Default model bump + versioning/release hygiene.
Changes
- Default model → Opus 4.8. The built-in default for the reasoning stages (Investigator + Critic) is now
us.anthropic.claude-opus-4-8. The Reporter and issue-answer paths stay on Haiku 4.5 (Opus rejects structured output over Bedrock). No caller change required — adopters already overridingBEDROCK_MODEL_IDare unaffected. Every default now resolves from a single source of truth (config._DEFAULT_MODEL) so provenance, pricing, and the doctor can't drift. - v0 frozen; v1.x is the release track. The old moving
v0tag is frozen at its final pre-v1.x revision and no longer advances. Pin a numberedv1.xtag (or its commit SHA for the strongest supply-chain guarantee) — see the README 'Supply-chain pinning' section. All install docs, examples, the reusable-workflow default, and the CFN Launch Stack URL now point at a numbered release. - Docs: added the
BEDROCK_ISSUE_MODEL_IDenv row; honest tag-vs-SHA guidance; dropped therefs/tags/v1.*OIDC-trust wildcard suggestion (it would auto-trust future tags).
Notes
- 541 tests pass. Reviewed across 10 dimensions (correctness, security, contract-drift, comment-rot) with the findings applied.
- Engine ref:
5f3386a83068d809f901c244462c55d17df166d2 - Pinning:
uses: sudsali/shadow/.github/workflows/shadow-review.yml@v1.8(or the SHA above).