Skip to content

v3.1.0 — sensitive-file-guard reduction + accumulated features

Choose a tag to compare

@joshft joshft released this 27 Jun 23:20
· 25 commits to main since this release

Accumulated release of 133 PRs since v3.0.0 (2026-04-04).

⚠️ Security posture — DOWNGRADE

sensitive-file-guard was reduced to the Edit/Write tool-path only — it no longer inspects ANY Bash command (#205 re-scope, #206 reduction). A direct Bash write to a protected file (redirect, writer command, interpreter, or git restore) is now allowed; the guard catches only the agent's naive Edit/Write tool call. This is a deliberate, documented downgrade (a cooperative-loop PreToolUse hook is a guardrail, not a perimeter; the Bash leg was always interpreter-evadable). Existing-user note: your custom_patterns continue to guard the Edit/Write tool-path; they no longer guard Bash redirects/writer commands. See ABS-045 and the sfg-edit-write-only spec.

Added — Skills

/cauto, /carchitect, /cchores, /cprune, /cdashboard, /ctriage, /cexplain, /crelease, and more.

Changed

  • AP-013 agent migration: inline subagent prompts extracted to pinned agents/*.md (across /ctdd, /creview-spec, /cspec).
  • Intensity calibration simplified to advisory-only.
  • Broad workflow hardening, postmortems, and structural-enforcement features.

See the full CHANGELOG.md [3.1.0] section for the complete list.