automagik-dev · namastex888 · Jul 27, 2026 · Jul 27, 2026 · Jul 27, 2026 · Jul 27, 2026
diff --git a/.claude-plugin/marketplace.json b/.claude-plugin/marketplace.json
@@ -10,7 +10,7 @@
   "plugins": [
     {
       "name": "genie",
-      "version": "5.260727.4",
+      "version": "5.260727.9",
       "source": "./plugins/genie",
       "description": "Human-AI partnership for Claude Code. Share a terminal, orchestrate workers, evolve together. Brainstorm ideas, wish them into plans, make with parallel agents, ship as one team. A coding genie that grows with your project."
     }

diff --git a/.genie/INDEX.md b/.genie/INDEX.md
@@ -50,9 +50,9 @@
 - [genie-ui-bridge — DESIGN](brainstorms/genie-ui-bridge/DESIGN.md) → [WISH](wishes/genie-ui-bridge/WISH.md) — **SHIPPED 2026-07-21**: G1 `aadbae83` + G2 `2ff71abe` (ui-bridge command, protocol 1.0) execution-reviewed SHIP; PR [#2610](https://github.com/automagik-dev/genie/pull/2610) MERGED to dev `600c18fe` (CI 16/16) + post-merge scratch-client QA. Unblocked genie-ui-dash G4/G5 (merge preceded both reviews); Felipe ratified channel/home/timing via explicit picker
 - [genie-ui — DESIGN](brainstorms/genie-ui/DESIGN.md) → [WISH](wishes/genie-ui/WISH.md) — **SUPERSEDED as the UI direction 2026-07-21**: shipped the fresh-substrate browser shell (merged PR #2609), but Felipe rejected that substrate after seeing it live; the UI direction moved to [genie-ui-dash](wishes/genie-ui-dash/WISH.md). Salvage value retained: the ~1,270-LoC chat backend (no PTY imports) remains conductor-wish substrate.
 - [genie-ui-dash — WISH](wishes/genie-ui-dash/WISH.md) — direct wish (no brainstorm; Felipe-ratified verbatim), plan SHIP + amendment re-review SHIP; **ALL FIVE GROUPS EXECUTED 2026-07-21** on private `khal-os/genie-desktop` branch `genie-dash` @ `9bf43fc`: base+build proof · agent-adapter contract (zero-behavior-change proven) · codex/hermes/rlmx adapters + picker · genie kanban as ui-bridge client · hire roster via roster_hire (single write path). IN_PROGRESS pending Felipe GUI QA + rlmx live spawn; polish-pass LOW backlog consolidated in the G5 disposition.
-- [WISH: stable-release-security-gate](wishes/stable-release-security-gate/WISH.md) · [brainstorm](brainstorms/stable-release-security-gate/DRAFT.md) — **IN_PROGRESS 4/6 (2026-07-25; was APPROVED 2026-07-14, plan review SHIP after 1 FIX-FIRST loop)** — remaining criteria are verification rituals, not engineering: the end-to-end two-maintainer `production` approval demo + dev/homolog manifest-publication confirmation (credential half solved by the genie-release-bot App); closes with the first stable release: the stable-channel unblock for inherited Ultra findings F16 (CRITICAL arbitrary-ref stable publish, all 4 dispatch entry points) / F17 (unbound run_id/version inputs) / F18 (unpinned actions, unfrozen installs, broad permissions) / F31 (non-transactional swap; verify-release.sh can't verify real releases). G1 repo-code hardening dispatched to engineer on `wish/stable-release-security-gate`; G2 GitHub Environment (`production` + prevent-self-review) / `v*` ruleset + exported evidence is **Felipe-owned**, depends-on G1
+- [WISH: stable-release-security-gate](wishes/stable-release-security-gate/WISH.md) · [brainstorm](brainstorms/stable-release-security-gate/DRAFT.md) — **DONE 2026-07-27 (6/6)** — closed by the first full-pipeline stable release v5.260727.5 (run 30240023804: production gate demonstrated live with dispatcher ≠ approver, 36 assets, immutable, latest/homolog/dev manifests advanced); was IN_PROGRESS 4/6 since 2026-07-25: the stable-channel unblock for inherited Ultra findings F16 (CRITICAL arbitrary-ref stable publish, all 4 dispatch entry points) / F17 (unbound run_id/version inputs) / F18 (unpinned actions, unfrozen installs, broad permissions) / F31 (non-transactional swap; verify-release.sh can't verify real releases). G1 repo-code hardening dispatched to engineer on `wish/stable-release-security-gate`; G2 GitHub Environment (`production` + prevent-self-review) / `v*` ruleset + exported evidence is **Felipe-owned**, depends-on G1
 - [hermes-homogeneous-integration](brainstorms/hermes-homogeneous-integration/DESIGN.md) · [WISH](wishes/hermes-homogeneous-integration/WISH.md) — **SHIPPED** (2026-07-13): PR [#2565](https://github.com/automagik-dev/genie/pull/2565) merged to dev `40512016`, released `v5.260713.2` (dev channel); all 6 groups SHIP-reviewed (G2 one fix loop), final gate SHIP; live isit dogfood PASS ([qa/](wishes/hermes-homogeneous-integration/qa/live-dogfood-20260713.md)) — 23 product skills first-class in Hermes, `mcp_servers.genie` + backups in the live profile, 4/4 doctor legs green. **2 dogfood defects filed as follow-up tasks:** D1 duplicate nested `external_dirs` key on merge into block `skills:` (PyYAML last-wins keeps it working); D2 `[auto-version]` skips the plugin.yaml YAML sync (shipped plugin reads 5.260712.2 vs genie 5.260713.2) — both fixed in PR [#2566](https://github.com/automagik-dev/genie/pull/2566) (merged to dev). Also open: khaw-bridge re-home to KHAW plugin; 2 codex-manifest failures pre-existing on main
-- [WISH: PR #2545 Ultra release-gate remediation](wishes/pr-2545-ultra-release-gate/WISH.md) — **DONE** (closed 2026-07-24): PR #2545 merged via `6f682e2b`; follow-up #2556 merged into `dev` at `a7c3c7ce` and promoted via #2557; successor #2562 merged as `137dede8` on 2026-07-12 with 15 checks passing on its exact head `bd8c6128`, and is now on `main`. Both HIGH follow-ups ship fixed (F42 `09b368a5`, F43 `8e147d87`), the seven-lane replay ran at `8e147d87` with its 12 findings dispositioned F44–F52, and the metrics-updater routine has been silent since 2026-07-14. Recorded as unmet rather than waived: **F02** — no independent `APPROVED` review exists on #2562. Stable promotion remains BLOCKED by F16–F18/F31 in [stable-release-security-gate](wishes/stable-release-security-gate/WISH.md); installed hook hashes remain untrusted.
+- [WISH: PR #2545 Ultra release-gate remediation](wishes/pr-2545-ultra-release-gate/WISH.md) — **DONE** (closed 2026-07-24): PR #2545 merged via `6f682e2b`; follow-up #2556 merged into `dev` at `a7c3c7ce` and promoted via #2557; successor #2562 merged as `137dede8` on 2026-07-12 with 15 checks passing on its exact head `bd8c6128`, and is now on `main`. Both HIGH follow-ups ship fixed (F42 `09b368a5`, F43 `8e147d87`), the seven-lane replay ran at `8e147d87` with its 12 findings dispositioned F44–F52, and the metrics-updater routine has been silent since 2026-07-14. Recorded as unmet rather than waived: **F02** — no independent `APPROVED` review exists on #2562. The F16–F18/F31 stable-promotion block cleared when [stable-release-security-gate](wishes/stable-release-security-gate/WISH.md) closed DONE 2026-07-27 (first full-pipeline stable v5.260727.5, run 30240023804); installed hook hashes remain untrusted.
 - [agent-sync](wishes/agent-sync/DESIGN.md) · [WISH](wishes/agent-sync/WISH.md) · [COORDINATION](wishes/agent-sync/COORDINATION.md) — **MERGED #2541; original implementation superseded by current safety contract** — explicit `genie install`/`genie update` converge detected clients; Codex fallback skills use `~/.agents/skills` (the hidden `.curated` lane is retired), same-name user assets are never adopted, and no lifecycle hook triggers synchronization. Historical execution commits remain in the wish; current proof and the one-time operator-run second-hop caveat live in the [PR #2545 remediation ledger](wishes/pr-2545-ultra-release-gate/REVIEW-DISPOSITION.md).
 - [WISH: agent-sync-hardening](wishes/agent-sync-hardening/WISH.md) — **SUPERSEDED CRITERION-BY-CRITERION, not closed wholesale** (2026-07-11): the original PR #2546 execution narrative is historical. The current [PR #2545 remediation ledger](wishes/pr-2545-ultra-release-gate/REVIEW-DISPOSITION.md) maps B1–B7 to concrete hook, lock, ownership, convergence, Windows, and migration evidence. Its mapped gates closed with the pr-2545 wish on 2026-07-24 except F02 (no independent `APPROVED` review); there is no SessionStart updater and no hook-driven second-hop compatibility path.
 - [council-workflow](brainstorms/council-workflow/DESIGN.md) · [WISH](wishes/council-workflow/WISH.md) — /council vira saved workflow nativo (deliberation + audit), lens library 13 (7 persona skills renomeadas por lane + 6 cards), distribuição via install-stamp em ~/.claude/workflows; implementa a disposição council do skill-absorbs G4 — EXECUTADO 2026-07-10: G1 `0b222e17`, G2 `12270b21` (1 fix loop: unwrap p/ body-style do runtime), G3 `22a7ed50`, G4 `2af7ebd9`, G5-eng `6494253d` — todos SHIP; QA vivo USER-GATED pós-release (ritual Felipe: merge→release→plugin update→rodar /council "revisar tudo"; g5-gate para na cauda qa/ até lá); final execution review após o QA