package.json reads 0.11.1, and config.js's RUNNER_VERSION is held equal to it. The Action pins in README.md and docs/index.html are @v0.11.1, the plugin's pin in plugin/driftproof/.claude-plugin/plugin.json is 0.11.1, and so is the minimum in plugin/driftproof/version-guard.json. package-lock.json moves with them, and tests/fixtures/export-summary.snapshot.json's receipt_hash is re-cut because runner_version is inside the canonical receipt that hash is taken over.
No verdict, receipt field or published figure changes. The receipt spec stays at v0.7. The one file the npm package carries that differs from 0.11.0 is lib/hygiene.js (below). Everything else in this release is the site, or the repository's own gates.
What this release contains
- The site's visual pass (spec 038). The site keeps its words and changes how it looks. Pages are set on a paper ground with a faint texture, records sit on receipt stock, and the verdict stamp is tilted slightly, with no animation. Headings are set in Newsreader, body text in Alegreya Sans and code in Courier Prime, all self-hosted. The band plot is drawn in ink, with a graticule, tabular numerals and each arm's mean printed on its band. The plots on the homepage receipt card, every receipt page, the report cards and the methodology page's floor figure are inlined into the page instead of loaded as images, so they take the page's fonts. Each one is the generated file's own bytes and keeps the accessible name its image had. The playground draws the same plot, and the share cards follow the new palette. No copy changes, no script is added, and the sitemap's URL set is unchanged. It was approved with findings on
9a11045, and the two findings on its own gate were closed ondevunder A-038-8. - Two site fixes from spec 025 (A-025-21). The homepage hero's Range row prints each value to three decimals, matching the delta display, so it stays on one line.
stats.jsonkeeps the receipt's full precision. The render check now clicks the playground's own "point" toggle to read the point outline, rather than relying on the default view's data to draw one. - The hygiene scan reads a PNG's text, not its pixels (spec 038 A-038-5, A-038-7).
lib/hygiene.jsscans a PNG as every chunk exceptIDAT, and reads compressed text chunks in the encoding they carry text in. It fails closed on bytes afterIENDand on a truncated file. A pattern that appears only in compressed pixel data no longer reads as a disclosure. A name rendered into a screenshot is pixels, and no byte scan sees that, before or after this change. The repository gate andscripts/merge-check.jsboth call it. - The repository's scope checks read a merged spec on
dev(spec 037 A-037-7). A shared helper resolves a spec's range from the merge that brought its Tip in. Specs 034, 036, 037 and 038 read their NFR-1 through it. This is repository process, and the published tree does not carry it. - Report 009's draft (spec 034 A-034-7). The draft page is re-rendered from its renderer and picks up spec 038's
<head>. Its body did not change. The draft is not published. - The v0.11.0 record. The v0.11.0 entry's Published section and the Pages deployment it records, written after that publish, are part of this tree.
Published
driftproof@0.11.1 is on npm, published 2026-09-18 from the public clone at the v0.11.1 tag, latest. The public repository's v0.11.1 tag points at 8f5879a, built from source commit 4ef3ad3f. GitHub Pages deployed that commit: pages-build-deployment run #39 on 8f5879a reached success, and the live site serves the redesign. The post-publish checks (npm gitHead against the public commit, the clean-runner gate on a depth-1 clone of the tag, spec 028 NFR-7 and spec 031 AC-1 and AC-2 against the published package) are recorded in RELEASES.md once they have run.
Known open
- Three sibling gates were red at the release commit for reasons that predate this release, all gate-side: spec 030 (its fixture predates the 0.11.0 verdict change), spec 026 AC-16 (archived verdicts moved under specs 035 and 036), and spec 033 (it still measures from its 0.10.2 base). None touches shipped code; the shipped package differs from 0.11.0 in
lib/hygiene.jsonly. Recorded inDECISIONS.mdon 2026-09-18 as a deliberate deviation; each is owed as its own fix loop. - Everything the findings page lists as open, carried from v0.11.0.