release: v3.1.0

Guild v3.1.0

The v3-completion program: 57 tasks across 9 teams (A–I), executed against the
v3 architecture with all 70 architecture decisions preserved.

Highlights

• Security: guild-memory and guild-telemetry MCP output now routes through
  D-RECALL wrapping (#249); scrub survives huge run dirs and unwritable
  share-named files (#243).
• Telemetry: semantic coverage, analyzer gap closure, inspect gating, and
  P6 evidence (Team B, #248); analyze route runs on compiled Node with the
  cheap-path cut (Team C, #246).
• Capability & distribution: migration evidence hardening and attested
  boundary workflow (Team G, #245); native-host identity parsing,
  update-notice honesty, and host-matrix fixes (#247); esbuild pin enforced
  with the conformance bundle covered (#244).
• Validation: inherited G1–G13 current-source validation with retained
  G2/G3 evidence (Team I, #242).

Release evidence

Hash-bound full-suite 31/31 activated-host conformance for guild-3.1.0 @
76f6d40, captured on live Claude Code and Codex hosts, 18/18 planted refusal
controls refusing, signed by the three rotated attestor roots
(.guild/artifacts/release/v3.1.0/{conformance,promotion}.json, #251).

🤖 Generated with Claude Code

Full Changelog: v3.0.0...v3.1.0