2026.8.17-beta.1

What's Changed

• chore(deps-dev): bump the typescript-template group across 1 directory with 3 updates by @dependabot[bot] in #160
• Ground training abstractions in reviewer and source evidence by @marccampbell in #161

Full Changelog: 2026.8.14-beta.3...2026.8.17-beta.1

2026.8.14-beta.3

What's Changed

• Use registryless local pack references by @marccampbell in #159

Full Changelog: 2026.8.14-beta.2...2026.8.14-beta.3

2026.8.14

What's Changed

• Accept legacy Depot catalog reference by @marccampbell in #156
• Add team-scoped CLI login by @marccampbell in #157

Full Changelog: 2026.8.13...2026.8.14

2026.8.14-beta.2

What's Changed

• Respect manifest names when packing by @marccampbell in #158

Full Changelog: 2026.8.14...2026.8.14-beta.2

2026.8.14-beta.1

What's Changed

• Accept legacy Depot catalog reference by @marccampbell in #156

Full Changelog: 2026.8.13...2026.8.14-beta.1

2026.8.13

What's Changed

• feat(init): scaffold docs/scope.md for factory-ready packages by @marccampbell in #102
• fix(cli): highest-semver short names + version-alias run by @marccampbell in #101
• feat(cli): adversary train from PR review history by @marccampbell in #103
• feat(cli): direct GitHub API, train without gh, PR URL run, review posting by @marccampbell in #104
• feat(train): bank human gold into agent/voice.md via apply issues by @marccampbell in #105
• feat(init): scaffold agent/voice.md for train voice banking by @marccampbell in #106
• feat(cli): reference voice.md example bank when generating PR comments by @marccampbell in #107
• feat(cli): compose adversaries via adversary.yaml uses by @marccampbell in #108
• fix(train): improve discovery and prevent issue floods by @marccampbell in #110
• chore(deps): bump github.com/santhosh-tekuri/jsonschema/v6 from 6.0.2 to 6.0.3 in the go-dependencies group by @dependabot[bot] in #111
• feat(train): always expand local uses; official jury separate by @marccampbell in #109
• Create issues directly from all-adversary train runs by @marccampbell in #113
• Generate human-written train issue briefs by @marccampbell in #114
• Ground train issue briefs in source evidence by @marccampbell in #115
• Refine source-specific train issue briefs by @marccampbell in #116
• Finalize every train issue brief with an LLM by @marccampbell in #117
• Budget train issue briefs for reasoning models by @marccampbell in #118
• Route training comments by package scope by @marccampbell in #119
• Enforce the training PR limit at result admission by @marccampbell in #120
• Require actionable corroborated training evidence by @marccampbell in #121
• Filter legacy train conversation noise by @marccampbell in #122
• Do not grade failed training reviews by @marccampbell in #123
• Reject automated training praise summaries by @marccampbell in #124
• Let the model judge singleton training evidence by @marccampbell in #125
• Deduplicate training issues by capability by @marccampbell in #126
• Cycle adversary training targets fairly by @marccampbell in #127
• Ignore review template guidance during training by @marccampbell in #128
• Require semantic overlap in training grades by @marccampbell in #129
• Replay cached training evidence on rate limits by @marccampbell in #130
• Prefer latest reviewer concerns in training by @marccampbell in #131
• Make local training execution reliable by @marccampbell in #132
• Preserve admitted training issue intent by @marccampbell in #133
• Exclude post-merge comments from training gold by @marccampbell in #134
• Skip contributor resolution replies in training by @marccampbell in #135
• Match recursive adversary file globs by @marccampbell in #136
• Filter inline children of automated reviews by @marccampbell in #137
• Retain independent training review rounds by @marccampbell in #138
• Cover pull author self-review filtering by @marccampbell in #139
• Keep dismissed train results terminal by @marccampbell in #140
• Bound train catalog discovery windows by @marccampbell in #141
• Let scope model train beyond runtime globs by @marccampbell in #144
• Report unique train result rows by @marccampbell in #146
• Preserve review thread context during training by @marccampbell in #147
• Deduplicate canonical adversary checkouts during training by @marccampbell in #149
• Reject explicitly nonlocal training gold by @marccampbell in #150
• Recognize imperative current review requests by @marccampbell in #151
• Route target-scoped training across all adversaries by @marccampbell in #152
• Match train stories to exact review comments by @marccampbell in #153
• Filter automated review training gold by @marccampbell in #154
• Keep explicit training targets isolated by @marccampbell in #155

Full Changelog: 2026.8.3...2026.8.13

Security

• Pinned scan: govulncheck v1.6.0 found zero reachable or imported-package vulnerabilities. GO-2026-5970 is present in required module golang.org/x/text@v0.14.0, but no imported or called package path reaches it; disposition: not exploitable by this release.

2026.8.7-beta.1

What's Changed

• feat(init): scaffold docs/scope.md for factory-ready packages by @marccampbell in #102
• fix(cli): highest-semver short names + version-alias run by @marccampbell in #101
• feat(cli): adversary train from PR review history by @marccampbell in #103
• feat(cli): direct GitHub API, train without gh, PR URL run, review posting by @marccampbell in #104
• feat(train): bank human gold into agent/voice.md via apply issues by @marccampbell in #105
• feat(init): scaffold agent/voice.md for train voice banking by @marccampbell in #106
• feat(cli): reference voice.md example bank when generating PR comments by @marccampbell in #107
• feat(cli): compose adversaries via adversary.yaml uses by @marccampbell in #108

Full Changelog: 2026.8.3...2026.8.7-beta.1

2026.8.3

What's Changed

• fix(cli): search/list show only latest version per name by @marccampbell in #83
• fix(cli): hide retired adversarylabs/library paths from search by @marccampbell in #84
• feat: push README/CHECKS as catalog OCI referrers by @marccampbell in #85
• fix: sanitized CLI usage reporting and pull metrics by @marccampbell in #86
• fix: trust official catalog domains for host execution by @marccampbell in #87
• feat(cli): list status installed/catalog/outdated by @marccampbell in #91
• feat(cli): remove local adversaries by name or --all by @marccampbell in #92
• fix: trust web/* catalog domain for host execution by @marccampbell in #89
• chore(deps): bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 in the go-dependencies group by @dependabot[bot] in #88
• fix: trust factory/* catalog domain by @marccampbell in #90
• feat(cli): official Ed25519 signatures for host-execution trust by @marccampbell in #94
• feat(cli): add sign-official command and make sign-dev by @marccampbell in #95
• fix(cli): untrusted adversary messaging and TTY confirm by @marccampbell in #96
• feat: local repository index for adversary navigation by @marccampbell in #97
• fix(repository): ignore leftover writeAtomic temps in journals by @marccampbell in #98
• fix(cli): send production credentials for official catalog pulls by @marccampbell in #100
• fix(cli): collapse flat↔domain packages in automatic selection by @marccampbell in #99

Full Changelog: 2026.7.30...2026.8.3

2026.8.3-beta.2

What's Changed

• fix(repository): ignore leftover writeAtomic temps in journals by @marccampbell in #98

Full Changelog: 2026.8.3-beta.1...2026.8.3-beta.2

2026.8.3-beta.1

What's Changed

• fix: trust web/* catalog domain for host execution by @marccampbell in #89
• chore(deps): bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 in the go-dependencies group by @dependabot[bot] in #88
• fix: trust factory/* catalog domain by @marccampbell in #90
• feat(cli): official Ed25519 signatures for host-execution trust by @marccampbell in #94
• feat(cli): add sign-official command and make sign-dev by @marccampbell in #95
• fix(cli): untrusted adversary messaging and TTY confirm by @marccampbell in #96
• feat: local repository index for adversary navigation by @marccampbell in #97

Full Changelog: 2026.8.1-beta.3...2026.8.3-beta.1