Re-running the install prompt upgrades in place; or use the update prompt in the README's Updating section to see this changelog first.
Security & trust — new Trust & security README section with tag/SHA-pinned install variant; runbook fetches templates from the pinned ref; scout/Explore now carry a positive tools: Read, Glob, Grep allowlist (read-only is enforced, not just prompted); agent collisions detected by frontmatter name: with plugin-shadowing disclosure.
Behavior & quality — policy block self-disables for subagent roles; scout findings treated as unverified inputs; verifier runs maximum-thoroughness on security-sensitive work; native-Windows portability rules for the installer.
Docs & claim accuracy — Anthropic's endorsement split from pilotfish's own cheap-model routing thesis; cost numbers reframed as an upper-bound API-dollar experiment with inline sources; Explore warning corrected (Opus-capped on the Claude API); honest best-alias behavior at the 7/12 subscription boundary; new FAQ rows (spawn overhead, fast off-switch, managed environments, project-CLAUDE.md stacking).
Full details: CHANGELOG.md