v0.1.0-beta.4 - CodeQL HIGH fix

CodeQL HIGH fix: js/file-system-race on ensureSelfIgnore is now an exclusive create (wx flag) - no exists-then-write TOCTOU. The idempotent write made the race harmless anyway; this silences the HIGH. Also: the file-system-race on the advisory lock (compare-after-write, by design) and Scorecard posture findings are dismissed-with-reason.

v0.1.0-beta.3 - config trust-boundary + honesty

Second CoalBoard dogfood pass (full mirror, nasa) — the config trust-boundary and two honesty over-claims.

• [MED] an untrusted project config could weaken a global safety/privacy choice. The two-level cascade let a cloned repo's config flip a user's global localOnly:true to false, or a global off back on. Safety-shaping keys now merge monotonically (safer-value-wins): localOnly is OR'd, and mode/updateMode may only move toward the safer end. This preserves "shut off per project" (off is the safe end, always allowed) while closing the hole. +4 regression tests.
• [MED honesty] "zero fact-loss proven by code" scoped to STRUCTURED tokens (a prose fact rests on the semantic reviewers + you — what the module already says).
• [MED honesty] localOnly reworded from an absolute code guarantee to the mode the contract runs, with the flag now merge-protected.

v0.1.0-beta.2 - CoalBoard dogfood hardening

Launch-day CoalBoard dogfood hardening (nasa rigor, 3 opus blind lenses + judge). The three lenses returned DISJOINT findings - the sampler + correlated-blind-spot doctrine working. Fixed 3 HIGH (recovery-path containment + delete-gate bypass, lock double-holder + unowned release, create-orphan-on-crash), 4 MED (fidelity interlock at the mutation boundary, fidelity link/URL coverage + reformat false-blocks, isPinned fail-closed, unbounded rules walk), 3 LOW. +6 regression tests (92 -> 98). Full detail: CHANGELOG.md

v0.1.0-beta.1 - initial public beta

Initial public beta of the 6th Colliery sibling: a memory washer/defragmenter for agent class-B memory (memory + governance files) - cleans the FAT, never the MEAT. Code-enforced zero-fact-loss fidelity gate; every DELETE/MERGE human-gated in code (pinned files untouchable); transactional apply (snapshot + write-ahead journal + rollback); the 4-band session-start gauge whose FULL band force-runs ONLY on a deterministic break-even proof with the numbers shown. 92 hermetic tests; adversarially reviewed pre-launch. Install: claude plugin marketplace add TheColliery/CoalWash then claude plugin install coalwash@coalwash