Skip to content

ArcKit v6.18.3

Choose a tag to compare

@github-actions github-actions released this 26 Oct 18:55
· 143 commits to main since this release

Added

  • Move ArcKit FDE onto arckit.org at /fde/
  • Ship overlay scripts to the extensions
  • List ArcKit FDE in llms.txt and point AI tools at the Markdown
  • Compare a changed command against the current one in the eval runner
  • Lint warns when only the key carries a hedge
  • Review on a pass, areas to revisit on a fail
  • Draw 10 of 30 Awareness questions per attempt
  • Lint for shape cues the independent review caught
  • Certification-questions skill for the private question banks
  • Publish the certification policies
  • SEO, JSON-LD and llms.txt for the certification pages
  • Deploy the Worker to certification-api.arckit.org
  • Sign credentials with RS256, the Open Badges 3.0 baseline
  • Question bank checker
  • Landing, Awareness quiz and credential pages
  • Issuer profile, Awareness achievement, badge and key script
  • Worker API for the Awareness quiz and credentials
  • Pre-filled LinkedIn add-to-profile link
  • Build, sign and verify Open Badges 3.0 credentials
  • Validate names and answers
  • Quiz bank marking for the Awareness level

Fixed

  • Keep project and file names on one line in the SessionStart notice
  • Gemini hooks know every doc-type code, and ODCS status values match the standard
  • DOS7 buying runs on the Contract Award Service, not the Digital Marketplace
  • TCoP supports GovS 005, and JSP 936 independent verification matches the JSP
  • JSP 936 independent assurance and counts, and TCoP's GovS 005 mapping, match the sources
  • The data mesh contract's ODCS export validates against ODCS v3.2.0
  • DOS and G-Cloud award notices go on Find a Tender, and both file into procurement/
  • Read each requirement's MoSCoW priority, and use NFR-SEC for security
  • Correct governance facts in ten commands and templates
  • Dfd render command and syntax, G-Cloud 15, ODCS v3.2.0, requirement IDs and MoSCoW coverage
  • Bring stale names, versions and examples in commands and templates up to date
  • GCP and AWS research readers use the documentation MCP tools that exist
  • Run workflows on Node.js 24, which has the Brotli fix (CVE-2026-111497)
  • Name the next Monday as the date the ArcKit on GitHub charts start
  • Leave the scan's quoted repo text out of the command-notation lint
  • Date the sitemap's hand-written entries from their page text
  • The LinkedIn icon opens ArcKit's LinkedIn page
  • Readable text and no sideways scrolling across arckit.org
  • One background for dark-mode code blocks, not a box per line
  • Draw the Mermaid diagrams on the guide and article pages
  • Rebuild extension scripts/ and refuse overlay clashes
  • Repair broken links and images on the guide and article pages
  • Exempt the generated site pages from the colon-notation check
  • Publish guides and articles as static pages search engines can read
  • Helper scripts run on macOS's bash 3.2 and BSD sed and date
  • Overlay commands run core's helper scripts from their own plugin (#971)
  • Overlay commands keep earlier versions and ask questions in one message (#946, #949)
  • UAE Smart Data classification has four levels, not five (#949)
  • Separate the NDB clocks and move PSPF and DSS to their current structures (#949)
  • Align O-AA commands, templates, guides and recipe with C208 and TOGAF (#949)
  • NISG 2026 in force with NISV 2026, eu-nis2 recommended, §12 DSG per VwGH, at-dsgvo's 18 sections (#949)
  • Align guides, templates and commands with French primary sources (#949)
  • Correct AI Act dates, NIS2/DORA relationship and NIS2 final report, align Data Act and SEAL text (#949)
  • Put the capability map in Phase B, register ACHG as multi-instance, use TOGAF's change classes (#949)
  • Name the TBB artefact a category determination and say how Claude Code invokes the commands (#949)
  • One name per oversight tier, one level for the agent inventory, REQ after STKE (#949)
  • Correct SCA-RTS articles, TRA cessation, safeguarding return and Consumer Duty dates (#949)
  • Recipes run requirements after stakeholders; sobc order wording
  • Align FedRAMP SSP, readiness, control-family and template facts with primary sources (#949)
  • Name SOIA correctly and run the business case before ca-pspc (#949)
  • Align the AESCSF dependency and section lists across command, guide, template and README (#949)
  • Make DCB0160 starter hazards, MHRA work packages and MDR timelines agree (#949)
  • Overlay commands, templates and guides name registered doc-type codes (#949)
  • Re-running a command writes the next version, never over v1.0 (#946)
  • File the nine new guides in the pages guide groups
  • Correct document codes, inputs and references found in the read-through
  • Draw-shape guard, consistent bank checks, safer rollout docs
  • Readable dark mode and the site's hero style
  • %20 in LinkedIn links, strip invisible name characters, never overwrite a key set
  • OB 3.0 JWT claims, kid URI, key rotation and a submit rate limit
  • Safer quiz errors, honest invalid-credential text, page keywords
  • Follow a symlinked external/ root; port context sanitising to the Codex copies
  • Reject linked external document events
  • Sanitize hook context and bound external walks
  • Anchor secret-file-scanner skip patterns to ArcKit's own files
  • Drop the /tmp handoff tempfile Read auto-allow
  • Only auto-allow bare invocations of allowlisted plugin scripts

Changed

  • Send #877's subagent check a SubagentStart event; rebuild the security-hooks page
  • Changelog entries for #874, #877, #881 and #882; correct the hooks README
  • Rebuild ArcKit on GitHub from the 26 October scan
  • Bring AGENTS.md up to date with the seven extension targets
  • Add the 12 October traction snapshot to the Q4 marketing plan
  • Update ArcKit on GitHub for the week of 2026-10-26
  • Put the two documentation MCP guides in the Plugin Operations group
  • Match the FinOps and business case guides to the corrected commands; drop a stray uv.lock
  • Lead 26 command guides with the answer, and add the documentation MCP guides
  • Lead the UK standard guides with the answer, and merge the duplicates
  • Write the ArcKit on GitHub lists into the page so search engines can read them
  • Add ArcKit on GitHub page for public repos that use or mention ArcKit
  • Update the Q4 marketing plan with the AI-in-government-code scan
  • Point newcomers to the films from the README and home page (#279)
  • Make the LinkedIn group easy to find
  • A film for every command
  • Add dependencies for every overlay and tooling command
  • Add guides for the Open Agile Architecture and Netherlands commands
  • Show gcp-research wherever aws-research is read
  • Correct 12 dependencies after reading every command and template
  • Redraw WORKFLOW-DIAGRAMS.md from the dependency data
  • Link each command's film and play it on the guide pages
  • Rebuild DEPENDENCY-MATRIX.md from the command files
  • Refresh the commands page and rebuild its dependency matrix
  • Record the recipes explainer posts
  • Record the overlay command films posts
  • Record the all-76-command-films posts
  • Say what the 30-question pool covers
  • DRAW_HMAC_KEY and bank versions in the runbook
  • Say a credential confirms a pass, not skill
  • Adopt GCATI exam design and policies in the spec
  • Run the lint workflow when certification files change
  • Operations runbook and what the Worker stores
  • Run certification tests in CI and ignore private banks
  • Add ArcKit certification programme design
  • Record the ArcKit commands series posts
  • Record the YouTube launch posts and the 6.18.2 Discord reply
  • List v13, v51 and v52 test repos
  • Move scanner skip-pattern changelog under Unreleased; describe anchored skips in ENFORCEMENT.md