core: v3.11.0

3.11.0 (2026-06-11)

Features

• dashboard: retry once then return 409 on state-write conflicts (#1403) (ac72ed3), closes #1397
• guidelines: add guidelines list subcommand and MCP tool (#1400) (085e127), closes #1393
• security: wire the untrusted-content fence into agent-facing output (#1396) (e1599a0), closes #1372

Bug Fixes

• agents: align frontmatter tool grants with body instructions (#1395) (47d5ed2), closes #1377
• cli: parse asynchronously so bootstrap errors surface actionably (#1401) (4364c61), closes #1386
• core: stop three per-item catches from swallowing rate-limit errors (#1404) (867610c), closes #1391
• dashboard: hoist PR-list memos above early returns (Rules of Hooks) (#1384) (d03a30c), closes #1369
• dashboard: reflect SPA shelve/unshelve immediately (#1362) (37d1dc6)
• gist: surface corrupt-Gist, permission, and rate-limit errors from bootstrap (#1387) (2c6d2cd), closes #1367
• repo-vet: stop reporting rate-limited release fetches as no releases (#1390) (5939a1d), closes #1373
• state: preserve forensics and surface recovery when state.json is unparseable (#1389) (d4beadb), closes #1371
• state: surface Gist checkpoint push failures in structured output (#1388) (e4766f4), closes #1370