v1.5.0

Summary

New optional key protect_instruction_files. With true, K6 and the hook protect the instruction files of the harness in any folder (D87), and check K22 tests their text (D89). New command stone check-dependencies (K23) warns on a new package that the PR body does not name (D90). New optional key framework_commit. G3 installs stone from that commit, and PyYAML from a list of hashes (D92). New command stone check-workflows (K24) warns on an unpinned tool in a changed workflow (D93). Generated YAML and Markdown pass a formatter check with default options, the drift check ignores a change of form only, and the new option stone gate --split-checks gives each command of all_checks its own row (D96). stone eval can run a trigger workflow, with a fake forge CLI for the post job (D101).

Config changes

• Added protect_instruction_files (default: false): true adds the instruction files of the harness to the protected paths of K6 and the hook (D87).
• Added instruction_text (default: none): hosts and packages that K22 allows in an instruction file (D89).
• Added framework_commit (default: none): the commit SHA of the tag v<framework_version>. stone upgrade --apply sets it. G3 installs stone from it (D92).

Steps

1. Optional: set protect_instruction_files to true in .cornerstone/config.yaml. Commit the config change alone, with the trailer Role human.
2. Then run stone render. Commit the generated files alone, with the trailers Role generator and Actor agent.
3. stone upgrade --apply sets framework_commit. Check in the config diff that it is the commit of the tag v1.5.0.

Full changes: #246