release: 0.3.0

CHANGELOG.md

@@ -10,6 +10,14 @@ not a production-readiness statement.
 
 ## [Unreleased]
 
+## [0.3.0] - 2026-10-15
+
+An agency can now leave with everything: a complete installation export
+carries all the installation holds except credentials, verifiable from the
+file alone. The stack moves to current versions, so **the interface now needs
+Chrome or Edge 111+, Firefox 114+, or Safari 16.4+**. **Upgrading from 0.2.0
+runs no migration**; existing data directories open unchanged.
+
 ### Added
 
 - A complete installation export: everything the installation holds except

Cargo.toml

@@ -4,7 +4,7 @@ resolver = "2"
 
 [workspace.package]
 # The product version: the single source every surface reports (ADR 0022).
-version = "0.2.0"
+version = "0.3.0"
 edition = "2024"
 license = "AGPL-3.0-only"
 repository = "https://github.com/FieldmouseWorks/consolebook"

README.md

@@ -4,7 +4,7 @@ Consolebook is an early-stage training-record system for emergency communication
 
 Consolebook is a [Fieldmouse Works](https://github.com/FieldmouseWorks) project — open tools for closed systems.
 
-> **Status:** pre-alpha, version 0.2.0 ([changelog](CHANGELOG.md)), implemented
+> **Status:** pre-alpha, version 0.3.0 ([changelog](CHANGELOG.md)), implemented
 > through Milestone 5's export, trainee-packet, retention-policy, and hold
 > slices. The application is usable for development and evaluation, not
 > production. Do not put production or personnel data into this repository or

docs/install.md

@@ -97,7 +97,7 @@ by any other address makes the sign-in page point to the right one: with
 signs out everyone who signed in before it, since their cookies could still
 travel over plain HTTP; they sign in again at the public address.
 
-Other options: `--version 0.2.0` installs a specific release, `--listen
+Other options: `--version 0.3.0` installs a specific release, `--listen
 ADDRESS:PORT` picks your own address, and `--from FILE` installs from a
 downloaded archive (useful without internet access; keep the `.sha256` file
 beside it).

docs/roadmap.md

@@ -4,9 +4,9 @@ The roadmap is ordered by risk. Dates come later; fake schedules are how softwar
 
 ## Current state and next gates
 
-Release baseline: **0.2.0** (2026-10-15, tag `v0.2.0`; see the
-[changelog](../CHANGELOG.md)). 0.1.0 (2026-10-14) was the first versioned
-release. Milestones 0–4 are complete, including immutable
+Release baseline: **0.3.0** (2026-10-15, tag `v0.3.0`; see the
+[changelog](../CHANGELOG.md)). 0.2.0 (2026-10-15) added safer upgrades and
+recovery for a pilot, and 0.1.0 (2026-10-14) was the first versioned release. Milestones 0–4 are complete, including immutable
 finalized records, acknowledgments, amendments, summaries, and task signoffs
 ([Milestone 4 history](https://github.com/FieldmouseWorks/consolebook/issues/32)).
 Milestone 5 has file-verifiable [record exports](https://github.com/FieldmouseWorks/consolebook/pull/46)
@@ -17,7 +17,7 @@ and a [complete installation export](formats/installation-export.md)
 ([ADR 0028](decisions/0028-installation-export.md)) that carries everything but
 credentials.
 
-Operability as of 0.2.0:
+Operability as of 0.3.0:
 - versioned releases with a traceable build identity
   ([ADR 0022](decisions/0022-product-versioning.md)), installed by the installer
   published with each release, with build provenance
@@ -31,6 +31,9 @@ Operability as of 0.2.0:
 - verified backup copies off the server that a replacement server cannot
   bury, checked by `doctor` ([ADR 0024](decisions/0024-off-server-backup-copies.md),
   [ADR 0027](decisions/0027-backup-copy-encryption.md));
+- `doctor` reports exactly what `serve` would refuse, and only warns about
+  what the service does on its next start
+  ([ADR 0029](decisions/0029-doctor-migration-verdict.md));
 - a recorded [restore drill](restore-drill.md) and an
   [operations guide](operations.md).
 

web/package.json

@@ -1,7 +1,7 @@
 {
   "name": "consolebook-web",
   "private": true,
-  "version": "0.2.0",
+  "version": "0.3.0",
   "type": "module",
   "engines": {
     "node": "^22.17 || >=24"