gentle-pi v0.14.0

Highlights

gentle-pi v0.14.0 ports the precision-gated 4R review framework from gentle-ai v1.46.0 and adapts it to Pi's runtime, package assets, and command hooks.

Reviews stop at the right time

• Trivial diffs run no lens.
• Standard diffs run exactly one dominant-risk lens.
• Non-trivial hot paths or diffs above 400 changed lines run full 4R.
• Review sweeps, severe-finding fixes, and scoped re-review rounds are bounded.
• Warning and suggestion findings remain informational and never drive fix loops.

Bounded adversarial verification

• Standard review uses one general refuter over the complete severe-candidate list.
• Full 4R uses exactly three complete-list refuters with per-finding two-of-three voting.
• Judgment Day keeps its two blind judges and launches no refuters.
• The installed review-refuter has exactly read, grep, and find permissions.

Safer Pi runtime behavior

• Review routing emits advice without blocking commands.
• Independent dangerous-command confirmation remains authoritative.
• Git evidence collection handles -C, --git-dir, --work-tree, and all-tracked commits.
• Sensitive environment, credential, secret, token, permission, policy, and security files route to risk review.

Safe package upgrades

• Package-managed assets now use full-content ownership metadata.
• Same-path user-authored agents and user routing changes remain untouched.
• Bundled v0.13 fingerprints migrate unchanged legacy assets to v0.14 without relying on Git history at runtime.

Validation

• 364 Node tests passed plus the runtime harness.
• 47 required package resources verified.
• The v0.13 migration fingerprint audit matched 27 of 27 packaged resources.
• npm publication dry run completed successfully.

Links

• gentle-ai v1.46.0
• Full changelog