v1.13.0

1.13.0 (2026-10-19)

Features

• fleet: report repos that never opted into the harness (#56) (8763622)
• security: add Workers and Python semgrep rules with fixtures (#59) (c3404ed)
• security: fail any file under secrets/ that is not encrypted (#57) (334853b)

Bug Fixes

• biome: point $schema at the installed package, not a pinned URL (#61) (7f8600b)
• fleet: stop the weekly audit reporting half the fleet (#67) (c808d50)

v1.12.0

1.12.0 (2026-09-23)

Features

• security: add a sandbox profile that is checked, not just written (#54) (b2b7830)

v1.11.0

1.11.0 (2026-09-21)

Features

• templates: filter debug logs at runtime instead of promising it (#51) (9bd6bab)

v1.10.0

1.10.0 (2026-09-19)

Features

• handbook: make the session log countable, and check it (#49) (d8dac28)
• templates: enforce the Python conventions ruff can check (#48) (c394ddf)
• templates: make Workers runtime rules a lint error (#47) (e3e87a6)

v1.9.0

1.9.0 (2026-09-16)

Features

• acceptance: run the criteria gate on Python repos too (#45) (436c528)

v1.8.2

1.8.2 (2026-09-14)

Bug Fixes

• scripts: prevent unsafe partial adoption writes (#42) (dc70165)

v1.8.1

1.8.1 (2026-09-12)

Bug Fixes

• security: harden workflows and patch test dependencies (#38) (af9e8d3)

v1.8.0

1.8.0 (2026-09-11)

Features

• let bot PRs run their own checks via an optional AUTOMATION_TOKEN (#36) (0677d7a)

v1.7.1

1.7.1 (2026-09-11)

Bug Fixes

• scripts: pin a concrete template ref so copier update works (d612f0f)
• scripts: pin a concrete template ref so copier update works (b21397e)

v1.7.0

1.7.0 (2026-09-11)

Features

• athena-check: add an advisory instruction-drift check on PRs (a38829f)
• backups: add nightly D1 backup with service-enforced retention (abcf89a)
• backups: add nightly D1 backup with service-enforced retention (6839925)
• enforce coverage, smoke-check deploys, and add an agent entry point (c85d4e7)
• release: smoke-check the deployed version before going green (7e74915)
• templates: enforce a coverage floor in both templates (81a20ac)
• templates: ratchet the coverage floor to the measured numbers (0a9a0b8)

Bug Fixes

• security: stop flagging literal shell=True commands (bc70b92)
• security: stop flagging literal shell=True commands (ef170be)