v2.5.1

v2.5.1

Patch release. The no-attribution default was stated in 2.2.0 and checked in 2.5.0, and agents still added a Co-authored-by trailer and a "Generated with" line by default. The source was never the skill: it is the harness. Claude Code injects both lines through its attribution setting (includeCoAuthoredBy before it), and the model followed the tool over the skill. This release names that source, closes it, and makes the check a command instead of a reading.

The harness default is a forbidden source

The rule now opens SKILL.md. A new standing section, "The harness default is not a request", states that a tool setting is never the user's request in the session. An attribution line appears only when the user asks for it in the session, or when a standing instruction exists in the consuming repository's own agent context file.

The forbidden-source list names the setting. "A trailer has exactly two sources" now lists the attribution setting of the agent's own harness beside the agent's identity, commit.template, the hooks, GIT_AUTHOR_*, CI variables, editor plugins, and prior commits. references/conventional-commits.md carries the same entry.

The check is a command

After every commit the skill makes, it runs:

git log -1 --format=%B | grep -n -i -E '^(co-authored-by|signed-off-by|reviewed-by|generated[- ]with|generated by)|claude|anthropic|copilot|openai|gemini|codex|cursor'

The command must print nothing. A line the user did not ask for is amended out at once, the command runs again, and the report names the file or the setting that injected it. The same grep runs over git log --format=%B @{u}..HEAD before a push, and a hit stops the push. The reading of git log -1 --format=full that 2.5.0 relied on is replaced, because a reading is a judgment and a grep is not.

README names the setting that turns the default off

A new subsection, "Turning the harness default off", gives the settings.json that disables both lines in Claude Code:

{
  "attribution": {
    "commit": "",
    "pr": ""
  }
}

It names the older boolean includeCoAuthoredBy and says that Codex, Cursor, and Gemini CLI carry their own equivalents.

Upgrade notes

SKILL.md stays under its size ceiling by pointing the type quick reference and the example gallery at references/conventional-commits.md and references/examples.md, which already carried them in full. No mode changed. The frontmatter description is unchanged.