# Change log

> Shipped phases, release notes, and material changes to ainfra.



- [Phase 9 shipped: Private Hetzner K3s](https://projectious-work.github.io/ainfra/changelog/phase-9-production-template-candidate/index.md) — The first provider-backed template candidate adds private management, tunneled ingress, temporary administration, and pinned K3s bootstrap.
- [Phase 8 shipped: Template authoring and conformance](https://projectious-work.github.io/ainfra/changelog/phase-8-template-authoring-conformance-shipped/index.md) — ainfra now publishes a human and AI authoring contract, deterministic local diagnostics, and a provider-free clean-room proof.
- [Phase 7 shipped: Guarded MCP server mode](https://projectious-work.github.io/ainfra/changelog/phase-7-guarded-mcp-server-mode-shipped/index.md) — ainfra now exposes read-only inspection and explicitly authorized, plan-bound lifecycle operations through MCP over stdio.
- [Phase 6 shipped: Destruction, recovery, and hardening](https://projectious-work.github.io/ainfra/changelog/phase-6-destruction-recovery-hardening-shipped/index.md) — Reviewed destruction, interruption recovery, retained run browsing, redaction, and lifecycle security hardening are available.
- [Phase 5 shipped: Output, inventory, and Ansible](https://projectious-work.github.io/ainfra/changelog/phase-5-output-inventory-and-ansible-shipped/index.md) — Standardized non-secret output now drives deterministic inventory and controlled Ansible configuration with convergence evidence.
- [Phase 4 shipped: Reviewed OpenTofu plans](https://projectious-work.github.io/ainfra/changelog/phase-4-reviewed-opentofu-plans-shipped/index.md) — OpenTofu changes can be planned, reviewed, bound to immutable inputs, and applied only from the exact saved plan.
- [Phase 3 shipped: Immutable template sources](https://projectious-work.github.io/ainfra/changelog/phase-3-immutable-template-sources-shipped/index.md) — Local and Git-subdirectory template sources can be locked, materialized, verified by digest, and checked for drift.
- [Phase 2 shipped: Contracts and doctor](https://projectious-work.github.io/ainfra/changelog/phase-2-contracts-and-doctor-shipped/index.md) — Deployment discovery, strict native-file contracts, deterministic doctor diagnostics, and approved local reconciliation are available.
- [Phase 1 shipped: Go project foundation](https://projectious-work.github.io/ainfra/changelog/phase-1-go-project-foundation-shipped/index.md) — The compiled Go CLI, typed results, secure execution boundaries, and reproducible cross-platform build foundation are available.
- [Phase 0 shipped: the ainfra v1 specification](https://projectious-work.github.io/ainfra/changelog/phase-0-product-specification-shipped/index.md) — The product contract for the ainfra v1 rewrite is accepted, integrated, and ready to guide implementation.