Garry TanandClaude Fable 5 46d158c5ed fix(security): harden the skill-start trust boundary — review-army findings ...

Session ID gains a urandom suffix (block binding unforgeable by reflected
content); _sanitize also neutralizes spoofed SESSION_ID: lines; branch
names are charset-clamped before JSON embedding (skill-start + skill-end);
.brain-last-push reads first line only with a charset clamp; the artifacts
URL echo routes through _sanitize; the privacy consent gate fires in
interactive sessions only (spawned auto-choose could accept consent no
human gave — emission order is not a safety property); the daily pull gets
non-interactive + slow-network git guards and stamps only when the
receipted path ran; ~/.claude.json gets a grep pre-filter before the jq
parse.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-25 20:50:15 +00:00

..

dev-setup

v1.68.1.0 fix: phantom AskUserQuestion hooks — canonical-only registration + self-healing settings.json (#2631)

2026-08-19 16:53:19 -07:00

dev-teardown

v1.57.9.0 feat: source-clean gbrain render (dev-setup --out-dir + machine-wide gbrain-refresh) (#1951)

2026-06-09 22:29:23 -07:00

gstack-analytics

feat: opt-in usage telemetry + community intelligence platform (v0.8.6) (#210)

2026-03-19 17:21:05 -07:00

gstack-artifacts-init

v1.69.0.0 fix: the silent-failure wave — 6 fixes, 5 community PRs absorbed, tracker closed with receipts (#2666)

2026-08-24 08:55:58 -07:00

gstack-artifacts-url

v1.43.2.0 fix wave: post-Daegu paper-cut — 18 fixes, 28 bisect commits (#1642)

2026-05-21 21:21:07 -07:00

gstack-brain-cache

v1.68.0.0 fix: next tracker wave — 16 verified fixes in, 90 stale PRs and 21 issues closed with receipts (#2632)

2026-08-19 11:42:55 -07:00

gstack-brain-context-load.ts

v1.65.0.0 feat: fork port wave 2 — feature fixes, session persistence, Apple releases, supply-chain CI (#2577)

2026-08-15 11:42:19 -07:00

gstack-brain-enqueue

v1.68.0.0 fix: next tracker wave — 16 verified fixes in, 90 stale PRs and 21 issues closed with receipts (#2632)

2026-08-19 11:42:55 -07:00

gstack-brain-restore

v1.69.0.0 fix: the silent-failure wave — 6 fixes, 5 community PRs absorbed, tracker closed with receipts (#2666)

2026-08-24 08:55:58 -07:00

gstack-brain-sync

v1.69.0.0 fix: the silent-failure wave — 6 fixes, 5 community PRs absorbed, tracker closed with receipts (#2666)

2026-08-24 08:55:58 -07:00

gstack-brain-uninstall

v1.68.0.0 fix: next tracker wave — 16 verified fixes in, 90 stale PRs and 21 issues closed with receipts (#2632)

2026-08-19 11:42:55 -07:00

gstack-builder-profile

feat: gstack v1 — simpler prompts + real LOC receipts (v1.0.0.0) (#1039)

2026-04-18 15:05:42 +08:00

gstack-code-intelligence

v1.65.0.0 feat: fork port wave 2 — feature fixes, session persistence, Apple releases, supply-chain CI (#2577)

2026-08-15 11:42:19 -07:00

gstack-codex-probe

v1.67.0.0 fix: the tracker wave — XProtect self-heal, complete installs, brain-sync integrity, 31 community PRs credited (#2604)

2026-08-16 19:34:41 -07:00

gstack-codex-session-import

v1.64.1.0 v1.64.1.0: the code-smell fix wave — every pipeline guard now provably fires (net −24,943 lines) (#2572)

2026-08-15 09:37:04 -07:00

gstack-community-dashboard

v1.63.0.0 feat: GStack 2 fork port wave — egress receipts, context-bill, sharded gate, /health fix (#2541)

2026-08-14 09:28:56 -07:00

gstack-config

v1.68.1.0 fix: phantom AskUserQuestion hooks — canonical-only registration + self-healing settings.json (#2631)

2026-08-19 16:53:19 -07:00

gstack-context-bill

v1.65.0.0 feat: fork port wave 2 — feature fixes, session persistence, Apple releases, supply-chain CI (#2577)

2026-08-15 11:42:19 -07:00

gstack-decision-log

v1.69.0.0 fix: the silent-failure wave — 6 fixes, 5 community PRs absorbed, tracker closed with receipts (#2666)

2026-08-24 08:55:58 -07:00

gstack-decision-search

v1.57.5.0 feat: cross-session decision memory + gbrain dream-stage call graph (#1910)

2026-06-08 06:20:58 -07:00

gstack-detach

v1.58.1.0 feat: hermetic local E2E + Conductor prose AskUserQuestion (#2004)

2026-06-14 11:40:57 -07:00

gstack-developer-profile

v1.64.0.0 fix wave: full tracker audit — 90 fixes, 52 issues closed, ~50 community PRs absorbed (#2571)

2026-08-14 22:02:07 -07:00

gstack-diff-scope

v1.67.0.0 fix: the tracker wave — XProtect self-heal, complete installs, brain-sync integrity, 31 community PRs credited (#2604)

2026-08-16 19:34:41 -07:00

gstack-distill-apply

v1.52.0.0 feat(plan-tune): explicit consent + first-run setup wizard for contributors (#1741)

2026-05-28 18:21:09 -07:00

gstack-distill-free-text

v1.69.0.0 fix: the silent-failure wave — 6 fixes, 5 community PRs absorbed, tracker closed with receipts (#2666)

2026-08-24 08:55:58 -07:00

gstack-egress

v1.67.1.0 fix: external-contributor security sweep — 6 findings hardened, regression-pinned (#2605)

2026-08-17 07:50:37 -07:00

gstack-egress-lib.sh

v1.63.0.0 feat: GStack 2 fork port wave — egress receipts, context-bill, sharded gate, /health fix (#2541)

2026-08-14 09:28:56 -07:00

gstack-egress-receipt

v1.63.0.0 feat: GStack 2 fork port wave — egress receipts, context-bill, sharded gate, /health fix (#2541)

2026-08-14 09:28:56 -07:00

gstack-evidence

v1.69.0.0 fix: the silent-failure wave — 6 fixes, 5 community PRs absorbed, tracker closed with receipts (#2666)

2026-08-24 08:55:58 -07:00

gstack-extension

feat: headed mode + sidebar agent + Chrome extension (v0.12.0) (#517)

2026-03-26 11:15:24 -06:00

gstack-first-task-detect

v1.58.5.0 feat: first-run activation scaffold + gstack router front door (#2078)

2026-06-25 09:42:45 -07:00

gstack-gbrain-detect

v1.67.0.0 fix: the tracker wave — XProtect self-heal, complete installs, brain-sync integrity, 31 community PRs credited (#2604)

2026-08-16 19:34:41 -07:00

gstack-gbrain-install

v1.67.0.0 fix: the tracker wave — XProtect self-heal, complete installs, brain-sync integrity, 31 community PRs credited (#2604)

2026-08-16 19:34:41 -07:00

gstack-gbrain-lib.sh

v1.43.2.0 fix wave: post-Daegu paper-cut — 18 fixes, 28 bisect commits (#1642)

2026-05-21 21:21:07 -07:00

gstack-gbrain-mcp-verify

v1.63.0.0 feat: GStack 2 fork port wave — egress receipts, context-bill, sharded gate, /health fix (#2541)

2026-08-14 09:28:56 -07:00

gstack-gbrain-repo-policy

v1.68.0.0 fix: next tracker wave — 16 verified fixes in, 90 stale PRs and 21 issues closed with receipts (#2632)

2026-08-19 11:42:55 -07:00

gstack-gbrain-source-wireup

v1.69.0.0 fix: the silent-failure wave — 6 fixes, 5 community PRs absorbed, tracker closed with receipts (#2666)

2026-08-24 08:55:58 -07:00

gstack-gbrain-supabase-provision

v1.66.0.0 feat: test/evals/CI speedup — 90s truthful free suite, diff-billed evals, required Linux lane (#2593)

2026-08-15 22:20:30 -07:00

gstack-gbrain-supabase-verify

v1.12.0.0 feat: /setup-gbrain — coding-agent onboarding for gbrain (#1183)

2026-04-24 01:38:21 -07:00

gstack-gbrain-sync.ts

v1.67.0.0 fix: the tracker wave — XProtect self-heal, complete installs, brain-sync integrity, 31 community PRs credited (#2604)

2026-08-16 19:34:41 -07:00

gstack-global-discover.ts

v1.41.1.0 fix wave: 7 HIGH bugs from external audit + regression tests (PR #1169 follow-up) (#1592)

2026-05-20 06:56:41 -07:00

gstack-ios-qa-daemon

v1.43.0.0 feat: iOS device-farm (5 skills, Mac daemon, Tailscale) (#1574)

2026-05-21 16:09:26 -07:00

gstack-ios-qa-mint

v1.43.0.0 feat: iOS device-farm (5 skills, Mac daemon, Tailscale) (#1574)

2026-05-21 16:09:26 -07:00

gstack-ios-qa-regen

fix(ios-qa): generate app-owned bridge accessors deterministically

2026-07-14 16:35:30 -07:00

gstack-issue-guard

v1.66.1.0 feat: content binding — evidence ledger, wtree staleness, tracker trust envelope, fail-closed hooks (#2603)

2026-08-16 09:53:31 -07:00

gstack-jsonl-merge

v1.69.0.0 fix: the silent-failure wave — 6 fixes, 5 community PRs absorbed, tracker closed with receipts (#2666)

2026-08-24 08:55:58 -07:00

gstack-learnings-log

v1.58.4.0 fix: high-priority community bug wave + PTY plan-mode smoke gate (#2077)

2026-06-21 07:15:19 -07:00

gstack-learnings-search

v1.57.6.0 fix wave: 8 community bugs (4 security guards failing open) (#1911)

2026-06-08 06:39:38 -07:00

gstack-memory-ingest.ts

v1.69.0.0 fix: the silent-failure wave — 6 fixes, 5 community PRs absorbed, tracker closed with receipts (#2666)

2026-08-24 08:55:58 -07:00

gstack-model-benchmark

v1.64.0.0 fix wave: full tracker audit — 90 fixes, 52 issues closed, ~50 community PRs absorbed (#2571)

2026-08-14 22:02:07 -07:00

gstack-next-version

v1.68.0.0 fix: next tracker wave — 16 verified fixes in, 90 stale PRs and 21 issues closed with receipts (#2632)

2026-08-19 11:42:55 -07:00

gstack-patch-names

fix: ship idempotency + skill prefix name patching (v0.14.3.0) (#693)

2026-03-30 22:25:46 -06:00

gstack-paths

v1.65.0.0 feat: fork port wave 2 — feature fixes, session persistence, Apple releases, supply-chain CI (#2577)

2026-08-15 11:42:19 -07:00

gstack-pr-title-rewrite.sh

v1.64.0.0 fix wave: full tracker audit — 90 fixes, 52 issues closed, ~50 community PRs absorbed (#2571)

2026-08-14 22:02:07 -07:00

gstack-question-log

v1.64.0.0 fix wave: full tracker audit — 90 fixes, 52 issues closed, ~50 community PRs absorbed (#2571)

2026-08-14 22:02:07 -07:00

gstack-question-preference

v1.68.0.0 fix: next tracker wave — 16 verified fixes in, 90 stale PRs and 21 issues closed with receipts (#2632)

2026-08-19 11:42:55 -07:00

gstack-redact

v1.69.0.0 fix: the silent-failure wave — 6 fixes, 5 community PRs absorbed, tracker closed with receipts (#2666)

2026-08-24 08:55:58 -07:00

gstack-redact-prepush

v1.69.0.0 fix: the silent-failure wave — 6 fixes, 5 community PRs absorbed, tracker closed with receipts (#2666)

2026-08-24 08:55:58 -07:00

gstack-relink

v1.67.0.0 fix: the tracker wave — XProtect self-heal, complete installs, brain-sync integrity, 31 community PRs credited (#2604)

2026-08-16 19:34:41 -07:00

gstack-repo-mode

v1.67.0.0 fix: the tracker wave — XProtect self-heal, complete installs, brain-sync integrity, 31 community PRs credited (#2604)

2026-08-16 19:34:41 -07:00

gstack-retro-metrics

feat(retro): absorb inline git/awk metrics into bin/gstack-retro-metrics + carve report format

2026-08-25 17:47:32 +00:00

gstack-review-log

v1.66.1.0 feat: content binding — evidence ledger, wtree staleness, tracker trust envelope, fail-closed hooks (#2603)

2026-08-16 09:53:31 -07:00

gstack-review-read

v1.66.1.0 feat: content binding — evidence ledger, wtree staleness, tracker trust envelope, fail-closed hooks (#2603)

2026-08-16 09:53:31 -07:00

gstack-security-dashboard

v1.63.0.0 feat: GStack 2 fork port wave — egress receipts, context-bill, sharded gate, /health fix (#2541)

2026-08-14 09:28:56 -07:00

gstack-session-kind

v1.57.2.0 feat: AskUserQuestion prose fallback when the tool fails at runtime (#1908)

2026-06-07 21:38:21 -07:00

gstack-session-update

v1.68.0.0 fix: next tracker wave — 16 verified fixes in, 90 stale PRs and 21 issues closed with receipts (#2632)

2026-08-19 11:42:55 -07:00

gstack-settings-hook

v1.69.0.0 fix: the silent-failure wave — 6 fixes, 5 community PRs absorbed, tracker closed with receipts (#2666)

2026-08-24 08:55:58 -07:00

gstack-skill-end

fix(security): harden the skill-start trust boundary — review-army findings

2026-08-25 20:50:15 +00:00

gstack-skill-start

fix(security): harden the skill-start trust boundary — review-army findings

2026-08-25 20:50:15 +00:00

gstack-slug

v1.68.0.0 fix: next tracker wave — 16 verified fixes in, 90 stale PRs and 21 issues closed with receipts (#2632)

2026-08-19 11:42:55 -07:00

gstack-specialist-stats

feat: adaptive gating + cross-review dedup for review army (v0.15.2.0) (#760)

2026-04-04 22:46:21 -07:00

gstack-taste-update

feat(v1.3.0.0): open agents learnings + cross-model benchmark skill (#1040)

2026-04-19 17:50:31 +08:00

gstack-team-init

v1.69.0.0 fix: the silent-failure wave — 6 fixes, 5 community PRs absorbed, tracker closed with receipts (#2666)

2026-08-24 08:55:58 -07:00

gstack-telemetry-log

v1.65.0.0 feat: fork port wave 2 — feature fixes, session persistence, Apple releases, supply-chain CI (#2577)

2026-08-15 11:42:19 -07:00

gstack-telemetry-sync

v1.65.0.0 feat: fork port wave 2 — feature fixes, session persistence, Apple releases, supply-chain CI (#2577)

2026-08-15 11:42:19 -07:00

gstack-timeline-log

v1.27.0.0 feat: /setup-gbrain Path 4 (remote MCP) + brain → artifacts rename (#1351)

2026-05-06 19:37:53 -07:00

gstack-timeline-read

v1.44.1.0 fix wave: post-windhoek paper-cut — 9 community PRs in one bundle (#1682)

2026-05-25 10:57:15 -07:00

gstack-uninstall

v1.68.1.0 fix: phantom AskUserQuestion hooks — canonical-only registration + self-healing settings.json (#2631)

2026-08-19 16:53:19 -07:00

gstack-update-check

v1.64.0.0 fix wave: full tracker audit — 90 fixes, 52 issues closed, ~50 community PRs absorbed (#2571)

2026-08-14 22:02:07 -07:00

gstack-verify-gate

v1.65.0.0 feat: fork port wave 2 — feature fixes, session persistence, Apple releases, supply-chain CI (#2577)

2026-08-15 11:42:19 -07:00

gstack-version-bump

v1.68.0.0 fix: next tracker wave — 16 verified fixes in, 90 stale PRs and 21 issues closed with receipts (#2632)

2026-08-19 11:42:55 -07:00

gstack-wtree

v1.66.1.0 feat: content binding — evidence ledger, wtree staleness, tracker trust envelope, fail-closed hooks (#2603)

2026-08-16 09:53:31 -07:00