v0.13.0

0.13.0 (2026-07-19)

Features

• review: adjudicate schema requires invariant+attack; add ATTACK_SCHEMA + lint guard (cb6a394)
• review: fix-completeness adjudication — invariant+attack method, red-team pass for resolved Crit/High priors (34c5253)

Bug Fixes

• review: canonicalize prior-ledger severity for the verdict path, preserve identifiers in prompt fields, persist sources for strict re-review escalation (9b14d67)
• review: guard model-authored fields in the round-1 verifyPrompt (873f8dd)
• review: harden adjudicate track — demote contradictory resolved+attack, audit red-team death, reject empty-attack defeat, bound attack text (bc5dd1b)
• review: sanitize all adjudicate-track text, audit every degraded verdict, harden why bookkeeping (0733b07)
• review: sanitize model-authored fields at all three adjudicate prompt sites; cover still-open path; reconcile baseWhy comment (ea44ad7)
• review: shq/flatten all model-authored refs into shell + prompts (round 3b) (af29dc5)
• review: single-quote shell args in the carry-check git diff, validate ledger head (f207a14)
• review: stop baseWhy residue accreting when attack text echoes a marker (6c11987)
• review: strip new why-suffixes in baseWhy, flatten file/severity into prompts, audit carry-death, case-insensitive severity gate (363e76a)