v0.5.0

[0.5.0] - 2026-06-27

Bug Fixes

• (PI-296) Preserve hand-edited config.yaml on re-scaffold (#345)
• (PI-360) MacOS bash-3.2/BSD breakage in always-on hooks (mapfile, sha256sum) (#375)
• (PI-361) Route all Python invocations through a canonical _py.sh resolver (#376)
• (PI-396) Refresh multi-model CCR config — current model IDs, Gemini provider, gateway/LiteLLM (#400)
• (PI-394) Run prod_guard on non-Claude surfaces — destructive-command guard was Claude-only (#401)
• Codex review follow-ups — prod_guard fail-open, stale doc refs, cross-surface test coverage (#414)
• (PI-441) Harden CI-gate + start_issue key/draft-PR in lifecycle scripts (#446)
• (PI-440) Render full observability HTML report + robust token parsing (#445)
• (PI-442) Close command-guard CWD/refspec holes; mark codex hook advisory (#447)
• (PI-443) Antigravity serverUrl MCP, upgrade LF newlines, advisory IaC gate (#448)
• (PI-444) Align README AGENTS/CLAUDE direction with output; gate GEMINI INDEX link (#449)
• Remove stray link file committed by accident in #465 (#468)
• Stop scaffold from leaking template pycache/*.pyc into projects (#487)
• (PI-488) Guard OpenTofu (tofu) in prod_guard deny-table (#489)
• Model bare gh pr view --json number in live_test stub (#490)
• (PI-491) Ship the base plan skill to non-Claude surfaces (#492)
• (PI-516) Harden scaffolder bad-paths found in e2e sweep (#517)
• (PI-518) Node/go gitignore + gate docs/ tree on --no-docs (#519)

Documentation

• (PI-254) Enterprise GitHub compatibility support matrix (#260)
• (PI-246) ADR-013 distribution & governance model (three profiles) (#261)
• (PI-256) Org fork lifecycle runbook skeleton (#262)
• (PI-270) Measurement methodology + metric taxonomy (#293)
• (PI-299) ADR-014 environment promotion-chain branch model (#300)
• (PI-311) Operator branch-model note + skill/copilot cross-refs (#312)
• (PI-317) ADR-015 env/deploy model + operator decision guide (#331)
• (PI-328) Document delivery/deploy/iac flags in README + consistency test (#342)
• (PI-350) ADR-016 model-agnostic switching via CCR (#357)
• (PI-353) Model-switching user guide (providers, Ollama list, caveats) (#370)
• (PI-367) Local-vs-cloud enforcement boundary + surface support matrix (#383)
• (PI-384) Add mobile/remote dev-access guide (Remote Control + tmux fallback) (#393)
• (PI-413) ADR-018 — AI-governance overlay (#417)
• (PI-407) Observability guides + ADR-019 (Track A closeout) (#422)
• (PI-467) ADR-021 — quality vs lifecycle tier boundary (spike) (#474)
• (PI-471) ADR-022 — toolchain gate map (keep conditionals, no overlays) (#475)
• (PI-478) Add ADR-024 memory-tier model (#499)
• (PI-479) Add ADR-025 agentic-OS root-layer spike + design note (#507)
• (PI-512) Aggregate-by-tier + connection/transport model for agentic-os (#513)
• Deploy MkDocs Material site to GitHub Pages (#481)

Features

• (PI-255) Enterprise GitHub host support (#263)
• (PI-247) Distribution profile (individual/standalone/org) (#264)
• (PI-248) Host-aware marketplace source + version-record fields (#265)
• (PI-259) Local observability record (#266)
• (PI-258) Org no-egress mode (#267)
• (PI-249) Opt-in consent for new additions during upgrade (#288)
• (PI-250) Pull-and-recommend (version-span + recommendations) (#289)
• (PI-251) Hybrid enforcement (org hard layer binds) (#290)
• (PI-252) Company preset authoring (inheritance + generator) (#291)
• (PI-257) Org fork lifecycle end-to-end + release plumbing (#292)
• (PI-242) Guard upgrade --apply on a dirty git tree + undo hint (#294)
• (PI-243) Config-driven preserve list (#295)
• (PI-301) Wizard --branch-model option + config branch_model block (#302)
• (PI-303) Config-driven base branch in the shared lifecycle (#304)
• (PI-305) Promote-env fast-forward promotion command (#306)
• (PI-307) Setup_env_branches.sh — create + protect the promotion chain (#308)
• (PI-309) Retarget scaffolded CI/PR-validation to base branch + promote-env --no-verify (#310)
• (PI-313) Epic-sizing guidance — keep child tickets small (#314)
• (PI-318) Delivery-model wizard question + config field (#332)
• (PI-319) Container parity bundle for delivery=service (#333)
• (PI-320) CI build-once image job for delivery=service (#334)
• (PI-321) Document agent production-ref boundary in github_workflow skill (#335)
• (PI-322) Library release workflow (publish disabled by default) (#336)
• (PI-323) Opt-in deploy overlay — GitHub Environments, build-once-by-digest (#337)
• (PI-324) Tiered prod gate + setup_env_protection.sh + whats_deployed.sh (#338)
• (PI-325) Opt-in IaC overlay — OpenTofu/HCL skeleton, gated apply (#339)
• (PI-326) Cloud-integration seam — OIDC + env contract (#340)
• (PI-240) 3-way auto-merge for upgrade conflicts (#346)
• (PI-245) Per-file interactive apply for upgrade (#347)
• (PI-241) Upgrade-as-a-PR workflow (#348)
• (PI-244) Surface changelog/migration notes during upgrade (#349)
• (PI-351) CCR multi-model overlay — config + setup_models.sh installer (#368)
• (PI-352) Init-step messaging for the multi-model wizard prompt (#369)
• (PI-358) Day-2 models helper — add/switch/remove models after setup (#371)
• (PI-356) Scheduled third-party update + security-review task (#373)
• (PI-366) Emit multi-surface MCP + hooks config from a canonical source (#381)
• (PI-374) Generate an agnostic capabilities inventory (#382)
• (PI-395) Ship reusable subagent specs (code-reviewer, explore) + refresh agents README (#402)
• (PI-397) Add Amp + JetBrains Junie MCP surfaces + HTTP/streamable catalog entry (#408)
• (PI-410) Governance overlay foundation + usage-track docs (#415)
• (PI-412) Governance product track — system card + AIBOM + CI gate (#416)
• (PI-404) --observability flag plumbing + upgrade round-trip (#419)
• (PI-405) Observability analyzer + report (usage_report.py + observability.sh) (#420)
• (PI-406) Guarded hook self-log (_usage_log.sh + prod_guard.py) (#421)
• (PI-271) Benchmark collection harness (tools/benchmark/) (#423)
• (PI-272) Latency & cost capture (prices.py + latency.py) (#424)
• (PI-273) Accuracy/task-success scoring (scoring.py) (#425)
• (PI-275) Cost-benefit Pareto report (report.py) (#426)
• (PI-466) Make memory backend à-la-carte (memory=none, core preset) (#473)
• (PI-476) Extract GitHub lifecycle into an opt-out --lifecycle overlay (#482)
• (PI-477) Add a docs axis and gate renovate.json (#483)
• (PI-472) Self-explaining wizard standard with a coverage test (#484)
• (PI-497) Split memory/ from vault/ into an auto tier + staleness lint (#501)
• (PI-496) Add a low-token code-map for agents (documentation axis) (#502)
• (PI-498) Standardize the cross-project memory descriptor (#503)
• (PI-505) Add tier-3 RAG opt-in seam — docs, setup stub, descriptor (#506)
• (PI-498) Finish the Agentic-OS memory descriptor contract (#508)
• (PI-510) Add --json output for orchestrator-driven scaffolding (#511)
• (PI-495) Wire tier-3 RAG engine (cocoindex-code, keyless on-device) (#514)

Miscellaneous Tasks

• Gitignore mkdocs site/ and plan scratch (#297)
• (PI-329) Remove branch-per-env; extract shared base-branch protection (#330)
• (PI-343) Drop GitHub Pages docs-site auto-deploy (#344)
• (PI-354) De-hardcode Anthropic model IDs in skill/agent doc examples (#372)
• (PI-362) Shell portability hardening sweep (jq, .gitattributes, stat, shebangs, gh guards, engine LF) (#377)
• (PI-365) Non-CLI surface capability matrix (spike) (#379)
• (PI-364) ADR-017 — canonical hook/MCP spec → per-surface generator (#380)
• (PI-388) Migrate hooks to documented PreToolUse decision schema + Codex MCP secret passthrough (#389)
• (PI-387) Remove postgres + sqlite DB MCP entries (#390)
• (PI-386) Retire dead Gemini-CLI overlay; make Antigravity the Google surface (#391)
• (PI-385) Fix GUI-surface hook stdin parsing + deny shapes (Cursor, Antigravity) (#392)
• (PI-399) Post-PI-386 hygiene — reconcile stale Gemini doc bodies (#409)
• Remove merged PLAN-276 governance working artifacts (#418)
• (PI-450) Remove redundant GEMINI.md redirect; clarify .claude/ vs per-surface wiring (#451)
• (PI-452) Benchmark harness supports Claude subscription auth (#453)
• (PI-454) Verify current schema in add_hook/add_command; fix stale dev copy (#455)
• (PI-456) Fix skill/command/hook audit findings (fabricated APIs, deprecated schema, legacy drift) (#457)
• (PI-458) Finish_pr verifies branch matches PR head before pushing (#459)
• (PI-460) Add /live_test agent-driven live E2E command for the scaffolder (#461)
• (PI-463) Pin shell:bash on hooks + document Git for Windows + add Windows CI (#464)
• (PI-462) Make plugin-mode scaffold docs mode-aware + fix ADR path (#465)
• (PI-493) Gate cross-stack examples by language/cloud (#494)
• Remove LightRAG residue (ADR-024) (#504)
• Release 0.5.0 (#520)

Testing

• (PI-327) Lock config.yaml env schema + upgrade backfill/normalization (#341)
• (PI-363) Cross-platform portability regression tests + macOS CI runner (#378)
• Add a combination-matrix smoke test (#485)
• Enforce the cross-path variable contract globally (#486)