mindforge-cc 10.7.0 → 11.2.0

package/.agent/hooks/mindforge-statusline.js

@@ -84,7 +84,7 @@ process.stdin.on('end', () => {
             const todos = JSON.parse(fs.readFileSync(path.join(todosDir, files[0].name), 'utf8'));
             const inProgress = todos.find(t => t.status === 'in_progress');
             if (inProgress) task = inProgress.activeForm || '';
-          } catch (e) {}
+          } catch (e) { /* intentionally empty */ }
         }
       } catch (e) {
         // Silently fail on file system errors - don't break statusline
@@ -103,7 +103,7 @@ process.stdin.on('end', () => {
         if (cache.stale_hooks && cache.stale_hooks.length > 0) {
           mindforgeUpdate += '\x1b[31m⚠ stale hooks — run /mindforge:update\x1b[0m │ ';
         }
-      } catch (e) {}
+      } catch (e) { /* intentionally empty */ }
     }
 
     // Output

package/.mindforge/MINDFORGE-V2-SCHEMA.json

@@ -1,14 +1,51 @@
 {
   "$schema": "http://json-schema.org/draft-07/schema#",
   "title": "MindForge v2 Autonomous Engine Schema",
-  "description": "Schema for HANDOFF.json and auto-state.json in v2.0.0-alpha.1",
+  "description": "Schema for HANDOFF.json and auto-state.json in v2.0.0-alpha.1+",
   "type": "object",
   "properties": {
-    "schema_version": { "type": "string", "const": "2.0.0" },
+    "schema_version": { "type": "string" },
+    "schema_type": { "type": "string", "enum": ["HANDOFF", "AUTO_STATE"] },
     "auto_mode_active": { "type": "boolean" },
-    "phase": { "type": "integer" },
-    "wave_current": { "type": "integer" },
-    "tasks_completed": { "type": "integer" },
+    "phase": { "oneOf": [{ "type": "integer" }, { "type": "string" }] },
+    "wave_current": { "type": "integer", "minimum": 0 },
+    "tasks_completed": { "type": "integer", "minimum": 0 },
+    "status": {
+      "type": "string",
+      "enum": ["idle", "running", "paused", "completed", "escalated", "timeout"]
+    },
+    "handoffs": {
+      "type": "array",
+      "items": {
+        "type": "object",
+        "properties": {
+          "id": { "type": "string" },
+          "name": { "type": "string" },
+          "plan": { "type": "string" },
+          "depends_on": {
+            "type": "array",
+            "items": { "type": "string" }
+          },
+          "wave": { "type": "integer", "minimum": 0 }
+        },
+        "required": ["id", "name"]
+      }
+    },
+    "timestamps": {
+      "type": "object",
+      "properties": {
+        "started_at": { "type": "string", "format": "date-time" },
+        "updated_at": { "type": "string", "format": "date-time" }
+      }
+    },
+    "next_task": { "type": "string" },
+    "context_refs": { "type": "array", "items": { "type": "string" } },
+    "blockers": { "type": "array", "items": { "type": "string" } },
+    "decisions_needed": { "type": "array", "items": { "type": "string" } },
+    "recent_commits": { "type": "array", "items": { "type": "string" } },
+    "recent_files": { "type": "array", "items": { "type": "string" } },
+    "current_context": { "type": "string" },
+    "last_updated": { "type": "string", "format": "date-time" },
     "PLANNER_MODEL": { "type": "string" },
     "EXECUTOR_MODEL": { "type": "string" },
     "REVIEWER_MODEL": { "type": "string" },
@@ -21,10 +58,6 @@
     "MODEL_COST_HARD_LIMIT_USD": { "type": "number" },
     "MODEL_PREFER_CHEAP_BELOW_DIFFICULTY": { "type": "number" },
     "REQUIRE_CROSS_REVIEW": { "type": "boolean" },
-    "status": {
-      "type": "string",
-      "enum": ["idle", "running", "paused", "completed", "escalated", "timeout"]
-    },
     "governance": {
       "type": "object",
       "properties": {
@@ -43,5 +76,5 @@
       }
     }
   },
-  "required": ["schema_version", "auto_mode_active", "status"]
+  "required": ["schema_version"]
 }

package/.mindforge/config.json

@@ -1,11 +1,11 @@
 {
-  "version": "10.7.0",
+  "version": "11.2.0",
   "environment": "development",
   "governance": {
     "drift_threshold": 0.75,
     "critical_drift_threshold": 0.5,
     "res_threshold": 0.8,
-    "active_did": "did:mindforge:5a537f83-69de-40ac-a613-e96d4a84a270"
+    "active_did": "did:mindforge:0f5f4777-ffd4-4aef-aa46-e8eb34c0e8c0"
   },
   "revops": {
     "market_registry": {
@@ -18,6 +18,8 @@
       "claude-sonnet-4-6": {
         "cost_input": 0.003,
         "cost_output": 0.015,
+        "cost_cache_read": 0.0003,
+        "cost_cache_creation": 0.00375,
         "benchmark": 99,
         "provider": "Anthropic"
       },
@@ -42,12 +44,16 @@
       "claude-haiku-4-5": {
         "cost_input": 0.0002,
         "cost_output": 0.0004,
+        "cost_cache_read": 0.00002,
+        "cost_cache_creation": 0.00025,
         "benchmark": 82,
         "provider": "Anthropic"
       },
       "claude-opus-4-7": {
         "cost_input": 0.015,
         "cost_output": 0.075,
+        "cost_cache_read": 0.0015,
+        "cost_cache_creation": 0.01875,
         "benchmark": 100,
         "provider": "Anthropic"
       }
@@ -56,9 +62,12 @@
     "premium_fallback_model": "claude-opus-4-7"
   },
   "security": {
-    "pqas_enabled": true,
+    "pqas_enabled": false,
     "enclave_tier": 2,
-    "provider": "simulated-lattice"
+    "provider": "Dilithium-5 (simulated — inactive)"
+  },
+  "experimental": {
+    "pqc_demo": false
   },
   "mesh": {
     "node_id": "beta-node",
@@ -69,6 +78,11 @@
     "max_drift_threshold": 0.1,
     "auto_verify": false
   },
+  "wave_concurrency": 3,
+  "temporal": {
+    "max_snapshots": 50,
+    "max_age_days": 7
+  },
   "instincts": {
     "mode": "auto-capture",
     "max_active_per_project": 100,

package/CHANGELOG.md

@@ -1,5 +1,170 @@
 # Changelog
 
+## [11.2.0] - 2026-05-31 — "Verification & Trust"
+
+### Added
+
+- **UC-08 — Unified Verification Runner**
+  - `bin/engine/verification-runner.js`: orchestrates test/lint/audit/typecheck stages into structured results with pass/fail/skip per stage
+  - `bin/engine/verify-cli.js`: CLI entrypoint writing `.planning/VERIFICATION.md` reports
+  - `mindforge verify` command registered in CLI
+
+- **UC-25 — Eval Harness**
+  - `bin/eval/eval-harness.js`: recall@k, nDCG (graded relevance), and `runEval()` orchestrator for measuring retrieval quality
+  - `bin/eval/golden-set-retrieval.json`: 10-query seed golden set covering orchestration, security, memory, cost, verification, hooks, and architecture domains
+
+- **UC-22 — Tool/MCP Trust Boundaries**
+  - `bin/security/trust-boundaries.js`: manifest pinning (deterministic SHA-256 with recursive key sort), tamper detection, untrusted output tagging with provenance, and high-impact command detection
+  - `bin/security/trust-gate-hook.js`: PreToolUse hook that blocks destructive Bash commands (rm -rf, force-push, DROP TABLE, hard reset) via native Claude Code hooks
+  - Trust-gate registered in `.claude/settings.json` PreToolUse
+
+- **Council CLI**
+  - `bin/council-cli.js`: thin wrapper wiring `runCouncil` to the `/mindforge:council` command with structured JSON output and formatted display
+
+### Fixed
+
+- `auto-runner.js`: removed erroneous `new` on singleton ZTAIManager instance (was line 692)
+
+### Removed
+
+- Dead `quantum-verify` CLI command entry (no handler existed)
+- Dead `AuditRotator` references (broke hash chain on rotation boundaries)
+
+### Changed
+
+- Config `pqas_signing` provider clarified as "Dilithium-5 (simulated — inactive)"
+- Banner version strings updated to v11.1.0 in self-corrective-synthesizer and remediation-engine
+- SDK README heading updated to "New in v11.1.0"
+- Version bumped to 11.2.0 across package.json and config.json
+
+---
+
+## [11.1.0] - 2026-05-31 — "Beast Mode"
+
+### Added
+
+- **Pillar I — Integrity & Trust**
+  - `bin/utils/append-queue.js`: single-writer fsync'd append queue for concurrent-safe durable writes (UC-09)
+  - `bin/governance/audit-hash.js`: single canonical SHA-256 hasher shared by writer + verifier (UC-04)
+  - `bin/governance/audit-verifier.js` + `bin/verify-audit.js` CLI: fail-closed hash-chain verifier (`exit 1` on any break) (UC-04)
+  - All 7 audit-write paths unified through `appendAuditEntrySync` — the audit log is now genuinely tamper-evident with a verifiable prev-hash chain (UC-04b)
+  - Simulated PQC demoted: `pqas_enabled=false` by default, gated behind `experimental.pqc_demo`; Tier-3 uses real Ed25519 (UC-24)
+
+- **Pillar II — Orchestration Correctness**
+  - `bin/autonomous/dependency-dag.js`: real Kahn topological sort + cycle detection, ported from test-only to the engine (UC-03)
+  - `planWaves(handoffs, {useDag:true})` opt-in DAG wave planning — explicit `.wave` always wins, legacy default unchanged (UC-03)
+  - Pre-flight cycle detection halts loud before any wave executes (UC-03)
+  - Wave-boundary timeout enforcement: `isTimedOut` + status `'timeout'` + resumable state (UC-14)
+  - Opt-in rollback hook records intent on terminal ESCALATE (no auto git-reset by default) (UC-14)
+  - `bin/engine/council-runtime.js`: minimal 4-voice council runtime (ADS loop) with injectable model, consensus scoring, dissent capture (UC-10)
+
+- **Pillar III — Cost-Aware Routing**
+  - `bin/models/pricing-registry.js`: single source of truth for model pricing, loaded from `config.json` market_registry (UC-05)
+  - All 3 providers routed through the registry — hardcoded pricing eliminated (UC-05)
+  - Prompt-cache accounting: `cache_control:{type:'ephemeral'}` on system blocks, `cache_read`/`cache_creation` parsed + priced at ~10% input rate (UC-21)
+  - `bin/models/difficulty-scorer.js`: heuristic 1-10 scorer with Tier-3 floor (UC-06)
+  - Shadow-mode difficulty routing: logs intended model without changing actual selection (UC-06)
+
+- **Pillar IV — Native Alignment + Observability**
+  - `.claude/settings.json` with hooks under real native events (`PostToolUse`/`PreToolUse`/`SessionStart`) — the security guard and context monitor now actually fire (UC-19a)
+  - `bin/hooks/instinct-capture-hook.js`: auto-captures behavioral patterns via PostToolUse, respects session limit (UC-11)
+  - `bin/engine/otel-exporter.js`: optional OTel GenAI exporter mapping NexusTracer spans to `gen_ai.*` semantic conventions, gated behind `OTEL_EXPORTER_OTLP_ENDPOINT` (UC-18)
+  - `bin/memory/retrieval-fusion.js`: Reciprocal Rank Fusion (RRF) over knowledge-graph + BM25 retrieval paths, replacing incomparable linear blends (UC-20)
+
+### Fixed
+
+- Audit-writer `close()` data-loss bug: threshold-triggered flushes were un-awaited, losing up to 10 entries on close (UC-09)
+- Audit-writer flush failure no longer crashes the process via unhandled rejection — logs to stderr (UC-09)
+- Vector-hub exit guard: `_dirty` boolean → pending-saves counter, closing a window where scheduled-but-unwritten saves were lost on hard exit (UC-09)
+- `isTimedOut` fails CLOSED on malformed `timeout_at` (garbage deadline = halt, not run unbounded) (UC-14)
+- Council position validation rejects NaN confidence / invalid recommendations (UC-10)
+- Dissent is now captured under NO_CONSENSUS verdict (the deadlock case where it matters most) (UC-10)
+- Pre-flight DAG check only cycle-checks stable-id tasks (id-less tasks can't be dependency targets) (UC-03)
+- `groupIntoWaves` self-defends: dangling dep throws "Unknown dependency" (not misleading "Circular") (UC-03)
+
+### Changed
+
+- Audit rotation retired (it broke the hash chain at every 5000-line boundary); AUDIT.jsonl grows unbounded for now — chain-aware compaction is a deferred future feature (UC-04b)
+- `knowledge-store.js` appends now use `appendDurableSync` (openSync+writeSync+fsyncSync+closeSync) for guaranteed durability (UC-09)
+- `auto-shadow.js` `generateShadowContext()` now fuses retrieval paths via RRF instead of a single-path linear blend (UC-20)
+
+### Removed
+
+- Orphaned `createAuditWriter` buffered path (zero production callers after UC-04b unification)
+- Hardcoded per-token pricing from `anthropic-provider.js`, `openai-provider.js`, `gemini-provider.js` (replaced by PricingRegistry)
+
+## [11.0.1] - 2026-05-30 — "Stability Patch"
+
+### Fixed
+
+- **Version drift**: reconciled `.mindforge/config.json` (was 10.7.0) with the 11.x line; added a fail-closed pre-flight version-consistency assertion (`bin/utils/version-check.js`) and a regression test that runs the migration and asserts its post-state, so the drift cannot silently return. (UC-01)
+- **Lint & dead code**: resolved all 109 ESLint errors, removed orphaned `bin/dashboard/team-tracker.js`, and made CI fail on any lint error. Fixed a latent `no-const-assign` runtime crash in `bin/review/ads-engine.js`. (UC-02)
+- **SDK `executeCommand` no-op**: replaced the published no-op stub (which made `batchExecute` report every task "fulfilled" while executing nothing) with a real `child_process.spawn` executor with stdout/stderr capture, timeout (SIGTERM→SIGKILL), and exit-code propagation; added a regression test against the compiled dist. (UC-07a)
+
+## [11.0.0] - 2026-05-28 — "Sovereign Stability"
+
+### Breaking Changes
+
+- `verifyZKProof()` returns structured `{ verified, reason }` instead of throwing
+- `signPQ()` returns `{ signature, simulated, algorithm }` object instead of raw string
+- Wave task execution order within waves is no longer deterministic
+- SDK bumped to 11.0.0 with new type exports
+- Dashboard tokens now expire after 24 hours
+- `TemporalHub.captureState()` and `rollbackTo()` are now async
+
+### Added
+
+- LRUMap utility class for bounded caches with eviction callbacks
+- Atomic JSON write primitives (write-to-temp, fsync, rename)
+- AUDIT.jsonl log rotation with gzip archival (max 5000 lines)
+- HANDOFF.json structural validation (fail-open)
+- Temporal snapshot garbage collection (retain 50, expire > 7 days)
+- BM25 scoring with document-length normalization
+- Persistent index cache (mtime-based invalidation)
+- Persistent adjacency index for knowledge graph
+- Correction effectiveness tracking in self-corrective synthesizer
+- Full remediation strategy implementations (CONTEXT_COMPRESSION, GOLDEN_TRACE_INJECTION, REASONING_RESTART)
+- Graduated intelligence interlock (+1/+2/MAX tier) with cost-awareness
+- 3-tier stuck detection (hash → length → truncated Levenshtein)
+- Adaptive context window (10/20/30 based on velocity)
+- Configurable external ZK verifier module path
+- Ephemeral SRE enclave keys (crypto.randomBytes)
+- Time-limited RBAC role elevation with auto-expiry
+- Session-scoped ZTAI agent registry
+- Dashboard rate limiting (100 req/min/IP) and token expiration (24h)
+- /api/v1/token/refresh endpoint
+- Optional GPG approval verification
+- GET /api/v1/system observability endpoint (heap, uptime, audit stats)
+- checkHeapHealth() with warning/critical thresholds
+- Remediation effectiveness persistence
+- Model router dynamic reload (mtime-based, 60s interval)
+- P95 latency ring buffer for cloud broker
+- EIS client with real fetch + 3-retry exponential backoff
+- Semaphore-based parallel wave execution (max concurrency configurable)
+- WebSocketEventStream with auto-reconnect
+- SDK streamExecution() with AsyncIterable<StreamChunk>
+- SDK batchExecute() with concurrent task execution
+- SDK validateRuntimeConfig()
+- Model streaming support (Anthropic, OpenAI, Gemini providers)
+- Migration script (bin/migrations/10.7.0-to-11.0.0.js)
+
+### Changed
+
+- sessionDriftHistory bounded to 500 entries via LRUMap
+- entropyCache bounded to 1000 entries via LRUMap
+- Cloud broker failure tracking uses 5-minute sliding window
+- Self-corrective synthesizer window expanded from 10 → 50 events
+- Context refactorer uses adaptive window instead of fixed 20
+
+### Fixed
+
+- Memory leaks from unbounded Maps in long-running sessions
+- Data corruption risk on process crash during state file writes
+- Disk exhaustion from unbounded AUDIT.jsonl and snapshot growth
+- Hardcoded SRE enclave private key (security issue)
+
+---
+
 ## [10.7.0] - 2026-05-27 — "Platform Sovereign"
 
 ### Added (v10.7.0)

package/MINDFORGE.md

@@ -1,12 +1,12 @@
-# MINDFORGE.md — Parameter Registry (v10.7.0)
+# MINDFORGE.md — Parameter Registry (v11.2.0)
 
 ## 1. IDENTITY & VERSIONING
 
 [NAME]    = MindForge
-[VERSION] = 10.7.0-SOVEREIGN
+[VERSION] = 11.2.0
 [STABLE]  = true
 [MODE]    = "Platform Sovereign"
-[REQUIRED_CORE_VERSION] = 10.7.0
+[REQUIRED_CORE_VERSION] = 11.2.0
 [SOVEREIGN_IDENTITY] = true
 [SRE_LAYER_ENABLED]  = true
 

package/README.md

@@ -1,12 +1,21 @@
 # MindForge
 
-**An agentic intelligence framework for Claude Code** — orchestrates multi-agent workflows with governance, memory, and autonomous execution. Install once, get structured AI-driven development with built-in quality gates.
+**An agentic intelligence framework for Claude Code** — orchestrates multi-agent workflows with governance, memory, and autonomous execution. Production-hardened with true parallelism, streaming SDK, and zero-trust security. Install once, get structured AI-driven development with built-in quality gates.
 
 ---
 
-## v10.0.3 — Council Awakens
+## v11.0.0 — Sovereign Stability
 
-MindForge v10.0.3 "Council Awakens" introduces the Council decision framework, Instinct Engine, Cost-Aware Routing, 6-phase Verification Loop, and Multi-LLM Consult. This release adds 10 skills (20 core total), 8 commands (71 total), 9 personas (117 total), 3 swarm templates (21 total), and 5 engine subsystems — expanding MindForge's autonomous governance and multi-agent reasoning capabilities.
+MindForge v11.0.0 "Sovereign Stability" is a production-hardening release focused on reliability, performance, and real-world deployment readiness. Key highlights:
+
+- **Memory-safe operations** — LRU-bounded caches, atomic writes, log rotation, and snapshot garbage collection eliminate resource leaks in long-running sessions.
+- **True wave parallelism** — Semaphore-based concurrent execution with configurable max concurrency replaces sequential task dispatch.
+- **Streaming SDK** — WebSocket event streaming, `streamExecution()` with AsyncIterable, and `batchExecute()` for high-throughput integrations.
+- **Hardened security** — Ephemeral enclave keys, session-scoped agent isolation, time-limited RBAC elevation, dashboard rate limiting, and structured ZK proof returns.
+- **Production observability** — `/api/v1/system` health endpoint, P95 latency tracking, heap health monitoring, and real EIS client with retry logic.
+- **Graduated intelligence** — Adaptive tier escalation (+1/+2/MAX) with cost-awareness, 3-tier stuck detection, and adaptive context windows.
+
+This release ships 200+ skills, 400+ personas, 18 pillars, and 49 swarm templates across 12 engineering domains.
 
 
 ## Installation & Setup
@@ -45,6 +54,12 @@ npx mindforge-cc@latest --antigravity --local
 
 ---
 
+- **Production Hardening (v11.0.0)** — LRU caches, atomic JSON writes, log rotation, HANDOFF validation, and temporal snapshot GC for crash-safe long-running sessions.
+- **True Wave Parallelism (v11.0.0)** — Semaphore-based concurrent wave execution with configurable max concurrency replaces sequential dispatch.
+- **Streaming SDK (v11.0.0)** — WebSocket event streaming, `streamExecution()` AsyncIterable, `batchExecute()`, model streaming across Anthropic/OpenAI/Gemini providers.
+- **Graduated Intelligence (v11.0.0)** — Adaptive tier escalation (+1/+2/MAX) with cost-awareness, 3-tier stuck detection, and adaptive context windows (10/20/30).
+- **Security Hardening (v11.0.0)** — Ephemeral enclave keys, session-scoped ZTAI, time-limited RBAC elevation, dashboard rate limiting (100 req/min/IP), token expiration.
+- **Observability (v11.0.0)** — `/api/v1/system` health endpoint, P95 latency ring buffer, heap health monitoring, real EIS client with exponential backoff.
 - **Grounded Wave Execution (v9.0.0)** — AutoRunner reads HANDOFF.json wave groups, dispatches tasks with audit tracing, persists progress, and resumes on restart (Pillar XXIV).
 - **Model Topology Modernization (v9.0.0)** — All model references updated to the Claude 4.x family: claude-opus-4-7, claude-sonnet-4-6, claude-haiku-4-5 (Pillar XXV).
 - **Unified Memory Architecture (v9.0.0)** — Knowledge and graph edges consolidated into SQLite (celestial.db) with FTS5 search. Four JSONL stores replaced by one queryable store (Pillar XXVI).
@@ -272,7 +287,7 @@ MindForge supports multiple interaction models to fit your engineering workflow:
 ```bash
 /mindforge:update
 /mindforge:update --apply
-/mindforge:migrate --from v0.6.0 --to v1.0.0
+/mindforge:migrate --from v10.7.0 --to v11.0.0
 ```
 
 ---
@@ -320,6 +335,36 @@ See `.mindforge/production/token-optimiser.md`.
 
 ## 📜 Framework Evolution & Version History
 
+<details>
+<summary><b>v11.0.0 — Sovereign Stability (Production Hardening)</b></summary>
+
+- **Phase 1: Foundation** — LRU-bounded caches, atomic JSON writes, AUDIT.jsonl log rotation, HANDOFF.json structural validation, temporal snapshot garbage collection.
+- **Phase 2: Intelligence** — BM25 scoring with document-length normalization, full remediation strategy implementations, graduated intelligence interlock (+1/+2/MAX), 3-tier stuck detection, adaptive context windows.
+- **Phase 3: Security** — Structured ZK proof returns, ephemeral SRE enclave keys, session-scoped ZTAI agent registry, time-limited RBAC elevation, dashboard rate limiting and token expiration, optional GPG approval verification.
+- **Phase 4: Observability** — Async temporal I/O, `/api/v1/system` health endpoint, P95 latency ring buffer, heap health monitoring, EIS client de-stub with real fetch and retry logic.
+- **Phase 5: SDK/Distributed** — Semaphore-based wave parallelism, WebSocket event streaming with auto-reconnect, `batchExecute()`, model streaming (Anthropic/OpenAI/Gemini), migration script from v10.7.0.
+</details>
+
+<details>
+<summary><b>v10.x — The 200-Skills Expansion (Council → Platform Sovereign)</b></summary>
+
+- **Council Awakens (v10.0.3)**: Council decision framework, Instinct Engine, Cost-Aware Routing, 6-phase Verification Loop, Multi-LLM Consult.
+- **Skills Expansion (v10.0.4–v10.7.0)**: From 20 to 200+ core skills across 12 domains — AI/ML, data engineering, platform engineering, mobile, leadership, industry verticals, and more.
+- **400+ Personas**: Comprehensive specialist coverage with domain-expert identity protocols.
+- **49 Swarm Templates**: Task-aware parallel specialist clusters covering every engineering discipline.
+</details>
+
+<details>
+<summary><b>v9.x — Grounded Execution & SQLite Persistence</b></summary>
+
+- **Grounded Wave Execution (Pillar XXIV)**: AutoRunner reads HANDOFF.json wave groups with audit tracing and restart persistence.
+- **Model Topology Modernization (Pillar XXV)**: Claude 4.x family (opus-4-7, sonnet-4-6, haiku-4-5).
+- **Unified Memory Architecture (Pillar XXVI)**: SQLite (celestial.db) with FTS5 search replacing JSONL stores.
+- **Schema Migration Engine (Pillar XXVII)**: Versioned migration tracking with transaction-wrapped imports.
+- **Integration Test Chain (Pillar XXVIII)**: 27-assertion end-to-end pipeline validation.
+</details>
+
+<details>
 <summary><b>v8.1.x — Sovereign Identity (Pillar XIX)</b></summary>
 
 - **Pillar XIX: Sovereign Identity Synthesis**: Autonomous creation and evolution of `SOUL.md` from execution traces.

package/RELEASENOTES.md

@@ -1,3 +1,83 @@
+# Release Notes — v11.0.0 "Sovereign Stability"
+
+**Release Date**: 2026-05-28  
+**Type**: Major (breaking changes)  
+**Upgrade Path**: Run `node bin/migrations/10.7.0-to-11.0.0.js`
+
+## Highlights
+
+MindForge v11.0.0 is a production-hardening release that addresses systemic stability, intelligence, security, and SDK capabilities. It eliminates memory leaks, adds crash-safe writes, upgrades semantic search from TF-IDF to BM25, completes previously-stubbed subsystems, and introduces true parallel execution.
+
+## What's New
+
+### Foundation Hardening
+- **Bounded caches** — LRUMap prevents unbounded memory growth in drift detector, entropy cache, and failure tracking
+- **Atomic writes** — State files use write-to-temp → fsync → rename (crash-safe)
+- **Log rotation** — AUDIT.jsonl auto-archives beyond 5000 lines with gzip compression
+- **Schema validation** — HANDOFF.json validated on load (fail-open with warnings)
+- **Snapshot GC** — Temporal history auto-cleaned (retain 50, expire > 7 days)
+
+### Intelligence Upgrades
+- **BM25 scoring** — Document-length-normalized search replacing raw TF-IDF
+- **Persistent caching** — Index and adjacency caches eliminate O(n) rebuilds
+- **Complete remediation** — All three strategies fully implemented (no more stubs)
+- **Adaptive systems** — Intelligence tier, context window, and stuck detection all auto-tune
+
+### Security Hardening
+- **Ephemeral enclave keys** — No more hardcoded secrets in source
+- **Structured crypto boundaries** — Simulated vs real clearly marked
+- **Session isolation** — RBAC elevation with TTL, session-scoped identity
+- **Dashboard security** — Token expiration, rate limiting, refresh endpoint
+
+### Observability
+- **System metrics** — `/api/v1/system` with heap monitoring and alerts
+- **P95 latency tracking** — Real measurements replace hardcoded values
+- **Effectiveness tracking** — Remediations measured for closed-loop improvement
+- **Dynamic config reload** — Model router refreshes on MINDFORGE.md changes
+
+### SDK & Distributed
+- **True parallelism** — Wave tasks execute concurrently via semaphore
+- **WebSocket streaming** — Real-time event delivery with auto-reconnect
+- **Batch execution** — Execute multiple tasks with concurrency control
+- **Model streaming** — Anthropic, OpenAI, and Gemini streaming support
+
+## Breaking Changes
+
+| Change | Impact | Migration |
+|--------|--------|-----------|
+| `verifyZKProof()` returns structured result | Code catching throws will miss denials | Check `result.verified` instead |
+| `signPQ()` returns object | Code using return value as string will break | Destructure `{ signature }` from result |
+| Wave execution non-deterministic | Task order within waves no longer guaranteed | Do not rely on execution order |
+| `captureState()`/`rollbackTo()` now async | Callers must await these methods | Add `await` at all call sites |
+| Dashboard tokens expire after 24h | Long-lived tokens stop working | Use `/api/v1/auth/refresh` endpoint |
+| SDK bumped to 11.0.0 | New exports, removed deprecated paths | Update `mindforge-sdk@11.0.0` |
+
+See upgrade guide at `docs/upgrade.md` for full migration steps.
+
+## Migration
+
+```bash
+node bin/migrations/10.7.0-to-11.0.0.js
+```
+
+The migration script:
+1. Backs up `.mindforge/config.json`
+2. Adds new config sections (temporal, rate_limiting, session, wave_execution)
+3. Archives old AUDIT.jsonl entries if > 5000 lines
+4. Runs temporal snapshot GC
+5. Bumps schema versions
+
+---
+
+## Previous Releases
+
+- [v10.0.3 — Council Awakens](https://github.com/sairam0424/MindForge/releases/tag/v10.0.3)
+- [v10.0.1 — Bedrock Fortified](https://github.com/sairam0424/MindForge/releases/tag/v10.0.1)
+- [v9.0.0 — Bedrock Meridian](https://github.com/sairam0424/MindForge/releases/tag/v9.0.0)
+
+---
+---
+
 # Release Notes — v10.0.3 "Council Awakens"
 
 **Release Date**: 2026-05-25  
@@ -186,7 +266,7 @@ If your scripts call `mindforge sync-jira` or `mindforge sync-confluence`, remov
 ### Step 6: Verify
 
 ```bash
-npx mindforge-cc --version   # Should print 10.0.1
+npx mindforge-cc --version   # Should print 11.0.0
 npm test                      # All 41 tests should pass
 ```
 

package/SECURITY.md

@@ -4,12 +4,12 @@
 
 | Version | Status | Support Level |
 |---------|--------|---------------|
-| 10.x | **Current** | Full security and feature updates |
-| 9.x | Maintenance | Critical security patches only (until 2026-08-31) |
-| 8.x | End of Life | No further updates |
-| 7.x and below | End of Life | No further updates |
+| 11.x | **Current** | Full security and feature updates |
+| 10.x | Maintenance | Critical security patches only (until 2026-11-30) |
+| 9.x | End of Life | No further updates |
+| 8.x and below | End of Life | No further updates |
 
-We recommend all users upgrade to the latest 10.x release. Security patches for 9.x will be provided for critical vulnerabilities only, on a best-effort basis, until August 2026.
+We recommend all users upgrade to the latest 11.x release. Security patches for 10.x will be provided for critical vulnerabilities only, on a best-effort basis, until November 2026.
 
 ---
 
@@ -44,18 +44,29 @@ We follow responsible disclosure practices. We will credit reporters in the rele
 
 ---
 
-## Security Features (v10.0.1)
+## Security Features (v11.0.0)
 
 ### Authentication & Authorization
 
 - **Bearer token auth on dashboard** — All mutating endpoints (`/api/steering`, `/api/approve`, SSE control) require `Authorization: Bearer <token>`. Token is sourced from `MINDFORGE_DASHBOARD_TOKEN` environment variable.
+- **Token expiration with refresh** — Dashboard tokens expire after 24 hours. Use `/api/v1/auth/refresh` to obtain a new token without re-authenticating.
+- **Dashboard rate limiting** — 100 requests per minute per IP address. Exceeding the limit returns 429 with `Retry-After` header.
+- **Session-scoped RBAC with TTL elevation** — Elevated permissions are session-scoped and auto-expire. No persistent privilege escalation.
 - **Browser daemon authentication** — The `/evaluate` endpoint requires auth before executing code in the Playwright context.
 - **ZTAI Trust Tiers** — 4-tier authorization model (Tier 0-3) controls which agents can perform which actions. Tier 3 (catastrophic-risk) operations require explicit human approval.
 
+### Cryptographic Security
+
+- **Ephemeral enclave keys** — All crypto keys generated via `crypto.randomBytes()` at runtime. No hardcoded secrets in source.
+- **Structured crypto boundaries** — Simulated (governance-enforcement) vs real (production-grade) cryptographic operations are clearly separated and labeled in code.
+- **GPG approval verification** — Optional GPG signature verification on governance approvals for high-trust environments.
+- **HMAC-signed temporal snapshots** — Temporal state captures are HMAC-signed to detect tampering during rollback operations.
+
 ### Audit & Integrity
 
 - **Merkle-chain audit log** — Every entry in `AUDIT.jsonl` includes a SHA-256 hash of the previous entry. Tampering with any historical entry breaks the chain, making modifications detectable.
 - **AuditWriter with buffered writes** — Atomic append operations prevent partial writes from corrupting the log.
+- **Log rotation with archival** — AUDIT.jsonl auto-archives beyond 5000 lines with gzip compression, preventing unbounded disk growth.
 - **npm provenance** — Published packages include SLSA Build Level 2 attestation via `--provenance`, proving the package was built from the stated source commit in CI.
 
 ### Input Validation & Injection Prevention
@@ -67,7 +78,7 @@ We follow responsible disclosure practices. We will credit reporters in the rele
 
 ### Governance & Policy
 
-- **Fail-closed ZK verification** — `verifyZKProof()` throws on invalid or missing proofs. The system denies by default.
+- **Structured ZK verification** — `verifyZKProof()` returns a structured result with `verified`, `reason`, and `timestamp` fields. The system denies by default when `verified` is false.
 - **Non-overridable parameters** — Security-critical MINDFORGE.md settings cannot be overridden by project-level or session-level configuration.
 - **CSP headers on dashboard** — Content Security Policy headers prevent XSS in the dashboard UI.
 - **Localhost-only binding** — The dashboard server binds to `127.0.0.1` only. It is not accessible from the network.
@@ -101,7 +112,8 @@ Before submitting code that touches security-sensitive paths:
 
 - **ZK-proofs are simulated** — The Dilithium-5 / ZK-proof layer uses cryptographic simulation, not hardware-backed TEEs. It provides logical governance enforcement, not hardware-grade isolation.
 - **Dashboard is localhost-only** — The dashboard is designed for local development. Do not expose it to the public internet, even behind a reverse proxy, without adding additional authentication.
-- **ZTAI keys are file-based** — Agent identity keys are stored on disk. In production deployments requiring hardware-bound keys, integrate with your organization's HSM or secure enclave.
+- **ZTAI keys are ephemeral** — Agent identity keys are generated per-session via `crypto.randomBytes()`. In production deployments requiring persistent hardware-bound keys, integrate with your organization's HSM or secure enclave.
+- **Rate limiting is per-process** — The 100 req/min limit is tracked in-memory. Restarting the dashboard resets counters. For distributed deployments, add an external rate limiter (e.g., nginx, Cloudflare).
 
 ---