v0.13.1-beta — MAF 1.11.1 + injectable clock + red-team docs + repro sample

Maintenance release

On top of v0.13.0-beta's judge-primary grading flip. No grader-behaviour changes — judge-primary Composite Judges shipped in 0.13.0-beta and are unchanged here.

Dependencies — Microsoft Agent Framework 1.11.1

• MAF 1.10.0 → 1.11.1 (Microsoft.Agents.AI + .OpenAI + .Workflows + .Workflows.Generators). No source changes required — the full net8.0 suite passes unchanged and maf-doctor grades the tree clean of anti-pattern errors/warnings.
• Microsoft.Extensions.AI* stays at 10.6.0 (MAF 1.11.1's declared dependency); the OpenTelemetry.Api 1.15.3 security pin (GHSA-g94r-2vxg-569j) remains valid.

Added

• ScanOptions.TimeProvider — an injectable TimeProvider for TurnOrchestrator timing, enabling deterministic multi-turn timeout/duration tests (FakeTimeProvider).
• AgentEval.SampleGraders --head-to-head — scores a gold-set with the keyword oracle, a single judge, a generic composite, and the production task-specific decomposition on the same cases/judge (paper / reproducibility companion).

Changed

• Red-team docs (README + docs/redteam-whats-new.md) now headline judge-primary grading + Composite Judges; public docs were made version-agnostic, with pinned versions centralized in Directory.Packages.props + CHANGELOG.

Fixed

• Flaky net8.0/Windows CI timing tests (TurnOrchestrator now uses the injectable clock); XML-doc warning cleanup; CHANGELOG reference-link backfill.

Dependencies (routine)

• GitHub Actions group (2) + actions/cache 5 → 6; react-router 7.15.0 → 7.18.0 (Mission Control SPA).

NuGet: AgentEval and AgentEval.Cli 0.13.1-beta.

Full details: CHANGELOG · ADR-021→024.