adw 3.5.10

The 3.5.10 engine: the hardening items the 3.5.9 release left open, and a README that leads with the intent.

Install or move to this release:

claude plugin marketplace add ryanmat/adw@v3.5.10
claude plugin install adw@adw --scope user

The hardening items the 3.5.9 release left in its plan's Findings:

• renumber reads a plural list as comma entries closed by one and or to entry, so a count after the list (Steps 7 to 9, 12 tests red) is no longer a step number; it rewrites references in the plan's preamble too, counted under a preamble key.
• boundary-commit skips a plan kept out of git by design with an exit-0 line instead of refusing with a false reason, and reads a corrupt run marker as the error it is.
• next-guard keeps its denials from Python 3.9 and its body runs there; the three import-bound hooks and the four scripts still stand down below 3.12 with one line.
• set N done on a step already done appends a fix round after the step's record (; fix round: <note>; <clause>) instead of replacing it; a corrected note against the same record replaces that round's note, and the plan's own note passed back changes nothing.
• The eval graders share one Decisions condition, and the projection's --text test reads a token per query shape from the answer itself.
• Removed: the unread leftovers of evals/lib/record.py in the public cut (the shebang, SUPPORTED_AGGREGATE_SCHEMA, DEFAULT_LEDGER, the plugin-eval divider, CORRECTION_SCHEMA).

Documentation: the README leads with the intent (the four phases intent, spec, plan, run; the intent file and its commit first in Usage), and the changelog marks removals under a Removed: bullet, one item per surface, starting with the 3.5.9 entry.

Curated from the maintainer's development repository after the engine merge da4a370 at bbd4a7a; every release gate passed (banned-token scan, gitleaks, the 2673-test suite, ruff, plugin validate), and the nine-scenario unattended eval passed 9 of 9 on the engine head.