v1.0.15 — conductor guard + doc-accuracy
Conductor input-hardening + doc-accuracy.
- Conductor (C6) — valid-but-non-object stdin (
null/ a number / an array) no longer null-derefs; it falls back to{}so a malformed event still safely injects the contract. + a hermetic test. - SECURITY.md — pins the last actual SkillSpector scan (v1.0.8); scanning is periodic, not per-release (an unscanned version is unverified).
- Config help —
qualityBar/maxTotalAttemptstrimmed to the one-line convention;disableRoutingnotes the domain is inferred from the task + its keyword group;xhigh→max(the effort ladder is low→max). - SKILL.md —
modelTiersdocuments the array (priority-chain) form.
Update: claude plugin update coaltipple@coaltipple + restart.