From c647ac64ffe3b355820840a0b4a564fdcbb1a83f Mon Sep 17 00:00:00 2001
From: Fabio Wakim Trentini <trentas@gmail.com>
Date: Thu, 11 Jun 2026 15:13:57 -0300
Subject: [PATCH] =?UTF-8?q?chore(release):=20v1.4.0=20=E2=80=94=20AI=20age?=
 =?UTF-8?q?nt=20usage=20telemetry=20(privacy-by-construction)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bundles epic #65: anonymous agent-usage telemetry end to end —
adapter/parser/hook (#67), default-on-with-disclosure consent (#67),
flush transport (#86), ingest endpoint + usage_rollup (#68), and the
k-anonymized dashboard section with usage×durability cross-reference
(#69). Principle #7 reopened under four privacy-by-construction
conditions (#66).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
---
 CHANGELOG.md   | 45 +++++++++++++++++++++++++++++++++++++++++++++
 iris/cli.py    |  2 +-
 pyproject.toml |  2 +-
 3 files changed, 47 insertions(+), 2 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index fb64363..6315a24 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -4,6 +4,51 @@ All notable changes to Iris are documented here. The format is based on [Keep a
 
 ---
 
+## v1.4.0 — AI agent usage telemetry, privacy-by-construction (2026-06-11)
+
+The full intelligence loop for AI-agent usage: measure how much AI effort goes
+into each repo and whether it became durable code — **without ever exposing or
+inferring any individual's usage**. Identity dies on the developer's machine;
+the smallest grain anywhere at rest is `(repo, day, model)`.
+
+### Added
+
+- **CLI: `iris agent` — Claude Code session telemetry** (#67). A privacy-bounded
+  parser reads only an allow-list from session transcripts (token usage, model,
+  tool-call counts) — never prompt text, code, tool arguments, or identity.
+  Token sums are de-duplicated by `message.id` (Claude Code writes one turn as
+  several lines carrying identical usage); tool calls are counted per block.
+  `iris agent enable|disable|status|record` manages a `SessionEnd` hook that
+  spools anonymous `(repo, day, model)` aggregates to
+  `~/.iris/agent-usage/spool.jsonl`. Repo is derived from the git remote then
+  discarded; exact timestamps collapse into a coarse duration bucket.
+- **CLI: default-on with disclosure** (#67). For Claude Code users, telemetry
+  enables on first run with a one-time notice and a one-command opt-out
+  (`iris agent disable`); the choice is remembered. Never silent, never for
+  non-users, never blocking a session.
+- **CLI: `iris agent flush`** (#86). Ships spooled records to the platform in
+  batches; at-least-once and retry-safe (the server dedupes by idempotency
+  key). A best-effort, silent flush also piggybacks on `iris push`.
+- **Platform: `POST /api/ingest/usage` + `usage_rollup`** (#68). Token-auth
+  endpoint that accumulates anonymous records into an already-aggregated table
+  via an atomic additive upsert (`ingest_usage_rollup` RPC), with a short-TTL
+  dedup ledger. Defense in depth rejects any identity field.
+- **Platform: AI Agent Usage dashboard section** (#69). Per-repo usage
+  cross-referenced with delivery durability, with **k-anonymity suppression**
+  by repo contributor count (default 4) — repos below the threshold fold into
+  an "Others" aggregate. Zero per-person dimension on any screen.
+
+### Changed
+
+- **Principle #7 (Vendor-Agnostic Intelligence)** reopened from an absolute ban
+  to a guarded allowance: vendor AI telemetry is permitted only under four
+  privacy-by-construction conditions (parsed locally, identity discarded at the
+  edge, only aggregates uploaded, repo/team grain with k-anonymity), with a
+  default-on-with-disclosure consent model. Recorded as ADRs in
+  `docs/DECISIONS.md` (#66).
+
+---
+
 ## v1.3.1 — Faster multi-window analysis (2026-06-10)
 
 ### Changed
diff --git a/iris/cli.py b/iris/cli.py
index a0ba6db..16d1e18 100644
--- a/iris/cli.py
+++ b/iris/cli.py
@@ -17,7 +17,7 @@
 from iris.reports.narrative import generate_narrative
 from iris.reports.writer import write_output
 
-VERSION = "v1.3.1"
+VERSION = "v1.4.0"
 
 # Analysis windows the platform's window selector (issue #80) expects.
 # Running `--windows 7,15,30,60,90` populates one snapshot per window so the
diff --git a/pyproject.toml b/pyproject.toml
index ce13644..651402d 100644
--- a/pyproject.toml
+++ b/pyproject.toml
@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "iris"
-version = "1.3.1"
+version = "1.4.0"
 description = "Engineering intelligence for the AI era — measure signal vs noise in software delivery"
 requires-python = ">=3.11"
 license = "Apache-2.0"