v0.3.1

What's Changed

• feat(core): orchestrator engine P0→P4a — single-writer, re-entrant, gates, repo registry, wrapped-CLI by @mikeparcewski in #2
• fix(core): close 3 Campaign crash-window residuals (F1 re-review) by @mikeparcewski in #3
• Fix flaky terminal test (temp-db collision) + sync Cargo.lock to rustls by @mikeparcewski in #5
• ci: build/test/clippy/fmt gate on PRs (+ make main pass it) by @mikeparcewski in #6
• Crew execution engine + studio operator cockpit by @mikeparcewski in #8
• site: wicked-core README to canonical messaging by @mikeparcewski in #7
• chore(core): sync Cargo.lock to estate rustls migration (dro by @mikeparcewski in #12
• refactor(events): migrate phase/council types to 4-segment grammar by @mikeparcewski in #15
• docs: ASCII signature + event-grammar / skill-naming / studio-consolidation refresh by @mikeparcewski in #16
• feat(workflow): governed domain-extraction WorkflowDef + coverage==1.0 gate by @mikeparcewski in #17
• docs(design): DES-OUTGOV-001 — re-home output-governance/domain-graph onto estate's graph by @mikeparcewski in #18
• PR-B0: backend-agnostic runtime — de-pin the engine from SqliteStore by @mikeparcewski in #19
• PR-B: conformance-rule model + ingest seam on estate's native Rule graph by @mikeparcewski in #20
• PR-C: per-output governance guardrail + deny-dominance compose fix by @mikeparcewski in #21
• PR-D: native domain-graph builder (schema-valid, adversarially reviewed) by @mikeparcewski in #22
• PR-E: Postgres compile-parity CI + cross-product review fixes by @mikeparcewski in #23
• docs: DES-OUTGOV-002 — remaining output-governance plan (reviewed) by @mikeparcewski in #32
• core#24: wire INPUT governance into a wrapped-CLI run (keystone) by @mikeparcewski in #33
• fix(core#24): evidence-integrity hotfix + council-review fixes by @mikeparcewski in #38
• core#25: store-bound coverage recompute + emitter (milestone #2) by @mikeparcewski in #39
• core#27: retarget domain-extraction.json to the real garden modernize skills by @mikeparcewski in #40
• core#26: populate governance policies + conformance rules into a run (rules ingest) by @mikeparcewski in #41
• feat(core#28): end-to-end governed domain-extraction run + wire per-turn rule recall by @mikeparcewski in #42
• chore(workflow): domain-extraction skill_refs → wicked-garden-domain-* (post-rename) by @mikeparcewski in #43
• chore: bump wrapped-CLI unit timeout to 7200 s (2 h) by @mikeparcewski in #44
• feat(core#47): event-based gate evaluator — governed bus-mediated agent judge by @mikeparcewski in #47
• fix(core#46): attempt-scoped phase_id + event IDs prevent crash on retry by @mikeparcewski in #48
• fix: governance security gaps — hook routing, liveness sentinel, StepFailed fold (core#37, #34, #35) by @mikeparcewski in #50
• feat(core#29): 3-agent acceptance evidence for coverage + domain-graph + gate-hook by @mikeparcewski in #49
• feat: Postgres CI parity job + AnyStore round-trip test (core#30) by @mikeparcewski in #51
• fix(coverage-gate): wire WICKED_ESTATE_DB into pinned validator + auto-generate report (core#45) by @mikeparcewski in #53
• feat(cli): wicked-core reattach --session (core#46) by @mikeparcewski in #52
• feat(gate-hook): P4b — use open_store_ro for gate-hook subprocess (core#36) by @mikeparcewski in #54
• feat(session-runner): persistent PTY worker sessions (core#13) by @mikeparcewski in #55
• feat(acp): ACP multi-CLI session runner with graceful single-shot fallback (core#13) by @mikeparcewski in #57
• feat: layer-3 governance deny-dominates at phase-boundary gate by @mikeparcewski in #58
• feat(napi): governance read API — list_policies, list_conformance_rules, list_claims by @mikeparcewski in #59
• feat(crew#42): governance write seam — upsert policy + rule via actor, NAPI recall preview by @mikeparcewski in #60
• fix(crew#41): expose getCoverageReport NAPI binding so studio coverage panel works by @mikeparcewski in #62
• council: blind capability routing — voters never see CLI names by @mikeparcewski in #64
• feat(core): registerWorkflow NAPI — hot-register user workflows at runtime by @mikeparcewski in #66
• feat(coverage): add --json flag to emit report to stdout by @mikeparcewski in #68
• core#13a: move council distribution off actor thread by @mikeparcewski in #69
• core#13b: wire input governance into AcpStepRunner by @mikeparcewski in #70
• core#13c: wire drop_session to run terminal events via on_run_complete by @mikeparcewski in #71
• feat(events): enrich SessionStarted, UnitPlanned, UnitDistributed — foundation wave by @mikeparcewski in #72
• fix(actor): move git worktree creation off the actor thread by @mikeparcewski in #73
• feat(events): EVT-014 StepFailed + EVT-015 CrashRecoveryRedrive (P1 actor-thread events) by @mikeparcewski in #79
• feat(events): EVT-002 WorkerSessionStarted + Command::EmitEvent relay (P1 PR-2) by @mikeparcewski in #82
• feat(events): EVT-005 AcpSessionStarted + EVT-006 AcpFallback (P1 PR-3) by @mikeparcewski in #84
• perf(core): skip thread spawn for repo-less LaunchRun by @mikeparcewski in #86
• fix(core): propagate governance explicitly, remove thread-local read in pre_distribute by @mikeparcewski in #87
• feat(events): add P2 worker-lifecycle events EVT-003, EVT-004, EVT-007 by @mikeparcewski in #88
• feat(events): P2 governance-deep observability wave (EVT-008/009/010/011/016) by @mikeparcewski in #89
• feat(events): P2 decisions-full wave — EVT-001 WorkflowSelected, EVT-012 UnitReworkAmended, EVT-013 UnitOutputCaptured by @mikeparcewski in #91
• fix(core): pass workflow_id through campaign node RunSpec → LaunchSpec by @mikeparcewski in #94
• feat(core): worker message injection + unit reassignment API by @mikeparcewski in #93
• fix(core): gate-hook exe resolves correctly when loaded as napi-rs addon by @mikeparcewski in #95
• fix(pipeline): unknown workflow id returns Err when actor registry provided by @mikeparcewski in #96
• feat(core): ship onboarding sub-workflow drop-in JSONs by @mikeparcewski in #97
• feat(core): ship chat workflow drop-in JSON by @mikeparcewski in #98
• feat(core): ship chat workflow drop-in JSON by @mikeparcewski in #99
• docs: add DoD artifacts (REQ-001, REQ-005, TEST-001, RAID) by @mikeparcewski in #100
• docs: mark ISS-001/002/003/004/006 resolved; verify L2-1,2,3,4,6 in DoD by @mikeparcewski in #101
• ci: extend check job to 3-OS matrix; check off L1 DoD criteria (L3-2) by @mikeparcewski in #103
• chore(release): bump to v0.2.0, add CHANGELOG, check off DoD L3-3/L3-4 by @mikeparcewski in #104
• docs(dod): upgrade L2-4 to fully verified — cross_language_roundtrip passes by @mikeparcewski in #105
• docs(dod): check off L3-5 — wicked-testing PASS on governed crew run (v0.6) by @mikeparcewski in #106
• perf(distribute): parallelize council votes + guard distribution thread panics by @mikeparcewski in #107
• feat(events+council): live council deliberation — events, seat lenses, 75% approval bar, runoff ballots by @mikeparcewski in #108
• feat(acp): full-roster ACP — native copilot stdio, registry fixes, governed fall-through for non-claude CLIs by @mikeparcewski in #109
• fix(acp): resolve npm .cmd launcher shims on Windows by @mikeparcewski in #110
• feat(acp): native opencode ACP + adapter provenance docs by @mikeparcewski in #111
• fix(inject): deliver operator messages to ACP-backed runs by @mikeparcewski in #112
• fix(acp): parse usage from the prompt result — Burn panel was empty for ecosystem adapters by @mikeparcewski in #113
• feat(recovery): environment-refusal escalation ladder — auto-grant, else bubble to operator by @mikeparcewski in #114
• feat(triage): agent-judged failure recovery — the general 'another agent answers' path by @mikeparcewski in #115
• feat(assumptions): external-transform capture — third-party payload logic, or a review placeholder by @mikeparcewski in #116
• feat(core): PTY stall detection, :memory: sidecar fix, collab built-in workflow by @mikeparcewski in #117
• chore(core-ts): sync generated index.d.ts with lib.rs by @mikeparcewski in #118
• chore: release engine v0.3.0, core-ts v0.2.0 by @mikeparcewski in #119
• fix(core): launch preflight for Tool-executor phases (#120) by @mikeparcewski in #121
• fix(core): preflight refusal must be synchronous at LaunchRun (#120) by @mikeparcewski in #123
• fix(core): onboarding domain phase runs domain-graph; --help guard by @mikeparcewski in #125
• fix(core): plugin-skill invocation form + Unknown-command no-op tripwire (#126) by @mikeparcewski in #127
• fix(validator): banner-tolerant verdict parse via keyword-alone contract lines (#128) by @mikeparcewski in #129
• chore: release engine v0.3.1, core-ts v0.2.1 by @mikeparcewski in #130

Full Changelog: https://github.com/mikeparcewski/wicked-core/commits/v0.3.1