v1.11.0

Added

• core --wrapper-check now reports bin_in_managed_cache — whether the resolved binary path sits inside the Claude Code plugin cache / marketplace clone.
• session-end now best-effort reaps orphaned data/bin binaries left in superseded Claude Code plugin-cache version dirs (never the current version). The rm -rf is gated on the canonicalised target (cd … && pwd -P, plus a ..-component refusal), so a ..-laden CLAUDE_PLUGIN_ROOT or a symlinked version-dir/data component cannot escape the verified …/plugins/cache/anton-core/ subtree.

Changed

• Operators who hit the managed-cache bootstrap refusal (bin_dir_in_managed_cache) now receive a core-shim.sh signpost in the deferred-error detail instead of the generic network/setup string.
• Build-tool versions are now pinned — golangci-lint → v2.12.2, gofumpt → v0.10.0 — with the Makefile as source of record and a new verify-tool-versions gate (in verify-checks) that fails the build if the Makefile, verify.yml, and release.yml install steps drift apart.

Fixed

• Bootstrap no longer installs the binary into the Claude Code plugin cache / marketplace clone. When the resolved binary directory falls under …/plugins/cache/… or …/plugins/marketplaces/… — Claude-Code-managed paths it never prunes — the wrapper now refuses to bootstrap (discriminator bin_dir_in_managed_cache) and signposts the operator to run anton-core via ~/.local/bin/core (core-shim.sh) instead of the bundled scripts/core. Prevents the unbounded cache leak (~55 MB per orphaned copy).