v1.7.0

Changelog

All notable changes to this project will be documented in this file.

[1.7.0] — 2026-06-18

Documentation

• F6a48a71 dev -> published (memory migration shipped in v1.6.0)
• Add frozen-CLI invariant (#15) — server /api/ is CLI-only
• Add dfd73e4e — propagate governance R26-R40 into persona + SCEN (#16)
• Internalize R26-R40 in persona + README + governance scenarios (#16)
• Dfd73e4e phases 2-4 done, CPV --strict clean → publishing (#16)

Miscellaneous Tasks

• Sync uv.lock self-entry to v1.6.0

---

Generated by git-cliff

v1.6.0

Changelog

All notable changes to this project will be documented in this file.

[1.6.0] — 2026-06-15

Bug Fixes

• MD025 front_matter_title='' — TRDDs carry frontmatter title: + body H1

Documentation

• Add proposal 664d94bb — CPV canonical-pipeline re-standardization (RC-PIPELINE-DRIFT-001)
• 664d94bb — FINDING: standardize would REGRESS the plugin; do NOT migrate
• Align with Claude Code changelog through v2.1.178
• Add f6a48a71 — janitor-hosted global memory migration (#12)

Features

• Bootstrap PROJECT-scope wikimem (#12 phase 1)
• Adopt janitor-hosted global memory; remove per-plugin skills (#12)

Miscellaneous Tasks

• Sync uv.lock self-entry to v1.5.0

---

Generated by git-cliff

v1.5.0

Changelog

All notable changes to this project will be documented in this file.

[1.5.0] — 2026-06-11

Documentation

• F51d24c6 -> published — v1.4.0 shipped, CPV-G3 cleared
• Rewrap STATE line — leading '+' read as list marker (MD004)
• E1c2677a -> completed — umbrella audit verified done
• Migrate to v2 column schema + create 4-zone design folders (#10 M3/M11/M13)
• Align with Claude Code changelog through v2.1.173

Features

• Declare ai-maestro-plugin dependency + PRRD project-id + 8 SILVER rules (#10 M1/M2)
• Single-writer domain + T5 MANAGER AMP escalation + AMP self-id (#10 M9/M10)

Miscellaneous Tasks

• Sync uv.lock self-entry to v1.4.0

Testing

• 62 doc-contract tests for the 14 uncovered skills + ADR-0002 fix + docs refresh (#10 M4/M11/M12)

---

Generated by git-cliff

v1.4.0

Changelog

All notable changes to this project will be documented in this file.

[1.4.0] — 2026-06-10

Bug Fixes

• Emit two-ruleset split, not one bypass-less required-checks ruleset
• Propagate two-ruleset split to template + prose (TRDD-5307ae6c Ph2-3)
• Replace broken references/ link with universal-skill prose pointer
• Restructure maintainer-prrd-trdd-kanban to CPV 7-section format (<5000)
• Widen workflow-file globs to .yml AND .yaml (.yml)
• Orphan-delete the janitor's names too (convergence union)
• Required_status_checks = PR-applicable jobs only
• Clear 4 Pyright nits (CPV-G3 our-side portion)
• Clear all our-side strict findings from the 2026-06-09 scan
• Devitalize the last 7 doc NITs — strict gate now exit 0
• One-char-class the triage detection regexes (scanner-inert needles)

Documentation

• Lock in PUT-not-PATCH for ruleset update (guardrail)
• Record the two post-SHA-exchange shared follow-ups
• Record agreed baseline-tag-protect + audit hardening list
• Refine baseline-tag-protect to tri-party consensus
• Record baseline-tag-protect consensus closed (awaiting USER ratify)
• Record baseline-tag-protect IMPLEMENTED (b71a1ff) + C2 addressed
• Refresh STATE block for three-ruleset baseline + CPV-G3 detail
• Sync VERIFY description with D2 fingerprint binding
• Record b02b24c — our-side CPV-G3 Pyright nits cleared
• Record live baseline-* apply + readback-pin (#7)

Features

• Add MAINTAINER's PRRD/TRDD/Kanban layer
• Add Approval discipline section to maintainer-prrd-trdd-kanban
• Bootstrap PRRD with G1 GitHub self-id golden rule
• Migrate source to ratified baseline-* ruleset pair
• Implement baseline-tag-protect (3rd ratified ruleset)
• Approval-tiers governance section (#8) + memory-protocol wiring (#9)
• Markdown memory system — rule + recall/write skills + tests (#9)

Miscellaneous Tasks

• Sync uv.lock to 1.3.1
• Record baseline-standardization implementation commits
• Record orphan-delete-union commit 31fe57f
• Record CI-detection-filter commit cde65eb
• Record PUT-not-PATCH guardrail commit 138dfdd
• Record Tier-0 hardening SHAs (C3-C6, D1, D2, recheck)

Security

• C3-C6 verify/parse guards (Tier-0, no baseline change)

Harden

• D1 — T3 absolute baseline-compliance check (Tier-0)
• D2 — bind approval to a planned-diff fingerprint (Tier-0)

---

Generated by git-cliff

v1.3.1

Changelog

All notable changes to this project will be documented in this file.

[1.3.1] — 2026-05-29

Bug Fixes

• Wp-branch YAML parser + README version badge

Documentation

• Add Scope section to every SKILL.md (Audit A F7)
• Clear all CPV advisory warnings except documented exceptions
• Bring effort/tool-surface docs on par with Claude Code 2.1.154 (Opus 4.8)

Miscellaneous Tasks

• Sync uv.lock to 1.3.0

Testing

• Cover CLI dispatch input validation (Audit B-COV-1)

---

Generated by git-cliff

v1.3.0

Changelog

All notable changes to this project will be documented in this file.

[1.3.0] — 2026-05-27

Bug Fixes

• Calibrate rules to zero false positives on 8 real repos
• Wire maintainer-sandbox + sync T1-T6 + CI hardening
• Polish skill consistency + extend adversarial regex
• Mark commit-msg.sh executable (100644 -> 100755)
• Quote description containing colon — CRITICAL YAML parse failure
• Wrap redact pattern list in fenced block — silences false-positive RC-HARDCODED-PATH x3
• Tighten 5 over-budget descriptions (>200 bpe tokens) to under-limit
• Repair 3 cross-reference + 1 abs-path MAJOR findings
• Use validator-recognised placeholder usernames in path examples
• Remove host-path patterns from prose to clear RC-HARDCODED-PATH
• Populate empty argument-hint frontmatter on 5 commands
• Embed full reference-file TOCs in SKILL.md Resources sections
• Rename 'results[]' heading to avoid TOC-parser bracket bug
• Batch NIT clear-out — MD004 bullets, missing-TOC, skillaudit FPs
• Markdownlint MD004 and MD056 — escape pipes, neutralise bullet prefixes

Documentation

• TRDD-e1c2677a — full plugin audit + remediation pass
• Regenerate CHANGELOG + add community + ISSUE/PR templates
• Seed design/adrs/ with the 5 foundational ADRs

Features

• Port the Sentinel GitHub Actions scanner to Python (32 rules + 6 fixers)
• T6 — package-manager safety-config drift
• Docker-isolated harness for the maintainer agent
• Add 10 slash-command surfaces for user-invokable skills
• 10 new entrusted-repo capability skills + slash commands

Miscellaneous Tasks

• Expand pyproject.toml metadata + urls + classifiers

Refactor

• Rename maintainer-tool-bootstrap -> maintainer-tooling-bootstrap

Testing

• 32 new tests — redact (17) + commit-msg hook (11) + real-repo (4)

---

Generated by git-cliff

v1.2.0

Changelog

All notable changes to this project will be documented in this file.

[1.2.0] — 2026-05-23

Documentation

• Backfill 7 TRDDs for v1.1.0 work + 2 future-work specs

Features

• Google-re2 RegexSet fast security scanner + Guardian + README

Miscellaneous Tasks

• Migrate to CPV canonical pipeline (drift→0)
• Silence pyright on fallback shims + add .mega-linter.yml
• Remove pytest-report.jsonl runtime artifact

Styling

• Ruff format pass on publish.py + setup_marketplace_pat.py

Testing

• Add 42-test pytest harness for v1.1.0 skills + helpers

---

Generated by git-cliff

v1.1.0

[1.1.0] - 2026-05-23

Bug Fixes

• Relocate per-agent state from $HOME to AGENT_DIR (Phase D)
• Drive plugin to CPV strict CRITICAL=0 MAJOR=0 MINOR=0 NIT=0

Documentation

• Backfill v1.0.0–v1.0.9 history via git-cliff
• Document rate-limit, less-permission-prompts, claude agents --json
• Explain why we keep git tag -a over claude plugin tag
• Document maintainer-workflow-audit + zizmor integration

Features

• Adopt Claude Code 2.1.132/2.1.133 env vars
• Scope tools and disallow web access (v2.1.119)
• Handle gh rate-limit hint and xhigh effort tier
• Add maintainer-workflow-audit (zizmor-powered)
• Register maintainer-workflow-audit + chain from fix flow
• Add workflow-scan (read-only zizmor + actionlint audit)
• Add workflow-fix-safe (zizmor --fix=safe + hardening)
• Add workflow-pin-actions (SHA-pin unpinned actions)
• Add workflow-protect-branch (idempotent ruleset apply)
• Add workflow-bootstrap + setup_marketplace_pat.py
• Close article-vector gaps GAP-1/2/4 (Phase A)
• Guardian core — proactive supply-chain sentinel (Phase B)
• Wire Guardian into patrol/triage/fix (Phase C)

Miscellaneous

• Pin actions to SHAs and harden permissions (zizmor clean)
• Dynamic tool surface + CPV Nixtla-strict cleanup
• Embed reference TOCs + checklist phrasing nits
• Integration audit — close 2 real gaps

Refactor

• Drop monolithic workflow-audit, fix CPV regressions
• Progressive disclosure for 3 oversize maintainer-* skills

Security

• Add zizmor job (SARIF upload + fail-on-findings)

v1.0.9

[1.0.9] - 2026-04-22

v1.0.6

[1.0.6] - 2026-04-22

Miscellaneous

• Update uv.lock