v1.1.0

Pi adopted as a first-class enforced coding-agent harness alongside Claude
Code, with honest capability reporting throughout.

Added

• Launcher & install — pi-code launcher (upstream-pi resolution,
  version gate ≥ 0.79.0, recursion guard, --no-cct/--profile/--project/--
  passthrough); scripts/setup.sh --pi; advisory pi install …@<tag>.
• Config & profiles — layered TOML config (defaults < profile < global <
  trusted project < project-local < env < cli < session), fail-closed trust
  gating (FR-004a), monotonic security floor (P7), 8 built-in profiles, and
  pi-code doctor/config/config explain/features/export/resources.
• Skills, prompts, always-context — generated from shared/; command→prompt
  conversion; always-on context bundle.
• Enforced workflow — SDD risk classification + phase state machine;
  lifecycle-event schema with honest degraded/unsupported reporting; the
  allow/ask/deny permission engine with deterministic headless resolution;
  protected paths + protected operations; peer review + verification gates.
• Agents (Slice D) — neutral agent manifests + Claude-agent importer;
  out-of-process subagent child-session runner (model/thinking/tools/isolation/
  timeout/cancel enforced); worktree manager (isolation, ownership-conflict
  detection, tamper-safe ledger, safe cleanup); worker verification + redacted
  analytics correlation; team controller (identities, single-claimant ledger,
  plan approval, controlled shutdown) + team status/synthesis/recovery.
• Durability (Slice E) — session-state checkpoint/recovery, memory promotion
  with secret controls, MCP provider, sandbox detection + fail-closed gate,
  auto-build Pi backend.
• Release & docs — Pi analytics adapter → neutral CCT format; generated
  capability compatibility matrix (shared/capabilities/COMPATIBILITY.md);
  security battery + cross-adapter contract; quickstart / configuration /
  security-model / migration / extension-development guides;
  specs/pi-harness-adoption/lessons-learned.md; CycloneDX SBOM
  (adapters/pi/sbom.cdx.json), checksums, and this changelog.

Security

• Fail-closed defaults throughout: unknown trust → untrusted; unresolved
  required gate → block; required sandbox absent → block. Secret redaction
  before persistence across memory, analytics, and team messages. Tamper-safe
  ledgers reconcile their invariants on load.

Notes — honestly degraded (not faked)

Pi lacks some native primitives; these are reported degraded/unsupported in
the capability registry, never as a fake pass: no observable Stop/compaction
event (verification/session-state gates fire at explicit CCT actions), the
runtime cannot itself create a sandbox (detects + rejects), and teams have no
live transport/UI. See shared/capabilities/COMPATIBILITY.md.