v0.53.0

Changelog

Fixes

• 4d1b8ef fix(agent): fail closed on length-truncated tool calls (#507)
• 9c832d2 fix(agent): no-progress detector keys on edits, not raw tool-call activity (#531)
• 3ab6938 fix(engine): rescope override dedup to checkpoint generation (#279)

Other

• 37253e3 chore(complexity): reconcile baseline after #452/#453 file splits
• 155e95c docs(jail): add 9-class writable_paths audit checklist (#285)
• c89b242 docs(release): v0.53.0 — no-progress edit-signal refinement + security docs
• e4394c3 docs(security): add Linux security primitives reference (#284)
• 779030d docs(security): correct Landlock ABI-v3 kernel version (6.2, not 6.7)
• 1268413 docs(security): document the 'freeze and prove' pattern for security PRs
• 4bc0427 merge: 9-class writable_paths audit checklist (#285)
• b427e2f merge: Linux security-primitives reference doc (#284)
• ffd6a86 merge: codergen backend parsers use typed AgentNodeConfig accessors (#393)
• d10da28 merge: document the "freeze and prove" pattern for security-boundary PRs (#286)
• c4d7f40 merge: fail-closed on length-truncated tool calls (#507)
• aa7c1fa merge: no-progress detector keys on edits, not tool-call activity (#531)
• d037ec5 merge: relocate enriched-sprint domain workflow out of the primitive tool lib (#452)
• 6316451 merge: replace cmd/tracker config-smuggling globals with a runOptions struct (#396)
• e48237e merge: rescope validation-override dedup to checkpoint generation (#279)
• 161b22a merge: split tracker_doctor.go (1687 lines) into unit-testable checks (#453)
• 882c0f4 merge: v0.53.0 release doc updates
• 3e2447a refactor(cli): thread run config via explicit runOptions, drop active* globals (#396)
• 97d8f6c refactor(codergen): route claude-code/ACP config through typed accessor (#393)
• f3a49f7 refactor(doctor): split 1,687-line tracker_doctor.go into per-concern files (#453)
• 9fbfebe refactor(tools): move enriched-sprint workflow out of primitive tool library (#452)