Signetry · bkd-dotcom · Sep 1, 2026 · Sep 1, 2026
diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Signetry — govern coding-agent changes in your editor and CI. Real-time contract enforcement with signed receipts.",
-    "version": "0.2.2"
+    "version": "0.3.0"
   },
   "plugins": [
     {

diff --git a/.github/workflows/reviewer.yml b/.github/workflows/reviewer.yml
@@ -34,7 +34,7 @@ jobs:
         with:
           python-version: "3.12"
       - name: Install signetry-reviewer
-        run: pip install "signetry-reviewer @ git+https://github.com/Signetry/reviewer@v0.2.0"
+        run: pip install "signetry-reviewer @ git+https://github.com/Signetry/reviewer@v0.3.0"
       - name: Compute the PR diff
         env:
           BASE_SHA: ${{ github.event.pull_request.base.sha }}

diff --git a/.pre-commit-hooks.yaml b/.pre-commit-hooks.yaml
@@ -2,11 +2,11 @@
 #
 #   repos:
 #     - repo: https://github.com/Signetry/plugins
-#       rev: v0.2.2
+#       rev: v0.3.0
 #       hooks:
 #         - id: signetry-guard
 #
-# Requires: pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0"
+# Requires: pip install "signetry-core @ git+https://github.com/Signetry/core@v0.8.0"
 - id: signetry-guard
   name: Signetry guard (contract scope check)
   description: Block staged changes that fall outside .signetry/admission.yaml scope.

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,6 +1,6 @@
 # Changelog — Signetry plugins
 
-## [Unreleased]
+## [0.3.0] — 2026-09-01
 
 ### Changed — Signetry is now open core; this repo is Apache-2.0
 
@@ -62,12 +62,12 @@
 
 ### Fixed — stale version pins
 
-- `signetry-core` pins move `v0.6.0` → `v0.7.0` across the READMEs, hooks, scripts,
+- `signetry-core` pins move `v0.6.0` → `v0.8.0` across the READMEs, hooks, scripts,
   the MCP launcher, `codex/config.toml`, the universal guard and the admit skill.
 - The pre-commit `rev:` in `.pre-commit-hooks.yaml` said `v0.2.0` while `v0.2.2` is
-  released; it and the new universal README now reference `v0.2.2`.
+  released; it and the new universal README now reference `v0.3.0`, this release.
 
-### Changed — rebranded Signetry → Signetry
+### Changed — rebranded Umbra → Signetry
 
 - Platform kernel dependency `signetry-core` (installed from the git tag
   `git+https://github.com/Signetry/core@v0.6.0`), including the `[mcp]` extra used

diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
@@ -16,7 +16,7 @@ Every integration here is a thin, deterministic wrapper around the `signetry` CL
 you need the kernel installed first (it is not on PyPI — install from the git tag):
 
 ```bash
-pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0"
+pip install "signetry-core @ git+https://github.com/Signetry/core@v0.8.0"
 ```
 
 Then clone this repo and scaffold a contract in a scratch repo to test against:

diff --git a/README.md b/README.md
@@ -10,7 +10,7 @@ Signetry decides how much authority an agent's change has earned and proves it.
 plugins bring that governance *into the tools where agents work* — enforced by
 deterministic code, never by the model itself (an agent can't approve its own change).
 
-> Prerequisite for all integrations: `pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0"` and a
+> Prerequisite for all integrations: `pip install "signetry-core @ git+https://github.com/Signetry/core@v0.8.0"` and a
 > `.signetry/admission.yaml` in your repo (a conservative default applies without one).
 
 ## Claude Code plugin (deepest integration)

diff --git a/claude-code/README.md b/claude-code/README.md
@@ -11,7 +11,7 @@ blocked by code before it happens, not merely discouraged in a prompt.
 
 ```bash
 # 1. install the kernel (BUSL-1.1 engine; installed from a git tag, not PyPI)
-pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0"
+pip install "signetry-core @ git+https://github.com/Signetry/core@v0.8.0"
 
 # 2. scaffold a contract in your repo
 cd /path/to/your/repo

diff --git a/claude-code/signetry/.claude-plugin/plugin.json b/claude-code/signetry/.claude-plugin/plugin.json
@@ -1,7 +1,7 @@
 {
   "name": "signetry",
   "description": "Govern coding-agent edits in real time: block out-of-scope or forbidden file writes and dangerous commands before they happen, using your repo's .signetry/admission.yaml. Deterministic (not the model). From signetry-core.",
-  "version": "0.2.2",
+  "version": "0.3.0",
   "author": {
     "name": "Signetry",
     "url": "https://github.com/Signetry"

diff --git a/claude-code/signetry/hooks/signetry-lib.sh b/claude-code/signetry/hooks/signetry-lib.sh
@@ -66,7 +66,7 @@ signetry_provision() {
   venv_py="$venv/bin/python"
   {
     "$py" -m venv "$venv" \
-      && "$venv_py" -m pip install --quiet --disable-pip-version-check "signetry-core @ git+https://github.com/Signetry/core@v0.7.0"
+      && "$venv_py" -m pip install --quiet --disable-pip-version-check "signetry-core @ git+https://github.com/Signetry/core@v0.8.0"
   } >/dev/null 2>&1 || true
   [ -x "$venv_py" ] && "$venv_py" -c "import signetry_core" >/dev/null 2>&1
 }
diff --git a/claude-code/signetry/hooks/signetry-session-start.sh b/claude-code/signetry/hooks/signetry-session-start.sh
@@ -22,8 +22,8 @@ fi
 
 # Could not activate. Say so LOUDLY and specifically — do not pretend to protect.
 if signetry_py311plus >/dev/null 2>&1; then
-  echo "Signetry plugin loaded but INACTIVE: could not install signetry-core (offline?). The guard is NOT enforcing anything. Fix with: pip install 'signetry-core @ git+https://github.com/Signetry/core@v0.7.0'"
+  echo "Signetry plugin loaded but INACTIVE: could not install signetry-core (offline?). The guard is NOT enforcing anything. Fix with: pip install 'signetry-core @ git+https://github.com/Signetry/core@v0.8.0'"
 else
-  echo "Signetry plugin loaded but INACTIVE: needs Python >=3.11, which was not found (your default python3 may be older). The guard is NOT enforcing anything. Install Python 3.11+ and: pip install 'signetry-core @ git+https://github.com/Signetry/core@v0.7.0'"
+  echo "Signetry plugin loaded but INACTIVE: needs Python >=3.11, which was not found (your default python3 may be older). The guard is NOT enforcing anything. Install Python 3.11+ and: pip install 'signetry-core @ git+https://github.com/Signetry/core@v0.8.0'"
 fi
 exit 0
diff --git a/claude-code/signetry/scripts/signetry-mcp.sh b/claude-code/signetry/scripts/signetry-mcp.sh
@@ -15,5 +15,5 @@ for PY in python3.13 python3.12 python3.11 python3 python; do
     exec "$PY" -m signetry_core.mcp_server
   fi
 done
-echo "signetry-core[mcp] not available on a Python >=3.11; run: pip install 'signetry-core[mcp] @ git+https://github.com/Signetry/core@v0.7.0'" >&2
+echo "signetry-core[mcp] not available on a Python >=3.11; run: pip install 'signetry-core[mcp] @ git+https://github.com/Signetry/core@v0.8.0'" >&2
 exit 1
diff --git a/claude-code/signetry/skills/admit/SKILL.md b/claude-code/signetry/skills/admit/SKILL.md
@@ -10,7 +10,7 @@ report the result to the user.
 Steps:
 
 1. Confirm `signetry` is available: run `signetry --help`. If it is not installed, tell
-   the user to run `pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0"` and stop.
+   the user to run `pip install "signetry-core @ git+https://github.com/Signetry/core@v0.8.0"` and stop.
 2. Run admission over the change already present in the working tree (no agent is
    re-invoked — the change being governed is what's on disk):
 

diff --git a/codex/README.md b/codex/README.md
@@ -7,7 +7,7 @@ with [signetry-core](https://github.com/Signetry/core).
 
 ```bash
 # 1. install the kernel (BUSL-1.1 engine; installed from a git tag, not PyPI)
-pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0"
+pip install "signetry-core @ git+https://github.com/Signetry/core@v0.8.0"
 
 # 2. scaffold a contract in your repo
 cd /path/to/your/repo

diff --git a/codex/config.toml b/codex/config.toml
@@ -1,5 +1,5 @@
 # Signetry MCP server for Codex — add to ~/.codex/config.toml
-# Requires: pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0"
+# Requires: pip install "signetry-core @ git+https://github.com/Signetry/core@v0.8.0"
 
 [mcp_servers.signetry]
 command = "python"

diff --git a/cursor/README.md b/cursor/README.md
@@ -7,7 +7,7 @@ Two ways to govern coding-agent changes in Cursor with
 
 ```bash
 # 1. install the kernel (BUSL-1.1 engine; installed from a git tag, not PyPI)
-pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0"
+pip install "signetry-core @ git+https://github.com/Signetry/core@v0.8.0"
 
 # 2. scaffold a contract in your repo
 cd /path/to/your/repo

diff --git a/universal/README.md b/universal/README.md
@@ -12,7 +12,7 @@ at commit time regardless of which tool produced the change.
 
 ```bash
 # 1. install the kernel (BUSL-1.1 engine; installed from a git tag, not PyPI)
-pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0"
+pip install "signetry-core @ git+https://github.com/Signetry/core@v0.8.0"
 
 # 2. scaffold a contract in your repo
 cd /path/to/your/repo
@@ -26,7 +26,7 @@ With [pre-commit](https://pre-commit.com/) — add to `.pre-commit-config.yaml`:
 ```yaml
 repos:
   - repo: https://github.com/Signetry/plugins
-    rev: v0.2.2
+    rev: v0.3.0
     hooks:
       - id: signetry-guard
 ```

diff --git a/universal/signetry-guard.sh b/universal/signetry-guard.sh
@@ -6,7 +6,7 @@
 # or manually. It checks proposed file paths and/or a command against the repo's
 # .signetry/admission.yaml and exits non-zero (blocking) on a violation.
 #
-# Requires:  pip install "signetry-core @ git+https://github.com/Signetry/core@v0.7.0"
+# Requires:  pip install "signetry-core @ git+https://github.com/Signetry/core@v0.8.0"
 #
 # Usage:
 #   signetry-guard.sh --path src/app.py
@@ -17,7 +17,7 @@
 set -euo pipefail
 
 if ! command -v signetry >/dev/null 2>&1; then
-  echo "signetry-guard: signetry-core not installed. Run: pip install 'signetry-core @ git+https://github.com/Signetry/core@v0.7.0'" >&2
+  echo "signetry-guard: signetry-core not installed. Run: pip install 'signetry-core @ git+https://github.com/Signetry/core@v0.8.0'" >&2
   # Fail open by default so this never blocks a commit unexpectedly; set
   # SIGNETRY_GUARD_STRICT=1 to fail closed when signetry is missing.
   [ "${SIGNETRY_GUARD_STRICT:-0}" = "1" ] && exit 1 || exit 0