gemstack-ai 1.3.0 → 2.0.0

package/.agents/rules/03-gemstack-security.md

@@ -1,7 +1,7 @@
-# Gemstack Security Core (Military-Grade Shielding)
+# Gemstack Security Core (Architecture & Security Gates)
 
 ## Propósito
-Esta es la Ley de "Seguridad por Diseño". Todo código escrito, planificado o revisado por la IA bajo el marco Gemstack DEBE adherirse a estos principios de blindaje, independientemente del stack tecnológico utilizado. El objetivo es mitigar el 99% de las vulnerabilidades comunes (OWASP) desde el momento de la concepción del código.
+Esta es la Ley de "Seguridad por Diseño". Todo código escrito, planificado o revisado por la IA bajo el marco Gemstack DEBE adherirse a estos principios de blindaje, independientemente del stack tecnológico utilizado. El objetivo es establecer controles sistemáticos y verificables frente a vulnerabilidades comunes (OWASP Top 10) desde el momento de la concepción del código.
 
 ## 1. Cero Exposición de Credenciales (Zero Trust Secrets)
 - **Regla Estricta:** JAMÁS hardcodees contraseñas, llaves de API, secrets de Webhooks o URIs de bases de datos en el código fuente.

package/.gemstack/state.json

@@ -2,17 +2,16 @@
   "version": "0.1",
   "current_phase": "shipped",
   "status": "SHIPPED",
-  "stop_reason": "UPGRADE_C_SHIPPED_DONE",
+  "stop_reason": null,
   "active_spec": null,
   "completed_phases": [
     "spec",
-    "plan",
-    "tasks"
+    "plan"
   ],
   "phase_hashes": {
-    "spec": "9241b9e992f687e80ecef388c79731ece7af9aa75ba989dc8f0b1e9b855f7914",
-    "plan": "6a2e29e9aeda266a71ab435fa09bca3b18521835a69f6020cd8d9f135643e3aa",
-    "tasks": "1697c32a1f6596f317491df68cd1b161e5c77fbbddc74ce3f1e6e00a42619249"
+    "spec": "408e0d0aebfc6ac65cb07bbaf694b573571489d2da8aa4314ee7c36d65bbe951",
+    "plan": "845bbb28f699b642f17be9462a3fac71c112d51fb9f23b4b9ad48d665a0f17d2",
+    "tasks": "53c19462e3ec4a7c95c126c0af0fe379ff45f610c32d1bcaad79550b58783a0e"
   },
   "consistency": {
     "status": "PASS",
@@ -23,6 +22,6 @@
     "freeze": false,
     "allowed_paths": []
   },
-  "last_update": "2026-09-11T17:38:04.916Z",
-  "last_completed_feature": "specs/008-cost-provider-safety-gates"
+  "last_update": "2026-09-23T02:09:36.940Z",
+  "last_completed_feature": "specs/014-gemstack-2.0-context-memory"
 }

package/CHANGELOG.md

@@ -2,6 +2,93 @@
 
 All notable changes to this project will be documented in this file.
 
+## [v2.0.0] - 2026-09-23
+
+### Major Architecture Milestone: Gemstack 2.0
+Gemstack 2.0 elevates the framework from declarative agent guidance to reproducible cryptographic and runtime guarantees.
+
+### Added
+- **P0 Trust Boundaries & Hardening (Sprint A)**:
+  - `resolveSafeStrict`: Enforces realpath resolution to permanently eliminate arbitrary symlink path traversal outside project roots.
+  - Remote Skill Provenance: Verifies remote skills against `allowed_sources` and validates SHA-256 content checksums prior to installation.
+  - Native Secret Blocking in Git Hooks: Local pre-commit hook automatically scans for and rejects commits containing API keys (GitHub PATs, OpenAI/Anthropic/Stripe tokens), private keys, or `.env` files.
+  - Environment & Log Sanitization: Eliminates credential leakage by redacting sensitive values across all CLI logs.
+- **P1 Honest Evidence & Reliable Metrics (Sprint B)**:
+  - Authenticated Billable Action Tokens: Implemented HMAC-SHA256 authenticated spending tokens, cumulative budget accounting, and positive unit enforcement (`src/lib/safety-gates.js`).
+  - Disk-Recomputed Visual Evidence: Screenshots must be verified by recomputing SHA-256 hashes from disk; rejects self-declared diffs without a registered visual diff adapter (`UNVERIFIED`).
+  - Pre-Persistence Secret Masking: Sensitive inputs and credentials are redacted prior to persisting visual evidence on disk.
+  - Public Control Matrix: Public `Control / Scope / Test / Limit` 4-column matrix in `README.md` and rules, eliminating unverified marketing claims.
+  - Pinned CI Workflows: GitHub Actions pinned to 40-character commit SHAs with explicit least-privilege `permissions: contents: read`.
+- **P2 Adaptable SDD & Incremental Specs (Sprint C)**:
+  - Four Rigor Levels: `quick` (single-artifact lightweight mode), `fix` (enforces linked regression test), `feature` (standard 3-phase SDD), and `high-risk` (threat model, rollback plan, and dual human approvals).
+  - Incremental Spec Deltas: Structured `ADDED`, `MODIFIED`, and `REMOVED` declarations preventing destructive overwriting of base specifications by concurrent agents.
+  - Offline Spec Merge: `gemstack spec merge` detects colliding contracts and duplicate canonical test IDs before merging branches.
+  - Formal Contract Amendments: Replaces silent contract mutations with signed, auditable amendment records (`src/lib/contract-amendments.js`).
+- **P3 Efficient Context & Persistent Memory (Sprint D)**:
+  - Context Fatigue Detector & Noise Pruning: Flags warnings when accumulated token load or redundancy ratios exceed thresholds; deterministically prunes ephemeral chatter while preserving contracts and state.
+  - Offline Dependency Auditor in `gemstack doctor`: Analyzes orphan dependencies, undeclared imports, and local circular cycles in <10ms without invoking external network requests.
+  - Memory Cross-Verification in `gemstack verify`: Reconciles recent git commit log against `handoff.md` to prevent unrecorded work from being lost across sessions.
+
+### Validation
+- 180 physical tests passing across 23 test suites with 0 failures and 0 skipped.
+- Full CI test suite (`npm run ci:all`) passing cleanly.
+- `gemstack verify` passing with 0 errors and 0 open blockers.
+- Zero runtime npm dependencies maintained (`dependencies: {}`).
+
+## [v1.4.0] - 2026-09-11
+
+### Added
+- **Agent Swarm Planning & Validation (Upgrade E)**: Deterministic multi-worker wave planning and coordination verification framework.
+  - Deterministic swarm planning contracts and canonical `swarm.json` manifest schema.
+  - Task ownership and write-set partitioning: enforces disjoint write boundaries per wave (`write_set(T1) ∩ write_set(T2) = ∅`).
+  - Write-collision detection: automatically detects overlapping write sets and serializes conflicting tasks into sequential waves.
+  - Dependency wave scheduling: preserves task prerequisite graphs and rejects circular dependencies (`SWARM_DEPENDENCY_CYCLE`).
+  - Task-scoped context projections: compiles minimal, role-tailored contexts derived from `context-capsule.json`.
+  - Context freshness validation: verifies live capsule hash against `source_capsule_hash` to reject stale projections (`SWARM_CONTEXT_STALE`).
+  - Separation of duties gate: mechanically enforces `AUTHOR != REVIEWER` (`SWARM_SELF_REVIEW_DETECTED`).
+  - Provider policy and budget gating: integrates with Upgrade C `ProviderCapabilityGate` and `BillableActionGate` to prevent budget runaway.
+  - Subagent limits enforcement: strictly blocks unauthorized recursive worker spawning.
+  - Pure offline read-only verification (Stage 5.3 in `gemstack verify`): validates swarm manifests without worker or agent execution.
+  - Explicit non-execution invariant: Gemstack core does NOT execute autonomous coding agents.
+- **Visual QA Evidence (Upgrade E)**: Mechanical, offline visual verification architecture based on cryptographic digests and neutral masking.
+  - Canonical `visual-qa.json` manifest schema declaring route, deterministic viewport dimensions, and approved baseline references.
+  - Deterministic viewport specifications: standard profiles with explicit width, height, and device scale factor.
+  - Cryptographic baseline pinning: baseline images tracked via canonical SHA-256 byte digests (`image_sha256`).
+  - Tampering detection: flags baseline image mutations on disk (`VQA_BASELINE_TAMPERED`).
+  - Neutral selector masking: masks dynamic elements (`[MASKED_NEUTRAL]`) to prevent flaky subpixel and timestamp diffs.
+  - Mandatory automatic password & credential masking: automatically replaces sensitive input fields (`type=password`, `data-sensitive=true`) with `[MASKED_SECRET]`.
+  - Structured visual evidence comparison: fast SHA-256 digest match path with offline tolerance-bounded diffing (`max_diff_percentage`).
+  - Explicit baseline promotion: baselines are NEVER auto-updated or healed during test or verify; requires explicit `gemstack vqa promote <scenario-id>`.
+  - Pure offline read-only verification (Stage 5.4 in `gemstack verify`): zero browser launches, zero network calls, zero file mutations.
+  - Explicit non-execution invariant: Gemstack core does NOT launch browsers and does NOT capture screenshots automatically.
+- **New CLI Surfaces**:
+  - `gemstack swarm plan [--json]`: compiles `tasks.md` into deterministic concurrent waves.
+  - `gemstack swarm validate [--json]`: validates write partitions, review separation, and context freshness.
+  - `gemstack vqa validate [--json]` (or `gemstack visual validate`): validates visual QA manifests, viewports, baselines, and evidence offline.
+  - `gemstack vqa promote <scenario-id>` (or `gemstack visual promote`): explicitly promotes live evidence to approved canonical baseline.
+
+### Changed
+- `gemstack verify` extended with Stage 5.3 (Swarm Audit) and Stage 5.4 (Visual QA Audit) running in pure read-only mode.
+- `src/lib/closure-context.js` updated to track `swarm.json` and `visual-qa.json` in closure context hashing, and support alphanumeric task IDs (`UE-T001`..`T029`).
+- `package.json` test script updated to register the 5 new Upgrade E test suites.
+
+### Compatibility
+- 100% backward compatible with existing Gemstack repositories and frozen contracts from Upgrades A, B, C, and D.
+- Zero external runtime npm dependencies added (`package.json` dependencies remain `{}`).
+- Zero external development npm dependencies added (`package.json` devDependencies remain `{}`).
+
+### Validation
+- 29/29 Upgrade E tasks COMPLETE.
+- 20/20 Upgrade E canonical acceptance tests passing (`TEST-SWARM-A01`..`E02`, `TEST-VISUAL-A01`..`E02`).
+- 10/10 Upgrade E bootstrap contracts passing.
+- 26/26 adversarial test cases passing.
+- 126/126 physical tests passing across 14 suites with 0 failures and 0 skipped.
+- Full CI test matrix (`npm run ci:all`) passing cleanly.
+- `gemstack verify` exit code 0 with 0 errors and 0 open blockers.
+- Swarm manifest verified: `VALID` and `FRESH`.
+- Visual QA manifest verified: `VALID` and `FRESH`.
+- Closure evidence: `specs/010-agent-swarm-visual-qa/closure.json` status `VERIFIED`.
+
 ## [v1.3.0] - 2026-09-11
 
 ### Added

package/CONTRIBUTING.md

@@ -1,6 +1,6 @@
 # Contributing to Gemstack
 
-First off, thank you for considering contributing to Gemstack! Gemstack is an open-source, local-first framework designed to supercharge AI coding agents with Spec-Driven Development (SDD) and military-grade security out of the box.
+First off, thank you for considering contributing to Gemstack! Gemstack is an open-source, local-first framework designed to supercharge AI coding agents with Spec-Driven Development (SDD) and verifiable architectural and security gates out of the box.
 
 ## Code of Conduct
 By participating in this project, you agree to abide by our [Code of Conduct](./CODE_OF_CONDUCT.md).

package/README.md

@@ -1,13 +1,15 @@
 <div align="center">
   <img src="assets/logo.jpg" alt="Gemstack Logo" width="200" style="border-radius: 20px" />
-  <h1>Gemstack</h1>
+  <h1>Gemstack v2.0.0</h1>
   <p><b>The Local-First Agentic Framework for Spec-Driven Development</b></p>
 
   [![npm version](https://img.shields.io/npm/v/gemstack-ai.svg?style=flat-square)](https://www.npmjs.com/package/gemstack-ai)
+  [![Release](https://img.shields.io/badge/release-v2.0.0-blue.svg?style=flat-square)](https://github.com/rtorrescodes/Gemstack/releases/tag/v2.0.0)
   [![CI Build](https://img.shields.io/github/actions/workflow/status/rtorrescodes/Gemstack/main-ci.yml?style=flat-square&branch=main)](https://github.com/rtorrescodes/Gemstack/actions)
   [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg?style=flat-square)](https://opensource.org/licenses/MIT)
-  [![Security Shield](https://img.shields.io/badge/Security-Military--Grade-red.svg?style=flat-square)](#military-grade-security-shield)
+  [![Security Shield](https://img.shields.io/badge/Security-Architecture%20Gates-green.svg?style=flat-square)](#security-architecture--safety-gates)
 
+> **🚀 Current Stable Release: `v2.0.0`** — *Security Hardening, Adaptable SDD & Persistent Memory Checkpoint*  
 > **💡 ¿No sabes por dónde empezar o cómo funciona esto?**  
 > 👉 [**¡Lee el Manual de Usuario Interactivo (La Guía Definitiva)!**](MANUAL.md) 👈
 </div>
@@ -16,20 +18,23 @@
 
 Gemstack is a zero-dependency, local-first framework designed to supercharge your AI Coding Agents (like Google Antigravity, Claude, Cursor, or Aider). 
 
-Instead of letting AI write code blindly in a chaotic chat window, Gemstack installs a "Brain" directly into your repository. It enforces **Spec-Driven Development (SDD)**, injecting strict rules, autonomous skills, and military-grade security into the AI's context.
+Instead of letting AI write code blindly in a chaotic chat window, Gemstack installs a "Brain" directly into your repository. It enforces **Spec-Driven Development (SDD)**, injecting strict rules, autonomous skills, and rigorous security gates into the AI's context.
 
-## ✨ Features
+## ✨ Features (v2.0.0)
 
-- 🧠 **Spec-Driven Development (SDD)**: The AI is physically prevented from hallucinating code without writing and getting approval for a `spec.md`, `plan.md`, and `tasks.md` first.
-- 🛡️ **Military-Grade Security**: Includes a built-in Chief Security Officer (`gemstack-cso`) and immutable Constitution Rules that force the AI to respect OWASP, zero-trust secrets, and multi-tenant isolation.
-- 🐝 **Swarm Architecture**: Tag tasks with `[P]` and invoke `/swarm` to watch the AI spawn parallel subagents to code your app simultaneously.
-- 🏥 **Self-Healing CI/CD**: Run `/heal` when GitHub Actions fails. The AI will autonomously read the CI logs, write the patch, and push the fix.
-- 👁️ **Visual QA Automation**: The `/qa-visual` skill instructs the agent to write and execute ephemeral Playwright scripts in an isolated sandbox to visually verify UI criteria.
-- 📦 **Zero Dependencies**: Gemstack's footprint is just standard Markdown and JSON files. No heavy NPM packages polluting your production bundle.
+- 🧠 **Adaptable Spec-Driven Development (SDD)**: Four rigor levels (`quick`, `fix`, `feature`, `high-risk`) tailoring validation rigor to change impact without unnecessary friction.
+- 🛡️ **Hardened Trust Boundaries & Safety Gates**: Authenticated HMAC spending tokens (`BillableActionGate`), realpath symlink enforcement, pre-commit secret blocking, and automated credential masking.
+- 🔄 **Incremental Specs & Conflict Detection**: Structured `ADDED`/`MODIFIED`/`REMOVED` declarations and offline `gemstack spec merge` to mechanically detect contract collisions before merging branches.
+- 📜 **Formal Contract Amendments**: Replaces silent contract tampering with signed, auditable amendment records (`src/lib/contract-amendments.js`).
+- 🩺 **Offline Health & Dependency Auditor**: `gemstack doctor` scans for orphans, undeclared packages, and local circular imports in milliseconds without network calls.
+- 🧠 **Context Fatigue Detection & Persistent Memory**: Monitors token accumulation, prunes ephemeral noise, and cross-verifies `handoff.md` against git commit history.
+- 🐝 **Agent Swarm Planning**: Compiles tasks into deterministic execution waves with disjoint write partition ownership.
+- 👁️ **Visual QA Verification**: Disk-recomputed SHA-256 evidence hashing with offline tolerance-bounded diffing and neutral masking.
+- 📦 **Zero Dependencies**: 100% native Node.js standard library with 0 runtime and 0 dev npm dependencies.
 
 ## 🚀 Quickstart
 
-Start a new project or upgrade an existing one in seconds:
+Start a new project or upgrade an existing one in seconds with **Gemstack v2.0.0**:
 
 ```bash
 # Initialize Gemstack in your current repository
@@ -60,14 +65,25 @@ Gemstack works by providing an **Operating System** for your LLM via markdown fi
 5. `/review` -> The AI reviews the diffs against the `03-gemstack-security.md` rules.
 6. `/handoff` -> The AI saves its memory to `handoff.md` so you can close your laptop and resume flawlessly tomorrow.
 
-## 🛡️ Military-Grade Security Shield
+## 🛡️ Security Architecture & Safety Gates
 
-Gemstack ships with `03-gemstack-security.md` and `04-gemstack-infrastructure.md`, rulebooks extracted from high-compliance SaaS and Cloud Native environments (OWASP, NIST). When you run `/cso` or `/review`, the AI strictly checks for:
+Gemstack ships with `03-gemstack-security.md` and `04-gemstack-infrastructure.md`, rulebooks based on high-compliance SaaS and Cloud Native standards (OWASP, NIST). When you run `/cso` or `/review`, the AI systematically checks for:
 - **AppSec (Level 2)**: IDOR Protection, Race Condition prevention, CSRF/SSRF blocking, Rate Limiting, and Audit Trails.
 - **Zero Trust Secrets**: Hardcoded keys are blocked.
 - **DevSecOps & Infra**: Enforces Immutable Infrastructure (Docker/Terraform), Private Subnets (VPC), IAM Least Privilege, and Cloud Secret Managers.
 - **Server-Side Validation**: Complete distrust of frontend state.
 
+### Control & Verification Matrix
+
+| Control | Scope | Test Verification | Boundary Limit |
+|---|---|---|---|
+| **Spec-Driven Development (SDD)** | Architectural alignment and phase gating | Cryptographic phase hashes (`gemstack verify`) | Does not prevent human commit of unapproved manual diffs outside the CLI |
+| **Filesystem Traversal & Symlink Defense** | Scaffolding, backup, install, and visual QA writes | Realpath resolution and confined atomic writes (`tests/security-p0-hardening.test.js`) | Local OS processes with root privileges outside Gemstack CLI process boundaries |
+| **Secret Scanning & Hook Preservation** | Local git commits and CI pipelines | Multi-provider regex scanning and pre-commit wrapper chaining (`scripts/ci/check-secrets.js`) | Only inspects staged text files; does not inspect compiled binary blobs or external networks |
+| **Spending & Cost Safety Gates** | Billable agent API and model execution | HMAC token verification, cumulative budget tracking, positive unit bounds (`src/lib/safety-gates.js`) | Enforced on calls through ProviderBoundary; does not intercept direct outbound curl requests |
+| **Visual QA Evidence Verification** | UI screenshots and regression detection | Disk-computed SHA-256 and pluggable diff adapter; UNVERIFIED fallback (`src/lib/visual-qa.js`) | Diff accuracy depends on adapter engine; static hashes detect file modification only |
+| **Agent Rulebooks & AppSec Guidance** | Agent context prompts during review & planning | CSO audit scripts and rule templates (`.agents/rules/03-gemstack-security.md`) | Agent guidance is advisory; mechanical enforcement requires CLI verify and CI gates |
+
 ## 🔒 Architecture Consistency & Phase Freezing
 
 Gemstack mechanically prevents AI agents from silently violating or hallucinating deviations from approved architecture. Critical decisions declared in `spec.md` are frozen using canonical cryptographic contracts and checked deterministically through `plan.md`, `tasks.md`, and implementation:
@@ -118,6 +134,7 @@ Gemstack Upgrade C guarantees fail-closed safety for commercial, remote, and AI
 - **Environment Safety**: Commercial provider execution is forbidden in `test` and `ci` environments.
 - **Trusted Mock Boundaries**: Test mocks operate strictly in memory with zero network escapes.
 - **Offline Purity**: `gemstack verify` runs 100% offline with zero external network or provider charges.
+- **Core Invariant**: `NO PROOF OF AUTHORIZATION = NO COMMERCIAL EXECUTION`.
 
 ## 📦 Context Capsule & Compression
 
@@ -130,18 +147,73 @@ Gemstack Upgrade D enables deterministic, constraint-lossless context compressio
 - **Size Budgeting**: 32 KB target budget with deterministic priority condensation and 64 KB fail-closed hard cap.
 - **`gemstack context show`**: Displays human-readable continuation context summary or raw JSON.
 - **`gemstack context verify`**: Read-only validation of context capsule freshness and integrity.
+- **Core Invariant**: `Context Capsule = derived continuation context NOT project authority`.
+
+## 🐝 Agent Swarm Planning & Validation
+
+Gemstack Upgrade E introduces deterministic multi-worker planning and write-set partition validation:
+- **`gemstack swarm plan`**: Compiles parallelizable `tasks.md` items into deterministic concurrent waves in `specs/<feature>/swarm.json`.
+- **Exclusive Write Boundaries**: Validates that concurrent tasks possess strictly disjoint write sets (`write_set(T1) ∩ write_set(T2) = ∅`), mathematically preventing write collisions.
+- **Collision Avoidance**: Overlapping write sets are automatically serialized into sequential waves (`SWARM_WRITE_COLLISION_PREVENTED`).
+- **Separation of Duties Gate**: Non-waivable mechanical check enforcing `author != reviewer` on all task reviews (`SWARM_SELF_REVIEW_DETECTED`).
+- **Task-Scoped Context Projections**: Projects minimal, structured context payloads derived from `context-capsule.json` without raw chat transcripts or prompt noise.
+- **Provider & Budget Integration**: Intercepts model invocations via Upgrade C `ProviderCapabilityGate` and `BillableActionGate` to prevent budget breaches.
+- **`gemstack swarm validate`**: Pure read-only validation of wave partitions, task ownership, and review independence.
+- **Explicit Boundary**: *Gemstack core coordinates and validates; Gemstack core does NOT execute autonomous coding agents.*
+
+## 👁️ Visual QA Evidence & Offline Verification
+
+Gemstack Upgrade E provides mechanical visual verification grounded in cryptographic digests and offline comparisons:
+- **Canonical Visual Manifest (`visual-qa.json`)**: Declares scenario routes, deterministic viewports, selector masks, baseline digests, and diff tolerances.
+- **Deterministic Viewports**: Standardized profiles (Desktop, Mobile, Tablet) with locked width, height, and device scale factor.
+- **Cryptographic Baseline Hashing**: Baselines are tracked and pinned via canonical SHA-256 hashes (`image_sha256`); flags disk tampering (`VQA_BASELINE_TAMPERED`).
+- **Neutral & Secret Masking**: Eliminates dynamic timestamp/counter diff flakiness (`[MASKED_NEUTRAL]`) and enforces mandatory automatic masking on password and credential fields (`[MASKED_SECRET]`).
+- **Structured Evidence Comparison**: Fast SHA-256 match path with offline tolerance-bounded diffing (`max_diff_percentage`).
+- **Explicit Promotion Semantics**: Baselines are NEVER auto-updated or healed during test or verify; requires explicit `gemstack vqa promote <scenario-id>`.
+- **`gemstack vqa validate`**: Pure read-only offline validation of manifests, baselines, and evidence completeness.
+- **Explicit Boundary**: *Gemstack core inspects and diffs evidence; Gemstack core does NOT launch browsers and does NOT capture screenshots automatically. Capture remains external/adapted.*
+
+## 🏛️ Architectural Principles
+
+Gemstack operates on strict, non-negotiable architectural principles:
+
+```text
+authority > derived artifacts
+evidence ≠ authority
+verify = validate
+agent output ≠ architecture
+visual evidence ≠ architecture
+credentials ≠ authorization
+provider availability ≠ permission
+unknown cost ≠ free
+fallback ≠ inherited authorization
+agent says done ≠ task mechanically complete
+author ≠ reviewer where independent review is required
+```
 
-## 🐝 Advanced Autonomy (The WOW Update)
+## 💻 CLI Reference
 
-Gemstack isn't just passive documents; it actively orchestrates agentic capabilities:
+Gemstack provides a focused, deterministic CLI surface:
 
-| Command | Action |
-|---------|--------|
-| `/swarm` | Orchestrates parallel subagents for tasks marked `[P]` |
-| `/qa-visual` | Spawns sandbox browsers to visually assert Acceptance Criteria |
-| `/dashboard` | Generates a rich, interactive inline UI of your project's progress |
-| `/heal` | Hooks into GitHub CLI (`gh`) to read failing CI logs and auto-push fixes |
-| `/sandbox` | Wraps risky AI execution inside an ephemeral Docker container |
+```bash
+# Core verification & collection
+gemstack verify [--json] [--target <dir>]     # 6-stage read-only audit (0 mutations, 0 network)
+gemstack collect [--target <dir>]             # Executes test runner & records closure.json
+gemstack ship [--target <dir>]                # Transitions lifecycle to SHIPPED if closure is VERIFIED
+
+# Context capsule (Upgrade D)
+gemstack context generate [--force]           # Compiles deterministic context-capsule.json
+gemstack context show [--raw]                 # Displays continuation context summary or JSON
+gemstack context verify                       # Verifies capsule freshness and provenance
+
+# Agent swarm (Upgrade E)
+gemstack swarm plan [--json]                  # Compiles tasks into disjoint concurrent waves
+gemstack swarm validate [--json]              # Validates write sets and review attestations
+
+# Visual QA (Upgrade E)
+gemstack vqa validate [--json]                # Validates visual manifest, viewports, and baselines
+gemstack vqa promote <scenario-id>            # Explicitly promotes live evidence to baseline
+```
 
 ## 🪝 Active Security (Git Hooks)
 
@@ -157,6 +229,7 @@ You can install agent skills created by the community directly into your project
 npx gemstack-ai install https://raw.githubusercontent.com/community/gemstack-skills/main/django-expert/SKILL.md
 ```
 
+
 ## 🤖 MCP Server (Model Context Protocol)
 
 Gemstack ships with a built-in MCP server that exposes the SDD state of your project to any MCP-compliant AI client (like Claude Desktop or Cursor). 
@@ -173,6 +246,24 @@ Add the following to your MCP client configuration:
 }
 ```
 
+## 📜 Version History & Release Highlights
+
+Gemstack tracks every architectural enhancement through verifiable milestones:
+
+| Version | Milestone & Core Highlights | Canonical Tests | Status |
+| :--- | :--- | :--- | :--- |
+| **`v2.0.0`** | **Security Hardening, Adaptable SDD & Persistent Memory**<br/>• Strict symlink realpath confinement & remote skill SHA-256 verification.<br/>• HMAC-authenticated spending tokens & disk-recomputed visual evidence.<br/>• 4 SDD Rigor levels (`quick`, `fix`, `feature`, `high-risk`) & incremental spec deltas.<br/>• Signed contract amendments & offline collision detection (`gemstack spec merge`).<br/>• Context fatigue detection, offline dependency auditor, & git-memory cross-audit. | **180 physical tests / 23 suites** | **Current Stable** |
+| **`v1.4.0`** | **Agent Swarm Planning & Visual QA Evidence Checkpoint**<br/>• Multi-worker wave planning with disjoint write partitions (`swarm.json`).<br/>• Separation of duties gate (`author != reviewer`) and subagent limits.<br/>• Offline Visual QA manifest, deterministic viewports, & auto-secret masking. | **126 physical tests / 14 suites** | Superseded by v2.0.0 |
+| **`v1.3.0`** | **Cost & Provider Safety Gates + Context Capsule**<br/>• `ProviderCapabilityGate` and `BillableActionGate` (NO PROOF = NO EXECUTION).<br/>• Deterministic context capsule compression with 32KB budget. | **100 physical tests / 25 suites** | Superseded by v1.4.0 |
+| **`v1.2.0`** | **Mechanical Test Matrix & Closure Evidence**<br/>• Canonical acceptance matrices, mutating collector (`gemstack collect`), & `closure.json`.<br/>• Zero-shell TAP test runner & exact reconciliation arithmetic. | **53 physical tests / 11 suites** | Superseded by v1.3.0 |
+| **`v1.1.2`** | **Architecture Consistency Engine & Phase Freezing**<br/>• Cryptographic SHA-256 phase freezing (`spec.md` -> `plan.md` -> `tasks.md`).<br/>• 6 canonical contract types & context-bound accepted exceptions. | **33 physical tests** | Superseded by v1.2.0 |
+| **`v1.0.2`** | **Zero Silent Failures & Intent Routing**<br/>• Constitution update prohibiting `2>nul` silent masking in test runners.<br/>• Semantic intent-based routing and unified `gemstack verify` command. | **8 physical tests** | Superseded by v1.1.2 |
+| **`v0.3.0`** | **Cross-Platform CI & Supply-Chain Hardening**<br/>• Multi-OS GitHub Actions workflows and zero-dependency CI verification scripts. | Unit + Smoke suites | Superseded by v1.0.2 |
+| **`v0.2.0`** | **Zero-Dependency CLI & Scaffolding Engine**<br/>• Local-first `gemstack init` and `gemstack update` with automated rollback backups. | Native node:test suite | Superseded by v0.3.0 |
+| **`v0.1.0`** | **Initial Antigravity Spec-Driven Development Framework**<br/>• Foundational 13 skills, Constitution rulebooks, and SecureDocs anti-IDOR demo app. | Demo smoke tests | Superseded by v0.2.0 |
+
+For full historical details and upgrade guides, see [CHANGELOG.md](CHANGELOG.md) and [RELEASE_NOTES.md](RELEASE_NOTES.md).
+
 ## 📚 Documentation
 
 Dive deeper into the Gemstack architecture:

package/RELEASE_NOTES.md

@@ -1,5 +1,84 @@
 # Gemstack Release Notes
 
+# Gemstack v2.0.0 — Security Hardening, Adaptable SDD & Persistent Memory
+
+## Highlights
+
+### Gemstack 2.0 Architectural Milestone
+Gemstack 2.0 converts declarative conventions into reproducible cryptographic and runtime guarantees:
+
+### Sprint A: P0 Trust Boundaries & Hardening
+- **Strict Symlink Traversal Elimination**: Replaced lax normalization with `resolveSafeStrict` (`fs.realpathSync`) to permanently eliminate symlink escapes.
+- **Remote Skill Provenance & Checksums**: Enforces `allowed_sources` and SHA-256 verification before installing community skills.
+- **Git Pre-commit Hook Hardening**: Zero-dependency regex secret blocking directly inside native Git hooks.
+- **Environment & Log Sanitization**: Scrubbed process environments and redacted sensitive credentials in all output logs.
+
+### Sprint B: P1 Honest Evidence & Reliable Metrics
+- **Cryptographic Billable Token Boundary**: Implemented HMAC-SHA256 authenticated spending tokens, cumulative budget verification, positive unit validation, and strict scope binding.
+- **Visual QA Evidence Verification**: Forced disk re-computation of screenshot hashes; rejected self-declared diffs without a registered visual diff adapter (`UNVERIFIED` fallback).
+- **Pre-Persistence Secret Masking**: Added credential masking before visual evidence is written to disk.
+- **Public Control Matrix**: Replaced all ungrounded superlatives with the public `Control / Scope / Test / Limit` matrix across `README.md` and security rules.
+- **GitHub Actions Hardening**: Pinned all workflow actions to 40-character commit SHAs with explicit least-privilege `permissions: contents: read` and clean `npm ci`.
+
+### Sprint C: P2 Adaptable SDD & Incremental Specs
+- **Four Rigor Levels**: `quick` (single-artifact lightweight mode), `fix` (linked regression test), `feature` (standard 3-phase SDD), and `high-risk` (threat model, rollback plan, and dual human approvals).
+- **Incremental Spec Deltas**: Structured `ADDED`, `MODIFIED`, and `REMOVED` declarations preventing destructive clobbering of base specifications.
+- **Spec Merge & Conflict Detection**: `gemstack spec merge` detects colliding contracts and duplicate canonical test IDs before merging branches.
+- **Formal Contract Amendments**: Replaces silent contract mutations with signed, auditable amendment records (`src/lib/contract-amendments.js`).
+
+### Sprint D: P3 Efficient Context & Persistent Memory
+- **Context Fatigue Detector & Noise Pruning**: Monitors token accumulation and redundancy; deterministically prunes ephemeral chatter while preserving contracts and decisions.
+- **Offline Dependency Auditor in `gemstack doctor`**: Scans dependencies offline for orphans, undeclared imports, and circular cycles in <10ms without network calls.
+- **Memory Cross-Verification in `gemstack verify`**: Reconciles recent git commits against `handoff.md` to prevent unrecorded work from being lost across sessions.
+
+## Acceptance & Regression Baseline
+- 180 total physical tests passing across 23 explicitly enumerated suites with 0 failures and 0 skipped.
+- Full CI suite (`npm run ci:all`) passing cleanly.
+- `gemstack verify` exit code 0 with 0 errors and 0 open blockers.
+- Zero runtime dependencies maintained (`dependencies: {}`).
+
+---
+
+# Gemstack v1.4.0 — Agent Swarm & Visual QA
+
+## Highlights
+
+### Upgrade E — Agent Swarm Planning & Validation
+- **Deterministic Multi-Worker Planning**: Compiles parallelizable `tasks.md` items into deterministic, phased execution waves recorded in canonical `swarm.json`.
+- **Task Ownership & Exclusive Write Boundaries**: Validates that concurrent tasks possess strictly disjoint file write partitions (`write_set(T1) ∩ write_set(T2) = ∅`), completely preventing parallel write collisions.
+- **Automatic Collision Avoidance**: Automatically serializes conflicting tasks into sequential waves during planning (`SWARM_WRITE_COLLISION_PREVENTED`).
+- **Separation of Duties Gate**: Non-waivable mechanical check enforcing `author != reviewer` on all task reviews (`SWARM_SELF_REVIEW_DETECTED`).
+- **Task-Scoped Context Projections**: Projects minimal, structured context payloads derived from Upgrade D `context-capsule.json` with conversational narrative and raw chat transcripts strictly excluded.
+- **Cryptographic Provenance & Freshness**: Pinned `source_capsule_hash` ensures workers operate against verified project state; flags drift fail-closed (`SWARM_CONTEXT_STALE`).
+- **Provider & Budget Gating**: Intercepts model invocations via Upgrade C `ProviderCapabilityGate` and `BillableActionGate` to prevent runaway spending across concurrent workers.
+- **Worker Limits**: Prevents recursive child agent spawning (`SWARM_RECURSIVE_SPAWN_DENIED`).
+- **Explicit Invariant**: Gemstack core coordinates and validates; it does NOT execute autonomous coding agents.
+
+### Upgrade E — Visual QA Evidence & Offline Verification
+- **Canonical Visual QA Manifest (`visual-qa.json`)**: Declares explicit routes, deterministic viewports, selector masks, baseline references, and diff tolerances.
+- **Deterministic Viewport Specifications**: Locks standardized viewport profiles (Desktop, Mobile, Tablet) with explicit width, height, and device scale factor.
+- **Cryptographic Baseline Hashing**: Baselines are tracked and verified via canonical SHA-256 byte digests (`image_sha256`); flags disk tampering (`VQA_BASELINE_TAMPERED`).
+- **Neutral & Secret Selector Masking**: Neutral masks (`[MASKED_NEUTRAL]`) eliminate font/timestamp flakiness; mandatory automatic masking replaces sensitive input fields (`type=password`) with `[MASKED_SECRET]`.
+- **Structured Evidence Comparison**: Fast SHA-256 digest comparison with offline tolerance-bounded diffing (`max_diff_percentage`).
+- **Explicit Baseline Promotion**: Baselines are NEVER mutated during verification; updates require explicit `gemstack vqa promote <scenario-id>`.
+- **Pure Offline Verification (Stages 5.3 & 5.4)**: `gemstack verify` runs 100% offline with zero browser launches, zero network calls, and zero file mutations.
+- **Explicit Invariant**: Gemstack core inspects evidence; it does NOT launch browsers or capture screenshots.
+
+## Acceptance & Regression Baseline
+- 25 Upgrade A canonical acceptance tests passing.
+- 20 Upgrade B canonical acceptance tests passing.
+- 20 Upgrade C canonical acceptance tests passing.
+- 20 Upgrade D canonical acceptance tests passing.
+- 20 Upgrade E canonical acceptance tests passing (`TEST-SWARM-A01`..`E02`, `TEST-VISUAL-A01`..`E02`).
+- 10 Upgrade E bootstrap contracts passing.
+- 26 Upgrade E adversarial cases passing.
+- 105 total canonical acceptance tests passing.
+- 126 total physical tests passing across 14 explicitly enumerated suites with 0 failures and 0 skipped.
+- Full CI suite (`npm run ci:all`) passing cleanly.
+- Upgrade E closed with closure status `VERIFIED`.
+
+---
+
 # Gemstack v1.3.0 — Cost & Provider Safety Gates + Context Capsule
 
 ## Highlights
@@ -19,7 +98,7 @@
 - **Constraint-Lossless Compression**: 100% of normative behavioral constraints (`MUST`, `MUST NOT`), frozen architectural contracts, and acceptance criteria survive compression without semantic loss.
 - **Canonical Authority Precedence**: Authoritative repository artifacts unconditionally govern over derived capsule claims (`SPEC` > `PLAN` > `TASKS` > implementation).
 - **Cryptographic Provenance & Drift Detection**: Live SHA-256 source digests detect artifact modifications or tampering immediately (`STALE` / `TAMPERED`).
-- **Strict Secrets Barrier**: Automated regex scanner blocks credential properties (`apiKey`, `token`, `secret`, `clientSecret`), token patterns (`sk-...`, `AIza...`, `ghp_...`), private keys, and `.env` references.
+- **Strict Secrets Barrier**: Automated regex scanner blocks credential properties (`apiKey`, `token`, `secret`, `clientSecret`), token patterns (`sk-...`, `AIza...`, GitHub/Slack tokens), private keys, and `.env` references.
 - **Deterministic Size Budgeting**: 32 KB target budget with prioritized 3-tier condensation and a 64 KB hard fail-closed limit.
 - **Read-Only Verification (Stage 5.2)**: `gemstack verify` inspects context capsule freshness without modifying or rewriting disk state.
 - **CLI Commands**: `gemstack context generate`, `gemstack context show`, and `gemstack context verify`.

package/handoff.md

@@ -15,25 +15,38 @@ Evolucionar Gemstack incorporando el feedback de producción real de proyectos a
   - Gates `ProviderCapabilityGate` y `BillableActionGate` implementados con fail-closed default deny.
   - Cost ledger (`cost-ledger.json`) validado, offline verification purity garantizada.
 - **Upgrade D (Context Capsule / Context Compression)**: CERRADO Y VERIFICADO (`closure.json` status `VERIFIED`, capsule `VALID` y `FRESH`).
-  - 20/20 pruebas canónicas de Upgrade D pasando al 100% en 8 suites dedicadas.
-  - Serializador canónico determinista, defensa de secretos fail-closed, presupuesto 32KB/64KB.
-  - Comandos CLI `gemstack context` y etapa 5.2 en `gemstack verify`.
-  - 100/100 pruebas físicas totales pasando en 25 suites sin dependencias externas.
-  - Preparado para release estable `v1.3.0`.
+- **Upgrade E (Agent Swarm & Visual QA)**: CERRADO Y VERIFICADO (`v1.4.0`).
+- **Gemstack 2.0 Sprint A (P0 Trust Boundaries & Hardening)**: CERRADO Y ENVIADO (commit `ba58055`).
+  - Resolución de symlinks arbitrarios con `resolveSafeStrict` y denegación de rutas fuera de root.
+  - Validación e integridad de skills remotos vía SHA-256 (`allowed_sources`).
+  - Pre-commit hooks con bloqueo nativo de secretos.
+  - Sanitización de variables de entorno y redacción estricta en logs.
+- **Gemstack 2.0 Sprint B (P1 Honest Evidence & Reliable Metrics)**: CERRADO Y ENVIADO (commit `2bf9157`).
+  - 14/14 pruebas canónicas aprobadas en `tests/honest-evidence-p1.test.js` (155 tests totales en 23 suites).
+  - Tokens de gasto autenticados con HMAC y validación de presupuestos acumulativos en `BillableActionGate`.
+  - Recálculo obligatorio de hashes de evidencia visual desde disco y degradación a `UNVERIFIED` en diff sin adaptador gráfico real.
+  - Redacción previa de secretos y credenciales en evidencias antes de persistir en disco.
+  - Eliminación de declaraciones superlativas sin evidencia; publicación de matriz 4-columnas `Control / Scope / Test / Limit` en README y reglas.
+  - Pinned GitHub Actions a commit SHAs de 40 dígitos con least-privilege `contents: read`.
+- **Gemstack 2.0 Sprint C (SDD Adaptable & Specs Incrementales)**: CERRADO Y ENVIADO (commit `443ae6c`).
+  - 13/13 pruebas canónicas aprobadas en `tests/adaptable-sdd-p1.test.js`.
+  - Cuatro niveles de rigor formalizados: `quick`, `fix`, `feature`, `high-risk`.
+  - Declaración y aplicación de deltas incrementales `ADDED`, `MODIFIED`, `REMOVED`.
+  - Detección offline de colisiones de contratos y duplicados de tests (`gemstack spec merge`).
+  - Enmiendas auditables y firmadas criptográficamente para contratos congelados (`src/lib/contract-amendments.js`).
+- **Gemstack 2.0 Sprint D (Contexto Eficiente y Memoria Persistente)**: CERRADO Y VERIFICADO.
+  - 12/12 pruebas canónicas aprobadas en `tests/context-memory-p1.test.js` (180 tests totales en 23 suites).
+  - Detección de fatiga de contexto y poda determinista de ruido (`src/lib/context-fatigue.js`).
+  - Auditoría offline de dependencias huérfanas, no declaradas y ciclos circulares en `gemstack doctor` (`src/lib/dependency-audit.js`).
+  - Verificación cruzada entre commits de Git y secciones de `handoff.md` en `gemstack verify` (`src/lib/memory-audit.js`).
+  - Eliminación estricta de ruido conversacional y presupuesto determinista (< 32KB) en context capsules.
 
 ## 3. Archivos y cambios
-- `src/lib/test-matrix.js`: Parser de `gemstack-test-matrix`, validación de esquema de 20 tests canónicos y cálculo de `acceptanceSignature` canónico SHA-256.
-- `src/lib/closure-context.js`: Parser de bindings y gates de `plan.md`, metadatos de `tasks.md`, trazabilidad bidireccional, resolución de `RelevantClosureFiles`, `computeContentAggregateHash` y cálculo de `closureContextHash`.
-- `src/lib/runner-adapters.js`: Adaptador nativo seguro de runner `node:test`, parser TAP de resultados, motor de reconciliación aritmética canónica, ejecutor seguro de compuertas `PACKAGE_SCRIPT` y serializador atómico de `closure.json`.
-- `src/commands/collect.js`: Comando mutador dedicado que ejecuta tests y gates para generar `specs/<feature>/closure.json`.
-- `src/commands/ship.js`: Compuerta de transición a `SHIPPED` que exige evidencia de cierre fresca y verificada.
-- `src/commands/verify.js`: Etapa 5/6 agregada de verificación de evidencia mecánica de cierre en modo estrictamente de solo lectura (0 mutaciones en disco).
-- `src/cli.js`: Registro de comandos `collect` y `ship`.
-- `specs/007-mechanical-test-matrix-closure-evidence/`: Artefactos congelados `spec.md`, `plan.md`, `tasks.md` y evidencia de cierre generada `closure.json`.
-- `tests/`: 6 nuevas suites de prueba (`test-matrix.test.js`, `reconciliation.test.js`, `runner-adapter.test.js`, `traceability.test.js`, `closure-manifest.test.js`, `closure-gates.test.js`).
-- `specs/templates/`: Actualizadas plantillas de `spec.md`, `plan.md` y `tasks.md` con bloques canónicos de Upgrade B.
-- `.agents/skills/`: Actualizados skills (`gemstack-spec`, `gemstack-plan`, `gemstack-tasks`, `gemstack-qa`, `gemstack-ship`).
-- `docs/`, `README.md`, `package.json`: Documentación técnica y script de test con enumeración explícita de las 11 suites físicas.
+- `src/lib/sdd-rigor.js`, `src/lib/spec-delta.js`, `src/lib/spec-merge.js`, `src/lib/contract-amendments.js`, `src/commands/spec.js`: Motores de rigor adaptable, deltas incrementales, fusión de especificaciones y enmiendas de contratos.
+- `src/lib/context-fatigue.js`, `src/lib/dependency-audit.js`, `src/lib/memory-audit.js`: Motores de fatiga de contexto, auditoría offline de dependencias y auditoría cruzada de memoria con Git.
+- `src/commands/doctor.js`, `src/commands/verify.js`, `src/cli.js`: Integración de auditoría offline de dependencias, verificación de memoria y registro de CLI `spec`.
+- `tests/adaptable-sdd-p1.test.js`, `tests/context-memory-p1.test.js`: Suites de prueba canónicas P1 para Sprint C y Sprint D.
+- `specs/013-gemstack-2.0-adaptable-sdd/`, `specs/014-gemstack-2.0-context-memory/`: Especificaciones formales, planes, tareas y manifiestos de cierre verificados mecánicamente.
 
 ## 4. Intentos fallidos
 - Se confirmó en proyectos reales que scripts de prueba con sintaxis `2>nul` en `package.json` provocan que PowerShell/Bash enmascaren errores y retornen código de salida 0 con 0 tests ejecutados. Ahora esto es detectado como error por `gemstack verify` y prohibido en la Constitución.
@@ -41,7 +54,8 @@ Evolucionar Gemstack incorporando el feedback de producción real de proyectos a
 - **Node 20+ Subprocess Recursion**: Al ejecutar `node --test` como subproceso desde un proceso de test runner, `process.env.NODE_TEST_CONTEXT` suprimía la ejecución de archivos hijos con warning de recursión. Se resolvió sanitizando las variables `NODE_TEST_CONTEXT` y `NODE_TEST_WORKER_ID` en el entorno del proceso hijo.
 - **Windows spawn 'npm.cmd' EINVAL**: Node 22+ en Windows genera `EINVAL` al invocar `spawn('npm.cmd', ..., { shell: false })`. Se resolvió ejecutando directamente el binario `npm-cli.js` vía `process.execPath` cuando se detecta en Windows, respetando la regla constitucional de `shell: false`.
 - **Closure Manifest Self-Reference**: Al incluir `specs/<feature>/closure.json` en los archivos de implementación de `tasks.md`, `closureContextHash` cambiaba cada vez que `closure.json` era escrito, provocando que la evidencia se marcara como `STALE` inmediatamente después de recolectarse. Se resolvió excluyendo explícitamente `closure.json` de la agregación de hashes de contexto de implementación (`implementationContextHash`).
+- **Memory Cross-Audit Missing Section Handling**: En `crossAuditMemoryWithGit`, lanzar un `Error` no capturado interrumpía la secuencia de verificación de `verify.js`. Se resolvió retornando un objeto de resultado `{ valid: false, handoff_intact: false, error }`, permitiendo que el framework acumule los fallos según el protocolo constitucional sin abortar abruptamente.
 
 ## 5. Próximos pasos
-1. Completar la publicación y git tag de la versión minor `v1.3.0`.
-2. Proceder a Upgrade E (SPEC ONLY) una vez autorizada la fase siguiente.
+1. Preparar la release `v2.0.0-alpha` unificando las 4 etapas de hardening de Gemstack 2.0 (Sprints A, B, C, D).
+2. Publicación de notas de release destacando las nuevas garantías de seguridad, rigores adaptables y auditorías offline.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gemstack-ai",
-  "version": "1.3.0",
+  "version": "2.0.0",
   "description": "Agentic Spec-Driven Development framework for Gemini/Antigravity",
   "main": "src/cli.js",
   "bin": {
@@ -10,16 +10,17 @@
     "node": ">=18.18.0"
   },
   "scripts": {
-    "test": "node --test tests/contracts.test.js tests/hasher.test.js tests/findings.test.js tests/init.test.js tests/verify.test.js tests/test-matrix.test.js tests/reconciliation.test.js tests/runner-adapter.test.js tests/traceability.test.js tests/closure-manifest.test.js tests/closure-gates.test.js tests/cost-ledger.test.js tests/environment-provider-safety.test.js tests/provider-capability-gate.test.js tests/billable-action-gate.test.js tests/provider-fallback.test.js tests/verification-purity-cost.test.js tests/context-determinism.test.js tests/context-authority.test.js tests/context-freshness.test.js tests/context-constraints.test.js tests/context-secrets.test.js tests/context-size-budget.test.js tests/context-purity.test.js tests/context-legacy.test.js",
+    "test": "node --test tests/contracts.test.js tests/hasher.test.js tests/findings.test.js tests/init.test.js tests/verify.test.js tests/test-matrix.test.js tests/reconciliation.test.js tests/runner-adapter.test.js tests/traceability.test.js tests/closure-manifest.test.js tests/closure-gates.test.js tests/cost-ledger.test.js tests/environment-provider-safety.test.js tests/provider-capability-gate.test.js tests/billable-action-gate.test.js tests/provider-fallback.test.js tests/verification-purity-cost.test.js tests/context-determinism.test.js tests/context-authority.test.js tests/context-freshness.test.js tests/context-constraints.test.js tests/context-secrets.test.js tests/context-size-budget.test.js tests/context-purity.test.js tests/context-legacy.test.js tests/swarm-partitioning.test.js tests/swarm-review.test.js tests/visual-manifest.test.js tests/visual-diff.test.js tests/swarm-visual-purity.test.js tests/security-p0-hardening.test.js tests/honest-evidence-p1.test.js tests/adaptable-sdd-p1.test.js tests/context-memory-p1.test.js",
     "gemstack:verify": "node src/cli.js verify",
     "pack:dry": "npm pack --dry-run",
     "ci:frontmatter": "node scripts/ci/check-frontmatter.js",
     "ci:template": "node scripts/ci/check-template-clean.js",
     "ci:mojibake": "node scripts/ci/check-mojibake.js",
     "ci:package": "node scripts/ci/check-package-contents.js",
+    "ci:secrets": "node scripts/ci/check-secrets.js",
     "ci:smoke": "node scripts/ci/smoke-cli.js",
     "ci:demo": "npm --prefix demo-app install && npm --prefix demo-app run smoke",
-    "ci:all": "npm test && npm run ci:frontmatter && npm run ci:template && npm run ci:mojibake && npm run ci:package && npm run ci:smoke && npm run ci:demo"
+    "ci:all": "npm test && npm run ci:frontmatter && npm run ci:template && npm run ci:mojibake && npm run ci:package && npm run ci:secrets && npm run ci:smoke && npm run ci:demo"
   },
   "dependencies": {},
   "devDependencies": {}

package/scripts/ci/check-package-contents.js

@@ -8,7 +8,7 @@ try {
     const files = result[0].files.map(f => f.path.replace(/\\/g, '/'));
     
     const required = ['src/cli.js', 'template/handoff.md', 'README.md', 'LICENSE', 'CHANGELOG.md', 'RELEASE_NOTES.md', 'package.json'];
-    const forbidden = ['node_modules', 'securedocs.sqlite', 'demo-app/node_modules', '.git/', 'demo-app/securedocs.sqlite'];
+    const forbidden = ['node_modules', 'securedocs.sqlite', 'demo-app/node_modules', '.git/', 'demo-app/securedocs.sqlite', '.tgz'];
     
     let hasError = false;
     for (const req of required) {