CHANGELOG Unreleased gains E: the stop rule, "Known issue" after it, the
optional threat model, the critic's own security key SECURITY_RISK and the
security engine (Added); the Pass 2 heading, "6 of 3" and the dedup null
crash (Fixed); the known issues of decisions 220-226 and of E's own review
(the between-rounds holes, a fixed security MAJOR after the review stop
rule, the planted report folder, F5, the below-threshold check, the
unattended cost question, scan_prefix, no real /trekreview with Claude
Security, the plan side's rests, --brief next to --hash or --diff, the fix
round's test gaps, no Claude Security scan of E's own diff, copies and
repeated work); and one two-way door.
verdict-gate.mjs: the comment on the threat model's repo no longer says
"the answers' repo" (with a subdirectory as --repo the answers are read
from the top level and the threat model from the subdirectory; V2 of the
fix round's check). No code change.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Kjell Tore Guttormsen
e6c6a54c37