Citadel v1.4.3

What's Changed

• fix: repair plugin MCP paths and security boundary by @SethGammon in #302
• fix: bind config recovery commands to project root by @SethGammon in #304
• chore(deps): bump hashgraph-online/ai-plugin-scanner-action from 1.2.640 to 1.2.683 by @dependabot[bot] in #305
• fix(codex): repair MCP plugin startup by @brandstaetter in #312
• chore(codex): align plugin metadata with the shipped surface by @brandstaetter in #313
• fix: resolve reviewed runtime and campaign queue by @SethGammon in #319
• docs(skills): clarify shared config for Codex by @SethGammon in #308
• fix(opencode): route installed skill commands through delegates by @brandstaetter in #310
• fix(opencode): record task lifecycle telemetry by @brandstaetter in #311
• fix(codex): project PreToolUse output to valid hook JSON by @brandstaetter in #314
• fix(campaigns): update phase status by table headers by @brandstaetter in #315
• feat(mcp): support handshake and modern protocol revisions by @brandstaetter in #316
• fix(guidance): support native Claude AGENTS.md setup by @SethGammon in #318
• Fix campaign orchestration regressions and runtime guidance by @SethGammon in #325
• fix: accept manual exit evidence by @SethGammon in #327
• chore(deps): bump hashgraph-online/ai-plugin-scanner-action from 1.2.683 to 1.2.696 by @dependabot[bot] in #331
• feat(hooks): per-file Markdown cross-reference suppression by @brandstaetter in #330
• fix(codex): render Citadel skill hints in Codex plugin-skill syntax by @brandstaetter in #329
• fix(codex): separate plugin fallback and harden install safety by @SethGammon in #333
• fix(skills): replace missing campaign propagation command by @SethGammon in #335
• fix(tests): ignore an inherited CITADEL_RUNTIME in runtime detection tests by @brandstaetter in #339
• fix(hooks): stop counting unknown intake statuses as pending by @brandstaetter in #338
• feat(guidance): prefer AGENTS.md as project guidance by @brandstaetter in #340
• chore(deps): bump hashgraph-online/ai-plugin-scanner-action from 1.2.696 to 1.2.767 by @dependabot[bot] in #337
• test(config): accept shell-quoted script path in activation approval by @brandstaetter in #342
• feat(quality-gate): waive single cross-reference findings via .citadelignore by @brandstaetter in #343
• fix(hooks): make isolated worktrees usable under Citadel by @brandstaetter in #341
• fix(config): keep one effective-config receipt per runtime by @brandstaetter in #344
• fix(quality-gate): stop the gate from flagging its own rules by @brandstaetter in #345
• test: keep hook telemetry out of the checkout running the tests by @brandstaetter in #346
• fix(hooks): allow Claude Code plan-mode plan files in protect-files by @brandstaetter in #347
• fix(validation): unify skill contracts, frontmatter and performance checks by @brandstaetter in #348
• Preserve bounded execution and verification evidence across Citadel workflows by @SethGammon in #353

Full Changelog: v1.4.2...v1.4.3