orchestrator: v0.13.0

0.13.0 (2026-06-10)

Features

• orchestrator: AISDLC-465 RFC-0018 Phase 1 journeys[] schema + limits + inheritance validator (#824) (c8f449a)
• orchestrator: AISDLC-489 refactor 3 §13 rules into Tessellation13Registry (467 AC#3 follow-up) (#825) (0becfd2)
• orchestrator: config-driven source-control adapter (AISDLC-530) (#889) (f4b5e8b)
• orchestrator: franc-based language gate + multi-lang opt-in (AISDLC-431) (#756) (745a238)
• orchestrator: rfc-0018 phase 2 journey-scoped admission scorer (AISDLC-466) (#802) (7e1c9a9)
• orchestrator: runner-registry consultation + --runner/AI_SDLC_RUNNER_PLUGIN seam (AISDLC-529) (#888) (30812ea)
• orchestrator: ship §13 rule registry + journey-state-id drift rule (AISDLC-467) (#803) (00550fd)
• RFC-0028 Phase 3 — structural + statistical drift composition wiring (AISDLC-454) (#798) (744d566)

Bug Fixes

• harden 17 ReDoS-prone regexes (CodeQL js/polynomial-redos) (#820) (070864e)
• orchestrator: actionable error for schema-invalid resource configs (AISDLC-528) (#887) (b78b609)
• orchestrator: guard validate-config against null/non-resource docs (#885) (ad36793)
• orchestrator: harden pipeline for local-only repos (AISDLC-527) (#886) (fa025bb)
• security: harden command-injection sites (CodeQL js/shell-command-constructed-from-input) (#812) (be944e9)

Dependencies

• The following workspace dependencies were updated
  • dependencies
    • @ai-sdlc/reference bumped to 0.13.0