v0.9.1

0.9.1 (2026-10-15)

Features

• conventions: move the scaffold's general rules here (#113) (e922c37)

v0.9.0

0.9.0 (2026-10-13)

⚠ BREAKING CHANGES

• conventions: a repository named company-* or declaring system = "company" is now a REPO-09 or REPO-03 finding.

Features

• conventions: name deployment environments once, record artifacts (#101) (92f36da)

v0.8.1

0.8.1 (2026-10-03)

Bug Fixes

• conventions: judge an IMAGE-09 glob by the Dockerfiles it misses (#88) (ad4965c)

v0.8.0

0.8.0 (2026-10-03)

⚠ BREAKING CHANGES

• conventions: make AGENTS.md the memory and generate the .env

Features

• conventions: keep images in docker/ and lint them with hadolint (6289e62)
• conventions: make AGENTS.md the memory and generate the .env (6289e62)
• conventions: protect the default branch and update every pin (6289e62)

v0.7.1

0.7.1 (2026-10-01)

Features

• conventions: add conventions for agent skills, commits and copy (387ce19)
• conventions: add interface formats and fetched dependencies (387ce19)
• conventions: check devcontainer.json schema and variables (387ce19)
• conventions: check Taskfile fragments, silent and prefixed tasks (387ce19)
• conventions: check that copy, OpenAPI and community tooling is wired (387ce19)
• conventions: declare runtime requirements with version ranges (387ce19)
• conventions: derive the env contract and .env.example from the schema (387ce19)
• conventions: name bindings after the program that reads them (387ce19)
• conventions: require a GHCR image to name its source repository (387ce19)
• conventions: skip vendored env schemas and register five runtime capabilities (387ce19)

Bug Fixes

• conventions: name the breaking mark as the signal for a gated break (387ce19)

v0.7.0

0.7.0 (2026-09-30)

⚠ BREAKING CHANGES

• conventions: declare interfaces and vendored dependencies, and what each binding reaches

Features

• conventions: add the OpenTofu state key convention (TOFU-01, EC-0029) (21d71d8)
• conventions: declare interfaces and vendored dependencies, and what each binding reaches (cc6d5a4)
• conventions: forbid fixed dev container names and foreign home volumes (DEVC-14, DEVC-15) (cc6d5a4)
• terminology: add the notify workflow and sync action tokens, and keep action synonyms as data (21d71d8)

Bug Fixes

• checks: accept an OpenTofu root as REPO-17's build manifest (cc6d5a4)
• checks: resolve Taskfile paths under dir: and map-form includes as go-task does (TASK-08) (21d71d8)
• checks: tell URL-shaped identifiers to leave format unset (ENVS-12) (21d71d8)

v0.6.4

0.6.4 (2026-09-30)

Features

• conventions: attest release assets only where attestations exist (REL-18) (#62) (068c1f6), closes #61

v0.6.3

0.6.3 (2026-09-29)

Features

• conventions: add dev container conventions (DEVC) and decision 0020 (#59) (99907a2)

v0.6.2

0.6.2 (2026-09-29)

Features

• conventions: add the release conventions (EC-0024 to EC-0026) (d94523b)
• conventions: add the site and machine image output kinds (d94523b)
• schemas: let a repository adopt the conventions one family at a time (d94523b)

Bug Fixes

• checks: leave a malformed repository name to REPO-08 (#46) (43b94d1)
• checks: stop reporting advice text, config-named files and build output (#44) (293d25c)
• rulesets: make the musher-release App the release-tag bypass actor (f266320)

v0.6.1

0.6.1 (2026-09-28)

Bug Fixes

• checks: stop parsing Dockerfile ignore files and reading handles as imports (#38) (bff02ec)