v2.6.0 — the Opus 5.5 correctness pass

A full-repo correctness pass by Claude Opus 5.5. Seven parallel readers covered the repo area by area, four editors worked on disjoint files, and independent code, fact, pin and security reviewers then tried to refute the diff — followed by one more verification pass over their fixes. Every external claim was checked at its primary source, and every runtime-track pin was re-read from its registry on 2026-10-17.

MINOR. No declared path, command, blueprint section number or tasks.json field changed.

Two defects that were shipping

• Phase 4 asked before overwriting an existing blueprint only after it had already overwritten it. The writer saves every file in Step 4; the "ask first" check lived in Step 7. It now runs in Step 3, before anything is written.
• The recommended expected-failure gate broke under set -e. cmd; test $? -eq N aborts before test runs, and a mid-block ! cmd fails silently. Cycle 7 rewrote 31 of these by hand in its blueprint; the sources were never updated. Every example now uses status=0; cmd || status=$?; test "$status" -eq N, and finding #36 files the old forms — so 2.5.0 bundles that use them will draw #36 from /architect-audit.

Current platform, verified

Area	What changed
Claude Code	Task tool → Agent tool; plugin subagents are the-architect:*; validator on opus at effort: high; omitClaudeMd on the auditors
Claude API	Non-default sampling params are rejected; cache order is tools → system → messages; refusals are HTTP 200 + stop_reason: "refusal"; thinking blocks replay unmodified. Model IDs and prices still defer to claude-api
MCP	Revision 2026-07-28 is stateless with server/discover; blueprints build dual-era and gate on both
Stores and auth	Apple 4.8 stated accurately, US-storefront external-purchase exception, Auth.js now maintained by Better Auth
Runtime tracks	All five re-verified. New majors for pnpm, Vitest, Stripe, Expo SDK / React Native, the Python Anthropic and OpenAI SDKs, Go, Echo, Bubble Tea, Pest

The pin review caught one before it shipped: a better-auth note describing an issuer column that existed only in 1.7.0–1.7.2 — following it would have broken every sign-up.

Validator and CI

• Findings #38–#40 (BLOCKER), Sweeps 28–30 — three writer rules that claimed enforcement nobody performed. 40 findings, Sweeps 0–30.
• CI fails loudly instead of skipping, enforces shape reciprocity and capability reachability, keeps manifest versions and the CHANGELOG in step, and every version-scan pattern must match a canary. Each new check was mutation-tested.
• The worked Step 7 example now obeys the template's own caps and gates on replayed fixtures, not a live stripe trigger.
• CHANGELOG backfilled for 2.0.1 through 2.5.0.

Full list: CHANGELOG.md.

---

ES — Español

Un pase completo de correctitud hecho por Claude Opus 5.5. Siete lectores en paralelo cubrieron el repo por áreas, cuatro editores trabajaron sobre archivos disjuntos, y revisores independientes de código, hechos, versiones y seguridad intentaron refutar el diff, con una verificación final sobre sus propios arreglos. Cada afirmación externa se comprobó en su fuente primaria y cada versión de los runtime tracks se releyó de su registry el 2026-10-17.

MINOR. No cambió ninguna ruta declarada, comando, número de sección del blueprint ni campo de tasks.json.

Dos defectos que se estaban publicando:

• La Fase 4 preguntaba antes de sobrescribir un blueprint existente solo después de haberlo sobrescrito. Ahora la comprobación corre en el Paso 3, antes de escribir nada.
• La compuerta recomendada para un fallo esperado se rompía con set -e. cmd; test $? -eq N aborta antes de que corra test, y un ! cmd a mitad de bloque falla en silencio. Ahora todo usa status=0; cmd || status=$?; test "$status" -eq N, y el hallazgo #36 marca las formas viejas: los bundles de 2.5.0 que las usen recibirán #36 en /architect-audit.

Plataforma actual, verificada: la herramienta Task ahora es Agent; el validador corre en opus con effort: high; la guía de la API de Claude refleja el comportamiento actual (parámetros de muestreo, orden de caché, rechazos, thinking blocks); MCP 2026-07-28 es stateless; reglas de Apple 4.8 y de compras externas en EE. UU.; Auth.js ahora lo mantiene Better Auth; los cinco runtime tracks se reverificaron (la revisión atrapó una nota de better-auth que habría roto cada registro).

Validador y CI: hallazgos #38–#40 con Sweeps 28–30 (40 hallazgos en total); CI falla en vez de saltarse pasos, exige reciprocidad entre shapes y que cada capability sea alcanzable, mantiene versión y CHANGELOG sincronizados, y cada patrón tiene un canario. Todo probado con mutaciones. El CHANGELOG quedó completo desde 2.0.1.