- **Persona and session portability** (#1338, #1269, #1392) — Added persona YAML
+  export/import plus JSON and Markdown transcript export so teams can share curated TUI
+  workspaces and reproduce session history outside the CLI.
+- **Reasoning visibility** (#1298) — Rendered actor thought blocks inline with collapsible
+  formatting, enabling reviewers to audit step-by-step plan reasoning without leaving the
+  conversation flow.
+- **Shell safety heuristics** (#1284) — Instrumented `!` shell mode with risk scoring for
+  destructive commands, surfacing warning overlays before executing high-risk operations.
+- **First-run onboarding and A2A bridge** (#1391, #1304) — Added the first-run setup wizard
+  and `TuiMaterializer` wiring so every TUI action flows through the A2A facade with sane
+  defaults for new installations.
+- **Operational telemetry** (#1308) — Exposed Prometheus metrics for TUI session activity
+  (tab lifecycle, permission responses, command execution latency) to feed observability
+  dashboards.
 
 ---
 
@@ -279,6 +296,19 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 - UKO Runtime (Universal Knowledge Ontology) with graph persistence and inference engine.
 - Implicit inference engine producing `uko:implicitSiblingOf`, `uko:implicitContains`,
   and `uko:implicitDependsOn` triples with confidence 0.7.
+- **Database resource handler** (#1293) — Added CRUD, checkpoint, and rollback support for
+  SQLite, PostgreSQL, MySQL, and DuckDB resources with consistent sandbox integration.
+- **Devcontainer orchestration** (#1286) — Implemented devcontainer auto-discovery,
+  lazy activation, and container-scoped tool execution so plan steps run within
+  reproducible containers when available.
+- **ACMS pipeline Phase 2** (#1287) — Completed strategy fusion, budget balancing, and
+  projection systems required to hydrate large projects into the context tiers.
+- **LSP enrichment** (#1240) — Surfaced hover/definition data from registered LSP servers
+  into ACMS hot tier and the plan CLI via the LSP registry commands.
+- **Domain event wiring** (#1215) — Routed all 38 lifecycle events through the event bus,
+  unlocking automation hooks that react to plan, correction, and validation milestones.
+- **Serve CLI entry point** (#1272) — Added `agents serve` to expose the local facade over
+  long-lived processes, making it possible to drive CleverAgents from external clients.
 
 ---
 
@@ -290,6 +320,18 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 - Resource DAG with dependency tracking and type hierarchy with multiple inheritance.
 - Container resource types (`container.docker`, `container.podman`).
 - LSP resource types (`lsp.*`).
+- **UKO runtime with provenance** (#1312) — Introduced Blazegraph/Neo4j backends, temporal
+  revision chains, and provenance metadata so ACMS context can answer point-in-time queries.
+- **Async audit trail** (#1279) — Wired `AuditService.record()` through the event bus to
+  capture every plan lifecycle transition with actor, resource, and timing metadata.
+- **Plan event enrichment** (#1300, #1301, #1257) — Added PLAN_APPLIED and PLAN_CANCELLED
+  payloads plus the `user_identity` field, producing richer automation signals for downstream
+  guardrails and dashboards.
+- **Autonomy acceptance coverage** (#1277) — Delivered Robot Framework end-to-end suites
+  that exercise multi-level subplan execution, validation gating, and correction flows under
+  the autonomy profiles.
+- **Historical analytics** (#1295) — Added plan statistics queries summarizing success rates,
+  correction attempts, and validation history for reporting on long-running projects.
 
 ---
 
@@ -300,6 +342,18 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 - ACMS v1 with context scaling strategies.
 - Resource type inheritance system (ADR-042).
 - Safety profile extraction (ADR-041).
+- **Context CLI refinements** (#1192, #1262, #1263) — Added spec-compliant flags, short
+  options, and panel outputs for `agents project context` commands so ACMS configuration is
+  transparent across rich/table/JSON renderers.
+- **Budget simulation coverage** (#1218) — Added TDD scenarios for budget eviction and
+  token accounting, ensuring large projects respect `max_file_size` and `max_total_size`
+  constraints during context assembly.
+- **Validation attach alignment** (#1305) — Updated `agents validation attach` to honor the
+  new context policies and to surface informative error messaging when a validation cannot
+  run in ACMS-driven workflows.
+- **Workflow integration suites** (#1230, #1231) — Introduced Robot-based workflow tests
+  proving that ACMS context, validations, and resource DAG interactions remain cohesive
+  under complex multi-plan executions.
 
 ---
 
@@ -311,6 +365,17 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 - Checkpoint and rollback for all resource writes.
 - Decision tree versioning and history (ADR-034).
 - Decision tree rollback and replay (ADR-035).
+- **Decision diagnostics CLI** (#464) — Delivered `agents plan tree` and `plan explain`
+  commands plus 32 Behave scenarios that surface alternatives, confidence, and rationale
+  details for every recorded decision.
+- **Snapshot persistence** (#433) — Added `DecisionService` with persisted-context snapshots
+  and integration coverage so corrections can safely recompute affected subtrees.
+- **Subplan orchestration toolkit** (#463, #7c4663b8) — Implemented `plan_subplan`
+  tooling, child-plan spawn workflow, and merge strategies needed for parallel execution.
+- **Checkpoint rollback engine** (#eb4e6f59) — Introduced checkpoint creation and rollback
+  APIs together with sandbox hooks to restore filesystem and resource state.
+- **Read-only enforcement** (#436) — Hardened action execution by enforcing the read-only
+  bit at the security layer, preventing tool misuse during corrections and subplan merges.
 
 ---
 
@@ -323,6 +388,18 @@ The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 - Invariant system (ADR-016).
 - Automation profiles (ADR-017).
 - Semantic error prevention (ADR-018).
+- **Decision lifecycle foundation** (#433) — Persisted strategize and execute decisions with
+  ULID snapshots and context capture so correction flows can target precise subtrees.
+- **Influence DAG traversal** (`10d5d9839d03`) — Implemented affected-subtree computation for
+  `plan correct`, ensuring revert/append modes only recompute decisions that depend on the
+  chosen node.
+- **Invariant reconciliation actor** (`abd4c6de49a4`) — Added built-in actor that enforces
+  plan, action, project, and global invariants during strategize/execute with clear violation
+  reporting.
+- **Semantic validation runtime** (`db5e5c974f2a`) — Introduced validation wrappers that run
+  structured checks before apply, producing typed results consumed by the validation gate.
+- **Sandbox safety hooks** (`0ca130392729`) — Added checkpoint and rollback hooks plus
+  copy-on-write sandbox strategies so dry runs and corrections leave the working tree intact.
 
 ---