Changelog / v1.1.0

Every rule begins with a failure.

Every release is tied to committed repository history and publicly inspectable evidence.

v1.1.0

October 13, 2026 / public source

Added

Approved scope stays locked

New runs seal approved plans and detect later changes outside the agreed scope.

01
Added

Milestone release checkpoints

Each milestone can require a demonstration or release receipt, with an explicit human handoff when verification is pending.

02
Fixed

Deferred ideas avoid missed or duplicate issues

Quoted titles are matched safely, and interrupted issue creation resumes from persisted handoff state.

03
Fixed

Site dependency audit

The site audit now reports its time-limited advisory policy and checks the supported dependency set.

04
v1.0.0

September 29, 2026 / first tagged release

Added

One provider-neutral skill

Claude Code and Codex use the same contract while retaining native invocation and runners.

01
Added

Runnable refusal specimen

A redacted fixture shows false delivery blocked, honest delivery accepted, and terminal mismatch rejected.

02
Added

Machine-readable proof manifest

Every public claim maps to artifacts, expected output, and a visible evidence boundary.

03
Added

Nine-route discovery contract

Unique metadata, canonical URLs, crawl rules, and evidence boundaries are checked locally and on the public site. Indexation remains unverified.

04
Updated

Install verification boundary

The public skill installs project-locally for Claude Code and Codex. On a machine with a same-name user-wide skill, Codex selected that copy; project-local selection in that collision case remains unverified.

05
Fixed

Terminal-state mismatch bypass

The gate now rejects a requested terminal that conflicts with the state already recorded by the run.

06
Fixed

Ambiguous gate invocation

Calls without exactly one phase or terminal now fail with a usage error.

07
Fixed

Unsafe runner inputs

The runner rejects path traversal, shell syntax in slugs, and non-integer session caps.

08

Most useful change

The gate learned to distrust itself.

A regression preserved a contradiction the original terminal check incorrectly passed. The fixed gate now names both states and exits 1.

Inspect before and after