v0.5.0

What's Changed

• test: add agent evaluation contracts by @isukharev in #394
• test: add safe headless agent runners by @isukharev in #396
• fix: pin supported Codex benchmark model by @isukharev in #399
• fix: fail closed on unsupported agent runners by @isukharev in #401
• test: benchmark bounded agent delegation by @isukharev in #402
• feat: add offline agent capability catalog by @isukharev in #404
• test: benchmark quarterly portfolio evidence by @isukharev in #406
• feat: add typed read-only MCP evidence tools by @isukharev in #408
• test: compare Claude CLI and MCP evidence routes by @isukharev in #411
• feat: add resumable complete Confluence pulls by @isukharev in #413
• feat: define package update ownership and egress by @isukharev in #415
• feat: bound Confluence pull scheduling by @isukharev in #417
• feat: add qualitative agent answer review by @isukharev in #421
• test: expand Confluence agent evaluations by @isukharev in #422
• feat: add guarded private-live agent evaluation by @isukharev in #424
• feat: add private evaluation credential gateway by @isukharev in #432
• feat: enforce exact private CLI evaluation policies by @isukharev in #433
• feat: isolate private CLI agent evaluations by @isukharev in #434
• feat: compare private CLI and MCP evaluations by @isukharev in #439
• docs: stop redundant Jira evidence reads by @isukharev in #440
• feat: attribute agent context by capability family by @isukharev in #442
• fix: allow bounded multi-file skill reads by @isukharev in #445
• feat: add bounded Jira field evidence by @isukharev in #446
• feat: confine Codex CLI benchmark egress by @isukharev in #447
• feat: qualify Jira field catalog completeness by @isukharev in #448
• feat: qualify cross-service topic discovery by @isukharev in #450
• feat: add qualified Confluence MCP search by @isukharev in #452
• test: benchmark offline Confluence mirror review by @isukharev in #455
• feat: compact Confluence diff review output by @isukharev in #457
• refactor: compact Confluence skill context by @isukharev in #459
• refactor: compact Jira skill context by @isukharev in #461
• feat: benchmark guarded Jira field mutation by @isukharev in #463
• test: benchmark guarded Confluence plans by @isukharev in #466
• test: add multi-surface agent evaluation contracts by @isukharev in #471
• feat: isolate external MCP benchmark credentials by @isukharev in #472
• fix: stabilize external MCP catalog identity by @isukharev in #474
• feat: add realistic multi-surface agent evaluations by @isukharev in #475
• feat: add private agent benchmark lifecycle by @isukharev in #477
• fix: keep private Codex on reviewed CLI shim by @isukharev in #480
• fix: validate private agent snapshots before consent by @isukharev in #481
• fix: require evidence retrieval in private CLI runs by @isukharev in #483
• fix: isolate Codex benchmark runtime state by @isukharev in #485
• fix: isolate reviewed Codex benchmark tools by @isukharev in #487
• fix: expose reviewed shell route in private cli evals by @isukharev in #489
• fix: route private cli evals through codex skills by @isukharev in #491
• fix: route private cli skills by capability by @isukharev in #493
• feat: add blinded qualitative review panels by @isukharev in #495
• fix: isolate qualitative assessment violations by @isukharev in #497
• feat: benchmark installed Codex plugin skills by @isukharev in #499
• fix: anchor private skill reads to workspace by @isukharev in #501
• fix: bind private Codex hook policy by @isukharev in #503
• feat: distinguish benchmark skill activation by @isukharev in #505
• feat: model complete skill activation treatments by @isukharev in #510
• docs: define context-efficient agent orchestration by @isukharev in #512
• feat: add review-bound activation studies by @isukharev in #513
• feat: make agent skill discovery deterministic by @isukharev in #514
• fix: bind Codex skill inventory to installed root by @isukharev in #516
• feat: calibrate private skill activation studies by @isukharev in #518
• fix: bound activation calibration timeout by @isukharev in #520
• fix: type calibration response schema by @isukharev in #522
• fix: ground activation calibration output by @isukharev in #524
• docs: tighten private evaluation workflow guidance by @isukharev in #527
• feat: qualify Codex CLI tool availability by @isukharev in #528
• fix: preserve Codex sandbox helper in private runtime by @isukharev in #530
• fix: initialize activation output before calibration by @isukharev in #532
• fix: qualify Codex code-mode tool inventory by @isukharev in #535
• feat: automate no-tools panel reviewers by @isukharev in #537
• test: move Claude corpus to Opus 4.8 high by @isukharev in #539
• feat: add reviewed private workspace migration by @isukharev in #541
• feat: add paginated Confluence benchmark by @isukharev in #543
• feat: add deep Structure value benchmark by @isukharev in #545
• feat: add replay-safe worklog benchmark by @isukharev in #547
• fix: bound Claude benchmark result reads by @isukharev in #549
• fix: guide Claude staged result paging by @isukharev in #551
• feat: add content-free table summaries by @isukharev in #553
• fix: classify Jira reference capability metrics by @isukharev in #559
• fix: pin confined CLI working directory by @isukharev in #562
• feat: support Codex synthetic mutation benchmarks by @isukharev in #564
• feat: add refusal and amplification benchmarks by @isukharev in #566
• fix: preserve legacy calibration inspection by @isukharev in #568
• feat: validate generated workspace artifacts by @isukharev in #570
• fix: project provider response schemas safely by @isukharev in #572
• fix: classify Jira planning telemetry by @isukharev in #574
• fix: infer Codex scalar const types by @isukharev in #576
• fix: classify Jira board discovery by @isukharev in #578
• fix: classify Structure read capabilities by @isukharev in #580
• fix: classify evidence read capabilities by @isukharev in #582
• fix: classify remaining live read routes by @isukharev in #584
• fix: avoid duplicate Jira image metadata fetch by @isukharev in #586
• fix: classify Jira board read telemetry by @isukharev in #588
• fix: classify mirror read telemetry by @isukharev in #590
• fix: skip mirror state during Jira render by @isukharev in #592
• feat: add reviewed private live writes by @isukharev in #594
• fix: preserve legacy activation workspace health by @isukharev in #596
• fix: allow quoted structured write arguments by @isukharev in #598
• fix: exclude provider env probes from eval metrics by @isukharev in #600
• feat: partition exact live routes by method by @isukharev in #602
• feat: add exact CLI refusal oracle by @isukharev in #604
• fix: honor single-stack gateway resolution by @isukharev in #606
• fix: preserve reviewed Confluence XSRF token by @isukharev in #608
• fix: proxy reviewed same-origin resource URLs by @isukharev in #610
• fix: route signed origin-root resource URLs by @isukharev in #611
• fix: project reviewed write capability into Codex shells by @isukharev in #613
• test: clarify Structure and table benchmark contracts by @isukharev in #615
• test: cover mutation outcome parity by @isukharev in #617
• fix: normalize external MCP denials by @isukharev in #619
• test: add Codex injection parity by @isukharev in #621
• feat: add deterministic Jira history summary by @isukharev in #623
• feat: add reconciled Jira reference aggregates by @isukharev in #625
• feat: expand Confluence table summary metrics by @isukharev in #627
• feat: add Confluence mirror snapshot by @isukharev in #629
• feat: add Jira mirror snapshot by @isukharev in #631
• feat: add private finding scorecard by @isukharev in #633
• feat: add immutable private daily checkpoints by @isukharev in #635
• feat: add tiered private sampling evidence by @isukharev in #637
• feat: bind fixed findings to sampling evidence by @isukharev in #639
• feat: add bounded Confluence table MCP tools by @isukharev in #641
• test: add paired Confluence table MCP benchmarks by @isukharev in #643
• fix: separate MCP and schema output budgets by @isukharev in #645
• test: add Confluence table MCP holdouts by @isukharev in #647
• fix: clarify Confluence table cell text by @isukharev in #649
• fix: restrict Claude MCP tool inventory by @isukharev in #651
• feat: add bounded Jira Structure MCP tools by @isukharev in #653
• feat: clarify Jira history identity summary by @isukharev in #655
• test: add Jira Structure MCP holdout benchmark by @isukharev in #657
• fix: isolate synthetic typed MCP instructions by @isukharev in #659
• fix: align Structure values transport budget by @isukharev in #661
• fix: clarify Codex skill activation prompt by @isukharev in #663
• feat: add bounded mirror snapshot MCP tools by @isukharev in #665
• test: cover mirror snapshot MCP benchmarks by @isukharev in #667
• feat: aggregate marked synthetic benchmark roots by @isukharev in #669
• feat: bind synthetic runs to prompt contracts by @isukharev in #671
• feat: attest synthetic benchmark runs by @isukharev in #674
• feat: assess attested synthetic benchmark roots by @isukharev in #677
• feat: link synthetic sampling to findings by @isukharev in #681
• feat: add Jira history summary-only projection by @isukharev in #685
• fix: reject false Jira history summary flag by @isukharev in #687
• test: cover Jira history summaries by @isukharev in #683
• fix: align history benchmark skill activation by @isukharev in #689
• fix: align history holdout execution identity by @isukharev in #691
• feat: support synthetic-only finding chains by @isukharev in #693
• fix: attest runner executable transitions by @isukharev in #695
• fix: allow multi-link finding checkpoints by @isukharev in #697
• test: cover Jira reference summaries by @isukharev in #699
• test: cover Jira portfolio discovery by @isukharev in #701
• fix: align Structure read transport budget by @isukharev in #703
• fix: preserve Structure read-only state by @isukharev in #705
• fix: preserve Structure folder identity fields by @isukharev in #707
• fix: reconcile benchmark skill digests by @isukharev in #709
• feat: bind findings to regression holdouts by @isukharev in #711
• test: pair Confluence page evidence cohorts by @isukharev in #713
• test: pair paginated Confluence search cohorts by @isukharev in #715
• fix: bind holdout to repeated leaf provenance by @isukharev in #717
• test: attest cross-service MCP discovery by @isukharev in #719
• test: preserve qualified benchmark evidence by @isukharev in #721
• test: normalize optional limit punctuation by @isukharev in #722
• test: attest single-call MCP arguments by @isukharev in #724
• feat: index accepted benchmark coverage by @isukharev in #726
• test: attest multi-call Confluence MCP arguments by @isukharev in #728
• test: add held-out Jira portfolio MCP cohort by @isukharev in #730
• test: cover live read-only MCP fixtures by @isukharev in #732
• fix: redact MCP backend URL errors by @isukharev in #734
• fix: align mirror snapshot failure handling by @isukharev in #739
• feat: bound Jira MCP evidence outputs by @isukharev in #740
• fix: bound value-selected Structure roots by @isukharev in #741
• fix: fail closed on live gateway audit gaps by @isukharev in #742
• fix: accept current Claude review probe by @isukharev in #744
• fix: parse current Claude MCP success by @isukharev in #746
• fix: preserve Jira image attachment fallback by @isukharev in #748
• feat: accept Jira search fields alias by @isukharev in #750
• fix: coordinate mirror snapshots with mutations by @isukharev in #752
• fix: clarify Jira search MCP field selection by @isukharev in #754
• feat: accept Jira search projection alias by @isukharev in #756
• fix: accept canonical string Structure ids by @isukharev in #758
• feat: add reconciled table extract metrics by @isukharev in #760
• feat: add compact Jira field catalog summaries by @isukharev in #762
• feat: summarize Jira field inventory by @isukharev in #764
• feat: index typed private benchmark coverage by @isukharev in #766
• fix: emit empty Confluence attachments as an array by @isukharev in #768
• fix: admit command-prefixed skill reads by @isukharev in #770
• test: accept equivalent MCP routes by @isukharev in #772
• test: define exact benchmark topic contract by @isukharev in #774
• feat: add deterministic Jira board epic rollups by @isukharev in #776
• test: consume epic rollups in portfolio evaluation by @isukharev in #778
• test: cover Jira Structure metadata qualification by @isukharev in #780
• fix: retain budget failure metrics by @isukharev in #782
• fix: honor Jira search page sizes by @isukharev in #784
• test: cover paginated Jira issue search by @isukharev in #786
• fix: enforce Codex strict response schemas by @isukharev in #788
• test: cover paginated Jira board membership by @isukharev in #790
• test: qualify incomplete Jira board snapshots by @isukharev in #792
• test: inventory typed MCP coverage by @isukharev in #794
• test: stabilize gateway shutdown assertion by @isukharev in #796
• fix: bound Confluence MCP search output by @isukharev in #799
• test: qualify partial cross-service authorization by @isukharev in #800
• fix: make partial authorization oracle semantic by @isukharev in #802
• test: qualify stale Confluence evidence by @isukharev in #804
• fix: classify exhausted backend rate limits by @isukharev in #806
• test: qualify exhausted read rate limits by @isukharev in #808
• fix: classify selected output limit failures by @isukharev in #810
• test: qualify selected output limit rejections by @isukharev in #812
• docs: define delegated worker boundaries by @isukharev in #814
• fix: distinguish Confluence table selection errors by @isukharev in #817
• test: cover Confluence table selection recovery by @isukharev in #818
• fix: distinguish Confluence section selection by @isukharev in #820
• test: cover zero-progress Jira pagination by @isukharev in #822
• feat: classify recoverable Structure folder selection by @isukharev in #824
• test: cover recoverable Structure folder selection by @isukharev in #826
• test: calibrate Structure tool-call budget by @isukharev in #827
• test: reconcile Jira snapshots across bounded reads by @isukharev in #829
• feat: expose bounded Jira history summaries over MCP by @isukharev in #832
• feat: qualify partial Confluence page reads by @isukharev in #834
• test: cover bounded Confluence section recovery by @isukharev in #836
• feat: qualify Confluence attachment inventories by @isukharev in #838
• feat: add advisory Confluence Cloud validation by @isukharev in #840
• feat: bind Confluence sections to page versions by @isukharev in #842
• test: benchmark version-bound Confluence section reads by @isukharev in #844
• test: separate MCP route and output budgets by @isukharev in #846
• feat: bind Confluence table selections to page versions by @isukharev in #848
• feat: add bounded Confluence page metadata by @isukharev in #851
• feat: add bounded Jira reference summaries by @isukharev in #853
• fix: bind Structure views to forest versions by @isukharev in #855
• fix: bind Structure selector consumers by @isukharev in #857
• test: bind paginated Confluence evidence by @isukharev in #859
• test: separate MCP route diagnostics by @isukharev in #861
• feat: expose table extract reconciliation by @isukharev in #863
• fix: redact MCP request-policy failures by @isukharev in #865
• fix: reconcile Confluence table spans by @isukharev in #867
• fix: compact Confluence table provenance by @isukharev in #869
• fix: qualify Confluence page history by @isukharev in #871
• fix: classify attachment upload failures by @isukharev in #873
• fix: unify Confluence table artifact writes by @isukharev in #875
• fix: preserve snapshot emit failures by @isukharev in #877
• perf: reuse Jira snapshot baseline hashes by @isukharev in #879
• fix: fail closed on denial audit writes by @isukharev in #881
• fix: preserve evaluation error causes by @isukharev in #883
• fix: preserve checkpoint error causes by @isukharev in #885
• fix: preserve workspace migration error causes by @isukharev in #887
• fix: preserve private prune error causes by @isukharev in #889
• fix: preserve private baseline error causes by @isukharev in #891
• fix: preserve private workspace operation error causes by @isukharev in #893
• fix: preserve private coverage error causes by @isukharev in #895
• fix: preserve private live sampling error causes by @isukharev in #897
• fix: preserve private synthetic sampling error causes by @isukharev in #899
• fix: preserve private finding ledger error causes by @isukharev in #901
• fix: preserve private finding acceptance error causes by @isukharev in #903
• fix: preserve private finding scorecard error causes by @isukharev in #905
• fix: classify private workspace manifest errors by @isukharev in #907
• fix: preserve private activation lifecycle error causes by @isukharev in #909
• feat: bind private CLI refusals to typed errors by @isukharev in #911
• refactor: consolidate mcp output bounds by @isukharev in #913
• refactor: consolidate mcp error policies by @isukharev in #915
• feat: audit query-only post reads by @isukharev in #917
• infra: expand private run-set capacity by @isukharev in #919
• feat: bind private CLI route qualification by @isukharev in #921
• docs: clarify bounded Jira field reads by @isukharev in #923
• test: cover read-only reporting workflows by @isukharev in #925
• test: cover Confluence selection completeness by @isukharev in #927
• test: cover Confluence CSV formula modes by @isukharev in #929
• test: cover reviewed spec-to-backlog creation by @isukharev in #931
• test: cover bounded meeting-task creation by @isukharev in #933
• test: cover bounded issue triage by @isukharev in #935
• feat: add bounded Confluence multi-section reads by @isukharev in #937
• fix: use Claude automatic permissions by @isukharev in #939
• fix: qualify cross-service discovery evidence by @isukharev in #941
• ci: avoid duplicate post-merge checks by @isukharev in #943
• feat: add structured recovery envelopes by @isukharev in #945
• refactor: centralize guarded CLI apply validation by @isukharev in #947
• feat: add reviewed Jira comment application by @isukharev in #949
• feat: add reviewed Jira transition application by @isukharev in #951
• feat: add scoped read-only MCP profiles by @isukharev in #953
• feat: bind MCP service profiles in agent eval by @isukharev in #955
• build: refresh dependencies before v0.5.0 by @isukharev in #957
• release: prepare v0.5.0 by @isukharev in #959

Full Changelog: v0.4.0...v0.5.0