Dev

.claude-plugin/marketplace.json

@@ -10,7 +10,7 @@
   "plugins": [
     {
       "name": "genie",
-      "version": "5.260714.3",
+      "version": "5.260715.1",
       "source": "./plugins/genie",
       "description": "Human-AI partnership for Claude Code. Share a terminal, orchestrate workers, evolve together. Brainstorm ideas, wish them into plans, make with parallel agents, ship as one team. A coding genie that grows with your project."
     }

.genie/INDEX.md

@@ -23,6 +23,7 @@
 - [WISH: warp-integration](wishes/warp-integration/WISH.md) — **DONE** (all 4 groups SHIP-reviewed 2026-07-02; pane-render checklist awaiting Felipe): genie init, Warp launch-config emitter, genie launch, /work multi-session opt-in
 
 ## Poured
+- [WISH: stable-release-security-gate](wishes/stable-release-security-gate/WISH.md) · [brainstorm](brainstorms/stable-release-security-gate/DRAFT.md) — **APPROVED 2026-07-14, plan review SHIP (1 FIX-FIRST loop)**: the stable-channel unblock for inherited Ultra findings F16 (CRITICAL arbitrary-ref stable publish, all 4 dispatch entry points) / F17 (unbound run_id/version inputs) / F18 (unpinned actions, unfrozen installs, broad permissions) / F31 (non-transactional swap; verify-release.sh can't verify real releases). G1 repo-code hardening dispatched to engineer on `wish/stable-release-security-gate`; G2 GitHub Environment (`production` + prevent-self-review) / `v*` ruleset + exported evidence is **Felipe-owned**, depends-on G1
 - [hermes-homogeneous-integration](brainstorms/hermes-homogeneous-integration/DESIGN.md) · [WISH](wishes/hermes-homogeneous-integration/WISH.md) — **SHIPPED** (2026-07-13): PR [#2565](https://github.com/automagik-dev/genie/pull/2565) merged to dev `40512016`, released `v5.260713.2` (dev channel); all 6 groups SHIP-reviewed (G2 one fix loop), final gate SHIP; live isit dogfood PASS ([qa/](wishes/hermes-homogeneous-integration/qa/live-dogfood-20260713.md)) — 23 product skills first-class in Hermes, `mcp_servers.genie` + backups in the live profile, 4/4 doctor legs green. **2 dogfood defects filed as follow-up tasks:** D1 duplicate nested `external_dirs` key on merge into block `skills:` (PyYAML last-wins keeps it working); D2 `[auto-version]` skips the plugin.yaml YAML sync (shipped plugin reads 5.260712.2 vs genie 5.260713.2) — both fixed in PR [#2566](https://github.com/automagik-dev/genie/pull/2566) (merged to dev). Also open: khaw-bridge re-home to KHAW plugin; 2 codex-manifest failures pre-existing on main
 - [WISH: PR #2545 Ultra release-gate remediation](wishes/pr-2545-ultra-release-gate/WISH.md) — **IN PROGRESS as a follow-up targeting `dev`** (2026-07-11): PR #2545 itself merged via `6f682e2b` from promoted source `10ceb2c0`; the follow-up owns the three-hook reduction, physical 23-skill Codex payload, user-asset preservation, install/update/runtime recovery, documentation, and final evidence. PR [#2556](https://github.com/automagik-dev/genie/pull/2556) merged into `dev` at `a7c3c7ce` and reached `main` via #2557. Successor work on `fix/pr2545-ultra-gate` closed both HIGH follow-ups (F42 `09b368a5`, F43 `8e147d87`, independent SHIP reviews) and ran the seven-lane replay at `8e147d87` (12 verified findings → fixed in loop 1 or dispositioned as F44–F52; the fixes were covered by a targeted SHIP re-review, not a full re-replay); aggregate, merge simulation, and live baseline are green at `e3abf2b5`. Pending: successor-PR CI + human approval, and disabling the external metrics-updater routine (F44) that broke dev CI. Stable promotion remains BLOCKED by F16–F18/F31 in [stable-release-security-gate](wishes/stable-release-security-gate/WISH.md).
 - [agent-sync](wishes/agent-sync/DESIGN.md) · [WISH](wishes/agent-sync/WISH.md) · [COORDINATION](wishes/agent-sync/COORDINATION.md) — **MERGED #2541; original implementation superseded by current safety contract** — explicit `genie install`/`genie update` converge detected clients; Codex fallback skills use `~/.agents/skills` (the hidden `.curated` lane is retired), same-name user assets are never adopted, and no lifecycle hook triggers synchronization. Historical execution commits remain in the wish; current proof and the one-time operator-run second-hop caveat live in the [PR #2545 remediation ledger](wishes/pr-2545-ultra-release-gate/REVIEW-DISPOSITION.md).

.genie/brainstorms/stable-release-security-gate/DRAFT.md

@@ -0,0 +1,36 @@
+# Brainstorm: stable-release-security-gate (disposition review)
+
+**Date:** 2026-07-14
+**Mode:** retroactive — a WISH.md already exists at `.genie/wishes/stable-release-security-gate/WISH.md` (DRAFT, authored 2026-07-10 by Codex PM). This brainstorm exists because the human operator found the wish and asked "what is this?"; goal is comprehension + disposition (refine / approve / split / discard), not greenfield design.
+
+## Origin (verified against repo evidence)
+
+- PR #2545 got a multi-agent Ultra supply-chain review. Most findings were remediated in `pr-2545-ultra-release-gate` (IN_PROGRESS).
+- Four findings were **inherited pipeline risks, not caused by the PR**, and were spun out here instead of blocking the PR:
+  - **F16 / SEC1 — CRITICAL:** stable build/sign/publish reachable from an arbitrary ref via `workflow_dispatch` (confirmed: `release.yml:24` has operator dispatch + inputs).
+  - **F17 / SEC2 — HIGH:** manual version/run-id inputs not validated or bound to the expected repo/workflow/conclusion/ref/SHA.
+  - **F18 / SEC3 — HIGH:** third-party Actions not SHA-pinned, installs not frozen, permissions/secrets not least-privilege.
+  - **F31 / QA6 — HIGH:** binary promotion/rollback not transactional; consumer verification not matched to current artifacts.
+- `REVIEW-DISPOSITION.md` (pr-2545 wish) marks all four rows "Blocking": **stable promotion is BLOCKED until this wish ships.** Dev-channel releases still flow.
+
+## Why it exists as a separate wish
+
+So a SHIP verdict on the PR-scope remediation can't be misread as authorization to publish stable artifacts. This wish IS the stable-channel gate.
+
+## Known constraints
+
+- Requires external GitHub state (Environment with independent required reviewer, rulesets) — human-owned, code can't prove it; wish demands exported/API evidence.
+- Complexity rated 8; single sequential group; security engineer + independent reviewer + human gate.
+
+## WRS
+
+WRS: ██████████ 100/100
+ Problem ✅ | Scope ✅ | Decisions ✅ | Risks ✅ | Criteria ✅
+
+## Disposition (RESOLVED 2026-07-14)
+
+Operator chose **split & execute**: WISH.md restructured into
+- **Group 1** — repo-code hardening (F16 ref binding, F17 input/provenance validation, F18 pinning/permissions, F31 transactional swap, `environment: production` wiring) — agent-executable now, complexity 7.
+- **Group 2** — human-owned GitHub Environment/ruleset configuration + exported evidence (depends-on Group 1).
+
+No separate DESIGN.md: the wish pre-exists this brainstorm (authored from the Ultra review findings); the wish itself is the design artifact and goes through plan review directly.

.genie/release-readiness-5x.md

@@ -57,7 +57,7 @@ tag `v<version>`) → tag `v*` fires `release.yml` orchestrator → `build-tarba
 `genie-<v>-<platform>.tar.gz` (build) → `+.bundle` `+.intoto.jsonl` (sign) → upload
 `dist/*` = 12 assets (publish) → `install.sh` downloads `genie-<v>-<platform>.tar.gz` +
 `.bundle` and runs `cosign verify-blob` / `gh attestation verify` with cert-identity
-pinned to `^https://github.com/automagik-dev/genie/.github/workflows/sign-attest.yml@`
+pinned to `^https://github\.com/automagik-dev/genie/\.github/workflows/sign-attest\.yml@refs/heads/main$`
 + github OIDC issuer — matches the workflow that physically holds the cosign step.
 
 **Manifest chain consistent:** publish writes `.well-known/{latest,homolog,dev}.json`