v3.0.0 — Single Distribution with Dynamic Rigor

Changed — Single Distribution with Dynamic Rigor

• Merged Lite and Full distributions into a single 26-skill plugin
• Retired "Lite mode" / "Full mode" terminology in favor of intensity levels (standard, high, critical)
• Intensity gates control which features activate — standard (~10-15 min/feature), high/critical (~1-2 hr/feature)
• Per-feature intensity override via workflow-advance.sh set-intensity

Added — Skills

• /cquick — Lightweight TDD without full spec ceremony
• /crelease — Versioning, changelog management, and release workflow
• /cexplain — Guided codebase exploration with structured question flow

Added — Dynamic Rigor System

• Intensity detection from spec signals (STRIDE, invariants, compliance keywords)
• Per-feature intensity stored in workflow state, computed as max(project, feature)
• Intensity Configuration tables in all 6 pipeline skills

Added — Security Hardening

• Hacker Olympics audit: 22 findings fixed (gate bypass, config protection, CI pinning)
• CODEOWNERS for security-sensitive files
• Pre-commit hooks pinned to commit SHAs
• Gitleaks baseline for secret scanning

Added — Performance

• Performance Olympics audit: 37 findings fixed across 3 convergence rounds
• Hook subprocess spawns reduced from ~18-19 to ~5-6 per invocation (~30-72s saved per session)
• Bulk eval+jq parsing, bash builtin replacements, batched I/O operations

Fixed

• QA Olympics audit: 24 findings fixed across hooks, gate, statusline, and documentation
• Gate phase enforcement, override display, atomic state writes
• Stale path references in skill docs
• Marketplace source path resolution

Infrastructure

• 14 test suites, 1,517 assertions (up from 57 in v2.0.0)
• Calm reset prompts in /ctdd and /caudit orchestrators
• Spec template files for intensity-aware spec generation