v0.6.0

Added

• First-party feature_delivery workflow for scoped behavior changes, focused
  discovery, readiness review, implementation, reconciliation, and safe resume.
• Shared native delivery contract and versioned plan asset linking requirements,
  acceptance criteria, task ownership, dependencies, and current evidence.
• Read-only Python 3.12+ validator for strict schema/coverage checks, actual file
  outcomes, artifact/input hashes, red-drill proof, and checkpoint freshness.
  Recorded commands remain inert data; semantic review and real tests remain
  required independently of structural success.
• Atomic plan-update helper with candidate validation, observed-digest conflict
  detection, cooperative locks, flushed writes, and idempotent replacement.
• Executable Python entry points on POSIX, verified by the hosted lint gate.
• Deterministic regressions and validator mutation drills, plus isolated live
  agent scenarios with independent product oracles and negative controls.
• Independent trial checks re-observe runtime versions and validate current
  closure receipts, including a negative control for fabricated versions.

Changed

• Connected setup and retrofit to the shared delivery lifecycle without replacing
  their canonical discovery, code-quality, or red-drill procedures.
• Extended package checks to inspect every committed resource in both archives.
  Added Python 3.12/3.14 validation, strict typing, lint, and tests across Windows,
  Linux, and macOS using the existing CI/release pipeline.
• Reworked README navigation, workflow routing, installation, and documentation
  around a warm ivory, charcoal, and copper visual identity.
• Updated agent adapters, manifests, installation guidance, and contributor docs
  for all three workflows. Delivery code uses only Python's standard library;
  no third-party workflow integration or copied framework code was added.

Verification

• 46 deterministic tests, including validator mutation drills and independent
  outcome-oracle controls; strict typing and linting; twelve hosted matrix jobs.
• 24 independently reviewed live core trials and one unchanged-plan trial.
  Evaluation scope and model/runtime limits are recorded in docs/QUALITY-REVIEW.md.
• Desktop/mobile and light/dark README rendering, plus the saved neutral GitHub
  social-preview image, checked visually.

v0.5.0

Added

• A source-backed language review contract covering semantic organization,
  meaningful abstractions, ownership, errors, resource lifetimes, asynchronous
  work, accessible HTML/CSS, and rejection of tautological tests and vacuous
  behavior. Both workflows require it; Go coverage is explicitly guidance-only.
• Required repeatable red drills for tests and quality gates in both workflows,
  with a shared green/red/restored-green procedure, intended-failure checks,
  isolation and cleanup rules, recurring execution, and scoped evidence.
• Red-drill scope and ownership in project discovery, the brief, generated
  project instructions, milestone verification, and completion reports.
• A -RedDrills mode in the existing PowerShell smoke suite, wired into CI,
  that mutates directory pruning, root overrides, and unreadable-path behavior
  in a temporary source copy and requires the existing assertions to catch them.

Changed

• Removed universal runtime/module choices from TypeScript and C# quality
  templates, retaining them in the owning project's configuration.
• Kept domain constants local, tightened TypeScript unused-variable and test
  checks, and added explicit self-comparison and exhaustive-switch gates.
• Scoped Python assertion allowances to tests and retained fixture annotations;
  removed the repository's duplicated Ruff copyright-rule exclusion.
• Clarified Rust workspace lint inheritance and removed the duplicate unwrap
  prohibition that defeated test-local allowances.
• Strengthened both workflows' scan-and-enhance rules with canonical-path and
  consumer tracing, focused rescans before changes, justified new work, migration
  cleanup, and final duplication checks. Tooling adapters point to canonical
  project instructions instead of creating competing policy copies.
• Replaced retrofit reviewer guidance that deleted environments with explicit
  file scoping or an isolated copy, preserving pre-existing resources.
• Clarified that existing scope authorization is reused, and that zero tests,
  surviving mutations, unrelated errors, and incomplete restoration cannot
  establish verified gates.

Fixed

• Fixed clang-tidy's owned-header filter for absolute Windows/POSIX paths,
  restored PowerShell state-change checks, and replaced nonexistent compatibility
  profiles with shipped inventories whose historical limits are documented.
• Required Semgrep's --error flag for blocking scans and documented its console
  entrypoint exception to the usual Python module invocation.
• Stopped applying a C++ language standard to mixed C/C++ pre-commit inputs.
• Routed JSONC TypeScript configuration validation to the compiler instead of
  the strict JSON pre-commit hook.
• Made smoke-test source and document reads explicitly UTF-8 so Windows
  PowerShell 5.1 checks non-ASCII contracts without relying on its legacy default
  encoding.

Adoption notes

• When adopting the TypeScript or C# templates, keep runtime, module, language,
  and framework choices explicit in the owning project. The quality bases no
  longer choose those settings for every consumer.
• Re-run affected gates and red drills when applying the narrower Python,
  TypeScript, and PowerShell exceptions. Existing projects may expose findings
  that the older templates did not report.

v0.4.1

Fixed — cross-host release reproducibility

• The release builder now pins Git archive timestamp handling to UTC and
  restores the caller's original TZ value, making all five generated release
  files byte-identical across supported host time zones for the same commit.
• The release-package smoke test now builds under conflicting Pacific and Asia
  time zones, fails if any archive or metadata file changes, and derives its
  expected release notes from the manifest-matched changelog section instead
  of stale version-specific text.
• Release metadata reads now request UTF-8 explicitly, preventing Windows
  PowerShell 5.1 from mangling non-ASCII changelog punctuation in release notes.

v0.4.0

Added — release automation and verified installs

• Added a tag-triggered GitHub Release workflow. It reuses the full
  cross-platform workflow, validates exact tag/manifest/changelog agreement,
  builds versioned ZIP and tar.gz archives from the committed Git tree,
  generates SHA-256 checksums and release metadata, creates signed GitHub build
  provenance, and publishes changelog-derived notes and assets.
• Added scripts/build-release.ps1 plus a package smoke test covering archive
  structure, source commit, checksums, manifest, and notes under PowerShell 7
  and Windows PowerShell 5.1.
• Added docs/INSTALLATION.md with current marketplace, pinned-tag, tagged-clone,
  local-directory, and release-archive install paths; Windows, Linux, and macOS
  checksum commands; provenance verification; extraction; and update behavior.
• Made the cross-platform workflow reusable so release publication executes the
  same gates as normal main/PR validation. Added a pinned Ruff 0.16.4 CI job and
  removed four obsolete inline suppressions exposed by that gate.