v0.7.0 — slash-command rename + dev container compat hardening

Five PRs since v0.6.0. Mocks (Python defaults, TypeScript minimal, Polyglot kitchen-sink) now build cleanly on host AND in the official .devcontainer/, end to end.

Changes

Public-surface change

• #92 chore(template): drop "gov." prefix from slash commands. The 16 .claude/commands/*.md files now ship as plain verbs (audit.md, plan.md, sync.md, …) and are invoked as /<verb>. Reverses the prior "never re-prefix" contract — the historical Spec Kit collision concern is moot since /speckit.* shipped.

Bug fixes

• #93 fix(template): resolve cwd realpath in TS audit-hooks test (macOS). make hooks-test no longer fails on macOS hosts where /var is a symlink to /private/var. Linux unaffected.
• #94 fix(template): make SBOM references in THREAT_MODEL.md conditional. Removes broken scripts/generate-sbom.sh references from sbom=no renders' threat-model doc.
• #95 fix(template): three dev-container compatibility fixes from build exercise.
  • Governance scripts (marker-scan, check-governance, query-governance) resolve a venv-aware Python so PyYAML is available in clean dev containers.
  • evals.mk's [ -n "$CI" ] is guarded with ${CI:-} so it doesn't trip set -u on GNU Make 4+.
  • test_npm_install_failure_is_non_fatal pins a minimal PATH so pre-installed AI CLIs in the dev container don't short-circuit the test's npm-failure branch.
• #96 fix(template): make §1 SBOM asset row truly conditional in THREAT_MODEL. Closes follow-up to #94 — the §1 asset-table SBOM row was inline-clarified rather than removed; now it ships only on sbom=yes renders.

Why this matters for adopters

Anyone scaffolding a fresh project from main now gets make sync && make validate && make hooks-test green out-of-the-box on:

• macOS host (Python, TypeScript, polyglot)
• Linux host (Python, TypeScript, polyglot)
• The official VS Code dev container (all three variants)

Previously, the TypeScript and polyglot variants failed make hooks-test on macOS (#93), and all three variants failed make validate inside the dev container with PyYAML not installed and CI: unbound variable errors (#95).

🤖 Release notes generated as part of the build-exercise wrap-up.