v1.1.4

v1.1.4 (2026-07-02)

Bug Fixes

• agent-wiki: Address CodeRabbit review on the split-down diff (3e26154)

• agent-wiki: Address PR review findings (3e26154)

• agent-wiki: Address review feedback from visahak (3e26154)

• agent-wiki: Harness --out-root tolerant of absolute paths (3e26154)

• ci: Harden check-vulnerabilities permissions and credential handling (#277, 2cae2fc)

• ci: Make CVE scan informational only, never block PRs (#277, 2cae2fc)

• ci: Move CVE scan to separate workflow to fix permission conflict (#282, c91bdd0)

• ci: Only block PRs on critical CVEs, create issues for high+critical (#277, 2cae2fc)

• deps: Bump litellm to >=1.84.0 to resolve 7 CVEs (#277, 2cae2fc)

• e2e: Drop bob provenance assertion that can never produce influence events (#271, 92b52f9)

• e2e: Scan all session-2 trajectories with Path.stem matching (#271, 92b52f9)

• explorations: Make CI green for the agent-wiki exploration (3e26154)

• frontend: Bump react-router-dom to ^7.15.0 to clear Mend CVEs (#267, 6de3712)

• platform-integrations: Address CodeRabbit review on PR #266 (#266, 6f2bfc0)

• platform-integrations: Forbid native-memory-store inspection in adapt-memory skill (#266, 6f2bfc0)

• platform-integrations: Guard non-dict chat JSON in Bob session-id + provenance locators (#266, 6f2bfc0)

• platform-integrations: Harden provenance locators against decoy/glob/traversal inputs (#266, 6f2bfc0)

• platform-integrations: Make codex/bob recall an imperative first action (#266, 6f2bfc0)

• platform-integrations: Scope Claude-only doctor skill out of codex/bob plugins (#266, 6f2bfc0)

• platform-integrations: Scope the adapt-memory skill to mirror-only (no side work) (#266, 6f2bfc0)

• platform-integrations: Unify codex/bob self-directed memory onto the .evolve/entities store (#266, 6f2bfc0)

• sandbox: Suppress detect-secrets false positive in justfile (#271, 92b52f9)

Features

• ci: Add automated CVE scanning with pip-audit and Dependabot (#277, 2cae2fc)

• platform-integrations: Adapt-memory auto-locates the saved native memory (no path-hunting) (#266, 6f2bfc0)

• platform-integrations: Auto-allowlist the recall-audit command for Bob (#266, 6f2bfc0)

• platform-integrations: Automate provenance matching with native-transcript awareness (#266, 6f2bfc0)

• platform-integrations: Build recall+learn out of the Claude plugin (native memory owns them) (#266, 6f2bfc0)

• platform-integrations: Close Bob provenance via a session-id bridge (#266, 6f2bfc0)

• platform-integrations: Detect silently-disabled Claude EVOLVE.md import (#266, 6f2bfc0)

• platform-integrations: Locate native Codex session transcripts in provenance (#266, 6f2bfc0)

• platform-integrations: Make uninstall reverse legacy pre-redesign artifacts (#266, 6f2bfc0)

• platform-integrations: Native-memory adapter + thin Claude EVOLVE.md via CLAUDE.md @import (#266, 6f2bfc0)

• platform-integrations: Ship adapt_memory to stable path + auto-allowlist evolve scripts (no permission prompts) (#266, 6f2bfc0)

• platform-integrations: Stable native-to-entity id linkage for provenance (#266, 6f2bfc0)

• sandbox: Add bob CLI sandbox image and e2e test (#271, 92b52f9)

---

Detailed Changes: v1.1.3...v1.1.4

v1.1.3

v1.1.3 (2026-06-02)

Bug Fixes

• llm: Avoid Groq schema-tool failures during guideline generation (#264, 5b7bc7c)

---

Detailed Changes: v1.1.2...v1.1.3

v1.1.2

v1.1.2 (2026-06-01)

Bug Fixes

• platform-integrations: Make bob custom-mode merge robust (#263, aa93ad3)

---

Detailed Changes: v1.1.1...v1.1.2

v1.1.1

v1.1.1 (2026-06-01)

Bug Fixes

• check_drift: Detect orphan files under plugin roots (#235, 09b173d)

• claude-plugin: Qualify recall audit ids across local/subscribed trees (#239, 6cc2a5b)

• e2e: Resolve issue #244 test failures (#245, a2ab28c)

• e2e: Resolve test failures from issue #244 (#245, a2ab28c)

• filesystem: Address Codex review on interrupted-write recovery (#245, a2ab28c)

• install: Purge legacy evolve-prefixed bob artifacts on install/uninstall (#235, 09b173d)

• learn: Guard payload and assessment types in log_influence.py (#239, 6cc2a5b)

• learn: Renumber influence step to Step 5 after merge (#239, 6cc2a5b)

• learn: Resolve recalled slugs across subscribed entity trees (#239, 6cc2a5b)

• learn: Resolve saved-trajectory path via shared get_trajectories_dir (#247, a584af6)

• platform-integrations: Correct bob uninstall + global custom-mode path (#258, a8c7d61)

• platform-integrations: Correct codex status label and bob README path notation (#258, a8c7d61)

• provenance: Harden payload type validation in log_influence (#251, d7a3f49)

• recall: Prefer explicit session_id over raw transcript_path stem (#251, d7a3f49)

• save-trajectory: Drop vendor-specific env-var reference from session_id guidance (#251, d7a3f49)

• save-trajectory: Embed session_id in trajectory filename for provenance (#251, d7a3f49)

• subscribe: Persist config rollback when audit append fails (#251, d7a3f49)

• subscribe: Roll back clone and config when audit append fails (#251, d7a3f49)

• subscribe: Warn on rollback save_config failure instead of silently swallowing (#251, d7a3f49)

• sync: Emit invalid-subscription rejections on stderr (#251, d7a3f49)

• sync: Surface invalid subscription entries in stdout summary (#235, 09b173d)

• tests: Satisfy ruff format on slice whitespace (#247, a584af6)

Documentation

• Drop the ADR draft (#219 PRD already captures the rationale) (#235, 09b173d)

• adr: Record compile-time plugin code generation decision (#235, 09b173d)

• experiments: Add README for the experiments dir (#261, c57148b)

Features

• Manifest-first entity recall for all platforms (#224) (#226, 003bd53)

• bob: Rename skills to colon form; tighten learn/recall workflow text (#235, 09b173d)

• build: Add claude-only on_stop hooks as platform overlays (#235, 09b173d)

• build: Add Jinja2 templating to the plugin source pipeline (#235, 09b173d)

• build: Introduce plugin-source/ and the render-equality build pipeline (#235, 09b173d)

• build: Migrate identical claude/claw-code skill scripts to plugin-source (#235, 09b173d)

• build: Template all claude/claw-code SKILL.md prose (#235, 09b173d)

• build: Unify SKILL.md prose across all four platforms (#235, 09b173d)

• claude-plugin: Record guideline usage per session in audit.log (#239, 6cc2a5b)

• evolve-lite: Manifest-first entity recall in plugin-source tree (#226, 003bd53)

• learn: Unify save_entities.py with codex's strict ownership semantics (#235, 09b173d)

• platform-integrations: Add provenance usage audits (#251, d7a3f49)

• platform-integrations: Unify plugin code under a single canonical source (#235, 09b173d)

• recall: Unify retrieve_entities.py across all four platforms (#235, 09b173d)

• sharing: Unify publish/subscribe/sync/unsubscribe + bob save_trajectory (#235, 09b173d)

---

Detailed Changes: v1.1.0...v1.1.1

v1.1.0

v1.1.0 (2026-05-01)

Bug Fixes

• Always overwrite owner and visibility in save_entities.py (#199, 7af1eb1)

• Improve publish, recall, subscribe, and sync handling (#199, 7af1eb1)

• Install Claude plugin via marketplace and harden installer (436cbdd)

• bob: Add security validations for entity names and encoding (#199, 7af1eb1)

• claude-plugin: Accept .sh scripts in hook command test (#213, bcf21c2)

• claude-plugin: Replace agent-type stop hook with command-type block decision (#213, bcf21c2)

• claude-plugin: Rewrite stop hook in Python and fix statusMessage key (#213, bcf21c2)

• claude-plugin: Use systemMessage field in hook output JSON (#213, bcf21c2)

• claude-plugin: Use valid systemMessage field in stop hook block decision (#213, bcf21c2)

• codex: Rebase sharing changes onto claude branch (#196, cd4204c)

• config: Honor dotenv backend selection at runtime (#210, 23e0541)

• docs: Fix broken link in viz guide (#187, 0be3381)

• evolve-lite: Address PR #208 round-2 review feedback (#208, e9ba82a)

• evolve-lite: Address PR review feedback (CodeRabbit on #208) (#208, e9ba82a)

• evolve-lite: Replace agent-type stop hook with command-type block decision (#213, bcf21c2)

• install: Verify save-trajectory command file in status check (#203, ec2d7d4)

• learn: Avoid duplicate claude-transcript_ prefix in saved path (#236, 6166cf0)

• learn: Disambiguate fallback file format in SKILL.md (#230, 2774633)

• learn: Document how to extract transcript_path from stop hook message (#230, 2774633)

• learn: Instruct skill to use Glob + Read when reviewing existing guidelines (#243, 0134371)

• learn: Read saved trajectory with Read tool, drop live-transcript fallback (#243, 0134371)

• learn: Read session transcript in forked execution context (#230, 2774633)

• learn: Stop the learn-skill permission-prompt storm at Stop (#243, 0134371)

• sandbox: Allowlist README placeholder in .secrets.baseline (#233, ea24a31)

• sandbox: Audit README placeholder as non-secret (#233, ea24a31)

• sandbox: Fail build with clear error if jless URL resolution fails (#232, e51a7f2)

• save-trajectory: Add explicit 0o600 mode to os.open for secure file creation (#203, ec2d7d4)

• save-trajectory: Honor EVOLVE_DIR in trajectory path resolution (#229, afe8459)

• save-trajectory: Remove non-standard thinking field from examples (#203, ec2d7d4)

• save-trajectory: Use atomic create and fix path relativization (#203, ec2d7d4)

• tests: Narrow recall assertion to exiftool only (#233, ea24a31)

• tests: Resolve 2 failing platform integration tests (#201, 42316f3)

• tests: Resolve 2 failing platform integration tests (#220, 690c3f3)

• tests: Ruff format and remove extraneous f-string prefix (#233, ea24a31)

• tests: Select newest session-2 transcript deterministically (#233, ea24a31)

• tests: Use regex word boundary for banned tool detection (#233, ea24a31)

• tips: Address CodeRabbit review issues on trajectory segmentation (#198, 7364300)

• tips: Skip subtasks with empty step ranges instead of calling LLM (#198, 7364300)

• viz: Fix typing error and ruff formatting in viz package (#187, 0be3381)

• viz: Make slug lookup deterministic by collecting all rglob matches (#187, 0be3381)

• viz: Slice content at ## Rationale heading, not first heading (#187, 0be3381)

• viz: Validate filename and slug to prevent path traversal (#187, 0be3381)

Features

• altk_evolve: Entity sharing — public/private visibility ([#201](https...

v1.0.10

v1.0.10 (2026-04-20)

Bug Fixes

• mcp: Align metadata filters and harden SSE teardown (a0bcc6d)

• postgres: Prevent ambiguous filter behavior across backends (a0bcc6d)

---

Detailed Changes: v1.0.9...v1.0.10

v1.0.9

v1.0.9 (2026-04-17)

Bug Fixes

• Publish install.sh as a versioned release artifact (#195, 0b055da)

Features

• bob: Add save-trajectory skill to Bob evolve-lite (#184, 9ca94e5)

---

Detailed Changes: v1.0.8...v1.0.9

v1.0.8

v1.0.8 (2026-04-09)

---

Detailed Changes: v1.0.7...v1.0.8

v1.0.6

v1.0.6 (2026-04-03)

Bug Fixes

• Add optional implementation_steps to Tip model and prompt (#124, d373e7e)

• Clarify task status context in tip generation prompt (#124, d373e7e)

• Completely remove all Roo references from install.sh (#130, 8e6c76d)

• Normalize implementation_steps to list[str] in combine_cluster (#124, d373e7e)

• Remove Roo integration tests and fix install.sh 'all' platform (#130, 8e6c76d)

• Resolve CI failures for formatting and type-checking (#91, 29dba09)

• bob: Clarify entity count rule in learn skill (#122, 824e4d9)

• claude: Move marketplace.json back to .claude-plugin directory (#115, 18ccaa9)

• claude: Move marketplace.json to .claude-plugin directory (#107, a54a976)

• claude: Rename plugin to evolve-lite in marketplace.json (#116, 2cae903)

• entity-io: Prevent concurrent write collisions on same slug (#91, 29dba09)

• entity-io: Reject unsafe entity type values before joining paths (#91, 29dba09)

• entity-io: Use start-of-line match for rationale header parsing (#91, 29dba09)

• evolve-lite: Format entity_io.py to satisfy ruff check (#134, 43c5951)

• evolve-lite: Guard against non-string entity type values (#122, 824e4d9)

• evolve-lite: Guard Stop hook against recursion and clean up noise (#134, 43c5951)

• evolve-lite: Tighten learn skill to only extract high-signal guidelines (#122, 824e4d9)

• justfile: Correct volume mount path in sandbox-prompt (#133, 6e2c787)

• platform-integrations: Add missing entity_io lib to Bob (#105, a3be71d)

• platform-integrations: Add missing entity_io lib to Bob integration (#105, a3be71d)

• platform-integrations: Clean up Bob evolve-lite skills (#109, 889c8f1)

• platform-integrations: Clean up trailing whitespace and add actionable recall instructions (#109, 889c8f1)

• platform-integrations: Handle SameFileError race in _safe_copy2 (#104, d88baf1)

• platform-integrations: Improve YAML parsing and error handling in install script (#100, 6bfdbbb)

• platform-integrations: Resolve Step 0 vs Step 1 ordering conflict (#109, 889c8f1)

• platform-integrations: Skip copy when src and dst are same file (#104, d88baf1)

• postgres: Derive vector schema from embedding model (#135, a6b7b33)

• postgres: Ensure pgvector extension before vector registration (#135, a6b7b33)

• tests: Add postgres dependencies to dev group for testing (#128, f2bc745)

• tests: Resolve linting errors and force isolated filesystem config in unit test fixture (#128, f2bc745)

Documentation

• Fix Codex Lite Mode installation steps in AGENTS.md (#136, 427e99d)

• Standardize cli commands to use evolve entrypoint across all readmes (#128, f2bc745)

• Sync documentation with supported platforms (add codex, remove roo) (#136, 427e99d)

• codex: Align evolve-lite skill naming and expand Codex skill guidance (#137, f962b55)

• config: Document postgres backend settings (#135, a6b7b33)

• evolve-lite: Document Stop hook UX implications and opt-out mechanism (#134, 43c5951)

• repo: Align doc examples with integrations (#131, 58e7727)

• repo: Reorganize documentation structure (#131, 58e7727)

Features

• Improve tip generation prompt with richer guidance (#124, d373e7e)

• Introduce Kaizen Web UI and Management Dashboard (#77, bd67611)

• Propagate implementation_steps through tip storage and clustering (#124, d373e7e)

• Remove Roo platform integration (#130, 8e6c76d)

• claude: Auto-invoke learn skill after each task via stop hook ([#134]...

v1.0.5

v1.0.5 (2026-03-12)

---

Detailed Changes: v1.0.4...v1.0.5