v3.15.1: Hardened learning-data guard

What's New

Your AQE learning data is much better protected. The aqe-mod guard that ships with the agentic-qe-fleet plugin now refuses any shell or PowerShell command it cannot prove leaves .agentic-qe/*.db untouched. That covers deletes reached through $(find …), variables, arrays, xargs, bash -c, interpreter one-liners, destructive SQL and PowerShell pipelines.

Everyday commands keep working: rm -rf dist build, rm -rf "$(mktemp -d)", git clean -fdx dist/, npm ci, aqe init --auto, sqlite3 -readonly, and find . -name '*.tmp' -delete.

The guard reads commands as text, so obfuscated commands, shell functions and make/npm run scripts are not judged (#917).

Getting Started

npx agentic-qe init --auto

Plugin users: claude plugin marketplace update picks up agentic-qe-fleet 3.15.1, which runs agentic-qe@3.15.1 as its MCP server.

See CHANGELOG for full details.