v3.1.0 — sensitive-file-guard reduction + accumulated features
Accumulated release of 133 PRs since v3.0.0 (2026-04-04).
⚠️ Security posture — DOWNGRADE
sensitive-file-guard was reduced to the Edit/Write tool-path only — it no longer inspects ANY Bash command (#205 re-scope, #206 reduction). A direct Bash write to a protected file (redirect, writer command, interpreter, or git restore) is now allowed; the guard catches only the agent's naive Edit/Write tool call. This is a deliberate, documented downgrade (a cooperative-loop PreToolUse hook is a guardrail, not a perimeter; the Bash leg was always interpreter-evadable). Existing-user note: your custom_patterns continue to guard the Edit/Write tool-path; they no longer guard Bash redirects/writer commands. See ABS-045 and the sfg-edit-write-only spec.
Added — Skills
/cauto, /carchitect, /cchores, /cprune, /cdashboard, /ctriage, /cexplain, /crelease, and more.
Changed
- AP-013 agent migration: inline subagent prompts extracted to pinned
agents/*.md(across/ctdd,/creview-spec,/cspec). - Intensity calibration simplified to advisory-only.
- Broad workflow hardening, postmortems, and structural-enforcement features.
See the full CHANGELOG.md [3.1.0] section for the complete list.