Release v0.99.0-rc4

What's Changed

• Bump actions/checkout from 4 to 6 by @dependabot[bot] in #1
• Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #2
• Bump typescript from 5.9.3 to 6.0.3 by @dependabot[bot] in #3
• Bump @types/node from 22.19.19 to 25.9.1 by @dependabot[bot] in #4
• Bump commander from 12.1.0 to 14.0.3 by @dependabot[bot] in #5
• Bump zod from 3.25.76 to 4.4.3 by @dependabot[bot] in #6
• Bump eslint from 9.39.4 to 10.4.0 by @dependabot[bot] in #7
• feat: harden runtime verification pipeline by @BrianNguyen29 in #8
• chore: align repository with open source standards by @BrianNguyen29 in #9
• [codex] complete technical backlog hardening by @BrianNguyen29 in #10
• security: harden workflows and fix glob regex escaping by @BrianNguyen29 in #13
• feat: add xh CLI UX and canonical docs cleanup by @BrianNguyen29 in #14
• feat: enforce tier guard for high-risk paths by @BrianNguyen29 in #15
• feat: enable mutation guard for standard and deep by @BrianNguyen29 in #16
• feat: enable context floor for standard and deep by @BrianNguyen29 in #17
• feat: add advisory product intent status by @BrianNguyen29 in #18
• feat: align TS context floor file checks with Go by @BrianNguyen29 in #19
• feat: add verify-stage escalation for high-risk paths by @BrianNguyen29 in #20
• test: guard escalation policy drift by @BrianNguyen29 in #21
• feat: add operation-based verify-stage escalation by @BrianNguyen29 in #22
• feat: wire approval-risk into verify as advisory by @BrianNguyen29 in #23
• feat(examples): add approval-risk advisory example by @BrianNguyen29 in #24
• feat(admission): add test_adequacy advisory field by @BrianNguyen29 in #25
• feat(admission): add evidence_adequacy advisory field by @BrianNguyen29 in #26
• feat(admission): add intent_contract advisory field by @BrianNguyen29 in #27
• test(admission): guard advisory note drift by @BrianNguyen29 in #28
• test(schema): guard completion-card schema copy parity by @BrianNguyen29 in #29
• test(packaging): guard admission policy sync parity by @BrianNguyen29 in #30
• test(packaging): guard all policy sync parity by @BrianNguyen29 in #31
• test(release-pack): guard policy manifest coverage by @BrianNguyen29 in #32
• test(release-pack): guard schema manifest coverage by @BrianNguyen29 in #33
• test(release-pack): guard template manifest coverage by @BrianNguyen29 in #34
• test(release-pack): guard adapter manifest coverage by @BrianNguyen29 in #35
• test(release-pack): guard examples manifest coverage by @BrianNguyen29 in #36
• test(release-pack): guard docs and components pack assets by @BrianNguyen29 in #37
• test(release-pack): guard tools pack assets by @BrianNguyen29 in #38
• test(release-pack): guard required synced asset dirs by @BrianNguyen29 in #39
• test(release-pack): guard package files coverage by @BrianNguyen29 in #40
• test(release-pack): guard go-binaries release packaging order by @BrianNguyen29 in #41
• test(release-pack): add package files coverage negative fixture by @BrianNguyen29 in #42
• test(release-pack): add requiredDirs coverage negative fixture by @BrianNguyen29 in #43
• test(release-pack): add requiredDirs parser fixtures by @BrianNguyen29 in #44
• test(release-pack): add package files parser fixtures by @BrianNguyen29 in #45
• test(release-pack): guard package files exclusions by @BrianNguyen29 in #46
• test(release-pack): link go-binaries exclusion to workflow step by @BrianNguyen29 in #47
• test(release-pack): reuse release workflow reader by @BrianNguyen29 in #48
• test(release-pack): add workflow step index helper by @BrianNguyen29 in #49
• test(release-pack): add release step-name constants by @BrianNguyen29 in #50
• test(release-pack): add workflow order assertion helper by @BrianNguyen29 in #51
• test(release-pack): add workflow contains assertion helper by @BrianNguyen29 in #52
• docs: sync public docs with current cli by @BrianNguyen29 in #53
• docs: rewrite README and add Vietnamese version by @BrianNguyen29 in #54
• fix: harden real user init and package README flows by @BrianNguyen29 in #55
• feat(cli): add adoption workflow commands by @BrianNguyen29 in #56
• docs: add first accepted card workflow by @BrianNguyen29 in #58
• feat(boundary): add deterministic boundary checks by @BrianNguyen29 in #59
• docs: document boundary checks by @BrianNguyen29 in #60
• feat(boundary): enforce verify profiles by @BrianNguyen29 in #61
• feat(intake): add product intent lite by @BrianNguyen29 in #62
• feat(decision): add file-first records by @BrianNguyen29 in #63
• feat(decision): add query and affected by @BrianNguyen29 in #64
• feat(decision): link cards to records by @BrianNguyen29 in #65
• feat(verify): add decision refs enforcement by @BrianNguyen29 in #66
• feat(cli): add TypeScript decision parity by @BrianNguyen29 in #67
• test(examples): add decision memory golden fixtures by @BrianNguyen29 in #78
• feat(verify): add intent ref enforcement by @BrianNguyen29 in #79
• test(examples): add intent ref golden fixtures by @BrianNguyen29 in #80
• feat(cli): add TypeScript intake parity by @BrianNguyen29 in #81
• feat(intake): parse contract markdown input by @BrianNguyen29 in #82
• build(deps-dev): bump tsx from 4.22.3 to 4.22.4 by @dependabot[bot] in #77
• build(deps): bump sigstore/cosign-installer from 3.7.0 to 4.1.2 by @dependabot[bot] in #68
• build(deps): bump actions/setup-go from 5.6.0 to 6.4.0 by @dependabot[bot] in #69
• build(deps): bump github/codeql-action from 4.36.0 to 4.36.2 by @dependabot[bot] in #70
• build(deps): bump actions/download-artifact from 4.3.0 to 8.0.1 by @dependabot[bot] in #71
• build(deps): bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #72
• build(deps-dev): bump vitest from 4.1.7 to 4.1.8 by @dependabot[bot] in #76
• build(deps-dev): bump eslint from 10.4.0 to 10.4.1 by @dependabot[bot] in #74
• build(deps-dev): bump typescript-eslint from 8.59.4 to 8.60.1 by @dependabot[bot] in #73
• build(deps-dev): bump commander from 14.0.3 to 15.0.0 by @dependabot[bot] in #75
• docs(examples): add nextjs real-world workflow by @BrianNguyen29 in #83
• feat(context): add advisory manifest checks by @BrianNguyen29 in #84
• docs(adapters): add namespaced xh slash commands by @BrianNguyen29 in #85
• docs(adapters): expand xh slash command coverage by @BrianNguyen29 in #86
• docs(examples): add monorepo real-world workflow by @BrianNguyen29 in #87
• feat(context): enforce context manifests by @BrianNguyen29 in #88
• docs: refresh current feature references by @BrianNguyen29 in #89
• docs: refresh README positioning by @BrianNguyen29 in #90
• fix(cli): clarify smoke followup UX by @BrianNguyen29 in #91
• docs(cli): improve onboarding help by @BrianNguyen29 in #92
• feat(cli): add guided start command by @BrianNguyen29 in #93
• feat(cli): add learn concept tour by @BrianNguyen29 in #94
• feat(cli): add builtin workflow runner by @BrianNguyen29 in #95
• docs(cli): group beginner help by goals by @BrianNguyen29 in #96
• feat(cli): add quick next-action recommender by @BrianNguyen29 in #97
• feat(cli): add ci workflow alias by @BrianNguyen29 in #98
• feat(cli): add Vietnamese beginner output by @BrianNguyen29 in #99
• fix: harden codebase drift and admission parity by @BrianNguyen29 in #100
• fix(cli): polish sandbox install and adapter flows by @BrianNguyen29 in #101
• docs: align public repo hygiene and markdown references by @BrianNguyen29 in #103
• fix: avoid tarball install in release smoke by @BrianNguyen29 in #104
• fix: pin example action dependencies by @BrianNguyen29 in #105
• fix: harden drift checks and smoke coverage by @BrianNguyen29 in #106
• build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 by @dependabot[bot] in #107
• build(deps-dev): bump prettier from 3.8.3 to 3.8.4 by @dependabot[bot] in #108
• build(deps-dev): bump typescript-eslint from 8.60.1 to 8.61.0 by @dependabot[bot] in #109
• build(deps-dev): bump @types/node from 25.9.1 to 25.9.2 by @dependabot[bot] in #110
• fix: align contract output and drift docs by @BrianNguyen29 in #111
• feat: add codex adapter support by @BrianNguyen29 in #112
• fix: align AGENTS contracts and stubs by @BrianNguyen29 in #113
• fix: harden managed context registry by @BrianNguyen29 in #114
• build(deps-dev): bump @types/node from 25.9.2 to 25.9.3 by @dependabot[bot] in #115
• build(deps-dev): bump typescript-eslint from 8.61.0 to 8.61.1 by @dependabot[bot] in #119
• build(deps-dev): bump eslint from 10.4.1 to 10.5.0 by @dependabot[bot] in #117
• build(deps-dev): bump vitest from 4.1.8 to 4.1.9 by @dependabot[bot] in #118

New Contributors

• @dependabot[bot] made their first contribution in #1
• @BrianNguyen29 made their first contribution in #8

Full Changelog: https://github.com/BrianNguyen29/x-harness/commits/v0.99.0-rc4