v0.3.1 — Security-first fixes

Security-first fixes

• Add solidspec security-review executor — an OWASP Top 10 heuristic audit of plan.md/spec.md that requires no AI agent, fixing solidspec pipeline --schema security-first --no-agent, which previously failed with Unknown phase: security-review.
• Fix false positives/negatives in the OWASP heuristics — several regexes had a truncated-stem word-boundary bug (e.g. tokeniz\b never matched "tokenized") that produced false-positive Critical findings on plans that already documented the mitigation. Verified against the regex crate directly; added regression tests.
• Agent-mode prompt/persona parity — live-agent security-review runs previously fell through to a generic prompt instead of the detailed OWASP-audit instructions; added a dedicated prompt arm and Security Auditor persona.
• Enforce the schema DAG gate in solidspec tasks — solidspec tasks --schema security-first now blocks with a clear error until security-review.md exists, instead of only being displayed as blocked by solidspec status.
• Regenerated the knowledge graph in docs/graph/.

Full Changelog: v0.3.0...v0.3.1

v0.3.0

---

Implemented — Core Infrastructure

Feature	Status	Description
DAG Artifact Graph	✅	Kahn's algorithm topological sort, completion detection, solidspec status
Schema-Driven Workflows	✅	7 built-in schemas (YAML-customizable), 3-level resolution (project-local → built-in → default)
Multi-Agent Support (20)	✅	Auto-detection, format translation, slash command registration per agent
Multi-Agent Pipeline	✅	Automated pipeline with CLI invocation, timeout, mixed-mode and scaffold-only modes
Agent Timeout	✅	300s try_wait() polling loop, process killed on timeout
Constitution Gates	✅	Simplicity, Anti-Abstraction, Integration-First — auto-checked in plan phase
Extension Hooks	✅	Cross-platform hooks (sh/ps1/cmd) — after_init, before_tasks, etc.
Preset System	✅	Import/export workflow presets with priority-based template resolution
Anti-Rationalization Guards	✅	Excuse→rebuttal table + compliance checklist injected into every agent prompt
Agent Personas	✅	Role-based personas (Spec Writer, Architect, Code Reviewer, etc.) with verification checklists
Project Context Injection	✅	[context] in solidspec.toml → auto-injected into every prompt
Change-Based Workflow	✅	Delta specs (ADDED/MODIFIED/REMOVED), propose → list → archive lifecycle
OpenCode Skills	✅	Directory-based .opencode/skills/ with name: + description: SKILL.md format
Template System	✅	Tera rendering, 4-layer resolver (project-local → preset → extension → embedded default)

---