OpenStatSpec · TonisOrmisson · Sep 7, 2026 · Sep 7, 2026 · Sep 7, 2026 · Sep 7, 2026
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -20,7 +20,7 @@ jobs:
         uses: actions/checkout@v7
         with: &specification-checkout
           repository: OpenStatSpec/specification
-          ref: cd8f198c68b849eb8ed018a894670a0904c2181d
+          ref: 864e84479f554b8ee250ffed44c4dfb963750d4a
           path: openstatspec-specification
       - name: Checkout required SPSS engine
         uses: actions/checkout@v7
@@ -53,9 +53,9 @@ jobs:
       - run: python -m pip install --upgrade pip build
       - run: python -m build
       - run: python -m venv /tmp/openstatspec-wheel-smoke
-      - run: /tmp/openstatspec-wheel-smoke/bin/python -m pip install ./openstatspec-pyspssio
       - run: /tmp/openstatspec-wheel-smoke/bin/python -m pip install dist/*.whl
-      - run: /tmp/openstatspec-wheel-smoke/bin/openstatspec capabilities
+      - run: env -u PYTHONPATH /tmp/openstatspec-wheel-smoke/bin/openstatspec capabilities
+        working-directory: /tmp
 
   postgres-integration:
     name: PostgreSQL ${{ matrix.postgres }} integration
@@ -143,7 +143,7 @@ jobs:
     steps: *sql-test-steps
 
   dolt-integration:
-    name: Dolt ${{ matrix.dolt }} read-only / fail-closed integration
+    name: Dolt ${{ matrix.dolt }} default-write integration
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
@@ -155,6 +155,7 @@ jobs:
             image: dolthub/dolt:2.2.3@sha256:1a651e738a2e7275b9c69fec8c5f42c6e23954314405c412f4dc9287ee7c0080
     env:
       OPENSTATSPEC_DOLT_URL: mysql+pymysql://openstatspec:openstatspec@127.0.0.1:13308/openstatspec
+      OPENSTATSPEC_TEST_DOLT_ADMIN_URL: mysql+pymysql://openstatspec_test_admin:ci-admin@127.0.0.1:13308/
       OPENSTATSPEC_EXPECTED_DOLT_VERSION: ${{ matrix.dolt }}
       OPENSTATSPEC_DOLT_IMAGE: ${{ matrix.image }}
     steps:
@@ -186,6 +187,11 @@ jobs:
             --workdir /var/lib/dolt \
             "$OPENSTATSPEC_DOLT_IMAGE" sql \
             -q "CREATE USER 'openstatspec'@'%' IDENTIFIED BY 'openstatspec'; GRANT ALL PRIVILEGES ON openstatspec.* TO 'openstatspec'@'%'"
+          docker run --rm \
+            --volume "$RUNNER_TEMP/openstatspec-dolt:/var/lib/dolt" \
+            --workdir /var/lib/dolt \
+            "$OPENSTATSPEC_DOLT_IMAGE" sql \
+            -q "CREATE USER 'openstatspec_test_admin'@'%' IDENTIFIED BY 'ci-admin'; GRANT ALL PRIVILEGES ON *.* TO 'openstatspec_test_admin'@'%' WITH GRANT OPTION"
           docker run --detach --name openstatspec-dolt \
             --publish 127.0.0.1:13308:3306 \
             --volume "$RUNNER_TEMP/openstatspec-dolt:/var/lib/dolt" \
@@ -218,6 +224,7 @@ jobs:
                   break
           PY
       - run: python -m pytest -m "services and not candidate_evidence"
+      - run: python -m pytest tests/test_read_only_export.py
       - name: Show Dolt logs on failure and stop server
         if: always()
         run: |

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -48,7 +48,7 @@ jobs:
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           repository: OpenStatSpec/specification
-          ref: cd8f198c68b849eb8ed018a894670a0904c2181d
+          ref: 864e84479f554b8ee250ffed44c4dfb963750d4a
           path: openstatspec-specification
       - name: Checkout specification package source
         uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
@@ -159,9 +159,9 @@ jobs:
       - run: python -m pip install -e ".[dev]"
       - run: python -m pytest -m "not services"
       - run: python -m venv /tmp/openstatspec-release-smoke
-      - run: /tmp/openstatspec-release-smoke/bin/python -m pip install ./openstatspec-pyspssio
       - run: /tmp/openstatspec-release-smoke/bin/python -m pip install dist/openstatspec/openstatspec-*.whl
-      - run: /tmp/openstatspec-release-smoke/bin/openstatspec capabilities
+      - run: env -u PYTHONPATH /tmp/openstatspec-release-smoke/bin/openstatspec capabilities
+        working-directory: /tmp
       - name: Smoke-test specification wheel
         run: |
           python -m venv /tmp/openstatspec-specification-release-smoke

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -6,6 +6,30 @@ All notable changes to this reference implementation are documented here.
 
 _No unreleased changes._
 
+## 0.8.0 - 2026-09-07
+
+### Changed
+
+- Pin released specification `v0.5.0` at exact commit
+  `864e84479f554b8ee250ffed44c4dfb963750d4a`, with normative status `released`.
+  Capabilities identify adapter version 0.8.0 and explicitly select SAV/ZSAV 1.0
+  with `database_io_policy=openstatspec-database-io-v1`.
+- Reads, inspection, validation, and SAV/ZSAV export no longer write database
+  operation/fidelity audit records, including on failure. Export diagnostics
+  and loss consent remain operation-scoped; export results omit `operation_id`.
+- Default Dolt writes use the packaged tested exact-version policy for 2.2.2
+  and 2.2.3 without user-supplied evidence files. Unknown/untested versions
+  remain blocked before mutation; explicit external overrides remain strict.
+  Safety budgets are not claimed as proven native server limits.
+- Dolt reads no longer require write-version declarations or the write
+  variable-count ceiling. Missing SQLite files are rejected without creation.
+- Exact Dolt 2.2.2/2.2.3 CI explicitly runs SELECT-only export success/failure
+  tests using a separate fixture-admin account; normal service permissions
+  and adapter permissions are unchanged. Wheel smoke installs resolve the
+  required engine from PyPI rather than a source checkout.
+
+No optional Transformation Workflow 0.3 implementation is claimed.
+
 ## 0.7.1 - 2026-08-12
 
 ### Changed

diff --git a/README.md b/README.md
@@ -4,6 +4,10 @@ The reference Python implementation of the OpenStatSpec specification.
 
 This package implements the specification; it does not define or extend it.
 The normative model lives in the `OpenStatSpec/specification` repository.
+Python 0.8.0 pins released specification `v0.5.0` at
+`864e84479f554b8ee250ffed44c4dfb963750d4a` and selects SAV/ZSAV 1.0 with
+`database_io_policy=openstatspec-database-io-v1`. This does not claim
+implementation of the optional Transformation Workflow 0.3 profile.
 
 ## Boundaries
 
@@ -96,25 +100,27 @@ SAV/ZSAV export for the semantics exposed by that engine. SQLite is the local
 reference path.
 PostgreSQL, MySQL, MariaDB, and Dolt are each covered by separate service-backed CI
 conformance checks. Dolt support is an independent core profile for the
-canonical stable range `>=2.2.2,<2.3.0`; earlier patches, other families,
-noncanonical versions, and unknown MySQL-wire products fail closed.
+exact write-supported versions 2.2.2 and 2.2.3; all other versions (including
+2.3.0), noncanonical versions, and unknown MySQL-wire products fail closed for writes.
 
 The supported family claims are broader than the deliberately exact CI
 evidence points: PostgreSQL 17.x/18.x is exercised at 17.10/18.4, MySQL
 8.4.x/9.7.x at 8.4.11/9.7.2, and MariaDB 11.4.x/11.8.x/12.3.x at
 11.4.12/11.8.8/12.3.2. Each service job checks the normalized live server
 version against its exact matrix entry before that run can count as evidence.
-Dolt claims the conservative 2.2.x range `>=2.2.2,<2.3.0`; its full service
-suite is exercised independently at exact versions 2.2.2 and 2.2.3 using
-immutable container-image digests.
+Dolt's default-write service checks run independently at exact versions 2.2.2
+and 2.2.3 using immutable container-image digests. Release/CI owns this evidence;
+normal callers need no declaration or evidence files. The optional explicit
+`DoltConformanceSource` override remains strict and does not fall back to the
+default policy if its declarations are missing, invalid, or mismatched.
 
 | Engine/profile | Runtime supported policy | Exact CI-tested versions |
 | --- | --- | --- |
 | SQLite core / optional workflow | Core `>=3.24.0,<4.0.0`; optional workflow `>=3.35.0,<4.0.0` | Runtime-provided SQLite on Python 3.11–3.14 runners; not a pinned server image |
 | PostgreSQL | 17.x and 18.x | 17.10 and 18.4 |
 | MySQL | 8.4.x and 9.7.x | 8.4.11 and 9.7.2 |
 | MariaDB | 11.4.x, 11.8.x, and 12.3.x | 11.4.12, 11.8.8, and 12.3.2 |
-| Dolt | 2.2.x with `>=2.2.2,<2.3.0` | 2.2.2 and 2.2.3 |
+| Dolt writes | Exactly 2.2.2 and 2.2.3 | 2.2.2 and 2.2.3 |
 
 Microsoft SQL Server (MSSQL) remains roadmap-only and is not a supported
 runtime profile; see the specification's [MSSQL roadmap](https://github.com/OpenStatSpec/specification/blob/main/docs/mssql-dialect-roadmap.md).
@@ -124,16 +130,24 @@ Use these explicit SQLAlchemy URLs:
 - SQLite: `sqlite:///dataset.sqlite`
 - PostgreSQL: `postgresql+psycopg://user:password@host/database`
 - MySQL/MariaDB: `mysql+pymysql://user:password@host/database`
-- Dolt `>=2.2.2,<2.3.0`: `mysql+pymysql://user:password@host/database` (detected by server identity)
+- Dolt 2.2.2 or 2.2.3: `mysql+pymysql://user:password@host/database` (detected by server identity)
 
 The Dolt core profile supports strict wide-table import, validation, and export;
 the separate Transformation Workflow is unsupported.
 
 Run `openstatspec capabilities` before an integration to inspect the
 machine-readable feature matrix. Export is deliberately strict: if known
 dictionary semantics cannot be reproduced, it stops until you pass the exact
-diagnostic code with `--allow-loss`. This avoids silent loss while making an
-intentional lossy export auditable.
+diagnostic code with `--allow-loss`. Diagnostics are returned to the caller, not
+persisted. Reads, validation, and SAV/ZSAV export never write to the database,
+including on failure. Export returns no `operation_id` and needs only read
+permissions; Dolt reads have no write-version or write-variable-count gate.
+Read operations reject missing SQLite files without creating them. Imports and transformations
+use the packaged exact-version policy by default. Active driver/identity checks,
+limit preflight, and the clean expected branch/HEAD guard for in-place apply
+remain mandatory. Dolt's reported limits are adapter safety budgets, narrowed
+by the active packet limit, not proven native server ceilings; full boundary
+conformance is not claimed.
 
 The matrix is also available to Python callers as
 `openstatspec.capability_matrix()`. It distinguishes supported semantics from

diff --git a/docs/release-readiness.md b/docs/release-readiness.md
@@ -1,8 +1,15 @@
-# 0.7.1 release readiness
+# 0.8.0 release readiness
 
 This page records the expected release contract, not a publication event.
 Creating a version tag remains a separate maintainer action.
 
+The release selects SAV/ZSAV 1.0 with the optional Database I/O Execution
+Policy `openstatspec-database-io-v1`. Reads and exports, including failures,
+write no database audit records; export results omit `operation_id` and return
+diagnostics to the caller. Reads must not create missing SQLite files or apply
+Dolt write-variable-count ceilings. This release does not claim implementation
+of the optional Transformation Workflow 0.3 profile.
+
 ## Supported workflow
 
 For a supported unencrypted SAV or ZSAV source, the adapter imports one source
@@ -20,15 +27,17 @@ database contract.
 | PostgreSQL | `postgresql+psycopg://…` | 17.x and 18.x | 17.10 and 18.4 |
 | MySQL | `mysql+pymysql://…` | 8.4.x and 9.7.x | 8.4.11 and 9.7.2 |
 | MariaDB | `mysql+pymysql://…` | 11.4.x, 11.8.x, and 12.3.x | 11.4.12, 11.8.8, and 12.3.2 |
-| Dolt | `mysql+pymysql://…` | 2.2.x with `>=2.2.2,<2.3.0` | 2.2.2 and 2.2.3 |
+| Dolt writes | `mysql+pymysql://…` | Exactly 2.2.2 and 2.2.3 | 2.2.2 and 2.2.3 |
 
 Separate service matrices test the shared MySQL/MariaDB profile contract while
 retaining distinct active-server identities and version claims. Dolt is an
-independent core profile that accepts only canonical stable versions in
-`>=2.2.2,<2.3.0`; the optional Transformation Workflow remains SQLite-only. This does not
-claim coverage for every server configuration. The machine-readable capability
-declaration reports both the theoretical profile boundaries and effective
-limits observed from the active connection.
+independent core profile with a packaged exact-version write policy; normal
+callers supply no conformance files. An explicit external declaration source
+remains a strict override. Read-only validation/export has no write-version gate.
+The optional Transformation Workflow remains SQLite-only. This does not claim
+coverage for every server configuration or proven Dolt native limit ceilings.
+Dolt capabilities report adapter safety budgets and active packet constraints;
+full boundary conformance remains pending.
 Every server service job compares the normalized live product version with its
 exact matrix entry, so a moved or mismatched image cannot substantiate the CI
 declaration. SQLite's optional Transformation Workflow retains its narrower
@@ -102,6 +111,51 @@ implemented openstatspec.frontends.spss package. Stata and SAS remain empty
 source-tree placeholders and must expose no compiler, apply API, CLI choice,
 capability claim, or implied support.
 
+## Prior default Dolt write verification (before the 0.8.0 pin)
+
+Local release verification used the exact 2.2.2 and 2.2.3 image digests in
+`.github/workflows/ci.yml`, isolated ports 13482/13483, and disposable `/tmp`
+database directories. With `PYTHONPATH=src:../pyspssio`,
+`OPENSTATSPEC_SPECIFICATION_DIR=/tmp/oss-php-spec-cd8f198`, and each matching
+`OPENSTATSPEC_DOLT_URL` / `OPENSTATSPEC_EXPECTED_DOLT_VERSION`:
+
+- `../python/.venv/bin/python -m pytest`: **366 passed, 49 skipped per pin**.
+- CI selection `-m 'services and not candidate_evidence'`: **7 passed,
+  41 skipped per pin**; other database services were not configured locally.
+- Dolt 2.3.0 on port 13387: read-only export and unknown-version write rejection
+  checks passed (**19 passed**) using disposable fixture databases/users.
+- `python -m compileall -q src tests` and `git diff --check` passed.
+
+Live failures exposed and now cover two previously dormant write blockers:
+owned table additions being misclassified as unrelated diffs, and Dolt retaining
+`@@autocommit=1` despite the driver's setting. Writes now explicitly begin their
+transaction. The candidate storage/identifier/column smoke probe also passed on
+both pins; it does **not** establish full value/row/statement limit conformance.
+
+## 0.8.0 local verification
+
+Using `../python/.venv/bin/python`, `PYTHONPATH=src:../pyspssio`, and
+`OPENSTATSPEC_SPECIFICATION_DIR=/tmp/oss-python-spec-v050-5dSTna` (an archive
+of exact `864e84479f554b8ee250ffed44c4dfb963750d4a`):
+
+- `python -m pytest -ra`: **381 passed, 49 skipped**, with
+  `OPENSTATSPEC_TEST_DOLT_ADMIN_URL=mysql+pymysql://root@127.0.0.1:13387/`
+  exercising live Dolt 2.3.0 through disposable SELECT-only users.
+- Both immutable CI images, exact Dolt 2.2.2/2.2.3, bootstrapped with the
+  unchanged service user and separate global fixture admin on ports 13582/13583:
+  `python -m pytest -m 'services and not candidate_evidence'`: **7 passed,
+  41 skipped, 382 deselected per pin**; explicit
+  `python -m pytest tests/test_read_only_export.py`: **33 passed per pin**.
+- `python -m compileall -q src tests`, `git diff --check`, wheel/sdist build,
+  and `python -m twine check /tmp/oss-python-v080-dist/*` passed.
+- A clean wheel install resolved the required engine from PyPI. Isolated
+  imports came only from the smoke environment's `site-packages`; installed
+  capabilities reported adapter 0.8.0, the selected policy, released v0.5.0
+  provenance, and exactly 2.2.2/2.2.3 for default Dolt writes.
+
+Other database services were not configured locally. This is local evidence,
+not a claim that the updated remote CI or release publication has completed.
+
 ## Maintainer checks before tagging
 
 1. Publish the pinned `openstatspec-pyspssio==0.5.1.post2` engine distribution
@@ -110,14 +164,28 @@ capability claim, or implied support.
 2. Run `python -m pytest -m "not services"`.
 3. Confirm the GitHub Actions matrix is green for exact PostgreSQL 17.10/18.4,
    MySQL 8.4.11/9.7.2, MariaDB 11.4.12/11.8.8/12.3.2, and exact Dolt
-   2.2.2/2.2.3 service evidence from the immutable image pins in CI.
+   2.2.2/2.2.3 service evidence from the immutable image pins in CI. The Dolt
+   jobs must perform default import/validate/SAV+ZSAV export, in-place recode
+   and labels with unchanged dataset/table counts and HEAD, injected data,
+   catalog, and audit rollback checks, and failed-import cleanup. Release/CI
+   owns this evidence, not per-user runtime declaration files. Candidate limit
+   probes remain non-claiming and separate from these write gates.
+   Each Dolt job must also run `python -m pytest tests/test_read_only_export.py`
+   explicitly, outside the `services` marker filter. Bootstrap a separate
+   `openstatspec_test_admin` on the isolated CI server with global database/user
+   creation and grant privileges, and set `OPENSTATSPEC_TEST_DOLT_ADMIN_URL`.
+   The fixture creates its own database and SELECT-only reader and removes
+   both afterward; the normal service user remains unchanged.
 4. Build with `python -m build` and install the generated wheel in a clean
-   environment.
+   environment, resolving `openstatspec-pyspssio==0.5.1.post2` from PyPI.
+   Run the installed CLI outside the source checkout with `PYTHONPATH` unset;
+   verify adapter version `0.8.0` and the selected database I/O policy.
 5. Confirm `openstatspec capabilities` reflects the intended support boundary.
 6. Confirm CI, release fixtures, and capabilities use the published OpenStatSpec
-   specification `v0.3.0` at exact commit
-   `cd8f198c68b849eb8ed018a894670a0904c2181d`, publish
-   `specification_status=stable`, and set `specification_release` to `v0.3.0`.
+   specification `v0.5.0` at exact commit
+   `864e84479f554b8ee250ffed44c4dfb963750d4a`, publish
+   `specification_status=released`, and set `specification_release` to `v0.5.0`.
+   Use an exact checkout via `OPENSTATSPEC_SPECIFICATION_DIR` for local tests.
 7. Review this document, the README, and CHANGELOG for accurate scope.
 
 The tag-triggered release workflow repeats the non-service test suite, builds

diff --git a/docs/sav-profile.md b/docs/sav-profile.md
@@ -49,7 +49,7 @@ equivalence of supported values, order, and dictionary metadata.
 
 The `openstatspec capabilities` command and the
 `openstatspec.capability_matrix()` function are the machine-readable declaration
-of this boundary. It records the pinned source commit and installed engine version, and the adapter stores the same identity in every import and export operation record. The matrix deliberately distinguishes a supported feature from a feature that the underlying engine cannot observe or write faithfully.
+of this boundary. It records the pinned source commit and installed engine version, and the adapter stores the same identity in import operation records. Export is database-read-only: no operation, fidelity, recovery, or Dolt-history records are written, even on failure. Loss diagnostics are returned to the caller. Dolt export identifies the server and validates the catalog and data without requiring write-conformance declarations; write entry points retain that requirement. The matrix deliberately distinguishes a supported feature from a feature that the underlying engine cannot observe or write faithfully.
 
 | SPSS semantic | Pinned pyspssio status | Behaviour |
 | --- | --- | --- |

diff --git a/pyproject.toml b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "openstatspec"
-version = "0.7.1"
+version = "0.8.0"
 description = "Reference adapter for the OpenStatSpec relational contract"
 readme = "README.md"
 requires-python = ">=3.11"