Release 1.50.2: security and architecture hardening

.agents/plugins/marketplace.json

@@ -9,7 +9,7 @@
       "source": {
         "source": "url",
         "url": "https://github.com/avksp/agent-lifecycle-kit.git",
-        "ref": "v1.50.1"
+        "ref": "v1.50.2"
       },
       "policy": {
         "installation": "AVAILABLE",

.claude-plugin/marketplace.json

@@ -9,10 +9,10 @@
       "source": {
         "source": "github",
         "repo": "avksp/agent-lifecycle-kit",
-        "ref": "v1.50.1"
+        "ref": "v1.50.2"
       },
       "description": "Reviewed SDD planning, budgeted execution, adapter conformance, implementation audit, and final proof.",
-      "version": "1.50.1",
+      "version": "1.50.2",
       "author": {
         "name": "Agent Lifecycle Kit contributors"
       },

.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-lifecycle-kit",
-  "version": "1.50.1",
+  "version": "1.50.2",
   "description": "Provider-neutral lifecycle kit for reviewed SDD planning, budgeted execution, adapter conformance, independent audits, and final proof.",
   "author": {
     "name": "Agent Lifecycle Kit contributors"

.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-lifecycle-kit",
-  "version": "1.50.1",
+  "version": "1.50.2",
   "description": "Provider-neutral lifecycle kit for reviewed SDD planning, budgeted execution, adapter conformance, independent audits, and final proof.",
   "author": {
     "name": "Agent Lifecycle Kit contributors",

.cursor-plugin/marketplace.json

@@ -5,14 +5,14 @@
   },
   "metadata": {
     "description": "Provider-neutral lifecycle kit for reviewed SDD planning, budgeted execution, adapter conformance, independent audits, and final proof.",
-    "version": "1.50.1"
+    "version": "1.50.2"
   },
   "plugins": [
     {
       "name": "agent-lifecycle-kit",
       "source": ".",
       "description": "Reviewed SDD planning, budgeted execution, adapter conformance, implementation audit, and final proof.",
-      "version": "1.50.1",
+      "version": "1.50.2",
       "author": {
         "name": "Agent Lifecycle Kit contributors"
       },

.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-lifecycle-kit",
-  "version": "1.50.1",
+  "version": "1.50.2",
   "description": "Provider-neutral lifecycle kit for reviewed SDD planning, budgeted execution, adapter conformance, independent audits, and final proof.",
   "author": {
     "name": "Agent Lifecycle Kit contributors"

CHANGELOG.md

@@ -4,6 +4,17 @@
 
 - No changes yet.
 
+## 1.50.2 - 2026-08-09
+
+- Blocked generic descriptor-driven host launches and wildcard environment
+  forwarding until a separately qualified local-launch path exists.
+- Added shared receipt redaction, fail-closed neutrality completeness checks,
+  descriptor installation metadata, and dependency-boundary validation.
+- Split the CLI dispatcher into bounded routing modules without changing the
+  public command contract.
+- Updated package, plugin, marketplace, and quickstart publication metadata
+  to `1.50.2`.
+
 ## 1.50.1 - 2026-08-07
 
 - Added a PyPI Trusted Publisher workflow (`.github/workflows/publish.yml`)

README.md

@@ -30,7 +30,7 @@ agent-lifecycle adapter validate --descriptor adapters/codex/adapter.descriptor.
 ```
 
 Package install, when available for the release:
-`python -m pip install agent-lifecycle-kit==1.50.1`.
+`python -m pip install agent-lifecycle-kit==1.50.2`.
 
 For a short walkthrough, use [Quickstart](docs/guides/quickstart.md) and the [Lifecycle cookbook](docs/guides/lifecycle-cookbook.md). For structure and positioning, see [System architecture](docs/architecture/system-architecture.md) and [Project comparison](docs/reference/project-comparison.md). Russian documentation starts at [Документация на русском](docs/ru/README.md).
 
@@ -89,7 +89,7 @@ For a short walkthrough, use [Quickstart](docs/guides/quickstart.md) and the [Li
 ### Security and containment
 
 - Neutrality filters use host-supplied deny rules to keep local paths, secrets, trust roots, and signing keys out of portable artifacts.
-- Host env files require explicit `--host-env-allow`; receipts store redacted metadata, not secret values or private env-file paths.
+- Host env files require explicit `--host-env-allow`; receipts store redacted metadata, and generic descriptor-driven native launch is blocked before process creation.
 - Imports, diagnostics, and usage exports redact local paths and common secret markers before validation.
 - Sandbox receipts separate runtime filesystem, network, process, and environment containment from git write-scope.
 - Release security gates reject leaked local paths, credentials, and unsupported adapter or production claims.

adapters/claude/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-lifecycle-kit",
-  "version": "1.50.1",
+  "version": "1.50.2",
   "description": "Lifecycle skills and adapter metadata for reviewed planning, budgeted execution, adapter conformance, audit, and final proof.",
   "author": {
     "name": "Agent Lifecycle Kit contributors"

adapters/claude/adapter.descriptor.json

@@ -188,5 +188,21 @@
     },
     "writesNativeConfig": false,
     "promptInjectionDefault": false
+  },
+  "installation": {
+    "schemaVersion": "agent-adapter-installation-facts.v1",
+    "binaryAliases": ["claude", "claude-code"],
+    "files": [
+      {"path": ".claude-plugin/plugin.json", "action": "read", "required": true},
+      {"path": ".claude-plugin/marketplace.json", "action": "read", "required": true}
+    ],
+    "commands": [
+      {"argv": ["claude", "plugin", "marketplace", "add", "avksp/agent-lifecycle-kit"], "purpose": "add the repository marketplace", "mutatesHost": true, "requiresOperator": true},
+      {"argv": ["claude", "plugin", "install", "agent-lifecycle-kit@agent-lifecycle-kit"], "purpose": "install the plugin from the configured marketplace", "mutatesHost": true, "requiresOperator": true}
+    ],
+    "operatorActions": [
+      "Run the host reload command after installation.",
+      "Keep lifecycle proof separate from plugin installation."
+    ]
   }
 }

adapters/claude/capabilities.manifest.json

@@ -129,7 +129,7 @@
     }
   ],
   "coreSemantics": "delegated-to-agent-lifecycle-core",
-  "descriptorDigest": "bb8ace8186cb4505b2a98cf707fb7ec4e9f7756bddb2587a84fd9335087f0279",
+  "descriptorDigest": "779b39814c064e295fdba01ea6a81b5db70f123e361f23a18840379d3c5d85cd",
   "eventCapture": {
     "categories": [
       "command",
@@ -156,6 +156,21 @@
     "usageReceiptRequired": true
   },
   "promotion": {
+    "liveTestedHostRange": {
+      "evidence": [
+        "docs/adapters/evidence/claude-code-0.5.0.md",
+        "work/release-0-5/evidence/live-host-conformance-claude-code.json",
+        "work/release-0-5/evidence/live-calibration-verification-claude-code.json",
+        "work/release-0-5/evidence/0.5.1-claude-live-promotion/full-lifecycle/final/final-proof.json"
+      ],
+      "host": "claude-code",
+      "maximumVersion": "2.1.220",
+      "minimumVersion": "2.1.220",
+      "productionPromotionClaimed": false,
+      "publicDirectoryApprovalClaimed": false,
+      "sourceRevision": "6bb3b58ee01d028fe21cef209c284efc79e55ceb",
+      "testedAt": "2026-07-29"
+    },
     "productionPromotionClaimed": false,
     "verifiedRequiresLiveTestedHostRange": true
   },

adapters/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-lifecycle-kit",
-  "version": "1.50.1",
+  "version": "1.50.2",
   "description": "Provider-neutral lifecycle kit and adapter metadata for reviewed planning, budgeted execution, adapter conformance, audit, and final proof.",
   "author": {
     "name": "Agent Lifecycle Kit contributors"

adapters/codex/adapter.descriptor.json

@@ -188,5 +188,21 @@
     },
     "writesNativeConfig": false,
     "promptInjectionDefault": false
+  },
+  "installation": {
+    "schemaVersion": "agent-adapter-installation-facts.v1",
+    "binaryAliases": ["codex"],
+    "files": [
+      {"path": ".codex-plugin/plugin.json", "action": "read", "required": true},
+      {"path": ".agents/plugins/marketplace.json", "action": "read", "required": true}
+    ],
+    "commands": [
+      {"argv": ["codex", "plugin", "marketplace", "add", "avksp/agent-lifecycle-kit", "--ref", "vX.Y.Z"], "purpose": "add a trusted tagged source marketplace", "mutatesHost": true, "requiresOperator": true},
+      {"argv": ["codex", "plugin", "add", "agent-lifecycle-kit@agent-lifecycle-kit"], "purpose": "install the plugin from the configured marketplace", "mutatesHost": true, "requiresOperator": true}
+    ],
+    "operatorActions": [
+      "Choose the release tag before installation.",
+      "Restart the host session after installation."
+    ]
   }
 }

adapters/codex/capabilities.manifest.json

@@ -129,7 +129,7 @@
     }
   ],
   "coreSemantics": "delegated-to-agent-lifecycle-core",
-  "descriptorDigest": "d00b0c9d573244db8e17d1f2d2c45c9d65ae5bb9d542dd37592233c62c4658fb",
+  "descriptorDigest": "5d09ad38b5535b6773118b6419a63d5baf34a6d071a4172080de54ca1f46cc20",
   "eventCapture": {
     "categories": [
       "command",
@@ -156,6 +156,21 @@
     "usageReceiptRequired": true
   },
   "promotion": {
+    "liveTestedHostRange": {
+      "evidence": [
+        "docs/adapters/evidence/codex-cli-0.6.0.md",
+        "work/release-0-6/evidence/codex-live-promotion/live-host-conformance-codex.json",
+        "work/release-0-6/evidence/codex-live-promotion/live-calibration-verification-codex.json",
+        "work/release-0-6/evidence/codex-live-promotion/full-lifecycle/final/final-proof.json"
+      ],
+      "host": "codex",
+      "maximumVersion": "0.145.0",
+      "minimumVersion": "0.145.0",
+      "productionPromotionClaimed": false,
+      "publicDirectoryApprovalClaimed": false,
+      "sourceRevision": "b01a1793e42f52e20077a7aa26b8e4e25c3bd216",
+      "testedAt": "2026-07-29"
+    },
     "productionPromotionClaimed": false,
     "verifiedRequiresLiveTestedHostRange": true
   },

adapters/cursor/.cursor-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agent-lifecycle-kit",
-  "version": "1.50.1",
+  "version": "1.50.2",
   "description": "Agent lifecycle planning, budgeted execution, adapter conformance, audit, and final proof for Cursor.",
   "author": {
     "name": "Agent Lifecycle Kit contributors"

adapters/cursor/adapter.descriptor.json

@@ -174,5 +174,20 @@
     },
     "writesNativeConfig": false,
     "promptInjectionDefault": false
+  },
+  "installation": {
+    "schemaVersion": "agent-adapter-installation-facts.v1",
+    "binaryAliases": ["cursor"],
+    "files": [
+      {"path": ".cursor-plugin/plugin.json", "action": "read", "required": true},
+      {"path": ".cursor-plugin/marketplace.json", "action": "read", "required": true}
+    ],
+    "commands": [
+      {"argv": ["ln", "-s", "<checkout>", "<cursor-local-plugin-directory>/agent-lifecycle-kit"], "purpose": "link a trusted checkout into the local plugin directory", "mutatesHost": true, "requiresOperator": true}
+    ],
+    "operatorActions": [
+      "Replace the local plugin directory placeholder before running the command.",
+      "Reload the host window and do not claim VERIFIED without accepted live receipts."
+    ]
   }
 }

adapters/cursor/capabilities.manifest.json

@@ -129,7 +129,7 @@
     }
   ],
   "coreSemantics": "delegated-to-agent-lifecycle-core",
-  "descriptorDigest": "5ff041ad04f654403ff738e3b8b9de91b933c8d95ee1ae4d6be0be363943682a",
+  "descriptorDigest": "5d7b27811f88afccb58552807aa48573fdff1665f8e0c55408cd2d5a1868f1eb",
   "eventCapture": {
     "categories": [
       "command",

adapters/gemini-cli/adapter.descriptor.json

@@ -169,5 +169,22 @@
     },
     "writesNativeConfig": false,
     "promptInjectionDefault": false
+  },
+  "installation": {
+    "schemaVersion": "agent-adapter-installation-facts.v1",
+    "binaryAliases": ["gemini", "gemini-cli"],
+    "files": [
+      {"path": "adapters/gemini-cli/adapter.descriptor.json", "action": "read", "required": true},
+      {"path": "adapters/gemini-cli/capabilities.manifest.json", "action": "read", "required": true},
+      {"path": "adapters/gemini-cli/README.md", "action": "read", "required": true}
+    ],
+    "commands": [
+      {"argv": ["python", "-m", "pip", "install", "-e", "<checkout>"], "purpose": "install the core CLI from a trusted checkout", "mutatesHost": true, "requiresOperator": true},
+      {"argv": ["gemini", "--version"], "purpose": "confirm the host CLI is available before live proof", "mutatesHost": false, "requiresOperator": true}
+    ],
+    "operatorActions": [
+      "Configure host-local model and profile settings outside the portable core.",
+      "Keep the adapter EXPERIMENTAL until receipts are accepted."
+    ]
   }
 }

adapters/gemini-cli/capabilities.manifest.json

@@ -129,7 +129,7 @@
     }
   ],
   "coreSemantics": "delegated-to-agent-lifecycle-core",
-  "descriptorDigest": "afd08c78e68156ddaf00f916970397ede34cd5ce948a67495b85d2229ef843e6",
+  "descriptorDigest": "3d64f81bbcf3196735c81ed0c61846111a1547f0542f69bc6605607bb3d976d5",
   "eventCapture": {
     "categories": [
       "command",

adapters/goose/adapter.descriptor.json

@@ -212,5 +212,22 @@
     },
     "writesNativeConfig": false,
     "promptInjectionDefault": false
+  },
+  "installation": {
+    "schemaVersion": "agent-adapter-installation-facts.v1",
+    "binaryAliases": ["goose"],
+    "files": [
+      {"path": "adapters/goose/adapter.descriptor.json", "action": "read", "required": true},
+      {"path": "adapters/goose/capabilities.manifest.json", "action": "read", "required": true},
+      {"path": "adapters/goose/README.md", "action": "read", "required": true}
+    ],
+    "commands": [
+      {"argv": ["python", "-m", "pip", "install", "-e", "<checkout>"], "purpose": "install the core CLI from a trusted checkout", "mutatesHost": true, "requiresOperator": true},
+      {"argv": ["goose", "--version"], "purpose": "confirm the host CLI is available before live proof", "mutatesHost": false, "requiresOperator": true}
+    ],
+    "operatorActions": [
+      "Configure host-local model and profile settings outside the portable core.",
+      "Keep the adapter EXPERIMENTAL until receipts are accepted."
+    ]
   }
 }

adapters/goose/capabilities.manifest.json

@@ -129,7 +129,7 @@
     }
   ],
   "coreSemantics": "delegated-to-agent-lifecycle-core",
-  "descriptorDigest": "398b61525c3e5615d65f0529a2864181cbc93f0aa984c370619334751baedc31",
+  "descriptorDigest": "d1268c61be190f3edf8ae3053ebf01978720ff8c67270b9808f059693157a9a3",
   "eventCapture": {
     "categories": [
       "command",
@@ -180,12 +180,7 @@
     "usageReceiptRequired": true
   },
   "promotion": {
-    "productionPromotionClaimed": false,
-    "verifiedRequiresLiveTestedHostRange": true,
     "liveTestedHostRange": {
-      "host": "goose",
-      "minimumVersion": "1.45.0",
-      "maximumVersion": "1.45.0",
       "evidence": [
         "docs/adapters/evidence/goose-live-verified.md",
         "work/release-1-16/evidence/preflight/goose-preflight-report.json",
@@ -196,11 +191,16 @@
         "work/release-1-16/evidence/live-calibration-verification-goose.json",
         "work/release-1-16/evidence/goose/full-lifecycle/final/final-proof-r5.json"
       ],
-      "testedAt": "2026-07-31",
+      "host": "goose",
+      "maximumVersion": "1.45.0",
+      "minimumVersion": "1.45.0",
       "productionPromotionClaimed": false,
       "publicDirectoryApprovalClaimed": false,
-      "sourceRevision": "87fb1ce58612efbd2121d8eb56f9d54de8fbbcfb"
-    }
+      "sourceRevision": "87fb1ce58612efbd2121d8eb56f9d54de8fbbcfb",
+      "testedAt": "2026-07-31"
+    },
+    "productionPromotionClaimed": false,
+    "verifiedRequiresLiveTestedHostRange": true
   },
   "runtimeBoundary": {
     "hostSpecificCode": "adapter-owned",

adapters/grok-build/adapter.descriptor.json

@@ -214,5 +214,22 @@
     },
     "writesNativeConfig": false,
     "promptInjectionDefault": false
+  },
+  "installation": {
+    "schemaVersion": "agent-adapter-installation-facts.v1",
+    "binaryAliases": ["grok-build"],
+    "files": [
+      {"path": "adapters/grok-build/adapter.descriptor.json", "action": "read", "required": true},
+      {"path": "adapters/grok-build/capabilities.manifest.json", "action": "read", "required": true},
+      {"path": "adapters/grok-build/README.md", "action": "read", "required": true}
+    ],
+    "commands": [
+      {"argv": ["python", "-m", "pip", "install", "-e", "<checkout>"], "purpose": "install the core CLI from a trusted checkout", "mutatesHost": true, "requiresOperator": true},
+      {"argv": ["grok-build", "--version"], "purpose": "confirm the host CLI is available before live proof", "mutatesHost": false, "requiresOperator": true}
+    ],
+    "operatorActions": [
+      "Configure host-local model and profile settings outside the portable core.",
+      "Keep the adapter EXPERIMENTAL until receipts are accepted."
+    ]
   }
 }