v3.18.0

What's new

Features

ce:review now validates each raw persona return before parsing, screening, or persistence. The new bounded, stdin-only validator rejects empty, oversized, invalid UTF-8, malformed JSON, and schema-invalid payloads without writing them to disk, while keeping diagnostics payload-safe. Review selection is also risk-based: correctness, testing, and project standards form the core team, and maintainability, agent-native, learnings, deployment, and other specialists are selected only when the changed repository surface warrants them. Selection reasons remain visible in coverage, and failures from risk-critical reviewers stay blocking rather than disappearing from the reported team.

Documentation

The architecture and structure guides now document review-artifact cleanup's preview/execute safety model, the paired .context ignore prerequisite before persistent review runs, and the content-integrity check for completed plans left marked active. A new solution note captures how to test filesystem safety at the operation boundary, including FIFO substitution, bounded descriptor reads, metadata identity checks, and isolated fault injection.

Also in this release

• deps: Updated fro-bot/agent through v0.111.0 and typebox to v1.3.29.

Compare

v3.17.0...v3.18.0