Citadel v1.1.0

What's Changed

• security: harden hooks against shell injection by @leighstillard in #1
• Wave 1 + Wave 2: Research, Self-Correction by @SethGammon in #2
• Wave 3: App Creation Pipeline — From Description to Verified Application by @SethGammon in #3
• Wave 4: Postmortem, deployment, design manifest, browser QA by @SethGammon in #4
• Cleanup + final verification after Waves 1-4 by @SethGammon in #5
• docs: README + QUICKSTART improvements for all platforms by @SethGammon in #6
• fix: resolve audit warnings (frontmatter, docs, agent visibility) by @SethGammon in #7
• fix: remove invalid WorktreeCreate hook event type by @SethGammon in #9
• fix: use relative paths in hook commands for Windows compatibility by @SethGammon in #11
• feat: hook smoke test, external-action-gate, and triage system by @SethGammon in #12
• feat: extend /triage to handle PRs, add CONTRIBUTING.md, update README by @SethGammon in #14
• docs: add settings.json backup warnings to install instructions by @SethGammon in #15
• feat: refactor Citadel to Claude Code plugin architecture by @ivanmviveros in #16
• fix: post-merge cleanup for plugin architecture by @SethGammon in #17
• fix: update stale skill path in examples/README.md by @SethGammon in #18
• docs: update install instructions with reliable plugin-dir method (#19) by @SethGammon in #21
• fix: add hook installer to work around CLAUDE_PLUGIN_ROOT bug (#19) by @SethGammon in #22
• fix: rename hooks.json to hooks-template.json to stop plugin auto-fire by @SethGammon in #23
• fix: escape backslashes in hook scripts causing syntax errors by @SethGammon in #24
• fix: quote node script paths with spaces in install-hooks.js by @SethGammon in #25
• feat: Citadel V2 — hooks, governance, observability, testing infrastructure by @SethGammon in #26
• fix: skills not visible after plugin install by @SethGammon in #28
• feat: bench calibration, skill scanner fix, hook runtime verifier, gate fix by @SethGammon in #29
• feat: integration-test, /verify skill, bench --verify-hooks by @SethGammon in #30
• chore: add CITADEL-STATE.md to .gitignore by @SethGammon in #31
• feat: README facelift — animated routing SVG + GitHub Pages demo by @SethGammon in #32
• fix: add .nojekyll so GitHub Pages serves docs/index.html by @SethGammon in #33
• fix: visual overhaul — clean SVG, single hero, better demo page by @SethGammon in #34
• feat: unified hero SVG — brand + routing in one image by @SethGammon in #35
• refactor(readme): clean routing diagram + add origin story by @SethGammon in #36
• refactor: redesign cards + slim README to sales page by @SethGammon in #37
• feat: comet trail animation + interactive demo expansion by @SethGammon in #38
• fix: nav tabs open slide-in panels instead of linking to GitHub by @SethGammon in #39
• feat: complete demo page overhaul by @SethGammon in #40
• fix: revert demo to readable design + pill search bar + fold-out by @SethGammon in #41
• feat: 4 generator buttons with typewriter injection by @SethGammon in #42
• feat: two-mode UX — hero compresses, result fits viewport by @SethGammon in #43
• fix: remove auto-demo on page load by @SethGammon in #44
• fix: result mode polish by @SethGammon in #45
• feat: two-screen layout with scroll cue + dot grid by @SethGammon in #46
• fix: routing bugs + demo embarrassment check by @SethGammon in #47
• fix: ignore Puppeteer screenshot artifacts by @SethGammon in #48
• feat: restore dot grid + scroll cue (lost in #46 merge conflict) by @SethGammon in #50
• feat: physics dot grid, glass nav, aurora h1, color cards by @SethGammon in #51
• feat: cinematic scroll, liquid dots, animated tier cards by @SethGammon in #52
• feat: left/right click canvas effects by @SethGammon in #53
• fix: enhance issue-monitor and quality-gate scripts by @RhysOnlyBetter in #49
• fix: nav overlap after cinematic scroll — drive heights imperatively by @SethGammon in #54
• fix: facelift + layout centering, panel positioning, visual fixes by @SethGammon in #55
• fix: remove hardcoded settings.json, gitignore it, fix test-demo regex by @SethGammon in #56
• feat: V3 hardening — telemetry schema, health endpoint, token economics, hook improvements by @SethGammon in #57
• feat: demo site refresh — horizontal tiers, alive background, new copy by @SethGammon in #58
• feat(organize): three-pass health scan + repo cleanup by @SethGammon in #59
• v3: daemon factory, 7 new skills, fleet hardening by @SethGammon in #60
• fix: restructure skills to nested SKILL.md for plugin scanner (#61) by @SethGammon in #62
• docs: add What Is Citadel section and expand routing tiers by @SethGammon in #63
• security: fix shell injection, path traversal, and supply chain risks by @marceloceccon in #64
• chore: remove duplicate command stubs and stale PR doc by @SethGammon in #65
• feat: first-encounter consent system for external actions by @SethGammon in #66
• feat: real token telemetry, cost tracking, and pricing transparency by @SethGammon in #67
• docs: polish README -- add What You Get, simplify quickstart by @SethGammon in #68
• docs: polish README -- add What You Get section, simplify quickstart by @SethGammon in #69
• docs: polish README with em dashes, What You Get section, simplified quickstart by @SethGammon in #70
• docs: fix remaining double hyphens in README, add install guide description by @SethGammon in #71
• core: add runtime contract skeleton by @SethGammon in #73
• merge: complete runtime-agnostic foundation (#73-#87) by @SethGammon in #89
• docs: add runtime-agnostic migration backlog by @SethGammon in #72
• Fix Claude hook installer compatibility across Claude versions by @SethGammon in #91
• docs: add community section, roadmap, and contributing guide by @SethGammon in #93
• Update GitHub Sponsors username in FUNDING.yml by @SethGammon in #94
• feat: Codex runtime, houseclean skill, hook hardening + community README by @SethGammon in #95
• feat: OpenAI runtime, Citadel Cloud bootstrap, wiki skill by @SethGammon in #98
• feat: setup UX overhaul, wiki skill, OpenAI runtime scaffold + README fixes by @SethGammon in #99
• fix: address feedback from discussion #96 — paths, hooks, campaign staleness, Fleet UX by @SethGammon in #100
• feat(telemetry): unified /telemetry hub, normalized config, trust level visibility by @SethGammon in #101
• fix(telemetry): prompt /do setup when harness.json is missing by @SethGammon in #102
• feat(momentum): cross-session discovery synthesis for Fleet and Workspace by @SethGammon in #103
• docs: dedicated installation guides for Claude Code and Codex by @SethGammon in #104
• fix(gate): surface block messages via stderr so Claude Code renders them by @SethGammon in #106
• fix: ignore .citadel runtime artifacts by @SethGammon in #105
• feat: local quota-free runners for watch, daemon, and schedule by @SethGammon in #108
• feat: local runner is the default, routine path is opt-in by @SethGammon in #109
• docs: use $do prefix in Codex install guide (closes #110) by @SethGammon in #112
• fix: route plain-text Stop hook output to stderr for Codex (#111) by @SethGammon in #113
• docs: add COMMUNITY.md for third-party skills (refs #107) by @SethGammon in #114
• docs: README professional pass by @SethGammon in #115
• fix(codex): idempotent session-end under Stop collapse by @SethGammon in #116
• fix: generate delegate wrappers in .citadel/scripts/ instead of copying verbatim by @SethGammon in #117
• fix: move agent-context template to runtime-neutral location by @SethGammon in #118
• fix(codex): route shell through Git Bash on Windows to avoid PS 8009001d error by @SethGammon in #119
• fix(codex): route shell through Git Bash on Windows to fix PS 8009001d by @SethGammon in #122
• feat: /unharness skill with versioned archive export by @SethGammon in #121
• fix: move agent-context template to runtime-neutral location by @SethGammon in #123
• feat: skill corpus quality campaign -- /evolve director + 5-cycle improvement run by @SethGammon in #124
• feat: hook surface expansion, governance layer, benchmark infra by @SethGammon in #125
• chore: untrack internal planning docs from public OSS repo by @SethGammon in #126
• chore: update demo site stats to 45 skills / 29 hook events by @SethGammon in #127
• Expose LLM Wiki in public demo by @whorneff310 in #129
• Simplify Citadel runtime installation by @SethGammon in #130
• Normalize compatibility fixture newlines by @SethGammon in #131
• docs: simplify Citadel install onboarding by @SethGammon in #132
• docs: polish README onboarding copy by @SethGammon in #133
• docs: add Citadel demo workflow by @SethGammon in #134
• Implement competitor gap orchestration upgrades by @SethGammon in #135
• Prefer express setup in first-use operator path by @SethGammon in #141
• Add campaign truth, delivery, and PR readiness gates by @SethGammon in #136
• Add dashboard-driven next action operator by @SethGammon in #137
• Add Operator Console v1 by @SethGammon in #138
• Add stack readiness landing plan by @SethGammon in #139
• Add first-use operator journey check by @SethGammon in #140
• Document Citadel threat model by @SethGammon in #142
• Document Citadel report artifacts by @SethGammon in #144
• Document routing preview decisions by @SethGammon in #145
• Document skill and memory visibility by @SethGammon in #146
• Add route preview preflight command by @SethGammon in #148
• Document public positioning proof by @SethGammon in #150
• Add operating proof preflight by @SethGammon in #151
• Harden readiness setup checks by @SethGammon in #152
• feat: add first-class loop contracts by @SethGammon in #154
• fix: preserve loop template defaults by @SethGammon in #155
• Enable live Codex loop benchmarks by @SethGammon in #156
• fix: relax overprotective hook gates by @SethGammon in #157
• World class M0-M2: trusted safety nets, generated truth, native platform spine by @SethGammon in #159
• World class M5: skill platform hygiene by @SethGammon in #160
• Qualify plugin for codex directory listing (#158) by @SethGammon in #161
• World class M6: security hardening, M4 leftovers, code scanning zeroed by @SethGammon in #164
• fix: clear high severity scanner findings on main by @SethGammon in #165
• chore(deps): bump actions/checkout from 4.2.2 to 6.0.3 by @dependabot[bot] in #162
• chore(deps): bump hashgraph-online/ai-plugin-scanner-action from 1.2.38 to 1.2.39 by @dependabot[bot] in #163
• README and visual asset overhaul, CI tests workflow by @SethGammon in #166
• Roadmap rewrite: dashboard-first release tracks plus dashboard spec by @SethGammon in #167
• Dashboard v0.1: local web mission control, plus community surface overhaul by @SethGammon in #168
• chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #169
• chore(deps): bump hashgraph-online/ai-plugin-scanner-action from 1.2.39 to 1.2.216 by @dependabot[bot] in #170
• chore(deps): bump actions/setup-node from 4.4.0 to 6.4.0 by @dependabot[bot] in #171
• feat(skills): no-op detection pipeline for SKILL.md files by @SethGammon in #172
• feat(skills): grill + decision-map loop engines and HITL bridge by @SethGammon in #173
• feat(agents): strong-tier arbiter + tier-aware phase-validator by @SethGammon in #174
• chore(deps): bump hashgraph-online/ai-plugin-scanner-action from 1.2.216 to 1.2.293 by @dependabot[bot] in #175
• feat(mcp): codebase-memory — optional read-only orientation MCP over core/map by @SethGammon in #176
• feat(deploy-steward): mainline deploy steward with live GitHub proof by @SethGammon in #177
• docs(lab-report): 103-day lab report with real telemetry numbers by @SethGammon in #178
• chore(deps): bump hashgraph-online/ai-plugin-scanner-action from 1.2.293 to 1.2.367 by @dependabot[bot] in #179
• chore(deps): bump hashgraph-online/ai-plugin-scanner-action from 1.2.367 to 1.2.408 by @dependabot[bot] in #180
• Recruit 1.1 testers and fix Windows steward check by @SethGammon in #183
• Build Citadel 1.1 product proof foundation by @SethGammon in #181
• Fix Stop hook delivery envelope by @SethGammon in #184
• Polish Citadel 1.1 public product surface by @SethGammon in #185

New Contributors

• @leighstillard made their first contribution in #1
• @ivanmviveros made their first contribution in #16
• @RhysOnlyBetter made their first contribution in #49
• @marceloceccon made their first contribution in #64
• @whorneff310 made their first contribution in #129
• @dependabot[bot] made their first contribution in #162

Full Changelog: https://github.com/SethGammon/Citadel/commits/v1.1.0