chore: improve plugin packaging and repository hygiene

.claude-plugin/marketplace.json

@@ -1,15 +1,16 @@
 {
   "name": "evolvehq",
-  "description": "EvolveHQ plugins for documentation-led, ADR-driven development. Install docflow to scaffold (or retrofit) an Architecture Decision Record (ADR) catalogue, a plan/ work queue, and AGENTS.md conventions into any repo, then author, queue, ship, and audit ADRs with lifecycle skills.",
   "owner": {
-    "name": "EvolveHQ",
-    "url": "https://github.com/EvolveHQ"
+    "name": "EvolveHQ"
   },
   "plugins": [
     {
       "name": "docflow",
       "source": "./plugins/docflow",
       "description": "ADR-driven documentation workflow: scaffold an Architecture Decision Record (ADR) catalogue, a plan/ queue, and AGENTS.md conventions into any repo, then author, queue, ship, audit, and roll up ADRs with lifecycle skills — across one repo or a multi-repo product."
     }
-  ]
+  ],
+  "metadata": {
+    "description": "EvolveHQ plugins for documentation-led, ADR-driven development. Install docflow to scaffold (or retrofit) an Architecture Decision Record (ADR) catalogue, a plan/ work queue, and AGENTS.md conventions into any repo, then author, queue, ship, and audit ADRs with lifecycle skills."
+  }
 }

.github/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: npm
+    directory: /
+    schedule:
+      interval: weekly
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: weekly

.github/workflows/clarity-release.yml

@@ -44,11 +44,11 @@ jobs:
       contents: read
       actions: read
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: ${{ github.sha }}
           persist-credentials: false
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: '22'
       - name: Fetch inert public data and prepare exact local plan
@@ -71,11 +71,11 @@ jobs:
       contents: write
       actions: read
     steps:
-      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
         with:
           ref: ${{ github.sha }}
           persist-credentials: false
-      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
           node-version: '22'
       - name: Check independent approval and revalidate the approved payload

.github/workflows/verify.yml

@@ -9,10 +9,11 @@ jobs:
   verify:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v7
-      - uses: actions/setup-node@v7
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0
         with:
           node-version: '22'
+      - run: npm ci
       - run: node scripts/verify.mjs
       - run: node scripts/verify-mutations.mjs
       - run: node evals/run.mjs

SECURITY.md

@@ -0,0 +1,24 @@
+# Security guidance
+
+## Reporting a concern
+
+Use the project's published contact, [docflow@evolvehq.io](mailto:docflow@evolvehq.io),
+to contact the maintainers about a suspected vulnerability. This is the existing
+[project contact](https://evolvehq.github.io/docflow/privacy/), rather than a
+dedicated security inbox. GitHub private vulnerability reporting is currently
+not enabled for this repository.
+
+Describe the affected version or commit, host, impact and steps to reproduce in
+a disposable test repository. Do not send credentials or private repository
+contents. Avoid posting sensitive exploit details in public issues.
+
+## Support and limits
+
+No security response SLA, bounty programme or supported-version maintenance
+schedule is promised. Include your exact installed version; older versions
+have no stated security backport commitment.
+
+Docflow supplies skills, templates and workspace tools that run through the
+coding host you select. Review proposed changes and configure that host's
+permissions and isolation for your repository. Hostless checks do not establish
+native-host security or guarantee that an agent will obey every instruction.

adr/0015-multi-target-portability.md

@@ -103,14 +103,14 @@ installs the existing Claude Code plugin.
 - adr/0008-dual-target-packaging.md (superseded by this ADR)
 - adr/0009-distribution-marketplace-npm.md (the Claude Code / npm channels)
 - adr/0007-lifecycle-skills.md
-- `DocflowHQ/.docflow_workspace/local/archive/member-audits/docflow/2026-09-13-host-verification.md` and `evals/hosts/results/2026-09-13.json`
+- `DocflowHQ/.docflow_workspace/local/archive/member-audits/docflow/2026-09-13-host-verification.md` and `DocflowHQ/.docflow_workspace/local/archive/member-audits/docflow/repo-hygiene-20261014/2026-09-13.json`; [immutable historical Git blob](https://github.com/EvolveHQ/docflow/blob/e8d487a80d40dfa6db1688f18b5aaa71385391fd/evals/hosts/results/2026-09-13.json) (SHA-256 `62882ec9016e68f94e0d47da2edd235f346d4e2ebd41b8ce1566cbd3b50700cc`)
   (earlier bounded observations, including retained pi/Cowork blockers)
 - `DocflowHQ/.docflow_workspace/local/archive/member-audits/docflow/2026-09-13-pi-qwen-continuation.md` and `evals/hosts/results/2026-09-13-pi-qwen.json`
   (Pi local-provider continuation; full Pi/Cowork acceptance remains outstanding)
 - `DocflowHQ/.docflow_workspace/local/archive/member-audits/docflow/2026-09-14-cowork-continuation.md` and `evals/hosts/results/2026-09-14-cowork.json`
   (native Windows actual-target signing/lifecycle/Workflow wave, repaired seed bootstrap and retained permission/source limitations)
 
-- `DocflowHQ/.docflow_workspace/local/archive/member-audits/docflow/2026-09-14-release-verification.md` and `evals/hosts/results/2026-09-14-release-verification.json`
+- `DocflowHQ/.docflow_workspace/local/archive/member-audits/docflow/2026-09-14-release-verification.md` and `DocflowHQ/.docflow_workspace/local/archive/member-audits/docflow/repo-hygiene-20261014/2026-09-14-release-verification.json`; [immutable historical Git blob](https://github.com/EvolveHQ/docflow/blob/e8d487a80d40dfa6db1688f18b5aaa71385391fd/evals/hosts/results/2026-09-14-release-verification.json) (SHA-256 `257b381627de6723b485cef9a9c64cf478dc42e223d0d4050412556a6075a21b`)
   (fresh exact-Git-byte installations and scoped native outcomes; original failures and infrastructure interruption retained)
 
 ## Revision History

adr/0054-reuse-supplied-choices-and-current-authority.md

@@ -47,7 +47,7 @@ None blocking the bounded implementation; qualification remains separately queue
 - adr/0013-interactive-assessment-protocol.md
 - adr/0031-tiered-assessment-depth.md
 - adr/0039-plan-item-carries-its-own-status.md
-- evals/hosts/results/2026-09-14-release-verification.json
+- DocflowHQ/.docflow_workspace/local/archive/member-audits/docflow/repo-hygiene-20261014/2026-09-14-release-verification.json; [immutable historical Git blob](https://github.com/EvolveHQ/docflow/blob/e8d487a80d40dfa6db1688f18b5aaa71385391fd/evals/hosts/results/2026-09-14-release-verification.json) (SHA-256 257b381627de6723b485cef9a9c64cf478dc42e223d0d4050412556a6075a21b)
 - Parent DocflowHQ docs/14-docflow-clarity-v1-delivery-plan.md, revision 0.15.
 - Operator dispatch task_b2132a3cb8c3 / ctx_06d7b40b0d52, 2026-09-15.
 - plan/todo/0058-supplied-choice-and-recovery-usability.md

evals/README.md

@@ -26,7 +26,7 @@ especially when a host caches an installation or a working tree has edits.
 
 Final reports are checked by `reporting.mjs`; missing blocks fail independently
 of a model's verdict. The current continuation is recorded in
-`hosts/results/2026-09-14-release-verification.json` and the corresponding
+`DocflowHQ/.docflow_workspace/local/archive/member-audits/docflow/repo-hygiene-20261014/2026-09-14-release-verification.json`; [immutable historical Git blob](https://github.com/EvolveHQ/docflow/blob/e8d487a80d40dfa6db1688f18b5aaa71385391fd/evals/hosts/results/2026-09-14-release-verification.json) (SHA-256 `257b381627de6723b485cef9a9c64cf478dc42e223d0d4050412556a6075a21b`) and the corresponding
 release audit; earlier receipts remain historical evidence. The six skipped
 model cases are mapped to independently checked native-host runs, plus the
 Workflow wrapper's additional wave case. These receipts are separate from the

evals/hosts/README.md

@@ -75,7 +75,10 @@ python evals/hosts/run-host.py --host claude --container docflow-test-claude --f
 
 The runner records actual process outcomes and keeps raw transcripts in the
 supplied scratch directory. Its Claude allowlist permits the fixture tools;
-Codex uses unrestricted execution only inside the isolated disposable container.
+Codex defaults to the workspace-write sandbox inside the isolated disposable
+container; approval prompts remain disabled for unattended runs. This confines
+writes according to the host sandbox but is not fresh native-host qualification
+evidence. The current qualification adapter also uses read-only for read cases.
 pi/OpenCode use their native approval mode. Record these permission differences.
 On timeout the dedicated container is stopped so the model cannot keep acting.
 
@@ -203,7 +206,7 @@ another delegation run or an uninterrupted initial pass.
 
 ## Current claim and denial assertions
 
-The separate `results/2026-09-14-release-verification.json` and release audit
+The separate `DocflowHQ/.docflow_workspace/local/archive/member-audits/docflow/repo-hygiene-20261014/2026-09-14-release-verification.json`; [immutable historical Git blob](https://github.com/EvolveHQ/docflow/blob/e8d487a80d40dfa6db1688f18b5aaa71385391fd/evals/hosts/results/2026-09-14-release-verification.json) (SHA-256 `257b381627de6723b485cef9a9c64cf478dc42e223d0d4050412556a6075a21b`) and release audit
 record the operator's next continuation on exact Git-blob plugin bytes from
 `bef25d8`; the earlier source-pinned observations above remain historical.
 Fresh target-state success is scoped separately from native tool chronology,
@@ -239,7 +242,7 @@ unperformed capabilities. Keep raw logs and bundles outside the repository.
 After collecting evidence, stop/remove only the named test containers so tmpfs
 authentication is discarded. Never prune unrelated Docker resources.
 
-Results are recorded in `results/2026-09-13.json` and the separate continuation
+Results are recorded in `DocflowHQ/.docflow_workspace/local/archive/member-audits/docflow/repo-hygiene-20261014/2026-09-13.json`; [immutable historical Git blob](https://github.com/EvolveHQ/docflow/blob/e8d487a80d40dfa6db1688f18b5aaa71385391fd/evals/hosts/results/2026-09-13.json) (SHA-256 `62882ec9016e68f94e0d47da2edd235f346d4e2ebd41b8ce1566cbd3b50700cc`) and the separate continuation
 `results/2026-09-13-pi-qwen.json`, with corresponding internal audits. Pi's
 original gate-command omission and sequential stop failure remain failures;
 native bootstrap repair and a fresh wave retry passed independently with
@@ -255,9 +258,9 @@ match only after CRLF-to-LF normalisation. Both digests and comparisons are reco
 Passing a subset does not establish a green release suite. Signed local pushes and
 native delegation have bounded evidence; hosted GitHub permissions remain
 unverified. These statements describe the earlier five-target snapshots;
-`results/2026-09-11.json` is also historical.
+`DocflowHQ/.docflow_workspace/local/archive/member-audits/docflow/repo-hygiene-20261014/2026-09-11.json`; [immutable historical Git blob](https://github.com/EvolveHQ/docflow/blob/e8d487a80d40dfa6db1688f18b5aaa71385391fd/evals/hosts/results/2026-09-11.json) (SHA-256 `a410d630d5a9eb1c9a7aa1b22044d52d6cb3cc0954d06022c8d309dbc02c84e1`) is also historical.
 
-The final `results/2026-09-14-release-verification.json` assessment covers all
+The final `DocflowHQ/.docflow_workspace/local/archive/member-audits/docflow/repo-hygiene-20261014/2026-09-14-release-verification.json`; [immutable historical Git blob](https://github.com/EvolveHQ/docflow/blob/e8d487a80d40dfa6db1688f18b5aaa71385391fd/evals/hosts/results/2026-09-14-release-verification.json) (SHA-256 `257b381627de6723b485cef9a9c64cf478dc42e223d0d4050412556a6075a21b`) assessment covers all
 five hosts on exact Git bytes from `bef25d8`. Fresh native-high Pi bootstrap,
 normal completion and bootstrap-derived blocked execution pass independent
 initial-publication, completed-event, signed-state, persisted-report and