fraware · fraware · Jun 28, 2026 · Jun 28, 2026 · Jun 28, 2026 · Jun 28, 2026
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -4,6 +4,25 @@ All notable changes to AKTA are documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
+## [0.5.0] - 2026-06-28
+
+### Added
+
+- Real SCOPE adapter modes: `simulated`, `python-import` (`SCOPE_REPO_PATH`), `cli` (`SCOPE_CLI`) with `scope packet create`, `scope decision submit`, `scope grant issue`
+- PCS v0.5 full-chain export: `scope_decision.json`, `scope_grant.json`, `pf_obligation.json`, per-file `file_hashes`, tamper validation (`validate_pcs_bundle`)
+- Production policy integrity: `AKTA_PRODUCTION_MODE=1` requires manifest, deployment HMAC key; rejects dev key
+- LLM classifier trust boundary: tool registry always overrides LLM; `llm_advisory` metadata in decisions; `docs/classifier_trust_boundary.md`
+- Overlay governance tiers: `core_reference`, `experimental_domain_overlay`, `expert_reviewed_domain_overlay`, `institutional_deployment_overlay`
+- Policy file versioning: `policy_file_version` per YAML; `policy_bundle_version` in decision provenance
+- Contract tests: `test_scope_import_mode_contract.py`, `test_real_scope_cli_contract.py`, `test_pcs_full_chain_tamper.py`
+
+### Changed
+
+- Policy bundle version `akta-core-v0.5`; package version `0.5.0`
+- PCS manifest `schema_version` → `akta-record-v0.5`
+- SCOPE adapter mode labels: `simulated` | `python-import` | `cli` (replaces `subprocess`)
+- Biology/chemistry/clinical overlays marked `experimental_domain_overlay` (not deployment-ready in production)
+
 ## [0.4.0] - 2026-06-28
 
 ### Added

diff --git a/GOVERNANCE.md b/GOVERNANCE.md
@@ -8,11 +8,11 @@ AKTA is an open protocol with a reference implementation. It is stewarded as a s
 
 - **Protocol changes** (schemas, ontologies, deployment profiles): require design review and version bump.
 - **Reference kernel changes**: follow normal pull request review.
-- **Domain overlays**: operational overlays include generic lab, materials, computational science, biology, chemistry, and clinical (v0.4). Domain-specific hazard triggers and reviewer roles are maintained in-repo; institutional deployment still requires local governance review.
+- **Domain overlays**: core reference overlays (generic lab, materials, computational science) are operational. Biology, chemistry, and clinical overlays are experimental (v0.5) and not deployment-ready without institutional governance.
 
 ## Versioning
 
-AKTA follows semantic versioning for the reference implementation package (`akta-protocol`). Schema versions are embedded in artifact metadata (e.g., `akta-core-v0.4`, `akta-record-v0.4`).
+AKTA follows semantic versioning for the reference implementation package (`akta-protocol`). Schema versions are embedded in artifact metadata (e.g., `akta-core-v0.5`, `akta-record-v0.5`).
 
 ## Non-certification
 

diff --git a/README.md b/README.md
@@ -13,51 +13,52 @@ If AI changes what science does next, there should be an AKTA Record.
 ```bash
 pip install -e ".[dev]"
 
-# Run the weak-evidence gate demo (AKTA/PF/PCS only — no SCOPE chain)
+# Dev mode (default): policy manifest optional; experimental overlays allowed
 akta gate \
   --output examples/weak_evidence/ai_output.json \
   --tool lab_scheduler.prioritize \
   --profile P2_analysis_assistant \
   --context examples/weak_evidence/context.json \
   --out examples/weak_evidence/akta_decision.json
 
-akta record \
-  --decision examples/weak_evidence/akta_decision.json \
-  --out examples/weak_evidence/akta_record.json
+# Production mode: requires policy manifest + deployment HMAC key
+# $env:AKTA_PRODUCTION_MODE = "1"
+# $env:AKTA_POLICY_HMAC_KEY = "<deployment-secret>"
+# Regenerate manifest after policy edits:
+python scripts/regenerate_policy_manifest.py
 
-pytest tests/ -v
-akta eval --scenarios scenarios/canonical_5.jsonl --expected scenarios/expected_decisions.jsonl
-akta eval --scenarios scenarios/public_100.jsonl --expected scenarios/expected_decisions.jsonl
+# SCOPE adapter modes (see docs/scope_bridge.md)
+# simulated (default) | python-import ($env:SCOPE_REPO_PATH) | cli ($env:SCOPE_CLI)
+python scripts/demo_akta_scope_protocol_drift.py
 
-# Oracle-independent eval (hand-written labels, not gate-derived)
-python evals/run_oracle_independent.py
-# or: akta-oracle-eval
+# PCS v0.5 full-chain export (10 artifacts + file_hashes)
+akta export pcs --record examples/weak_evidence/akta_record.json \
+  --decision examples/weak_evidence/akta_decision.json \
+  --out dist/pcs_bundle/ --validate
 
-# Transition eval (SCOPE grant -> re-gate)
-python -c "from evals.transition_runner import run_transition; import json; ..."
+pytest tests/ -v
+make ci
+```
 
-# MCP stdio server (JSON-RPC over stdin/stdout)
-python -m adapters.mcp.server
+### REST API (OpenAPI v0.5)
 
-# REST API (OpenAPI v0.4)
+```bash
 akta-rest --host 127.0.0.1 --port 8765
+# GET /v0/health, /v0/policy; POST /v0/evaluate, /v0/export/pcs, /v0/export/pf
+```
 
-# Export adapters (v0.2)
-akta export pcs --record examples/weak_evidence/akta_record.json \
-  --decision examples/weak_evidence/akta_decision.json \
-  --out dist/pcs_bundle/ --validate
+### Additional commands
+
+```bash
+akta record --decision examples/weak_evidence/akta_decision.json --out examples/weak_evidence/akta_record.json
+akta eval --scenarios scenarios/canonical_5.jsonl --expected scenarios/expected_decisions.jsonl
+akta eval --scenarios scenarios/public_100.jsonl --expected scenarios/expected_decisions.jsonl
+python evals/run_oracle_independent.py
+python -m adapters.mcp.server
 akta export pf --record examples/weak_evidence/akta_record.json \
-  --decision examples/weak_evidence/akta_decision.json \
-  --out dist/pf_obligations/ --validate
+  --decision examples/weak_evidence/akta_decision.json --out dist/pf_obligations/ --validate
 akta review-trigger export --decision decision.json --out review_trigger.json
-
-# Integrated weak-evidence demo (AKTA/PF/PCS; no SCOPE simulation)
 python scripts/demo_integrated_weak_evidence.py
-# or: make demo-akta-weak-evidence
-
-# Integrated AKTA x SCOPE protocol-drift demo (canonical AKTA×SCOPE chain)
-python scripts/demo_akta_scope_protocol_drift.py
-# or: make demo-akta-scope-protocol-drift
 ```
 
 ## Architecture
@@ -118,7 +119,7 @@ record = decision.to_record()
 - [Review integration](docs/review_integration.md)
 - [SCOPE bridge](docs/scope_bridge.md)
 - [AKTA v0.3 integration](docs/akta_v03_integration.md)
-- [Threat model (v0.4)](docs/threat_model.md)
+- [Threat model](docs/threat_model.md)
 - [PF-Core bridge](docs/pf_core_bridge.md)
 - [PCS export](docs/pcs_export.md)
 - [VSA import](docs/vsa_import.md)
@@ -139,11 +140,23 @@ akta-rest --host 127.0.0.1 --port 8765
 # GET  /v0/policy, /v0/health
 ```
 
+## v0.5 acceptance status
+
+| Criterion | Status |
+|-----------|--------|
+| SCOPE adapter (simulated / python-import / cli) | Pass |
+| PCS full-chain export with file_hashes + tamper validation | Pass |
+| Production policy integrity (dev vs production HMAC) | Pass |
+| LLM classifier trust boundary (registry overrides LLM) | Pass |
+| Overlay governance tiers + production refusal | Pass |
+| Policy file versioning in decision provenance | Pass |
+| 210+ tests; `make ci` green | Pass |
+
 ## v0.4 acceptance status
 
 | Criterion | Status |
 |-----------|--------|
-| Operational domain overlays (biology, chemistry, clinical) | Pass |
+| Experimental overlays (biology, chemistry, clinical) | Pass (not operational; refused in production) |
 | Policy manifest HMAC verification | Pass |
 | Review lifecycle (F12/F14, prior records) | Pass |
 | Structured classification + negation guard | Pass |
@@ -205,4 +218,4 @@ akta-rest --host 127.0.0.1 --port 8765
 
 ## Status
 
-AKTA v0.4 is a reference implementation. It is not a safety certification. Deployment profile P7 (fully autonomous scientific operator) is defined for taxonomy only and is not supported.
+AKTA v0.5 is a reference implementation. It is not a safety certification. Biology, chemistry, and clinical overlays are experimental and not deployment-ready without institutional governance. Deployment profile P7 (fully autonomous scientific operator) is defined for taxonomy only and is not supported.
diff --git a/SECURITY.md b/SECURITY.md
@@ -4,6 +4,7 @@
 
 | Version | Supported |
 |---------|-----------|
+| 0.5.x   | Yes       |
 | 0.4.x   | Yes       |
 | 0.3.x   | Yes       |
 
@@ -13,11 +14,37 @@ Report security issues privately to the repository maintainers via GitHub Securi
 
 Do not open public issues for undisclosed vulnerabilities.
 
-## Security model (v0.4)
+## Security model (v0.5)
 
 AKTA is part of the agent supply chain. Threats include policy tampering, fake AKTA Records, domain overlay manipulation, tool registry poisoning, review trigger spoofing, stale review reuse, unknown tool confusion, and downgrade attacks.
 
-### v0.4 controls
+### Dev vs production policy integrity
+
+| Mode | Environment variables | Manifest | HMAC key | Overlay policy |
+|------|----------------------|----------|----------|----------------|
+| Dev (default) | none required | optional | dev key accepted with warning | experimental overlays allowed |
+| Verify | `AKTA_VERIFY_POLICY=1` | required | deployment key required | experimental overlays allowed |
+| Production | `AKTA_PRODUCTION_MODE=1` | required | deployment key required; dev key rejected | experimental overlays refused |
+
+Regenerate manifest after policy edits: `python scripts/regenerate_policy_manifest.py`
+
+See [docs/policy_integrity.md](docs/policy_integrity.md).
+
+### v0.5 controls
+
+- JSON schema validation on all artifacts
+- Canonical SHA-256 hashing of policy bundle, domain overlays, and tool registry
+- Dev vs production policy integrity (`AKTA_PRODUCTION_MODE=1`, `AKTA_VERIFY_POLICY=1`)
+- Production requires deployment-specific `AKTA_POLICY_HMAC_KEY`; rejects in-repo dev key
+- PCS bundle per-file hash manifest with tamper detection
+- Overlay governance tiers; production refuses experimental high-risk overlays
+- LLM classifier advisory-only; tool registry overrides LLM output
+- Policy hash, domain overlay hash, and tool registry hash in every decision
+- Record hash on every AKTA Record
+- Review context enforcement (F14 stale review, F12 disclaimer boundary)
+- Unknown mutating tools blocked by default (abstain_insufficient_context)
+
+### v0.4 controls (retained)
 
 - JSON schema validation on all artifacts
 - Canonical SHA-256 hashing of policy bundle, domain overlays, and tool registry
@@ -28,10 +55,10 @@ AKTA is part of the agent supply chain. Threats include policy tampering, fake A
 - Unknown mutating tools blocked by default (abstain_insufficient_context)
 - Explicit version fields on policy and schemas
 
-### Out of scope for v0.4
+### Out of scope for v0.5
 
-- Ed25519 signed policy releases in production (HMAC dev key only in-repo)
-- Live SCOPE/PF/PCS runtime enforcement (delegated to external repos)
+- Ed25519 signed policy releases (HMAC deployment key supported; public-key verification stub only)
+- Live SCOPE/PF/PCS runtime enforcement (delegated to external repos; AKTA adapters simulate or bridge)
 - Model truthfulness guarantees
 
 See [docs/threat_model.md](docs/threat_model.md) for the full threat model.
diff --git a/adapters/generic_rest/openapi.yaml b/adapters/generic_rest/openapi.yaml
@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: AKTA REST API
-  version: 0.4.0
+  version: 0.5.0
   description: Scientific action admissibility gate REST interface
 paths:
   /v0/health:

diff --git a/adapters/generic_rest/server.py b/adapters/generic_rest/server.py
@@ -69,11 +69,11 @@ def do_GET(self) -> None:
                 self._send_json(HTTPStatus.OK, {
                     "status": "ok",
                     "version": pkg_version("akta-protocol"),
-                    "api_version": "v0.4",
+                    "api_version": "v0.5",
                 })
             elif path == "/v0/openapi":
                 spec_path = Path(__file__).resolve().parent / "openapi.yaml"
-                self._send_json(HTTPStatus.OK, {"openapi_path": str(spec_path), "api_version": "v0.4"})
+                self._send_json(HTTPStatus.OK, {"openapi_path": str(spec_path), "api_version": "v0.5"})
             elif path == "/v0/policy":
                 gate = self._gate()
                 self._send_json(