Claude Octopus v9.56.1

Security

• Destructive-delete guards cover reversed and mixed short/long recursive-force
  options (including uppercase -R), long options with attached values such as
  --preserve-root=all, and quoted home prefixes with unquoted suffixes such as
  "$HOME"/cache.

Fixed

• Factory session metadata validates exactly one maturity JSON value, numeric
  ratios, retry counts, and satisfaction targets, and persists the effective
  holdout/retry overrides used by factory_run.
• HTTP telemetry setup fails closed when an installed Claude CLI returns no
  parseable numeric version.
• The codex smoke probe removes its diagnostic tempfile on every early-return
  path.
• Standalone context, agent, and intelligence libraries fail immediately if
  their shared word-count helper cannot be loaded.
• Word and provider-recommendation splitting disables globbing and uses a fixed
  whitespace IFS.
• set_provider_model and reset_provider_model accept the canonical agy
  provider key used by generated configurations.

Changed

• README synchronization derives smoke, unit, and integration suite counts from
  test discovery, keeping PRODUCT.md current when coverage grows.
• Release automation waits for the real macOS CI duration, fails closed on
  anything short of explicit approval or on any paginated unresolved thread,
  squash-merges release PRs, boundedly verifies the exact post-squash main
  commit, and only then pushes an annotated tag and publishes.

Tests

• Dedicated regression coverage now exercises factory metadata, destructive
  delete flag/path forms, telemetry version parsing, fixed-IFS word splitting,
  agy model configuration, and README suite-count drift.