v0.19.1

0.19.1

Schema Compatibility

• Extended review decision provenance with runtimeProof metadata for advisor and orchestration-produced reviewer decisions. The schema change is additive and backward compatible for existing non-advisor review artifacts.

Fixed

• Advisor completion can no longer be satisfied by a thin self-authored JSON artifact. Advisor pass decisions must now reference a runtime proof row written by the SubagentStop hook for the active task.
• Protected advisor runtime proof files from parent-agent forgery by blocking direct edit writes, shell redirection into .harness/state/advisor-runs/, and manual subagent-stop.sh invocation.
• Orchestration runtime runs now attach runtimeProof to each lane result, and review-agent pass decisions must reference a matching passed orchestration run, summary row, transcript, and transcript hash.
• Updated Codex E2E handling for current codex exec sandbox flags and feature detection so generated Codex runtime smoke coverage stays live.