Skip to content

v0.7.1 — Hardening + Deferred Items

Choose a tag to compare

View all tags
@MountainUnicorn MountainUnicorn released this 12 Apr 22:34
· 138 commits to main since this release
v0.7.1
f458058

Ships the items explicitly deferred from v0.7.0's release notes, plus a dog-food retro covering the v0.6→v0.7 arc. Pure hardening release — no architectural changes.

Added

Runtime safety

  • /add:deploy production confirm-phrase gate — runtime check requiring the exact literal string DEPLOY TO PRODUCTION (case-sensitive, whole-message, immediately-next-message). Halts on mismatch. No fuzzy matching. Runtime check in the skill, not a behavioral rule.

  • PII heuristic in rules/learning.md — scans candidate learning-entry title + body for email, IP, API-key, JWT, private-key, and password-like patterns before writing. Halts with [rewrite / override / skip] prompt on match. Override records a compliance-bypass entry.

  • --force-no-retro abuse detection — density-based escalation over the last 30 days:

    • 0 overrides → silent
    • 1 override → warn
    • 2 overrides → require --i-know-this-is-a-pattern ack flag
    • 3+ overrides → refuse until retro runs

Install UX

  • /add:init --quick — 5-question greenfield fast path (name, stack, tier, maturity, autonomy). Sensible defaults for everything else. ~2 minutes vs ~10 for the full interview.
  • /add:init --sync-registry — read-only reconciliation of ~/.claude/add/projects/{name}.json against project ground truth. Closes the gap where the registry-sync rule could detect drift but had no fix command.

Infrastructure + docs

  • CHANGELOG.md at repo root — full release history from v0.1.0 forward
  • scripts/sync-marketplace.sh — centralizes the rsync pattern previously documented only in memory

Dog-food

  • .add/retros/retro-2026-04-12-v07.md — retro covering the v0.6→v0.7 arc. 54 days since prior retro. Compliance rule would have blocked the next away-mode session; writing this retro resets the debt. Scores: ADD methodology 5.8/9 (spec-before-code violated on the architecture extraction), Swarm effectiveness 8.1/9 (competing-swarm review was high-value).

Upgrading

claude plugin update add@add-marketplace

No breaking changes. core/VERSION drives everything — the 8-location manual bump is done.

What v0.7.1 does NOT include

  • Per-skill Codex overrides for high-leak skills (away, tdd-cycle, implementer) — deferred to v0.8.0
  • Infographic structural refresh to reflect multi-runtime messaging (version stamp bumped, full re-layout deferred)
  • GPG-signed tags (requires a maintainer keypair; when it lands, signed tags will be documented in SECURITY.md)

Carry-over to v0.8.0

  • Per-skill Codex overrides
  • /add:cycle rename candidate (3 consecutive arcs have bypassed it — gap needs addressing)
  • Auto-write release-checkpoint learning on gh release create
  • Full infographic multi-runtime refresh
Assets 2
Loading