docs: changelog and status for the compile-boundary audit series

[SingleSourceStudios]

Documentation-only update splitting the audit-series bookkeeping out from the merged core fixes.

What

• CHANGELOG.md: records the compile-boundary fidelity audit (Ant Newman review series) under [Unreleased] — verification.on_fail (bug(core): verification.on_fail action silently dropped by compileGateValidator — recovery semantics lost in compiled output #64), ExecutionPlan (bug(core): per-step parallel_steps / execution / join entirely absent from compiled output #65), MCP HTTP 500 (bug(mcp): HTTP transport logs but never responds to client on handler error #66), postbuild fail-loud (bug(build): cli/mcp postbuild scripts still use || true to silence schema.json copy failures #67), fixtures runner loud (bug(fixtures): run-fixtures.mjs bare catch swallows all readdirSync errors as 'directory not found' #68), fmt failure-mode tests (test(cli): fmt.test.ts asserts canonical=null without distinguishing failure modes #69), pre_output gate on_fail (bug(core): quality_gates.pre_output[].on_fail dropped from compiled output #72), the fast-uri/qs/uuid security patch (fix(deps): patch fast-uri, qs, uuid to close 7 Dependabot alerts #76), and the ROADMAP→STATUS docs swap (docs: replace stale ROADMAP with current STATUS, ignore contributor PDFs #77).
• STATUS.md: refreshes the user-facing snapshot to reflect the landed series and what is next.

No code changes. Two files only.

🤖 Generated with Claude Code

---

Summary by cubic

Docs-only update that records the compile-boundary fidelity audit in CHANGELOG and syncs STATUS with the final snapshot (all audit fixes merged, incl. #72), 482 tests on main, and fixes the Next vs Where we are mismatch.

CHANGELOG adds Unreleased items for #64 (verification.on_fail), #65 (ExecutionPlan), #66 (MCP HTTP 500), #67 (postbuild fail-loud), #68 (fixtures runner loud), #69 (fmt failure-mode tests), #72 (pre_output gate on_fail), #76 (security patches for fast-uri, qs, uuid), and #77 (ROADMAP→STATUS swap); STATUS notes #72 merged, lists remaining follow-ups (#73, #75) and perf scaling assertions (#46).

^{Written for commit f31b645. Summary will update on new commits. Review in cubic}

Summary by CodeRabbit

• Documentation

  • Updated project status and changelog with recent improvements.

• Bug Fixes

  • Enhanced error handling for HTTP transport failures.
  • Improved verification recovery handling through compilation.

• Chores

  • Updated dependency overrides for security and compatibility.
  • Updated CLI test configurations.

[coderabbitai]

📝 Walkthrough

Walkthrough

This PR updates project documentation to track recent changes and current status. CHANGELOG.md records ExecutionPlan introduction at compilation boundaries, preservation of verification recovery handling, MCP HTTP error handling improvements, dependency patches, and CLI test changes. STATUS.md refreshes the project state with current merge counts, test numbers, and updated roadmap priorities for executor integration and verification consumption.

Changes

Project Status and Changelog Documentation

Layer / File(s)	Summary
Project status and current state STATUS.md	STATUS.md header date updated to 2026-05-27, "Where we are" refreshed with newly merged PRs, core test counts on main, and PR #72 review status.
Changelog of features, fixes, and dependencies CHANGELOG.md	Unreleased section adds ExecutionPlan at compilation boundary, verification recovery through compilation as CompiledVerification, MCP HTTP structured error handling, CLI build and fixture fail-loud behavior, npm dependency patches, ROADMAP.md replacement with STATUS.md, and toCanonical failure mode pinning for CLI tests.
Recent progress and upcoming work STATUS.md	Recent section extended with PR #82 entry describing pre_output on_fail gate forwarding behavior; Next section rewritten to reflect PR #72 merge target after review, PR #70 closure, planned executor consumption of CompiledStep verification and executionPlan, and LangGraph adapter alignment.

🎯 1 (Trivial) | ⏱️ ~3 minutes

🐰 Status and changelogs dance and play,
Tracking progress through the dev day,
ExecutionPlans and verification flows,
Dependencies patched—the roadmap now shows! ✨

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Description check	❓ Inconclusive	PR description provides a clear summary and detailed explanation of changes, but does not follow the required template structure with all specified sections.	Reorganize the description to match the template: add 'Summary' section (one sentence), 'Linked issue' section, and complete the 'Spec impact' checklist and 'Checklist' sections with checkboxes.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title accurately and specifically summarizes the PR's primary change: documentation updates to CHANGELOG and STATUS for the compile-boundary audit series.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch docs/changelog-status-audit-series

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[cubic-dev-ai]

No issues found across 2 files

_{Re-trigger cubic}

[cubic-dev-ai]

1 issue found across 1 file (changes from recent commits).

<sub>Reply with feedback, questions, or to request a fix.

Re-trigger cubic</sub>