Fixed
- Silent error swallowing in provider dispatch —
set -o pipefailin spawn_agent subshell. Pipeline was hiding Codex/Gemini failures behind tee's exit code. - Codex explicit stdin flag — All
codex execcommands now include-for explicit stdin reading. - Gemini stdout noise filter — MCP status, extension loading, and keychain messages no longer pollute results.
- Windows PATH space-splitting —
build_provider_env()skipsenv -ion Windows where paths with spaces break word-splitting. - Error classification expanded — permission-denied, module-not-found, MCP-issues patterns added to circuit breaker.
- MANDATORY COMPLIANCE added to 9 commands/skills preventing workflow bypass.
- PostHog telemetry reads key from settings.json when env var unset.
- Codex review dispatch — Strengthened JSON output format requirement.
- Compliance audit test — 38 tests catching missing enforcement automatically.