v0.3.0

Changelog

• 8d2db2f chore(regress,aggregate,stepkey): delete inert code and pin the rest (#279)
• 46af5a6 test(cmd): strengthen bench, offline and transcript tests (#273)
• 16348ac test(regress,aggregate): pin statistical contracts against their definitions (#272)
• 7998adb fix(redact): stop the openai-key rule from eating the preceding delimiter (#278)
• 0d55acb test(reduce,subgraph): pin graph invariants instead of shapes and lengths (#271)
• 8357e5d test(cmd): strengthen regress, trends, export, verify and runsdir tests (#270)
• d79eb71 fix(model): separate Input from Output in HashPayload (#277)
• 2448a2d test(bench,diff,stepkey,mcp): pin key stability and protocol framing (#269)
• e2cf455 test(redact,evidence): assert the redaction contract, not its current output (#268)
• 90e13d6 test(cmd): strengthen baseline, bundle, import and pack tests (#267)
• 2037423 test(store,ingest,model,pricing): exercise real inputs and concurrency (#266)
• 4f1ed9e chore(security): pin gitleaks 8.30.1 and narrow the fixture allowlists (#265)
• 75718f6 test(e2e): raise prod A-vs-A continuous band to the calibrated value (#263)
• 453076f fix(diff,store,cmd,codex,release): canonical step keys in diff, busy-aware WAL checkpoint, deterministic subgraph (#261)
• c60803f fix(cmd,reduce,deepeval): surface run-level failure in the gate, join export run ids, guard zero StartedAt (#260)
• 5b09832 fix(evidence,redact): rune-safe artifact sniffing, preserve non-UTF-8 content, stop key-collision data loss (#259)
• e3107b9 fix(cmd): honor cancellation in verify and bench, validate import run-id and verify labels (#258)
• c595646 fix(export): redact Run records in jsonl snapshot (#229)
• ae8979f fix(cmd/replay): sort export snapshot deterministically (#237)
• fca22c1 fix(cmd/bench): stop cell loop on context cancellation (#235)
• 0b29a62 fix(reduce): stop explicit occurrence colliding with implicit phase index (#233)
• 965a39a fix(reduce): make mark-tool suppression order-independent (#231)
• a1a236a fix(evidence): dedup overlapping artifact globs by resolved path (#238)
• f63488e docs: require an issue per task and link it from every PR (#216)
• cda350a chore(deps): bump github/codeql-action to v4.37.1 (init+autobuild+analyze) (#226)
• 202c3e9 chore(deps): Bump actions/setup-go from 6.5.0 to 7.0.0 (#225)
• 7f6f48c chore(deps): Bump lycheeverse/lychee-action from 2.7.0 to 2.9.0 (#222)
• dce6fd6 chore(deps): Bump actions/setup-node from 6.4.0 to 7.0.0 (#224)
• 7a5c820 chore(deps): Bump modernc.org/sqlite from 1.53.0 to 1.54.0 (#220)
• bbc3237 chore(deps): Bump golang from 18aedc1 to 1ecb7ed (#219)
• 852ab07 fix(e2e): resolve sql verifier via $E2E_DIR for offline verify; log in codex with CODEX_API_KEY (#218)
• e189a23 test: close export→deepeval and codex-fixture-contract e2e coverage seams (#217)
• 7e017c3 feat: full live validation — 100% functional coverage on real evidence, both runtimes (ADR-0036) (#214)
• 059aad0 docs: add glossary of every catacomb term (A–Z) (#213)
• 1259eab test(e2e): cover wilcoxon + fleet stamp; run the live gate twice weekly (#212)
• b6c914c feat: catacomb calibrate — offline gate self-check (ADR-0034) (#205)
• c3556f1 docs: evaluation brief for technical leadership (PITCH.md) (#193)
• da85a76 feat: interleave bench cell order rep-major — unconfound variant comparisons from time drift (#199)
• 741cfb4 feat: catacomb-gate GitHub Action + regress --format markdown (ADR-0033) (#203)
• cfcd2dd feat: baseline bundles — deterministic export/import for ephemeral CI (ADR-0032) (#201)
• 2fce33a chore: codex follow-ups — CODEX_HOME default, e2e hygiene, review nits (#198)
• 13c805b feat: opt-in exact Wilcoxon signed-rank paired test (ADR-0035) (#210)
• 0cd14db test(ci): Windows artifact smoke — execute the shipped binary end-to-end (#208)
• b617864 feat: fleet-ready exports — --project stamp for cross-repo joins (#207)
• 9130ca6 feat: scale envelope — strip payloads before aggregation + benchmark suite (#209)
• 4aa7381 feat: judge-loop closure — provenance-complete pack contract + end-to-end docs (#206)
• ba93b54 docs: ADR-0031 + Codex ingestion design and stage-1 implementation plan (#194)
• be58e2c test(e2e): round-2 coverage hardening — redaction, real sub-transcript, CLI contracts, reducer edges, subagent breadth (#192)
• 76b105e test(e2e): gate live subagent on the real subagent node (full evidence incl. subagents/); correct the sidechain premise (#191)
• d671230 test(e2e): production-scenario E2E — subagents, skills, real MCP (hermetic + live) (#188)
• b965124 docs: mention the bundled Claude Code skill in the README (#190)
• 6db2047 feat(skill): bundled catacomb Agent Skill (#189)
• 1841b99 Update README.md (#187)
• 488d494 feat: catacomb import — ingest hand-run interactive sessions into the gate (#186)
• 87035e0 docs: first-touch friction fixes — install/auth clarity, basket example correctness, security intake, internal framing (#185)

v0.2.0

Changelog

• a002f0c feat: first-touch improvements — basket path contract, docs hygiene, README tutorial (v0.2.0) (#184)
• 8e499cc feat: zero-touch release — go-install version stamping, channel parity + watchdog (#183)

v0.1.1

Changelog

• fc5a36b fix: SP-W follow-ups — patch-free offline verify, resume boundary note, offline E2E pass, stamp assert (#180) (#182)
• 642e4c1 chore(deps): Bump alpine from 3.23 to 3.24 (#176)

v0.1.0

Changelog

• 0578536 docs: versioning policy — semver surfaces, pre/post-1.0 rules, 1.0 criteria (#181)
• 7df4034 feat: SP-W per-cell workspace isolation — fresh workdir, patch handover, teardown, stamps (#179)
• 88b685b docs: ADR-0028 + SP-W per-cell workspace isolation — design and implementation plan (#178)
• 0e661e2 docs: allow parallel implementer subagents for file-disjoint plan tasks (#177)
• 6620bdf fix: audit remediation P2–P5 (supply-chain, stats, redaction, CI, Python) (#175)
• d96fec1 feat: SP5 judge utilities — agreement calculator + panel aggregation (#174)
• 3424bf7 docs: rebuild README as a guided tutorial; re-anchor docs/guide (#173)
• 0079f7a docs: SP5 judge utilities — design and implementation plan (#172)
• 27ed2e9 feat: SP4 audit (deterministic half) — per-cell outlier notes + prompt-pack export (#171)
• 572826e docs: SP4 audit (deterministic half) — design and implementation plan (#170)
• dd4ccb2 feat: SP3 env stamps + accuracy-vs-cost Pareto table (#169)
• a0c4621 chore: SP2 follow-ups — shared sum helper, deterministic sort test, minUnanimousTasks cap (#166) (#167)
• fc146fc docs: SP3 env stamps + Pareto — design and implementation plan (#168)
• b49bdca feat(regress): SP2 reliability metrics — pass^k reporting + paired sign test (#165)
• ee2c740 fix(redact): avoid unchecked allocation-size addition (CodeQL go/allocation-size-overflow, alerts #1 #2) (#164)
• e5da279 docs: SP2 reliability-metrics design + implementation plan (pass^k, paired sign test) (#163)
• 3eebef9 test(e2e): hermetic per-PR + live weekly SQL E2E — SP1 acceptance (wave E) (#162)
• dadd141 feat(cli): catacomb verify — offline re-verification over runs-dir (#161)
• 1852a98 feat(bench): exec verifier contract — verify hook, artifact capture, verify.json (SP1 wave B) (#160)
• 53f4197 feat(regress): run-level score annotations gate through Wilson machinery (SP1 wave A) (#159)
• fd64e69 feat(verifier-sdk): stdlib-only Python SDK for exec-contract verifiers (SP1 wave D) (#158)
• 6185fcd docs: ADR-0027 verification layer + eval best-practices gap review (V-3) + SP1 verifier-contract design (#157)

v0.0.3

Changelog

• 1174b33 fix(release): migrate cosign signing to v3 bundle format, un-pin cosign (#156)

v0.0.2

Changelog

• 368e944 fix(release): pin cosign binary to v2.5.3 in publish workflow (#155)
• b32768c fix(bench): close review follow-ups — setup under timeout, timed-out manifest note, scoped zizmor ignores (#154)
• 467bebc docs(superpowers): close-all-axes design spec + implementation plan (#153)
• 17acd0e docs: post-merge accuracy follow-ups (cask release, task timeout, security scanners) (#152)
• 1ab8775 chore: post-merge integration — README cask, zizmor publish.yml re-audit (#148)
• 1bcc743 ci(security): comprehensive scanner suite + pin all Actions to SHAs (#144)
• 20db597 fix(bench): subprocess timeout/cancellation via context + WaitDelay (#147)
• 1ba9e26 feat(redact): harden redaction — vendor rules, entropy gate, fuzz, bypass fix (#146)
• 13273fc ci(release): GoReleaser v2 — checksums, cosign, SBOMs, provenance (#145)
• 83a9f8a chore(agents): model policy (Fable-for-quality), SECURITY.md, community files (#143)
• 64ab30c feat(e2e): accept Pro/Max subscription auth (CLAUDE_CODE_OAUTH_TOKEN) for the live gate (#142)
• 59ad8e8 feat: E2E live gate — headless claude -p full-cycle validation in CI (PV-6b as a workflow) (#141)
• 55caa64 chore(deps): Bump docker/login-action from 4.1.0 to 4.4.0 (#140)
• 847719e chore(deps): Bump actions/setup-python from 5 to 6 (#139)
• 9756084 refactor: comprehensive post-pivot dead-code sweep (−2565 LOC, zero behavior change) (#138)
• e8998cd fix+refactor+test: close all pre-existing & deferred items (post-pivot hardening) (#137)
• 15f638c docs: PV-6b live-basket calibration — regression gate validated on real claude -p (ADR-0026) (#136)
• 5af1368 fix(ci): green the Windows leg + markdownlint (path-quoting assertions; PV-6a plan doc) (#135)
• 01a873a test: PV-6a gate-power characterization + calibration report; opus-only agent rule (ADR-0026) (#134)
• 62c3c64 feat: PV-5 — residual cleanup + version watchlist (schema v5, offline drift) (ADR-0026) (#133)
• 8c446d8 feat!: PV-4 deletion wave II — remove daemon, ingest, exporters (ADR-0026) (#132)
• a1507ed feat!: PV-3 deletion wave I — drop web UI, TUI, and viewer commands (ADR-0026) (#131)

v0.0.1

feat(release): seqwall-style release pipeline (publish.yml, Dockerfil…