docguard-cli 0.44.2__tar.gz → 0.44.3__tar.gz

{docguard_cli-0.44.2 → docguard_cli-0.44.3/.agent}/commands/docguard.fix.md

@@ -16,7 +16,7 @@ You are an AI agent responsible for maintaining documentation quality using DocG
 ## Running DocGuard
 
 Run `docguard` from PATH when it is installed. Otherwise run
-`npx --yes docguard-cli@0.44.2`, the release these instructions ship with, in its
+`npx --yes docguard-cli@0.44.3`, the release these instructions ship with, in its
 place. Every `docguard …` command below means one of the two.
 
 ## Step 1: Mechanical fixes first (no AI judgment needed)

{docguard_cli-0.44.2 → docguard_cli-0.44.3}/.agent/commands/docguard.guard.md

@@ -16,7 +16,7 @@ You are an AI agent enforcing Canonical-Driven Development (CDD) compliance usin
 ## Running DocGuard
 
 Run `docguard` from PATH when it is installed. Otherwise run
-`npx --yes docguard-cli@0.44.2`, the release these instructions ship with, in its
+`npx --yes docguard-cli@0.44.3`, the release these instructions ship with, in its
 place. Every `docguard …` command below means one of the two.
 
 ## Step 1: Run Guard (machine-readable)

{docguard_cli-0.44.2 → docguard_cli-0.44.3/.agent}/commands/docguard.review.md

@@ -16,7 +16,7 @@ You are an AI agent reviewing documentation quality and detecting drift between
 ## Running DocGuard
 
 Run `docguard` from PATH when it is installed. Otherwise run
-`npx --yes docguard-cli@0.44.2`, the release these instructions ship with, in its
+`npx --yes docguard-cli@0.44.3`, the release these instructions ship with, in its
 place. Every `docguard …` command below means one of the two.
 
 ## Step 1: Run Diagnostics

{docguard_cli-0.44.2 → docguard_cli-0.44.3}/.agent/commands/docguard.score.md

@@ -19,7 +19,7 @@ Calculate and display the project's Canonical-Driven Development maturity score
 ## Running DocGuard
 
 Run `docguard` from PATH when it is installed. Otherwise run
-`npx --yes docguard-cli@0.44.2`, the release these instructions ship with, in its
+`npx --yes docguard-cli@0.44.3`, the release these instructions ship with, in its
 place. Every `docguard …` command below means one of the two.
 
 ## What to do

{docguard_cli-0.44.2 → docguard_cli-0.44.3}/.agent/skills/docguard-fix/SKILL.md

@@ -3,20 +3,20 @@ name: docguard-fix
 description: AI-driven documentation repair with structured research workflow, template-aware
   generation, and quality validation loops. Generates or fixes canonical documentation
   by researching the actual codebase, not using placeholders. Iterates until guard passes.
-compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli, or npx --yes docguard-cli@0.44.2)
+compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli, or npx --yes docguard-cli@0.44.3)
 metadata:
   author: docguard
-  version: 0.44.2
+  version: 0.44.3
   source: extensions/spec-kit-docguard/skills/docguard-fix
 ---
-<!-- docguard:version: 0.44.2 -->
+<!-- docguard:version: 0.44.3 -->
 
 # DocGuard Fix Skill
 
 ## Running DocGuard
 
 Run `docguard` from PATH when it is installed. Otherwise run
-`npx --yes docguard-cli@0.44.2`, the release these instructions ship with, in its
+`npx --yes docguard-cli@0.44.3`, the release these instructions ship with, in its
 place. Every `docguard …` command below means one of the two.
 
 ## User Input

{docguard_cli-0.44.2/extensions/spec-kit-docguard → docguard_cli-0.44.3/.agent}/skills/docguard-guard/SKILL.md

@@ -4,20 +4,20 @@ description: Run DocGuard guard validation against Canonical-Driven Development
   Parses output, triages severity, suggests targeted fixes, and optionally chains to
   docguard-fix for automated remediation. Use as a quality gate before commits or after
   implementation phases.
-compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli, or npx --yes docguard-cli@0.44.2)
+compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli, or npx --yes docguard-cli@0.44.3)
 metadata:
   author: docguard
-  version: 0.44.2
+  version: 0.44.3
   source: extensions/spec-kit-docguard/skills/docguard-guard
 ---
-<!-- docguard:version: 0.44.2 -->
+<!-- docguard:version: 0.44.3 -->
 
 # DocGuard Guard Skill
 
 ## Running DocGuard
 
 Run `docguard` from PATH when it is installed. Otherwise run
-`npx --yes docguard-cli@0.44.2`, the release these instructions ship with, in its
+`npx --yes docguard-cli@0.44.3`, the release these instructions ship with, in its
 place. Every `docguard …` command below means one of the two.
 
 ## User Input

{docguard_cli-0.44.2 → docguard_cli-0.44.3}/.agent/skills/docguard-review/SKILL.md

@@ -3,20 +3,20 @@ name: docguard-review
 description: Cross-document consistency analysis and quality assessment. Performs read-only
   analysis across all canonical docs, identifies drift, coverage gaps, and quality issues.
   Produces a structured report with severity-ranked findings. Modeled after speckit-analyze.
-compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli, or npx --yes docguard-cli@0.44.2)
+compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli, or npx --yes docguard-cli@0.44.3)
 metadata:
   author: docguard
-  version: 0.44.2
+  version: 0.44.3
   source: extensions/spec-kit-docguard/skills/docguard-review
 ---
-<!-- docguard:version: 0.44.2 -->
+<!-- docguard:version: 0.44.3 -->
 
 # DocGuard Review Skill
 
 ## Running DocGuard
 
 Run `docguard` from PATH when it is installed. Otherwise run
-`npx --yes docguard-cli@0.44.2`, the release these instructions ship with, in its
+`npx --yes docguard-cli@0.44.3`, the release these instructions ship with, in its
 place. Every `docguard …` command below means one of the two.
 
 ## User Input

{docguard_cli-0.44.2 → docguard_cli-0.44.3}/.agent/skills/docguard-score/SKILL.md

@@ -3,20 +3,20 @@ name: docguard-score
 description: CDD maturity assessment with category-aware improvement roadmap. Runs scoring
   engine, analyzes category breakdown, identifies highest-impact improvements, and
   generates a before/after improvement plan with projected score gains.
-compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli, or npx --yes docguard-cli@0.44.2)
+compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli, or npx --yes docguard-cli@0.44.3)
 metadata:
   author: docguard
-  version: 0.44.2
+  version: 0.44.3
   source: extensions/spec-kit-docguard/skills/docguard-score
 ---
-<!-- docguard:version: 0.44.2 -->
+<!-- docguard:version: 0.44.3 -->
 
 # DocGuard Score Skill
 
 ## Running DocGuard
 
 Run `docguard` from PATH when it is installed. Otherwise run
-`npx --yes docguard-cli@0.44.2`, the release these instructions ship with, in its
+`npx --yes docguard-cli@0.44.3`, the release these instructions ship with, in its
 place. Every `docguard …` command below means one of the two.
 
 ## User Input

{docguard_cli-0.44.2 → docguard_cli-0.44.3}/.agent/skills/docguard-sync/SKILL.md

@@ -1,20 +1,20 @@
 ---
 name: docguard-sync
 description: Keep canonical documentation ALWAYS UP TO DATE. Refreshes code-truth doc sections in place (mechanical, idempotent, preserves human prose) and flags the prose sections you must review when code changes.
-compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli, or npx --yes docguard-cli@0.44.2)
+compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli, or npx --yes docguard-cli@0.44.3)
 metadata:
   author: docguard
-  version: 0.44.2
+  version: 0.44.3
   source: extensions/spec-kit-docguard/skills/docguard-sync
 ---
-<!-- docguard:version: 0.44.2 -->
+<!-- docguard:version: 0.44.3 -->
 
 # DocGuard Sync Skill
 
 ## Running DocGuard
 
 Run `docguard` from PATH when it is installed. Otherwise run
-`npx --yes docguard-cli@0.44.2`, the release these instructions ship with, in its
+`npx --yes docguard-cli@0.44.3`, the release these instructions ship with, in its
 place. Every `docguard …` command below means one of the two.
 
 ## User Input

{docguard_cli-0.44.2 → docguard_cli-0.44.3}/.docguard-specs.json

@@ -4583,7 +4583,7 @@
           {
             "requirementId": "FR-008",
             "file": "cli/scanners/routes.mjs",
-            "line": 1204
+            "line": 1191
           },
           {
             "requirementId": "FR-009",
@@ -8242,12 +8242,12 @@
           {
             "requirementId": "FR-003",
             "file": "cli/scanners/rust-routes.mjs",
-            "line": 23
+            "line": 27
           },
           {
             "requirementId": "FR-004",
             "file": "cli/scanners/rust-routes.mjs",
-            "line": 24
+            "line": 28
           },
           {
             "requirementId": "FR-005",
@@ -8262,7 +8262,7 @@
           {
             "requirementId": "FR-005",
             "file": "cli/scanners/rust-routes.mjs",
-            "line": 25
+            "line": 29
           },
           {
             "requirementId": "FR-005",
@@ -10322,6 +10322,195 @@
         ]
       }
     },
+    {
+      "specId": "docguard.real-project-route-gaps",
+      "path": "specs/071-real-project-route-gaps/spec.md",
+      "reviewed": {
+        "lifecycle": {
+          "approval": "approved",
+          "delivery": "verified",
+          "context": "current",
+          "retirementReason": null,
+          "storage": "working_tree",
+          "persistenceModel": "living"
+        },
+        "relations": {
+          "extends": [
+            "docguard.js-framework-routes",
+            "docguard.js-route-shapes",
+            "docguard.more-route-frameworks",
+            "docguard.php-dotnet-routes"
+          ],
+          "duplicates": [],
+          "conflictsWith": [],
+          "supersedes": [],
+          "supersededBy": []
+        },
+        "scope": {
+          "canonicalDocs": [
+            "docs-canonical/ARCHITECTURE.md",
+            "docs-canonical/DATA-MODEL.md"
+          ]
+        },
+        "reconciliation": {
+          "lastReviewedRevision": "11ad93a5e0a44c92430d31e36df0eb1a20e3b6e4",
+          "outcomes": [
+            {
+              "revision": "11ad93a5e0a44c92430d31e36df0eb1a20e3b6e4",
+              "reason": "Reviewed at 11ad93a (main after #558): Actix 0->19 under /api, Axum 12->19, Symfony 0->19, Koa paths gain /api; pass-through JWT marks nothing auth (Koa auth on exactly 12 routes). Re-run on 11 public apps and 10 Hono examples: no other count changed. tests/real-project-route-gaps.test.mjs (17), full suite 3,394. Deviations: none; limits in languages.md.",
+              "evidence": [
+                "cli/scanners/php-routes.mjs",
+                "cli/scanners/router-routes.mjs",
+                "cli/scanners/rust-routes.mjs",
+                "docs-canonical/ARCHITECTURE.md",
+                "docs-canonical/DATA-MODEL.md",
+                "tests/real-project-route-gaps.test.mjs"
+              ],
+              "deviations": [],
+              "successor": null
+            }
+          ]
+        }
+      },
+      "intent": {
+        "requirements": [
+          "docguard.real-project-route-gaps#FR-001",
+          "docguard.real-project-route-gaps#FR-002",
+          "docguard.real-project-route-gaps#FR-003",
+          "docguard.real-project-route-gaps#FR-004",
+          "docguard.real-project-route-gaps#FR-005",
+          "docguard.real-project-route-gaps#FR-006",
+          "docguard.real-project-route-gaps#FR-007",
+          "docguard.real-project-route-gaps#FR-008",
+          "docguard.real-project-route-gaps#SC-001",
+          "docguard.real-project-route-gaps#SC-002"
+        ]
+      },
+      "observed": {
+        "artifacts": [
+          {
+            "path": "specs/071-real-project-route-gaps/spec.md",
+            "digest": "sha256:9f8f0bb775f3e83571788c80120117e306e67fbb033c7861d0d1a522084677e1"
+          },
+          {
+            "path": "specs/071-real-project-route-gaps/plan.md",
+            "digest": "sha256:6f862a536d4397ed2c707e284f7f7cd292efcb86f73d888f79380b35701d7977"
+          },
+          {
+            "path": "specs/071-real-project-route-gaps/tasks.md",
+            "digest": "sha256:a71b3b2dd8f90faab9f99c5b610898eaceed7e98b5ec5f124e6ebd10e93dbab2"
+          }
+        ],
+        "taskCompletion": {
+          "checked": 6,
+          "total": 6
+        },
+        "implementationEvidence": [
+          {
+            "requirementId": "FR-001",
+            "file": "cli/scanners/rust-routes.mjs",
+            "line": 30
+          },
+          {
+            "requirementId": "FR-001",
+            "file": "cli/scanners/rust-routes.mjs",
+            "line": 763
+          },
+          {
+            "requirementId": "FR-002",
+            "file": "cli/scanners/rust-routes.mjs",
+            "line": 31
+          },
+          {
+            "requirementId": "FR-002",
+            "file": "cli/scanners/rust-routes.mjs",
+            "line": 764
+          },
+          {
+            "requirementId": "FR-003",
+            "file": "cli/scanners/php-routes.mjs",
+            "line": 835
+          },
+          {
+            "requirementId": "FR-004",
+            "file": "cli/scanners/router-routes.mjs",
+            "line": 40
+          },
+          {
+            "requirementId": "FR-005",
+            "file": "cli/scanners/php-routes.mjs",
+            "line": 295
+          },
+          {
+            "requirementId": "FR-005",
+            "file": "cli/scanners/php-routes.mjs",
+            "line": 836
+          },
+          {
+            "requirementId": "FR-005",
+            "file": "cli/scanners/rust-routes.mjs",
+            "line": 32
+          },
+          {
+            "requirementId": "FR-005",
+            "file": "cli/scanners/rust-routes.mjs",
+            "line": 765
+          }
+        ],
+        "testEvidence": [
+          {
+            "requirementId": "FR-001",
+            "file": "tests/real-project-route-gaps.test.mjs",
+            "line": 8
+          },
+          {
+            "requirementId": "FR-002",
+            "file": "tests/real-project-route-gaps.test.mjs",
+            "line": 9
+          },
+          {
+            "requirementId": "FR-003",
+            "file": "tests/real-project-route-gaps.test.mjs",
+            "line": 10
+          },
+          {
+            "requirementId": "FR-004",
+            "file": "tests/real-project-route-gaps.test.mjs",
+            "line": 11
+          },
+          {
+            "requirementId": "FR-005",
+            "file": "tests/real-project-route-gaps.test.mjs",
+            "line": 12
+          },
+          {
+            "requirementId": "FR-006",
+            "file": "tests/real-project-route-gaps.test.mjs",
+            "line": 13
+          },
+          {
+            "requirementId": "FR-007",
+            "file": "tests/real-project-route-gaps.test.mjs",
+            "line": 14
+          },
+          {
+            "requirementId": "FR-008",
+            "file": "tests/real-project-route-gaps.test.mjs",
+            "line": 15
+          },
+          {
+            "requirementId": "SC-001",
+            "file": "tests/real-project-route-gaps.test.mjs",
+            "line": 16
+          },
+          {
+            "requirementId": "SC-002",
+            "file": "tests/real-project-route-gaps.test.mjs",
+            "line": 17
+          }
+        ]
+      }
+    },
     {
       "specId": "docguard.release-cut-green",
       "path": "specs/051-release-cut-green/spec.md",
@@ -10349,7 +10538,7 @@
           ]
         },
         "reconciliation": {
-          "lastReviewedRevision": "f130626775eb829f12f5ed8795b0f091af29bbc5",
+          "lastReviewedRevision": "3790177e60ccd360e94e2193579a8209efe146ea",
           "outcomes": [
             {
               "revision": "f130626775eb829f12f5ed8795b0f091af29bbc5",
@@ -10363,6 +10552,19 @@
               ],
               "deviations": [],
               "successor": null
+            },
+            {
+              "revision": "3790177e60ccd360e94e2193579a8209efe146ea",
+              "reason": "Maintenance review at 3790177: release-cut guarantees extended, none weakened. #543 lints out [Unreleased]-only CHANGELOG reads; #522 widened the version sync; #536 made budget timing deterministic; #546 made its fixture git hermetic; #549 moved CI-RECIPES to the least-privilege layout. v0.44.1 and v0.44.2 cut green end to end; typeof-only tests replaced by behaviour tests (#556). Deviations: none.",
+              "evidence": [
+                ".github/scripts/sync-release-version.mjs",
+                "cli/release-pr-policy.mjs",
+                "docs-canonical/CI-RECIPES.md",
+                "tests/release-cut-green.test.mjs",
+                "tests/release-version-sync.test.mjs"
+              ],
+              "deviations": [],
+              "successor": null
             }
           ]
         }
@@ -10385,7 +10587,7 @@
         "artifacts": [
           {
             "path": "specs/051-release-cut-green/spec.md",
-            "digest": "sha256:c89ddac42504f4fd45a8b9e5e0ca713c09489cf8e76af2ffb36b325289311e55"
+            "digest": "sha256:c18d421141f79bd20dc72b4c37cc50401a208c93d8b3117fd748bed88be38591"
           },
           {
             "path": "specs/051-release-cut-green/plan.md",

{docguard_cli-0.44.2 → docguard_cli-0.44.3}/.pre-commit-hooks.yaml

@@ -10,7 +10,7 @@
 #
 #     repos:
 #       - repo: https://github.com/raccioly/docguard
-#         rev: v0.44.2
+#         rev: v0.44.3
 #         hooks:
 #           - id: docguard-guard
 #
@@ -18,7 +18,7 @@
 #
 #     repos:
 #       - repo: https://github.com/raccioly/docguard
-#         rev: v0.44.2
+#         rev: v0.44.3
 #         hooks:
 #           - id: docguard-guard-full
 #

{docguard_cli-0.44.2 → docguard_cli-0.44.3}/AGENTS.md

@@ -1,6 +1,6 @@
 # AI Agent Instructions — DocGuard
 
-<!-- docguard:last-reviewed 2026-10-10 -->
+<!-- docguard:last-reviewed 2026-10-11 -->
 
 > This project follows **Canonical-Driven Development (CDD)**.
 > Documentation is the source of truth. Read before coding.
@@ -190,6 +190,20 @@ extensions/spec-kit-docguard/
 - If code deviates from docs, add `// DRIFT: reason`
 - Security rules in SECURITY.md are mandatory
 - Test requirements in TEST-SPEC.md must be met
+- **Tests that build Git repositories pass the fixture options per call.** Every
+  fixture `git` call goes through `tests/helpers/git.mjs` (`FIXTURE_GIT`,
+  `fixtureGit`): hooks and signing off for that call, never for the whole
+  environment, so DocGuard's own Git calls still meet the machine's config. A
+  scan test rejects a direct `git` spawn without a `fixture-git-exempt:`
+  reason, and the CI `hermeticity` job runs the suite under a hostile global
+  config (specs/066-test-git-hermeticity).
+- **Workflow jobs run code without a repository write token.** Workflows default
+  to `contents: read`; a job asks for its own scope. A job that runs tests or
+  DocGuard holds no write permission and checks out with
+  `persist-credentials: false`; a job holding `contents`, `actions`,
+  `pull-requests` or `issues` write runs no package manager, build tool or test.
+  `tests/workflow-permissions.test.mjs` enforces it
+  (specs/068-release-least-privilege).
 - Run `docguard guard` before pushing — all checks must pass
 - Standalone file writes use `safeWrite()` with backups before overwrite.
   Lifecycle operations spanning multiple files use `commitFileTransaction()` so

{docguard_cli-0.44.2 → docguard_cli-0.44.3}/CHANGELOG.md

@@ -7,6 +7,48 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.44.3] - 2026-10-11
+
+### Fixed
+
+- **Route readers that undercounted real projects**
+  (`specs/071-real-project-route-gaps`). Run on the public RealWorld example
+  applications, which all serve the same 19 endpoints:
+  - **Actix Web** read 0 routes and reported nothing missing. The builder
+    style (`web::scope("/api").service(web::resource("users").route(web::post().to(h)))`,
+    `.configure(f)`, functions returning a `Scope`) is now read, with scope
+    prefixes composed across functions and files, and `#[get("/p")]` handlers
+    take the prefix of the scope that registers them. Rocket's
+    `.mount("/p", routes![a, b])` prefixes its handlers the same way.
+  - **Axum** kept only the first method of `.route("/x", get(a).put(b))`
+    (12 of 19). Every chained method is now reported, with `on(MethodFilter::…)`,
+    `any` and `*_service`, and `.nest("/p", r)` / `.merge(r)` prefixes apply.
+  - **Symfony** read 0: an invokable controller declares its route on the
+    class (`@Route` or `#[Route]` above a class with `__invoke`), which was read
+    only as a prefix. It is now the route of `__invoke` when no method declares
+    one, as Symfony's loader does.
+  - **Koa** dropped `/api` from all 19 paths: a module ending
+    `module.exports = router.routes()` mounted with `api.use(users)` lost the
+    prefix above it. Such exports (and `router.middleware()`,
+    `export default router.routes()`) are now followed.
+  - A JWT middleware built to let unauthenticated requests through (koa-jwt
+    `passthrough: true`, express-jwt `credentialsRequired: false`) no longer
+    marks every route below it as requiring auth; route-level auth middleware
+    still does. On the Koa app, auth now sits on exactly the 12 routes that
+    carry `auth`, not on `POST /api/users/login`.
+  - A declaration an Actix, Axum, Rocket, Symfony or Laravel reader recognises
+    but cannot turn into a route is listed in `scan.unresolved`
+    (`route-unresolved-path`, `-prefix`, `-method`, `-declaration`), so the
+    API-surface check reports `partial` instead of a silent zero; a Laravel
+    route file no application loads is one of them.
+
+### Commits
+
+- chore: verify spec 071; review docs after specs 065-071 (#559)
+- fix: route readers that undercounted real projects (spec 071) (#558)
+- chore: verify spec 051 maintenance; map sync-tests.mjs in TEST-SPEC (#557)
+- test: replace typeof-only export checks with behaviour tests (#556)
+
 ## [0.44.2] - 2026-10-11
 
 ### Fixed

{docguard_cli-0.44.2 → docguard_cli-0.44.3}/CLAUDE.md

@@ -1,4 +1,4 @@
-<!-- docguard:last-reviewed 2026-10-10 -->
+<!-- docguard:last-reviewed 2026-10-11 -->
 
 # Agent Instructions
 

{docguard_cli-0.44.2 → docguard_cli-0.44.3}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: docguard-cli
-Version: 0.44.2
+Version: 0.44.3
 Summary: The enforcement tool for Canonical-Driven Development (CDD). Audit, generate, and guard your project documentation. No Python dependencies (requires Node.js 18+).
 Project-URL: Homepage, https://github.com/raccioly/docguard
 Project-URL: Documentation, https://github.com/raccioly/docguard#readme
@@ -188,7 +188,7 @@ The server is **read-only** — it never writes to the mounted project.
   ```yaml
   repos:
     - repo: https://github.com/raccioly/docguard
-      rev: v0.44.2
+      rev: v0.44.3
       hooks: [{ id: docguard-guard }]   # docguard-guard-full for pre-push
   ```
 - **MCP** (Claude, Cursor, any MCP client) — `claude mcp add docguard -- npx -y docguard-cli mcp`; read-only tools to check docs (guard, score, diagnose, …) and to navigate them one bounded section at a time — the full list is in [docs/ai-integration.md](docs/ai-integration.md). Registry manifest ships in-repo (`server.json`, Smithery-ready).
@@ -794,7 +794,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
         with: { fetch-depth: 0 }
-      - uses: raccioly/docguard@v0.44.2
+      - uses: raccioly/docguard@v0.44.3
         with:
           command: guard
 ```
@@ -830,7 +830,7 @@ jobs:
           ref: ${{ github.event.pull_request.head.ref }}
           token: ${{ secrets.GITHUB_TOKEN }}
           fetch-depth: 0
-      - uses: raccioly/docguard@v0.44.2
+      - uses: raccioly/docguard@v0.44.3
         with: { command: fix, auto-commit: 'true', comment-on-pr: 'true' }
 ```
 

{docguard_cli-0.44.2 → docguard_cli-0.44.3}/README.md

@@ -164,7 +164,7 @@ The server is **read-only** — it never writes to the mounted project.
   ```yaml
   repos:
     - repo: https://github.com/raccioly/docguard
-      rev: v0.44.2
+      rev: v0.44.3
       hooks: [{ id: docguard-guard }]   # docguard-guard-full for pre-push
   ```
 - **MCP** (Claude, Cursor, any MCP client) — `claude mcp add docguard -- npx -y docguard-cli mcp`; read-only tools to check docs (guard, score, diagnose, …) and to navigate them one bounded section at a time — the full list is in [docs/ai-integration.md](docs/ai-integration.md). Registry manifest ships in-repo (`server.json`, Smithery-ready).
@@ -770,7 +770,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
         with: { fetch-depth: 0 }
-      - uses: raccioly/docguard@v0.44.2
+      - uses: raccioly/docguard@v0.44.3
         with:
           command: guard
 ```
@@ -806,7 +806,7 @@ jobs:
           ref: ${{ github.event.pull_request.head.ref }}
           token: ${{ secrets.GITHUB_TOKEN }}
           fetch-depth: 0
-      - uses: raccioly/docguard@v0.44.2
+      - uses: raccioly/docguard@v0.44.3
         with: { command: fix, auto-commit: 'true', comment-on-pr: 'true' }
 ```
 

{docguard_cli-0.44.2 → docguard_cli-0.44.3}/ROADMAP.md

@@ -1,6 +1,6 @@
 # DocGuard Roadmap
 
-<!-- docguard:last-reviewed 2026-10-10 -->
+<!-- docguard:last-reviewed 2026-10-11 -->
 
 This file contains current product intent only. Released work belongs in
 `CHANGELOG.md`; implementation history remains recoverable from Git. Completed or
@@ -13,14 +13,13 @@ structural score is useful, but it is not proof that arbitrary prose is true.
 
 ## Active roadmap
 
-Specs 014–051 shipped in v0.43.0 (2026-10-01). Spec 052 (baseline fingerprints)
-and spec 053 (the documentation site) wait for the next release; the
-`[Unreleased]` section of `CHANGELOG.md` lists them, and each spec's `tasks.md`
-is its checklist. One item remains open:
-
-- **Native suppressions for claimspec (issue #420).** Whether DocGuard adopts
-  the claimspec ignore format depends on reason-bearing suppressions; the
-  decision is open.
+Specs 014–051 shipped in v0.43.0 (2026-10-01); specs 036 and 052–064 in
+v0.44.0, 065–067 in v0.44.1 and 068–069 in v0.44.2 (all 2026-10-11). Native
+suppressions for claimspec (issue #420) shipped as spec 057. Spec 071 (route
+readers checked against public projects) is merged and waits for the next
+release; the `[Unreleased]` section of `CHANGELOG.md` lists it. Spec 070
+(symbol-level requirement anchors) is in progress. Each spec's `tasks.md` is
+its checklist.
 
 New work starts with a reviewed specification and measurable acceptance
 criteria rather than an evergreen task list that can become stale.

{docguard_cli-0.44.2 → docguard_cli-0.44.3}/action.yml

@@ -100,7 +100,7 @@ runs:
     - name: Install DocGuard
       shell: bash
       env:
-        DOCGUARD_RELEASED_VERSION: '0.44.2'
+        DOCGUARD_RELEASED_VERSION: '0.44.3'
         DOCGUARD_VERSION_INPUT: ${{ inputs.docguard-version }}
       run: |
         VERSION="${DOCGUARD_VERSION_INPUT:-$DOCGUARD_RELEASED_VERSION}"