codeArbiter 3.2.7

[3.2.7] - 2026-10-21

Fixed

• Keep ordinary uppercase instructions such as Approve DATA migration out of
  artifact reply capture unless that all-letter code belongs to a retained
  request. Genuine coded replies and mismatch protection remain intact.

• Recognize verifier authority only from the actual wrapper invocation, not
  inert PowerShell data mentioning its filename.

• Permit bounded literal read-only Python diagnostics using isolated -I
  stdin input and literal git show HEAD:<protected-path> or Path reads.
  No arbitrary script, subprocess, shell expansion or write exemption is added.

• Ordinary approval, sprint, prerequisite, and reconciliation instructions no longer enter legacy reply-code capture. Historical requests and actual host permissions retain their checks.

• Bounded literal JSON sent to the installed read-only diagnostic validator no longer triggers protected-state write guards merely by citing source paths. Ambiguous or executable shell forms remain guarded.

• Explicit staging in a multiline batch no longer borrows flags from later commands. Every staging command retains wildcard, directory, continuation, and working-directory checks.

• Explicit draft source refreshes now preserve started work and historical evidence instead of requiring an untouched initial approval pair. Source and plan revision checks and historical approval boundaries remain intact.