diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5712c879..272e1827 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,200 @@
 # Changelog
 
+## 1.0.0 (2026-07-03)
+
+
+### Features
+
+* **agent-runtime:** add Evolith Agent Runtime, deployment, and CORE-API auth ([8c05501](https://github.com/beyondnetcode/evolith_arch32/commit/8c0550142d073524457a0c1be84714f5ee741b08))
+* **agent-runtime:** filesystem-durable scheduler + memory adapters (GT-386) ([e29129c](https://github.com/beyondnetcode/evolith_arch32/commit/e29129c524a43ddf0d0d82ae2b0c06223516bdfa))
+* **agent-runtime:** freeze the public contract surface, sans version bump (GT-388) ([532256e](https://github.com/beyondnetcode/evolith_arch32/commit/532256e86242d3f647308ac73acb33025de4635c))
+* **agent-runtime:** implement Interaction Adapter Port architecture and Smart CLI vertical slice ([5c2f6ed](https://github.com/beyondnetcode/evolith_arch32/commit/5c2f6edfd949032eb2f363bdf7b073cd31079bd9))
+* **agent-runtime:** implement Multi-Engine Routing and Swarms Adapter (GT-385 / GT-398) ([e58d160](https://github.com/beyondnetcode/evolith_arch32/commit/e58d160ccdf0aa1752d5ff7a3fc8b47a184f95ba))
+* **agent-runtime:** real Core-evaluation adapters, replacing the simulated stub (GT-384) ([8511dc9](https://github.com/beyondnetcode/evolith_arch32/commit/8511dc970134e44555a695cb84be68a0a15e80be))
+* **agentic:** integrate Agent Runtime connectivity to MCP, CLI and SDK with 100% SDLC audit compliance ([74213eb](https://github.com/beyondnetcode/evolith_arch32/commit/74213ebd14a2d2c5e385109496ecca76c499e426))
+* **api:** enable Swagger via SWAGGER_ENABLED env var ([25c26f1](https://github.com/beyondnetcode/evolith_arch32/commit/25c26f1d415f4c818d37863ae2aa40acc7a7111e))
+* **api:** enable Swagger via SWAGGER_ENABLED env var ([d20ff41](https://github.com/beyondnetcode/evolith_arch32/commit/d20ff4169127b90d4ac501841bc6d1625b0a6032))
+* **api:** GT-367 add SatellitesController and SatelliteRegistryService for satellite CRUD ([4e2380c](https://github.com/beyondnetcode/evolith_arch32/commit/4e2380ccf449ed3c02d10d6b17d3ebfda79ace59))
+* **api:** GT-371 add satellite linking endpoint — POST /api/v1/satellites/:id/link ([38334bf](https://github.com/beyondnetcode/evolith_arch32/commit/38334bf0bfea3d16667515eb33a7ec7e1bb239ec))
+* **api:** GT-400 add POST /v1/agent/hermes endpoint for chatbox integration ([c3043b1](https://github.com/beyondnetcode/evolith_arch32/commit/c3043b19dbbd26d8bd272938179aa18b756c2325))
+* **arch:** comprehensive HA/resilience/security/governance overhaul ([20d9b10](https://github.com/beyondnetcode/evolith_arch32/commit/20d9b10028dfdd57f29e328a9fc32d3c8c9564dd))
+* **bmad:** role-specialized QA agent suite + orchestration (GT-330 mitigation) ([f740774](https://github.com/beyondnetcode/evolith_arch32/commit/f740774c6267043f5418e22b3046933d6969e1e5))
+* **ci:** GT-343 stage 5 — phase/topology namespace anti-collision guard ([560cae4](https://github.com/beyondnetcode/evolith_arch32/commit/560cae4ac41dc4b2d3c7a364051fb10ed1d1a344))
+* **ci:** implement core-health-checklist automated gate (GT-423) ([64dbca9](https://github.com/beyondnetcode/evolith_arch32/commit/64dbca948b5f6b2d7e086acbbf02d460c0c53a4f))
+* **cli,mcp:** evolith evaluate + core.evaluate surfaces (GT-378/GT-381, L2 parity) ([bd04748](https://github.com/beyondnetcode/evolith_arch32/commit/bd047482343f3db508bb7c8897d5abca9c369ff9))
+* **cli:** GT-365 add satellite:create command ([d57e5e4](https://github.com/beyondnetcode/evolith_arch32/commit/d57e5e42f9ad7e5074ef00e8526e68860af5dce3))
+* **cli:** GT-366 add satellite:adopt command ([34ebcff](https://github.com/beyondnetcode/evolith_arch32/commit/34ebcff1bb7c754867ba1a74d57da7b2b688390b))
+* **compose:** add focused docker-compose for the 3 Evolith services ([42368f4](https://github.com/beyondnetcode/evolith_arch32/commit/42368f42ba6723471ed46a301eada53ca7f880c7))
+* **contracts:** GT-343 stage 3 — public SDLC phase enums accept canonical ids ([5f97625](https://github.com/beyondnetcode/evolith_arch32/commit/5f9762561898b8240ffd3d387ae28dd15cbf4afe))
+* **core-api:** blueprint + deployment kind-evaluators → GT-379 DONE ([b5f52f0](https://github.com/beyondnetcode/evolith_arch32/commit/b5f52f0c2cff772874745dd20d99d27821d4313d))
+* **core-api:** enforce ADR-0073 envelope on evaluation endpoint — GT-361 ([11e9a43](https://github.com/beyondnetcode/evolith_arch32/commit/11e9a439ec1748a1790e8d225f2a909b6605c0e3))
+* **core-api:** implement SatelliteManifest schema and ADR-0073 envelope ([9a69c2c](https://github.com/beyondnetcode/evolith_arch32/commit/9a69c2cc0e261cf4bb5473eb7024fdff556d6243))
+* **core-api:** wire checkpoint + topology evaluation kinds (GT-379) ([c61464e](https://github.com/beyondnetcode/evolith_arch32/commit/c61464e88bba3377861315f18599e615f7b14850))
+* **core-api:** wire POST /v1/evaluate to the EvaluationOrchestrator (GT-378, L2) ([8cb6ea0](https://github.com/beyondnetcode/evolith_arch32/commit/8cb6ea03cc328ef940a0eaf422bafac9909f16ae))
+* **core-domain,core-api:** multi-kind evaluation dispatch + architecture engine (GT-379) ([8fbd93f](https://github.com/beyondnetcode/evolith_arch32/commit/8fbd93f693e02fe6b4fee59e50c435cbdf1e1427))
+* **core-domain:** canonical EvaluationContext/EvaluationResult contracts (GT-377, R1) ([e340b17](https://github.com/beyondnetcode/evolith_arch32/commit/e340b1770cba04bb3d3a72a0b074b42f95540a4b))
+* **core-domain:** EvaluationOrchestrator + context builder + legacy result mapper (GT-378, L1b) ([8134d9f](https://github.com/beyondnetcode/evolith_arch32/commit/8134d9f1793f72de93b27087bea663ac258c0042))
+* **core-domain:** formalize SatelliteManifest ingestion contract schema — GT-359 ([2e8e021](https://github.com/beyondnetcode/evolith_arch32/commit/2e8e02195a311d3cdcb3819e8b22839478fa9e3e))
+* **core-domain:** GT-343 stage 1 — canonical SDLC PhaseId + alias normalizer ([7ecc560](https://github.com/beyondnetcode/evolith_arch32/commit/7ecc560666586b99e7612a12e9660a313d8bf13b))
+* **core:** Contract Schema Registry — evaluation-context/result JSON schemas (GT-377 AC-1) ([347299b](https://github.com/beyondnetcode/evolith_arch32/commit/347299bc114d7ca711787b0042f15d460778c26b))
+* **core:** implement GT-359 to GT-362 for evaluation pipeline ([ce9a53f](https://github.com/beyondnetcode/evolith_arch32/commit/ce9a53fe7f68d4a0ddf25befde015b0513dd93b8))
+* **core:** implement stateless Architecture Planning Gate (Phase 00) ([ad00d8e](https://github.com/beyondnetcode/evolith_arch32/commit/ad00d8ee00f867bddab613c493b367b012c967c6))
+* **core:** remove story coupling from gates/policies — GT-380 AC1 (L1c) ([f0016c2](https://github.com/beyondnetcode/evolith_arch32/commit/f0016c2e5f2fd09b2e7f90241d1f8bd819804835))
+* **core:** thread EvaluationContext facts into the OPA input (GT-380, L1c) ([2dc2a32](https://github.com/beyondnetcode/evolith_arch32/commit/2dc2a328fc7e777cc6ea9214b1f61847d53ede56))
+* **domain:** GT-364 add InitializeSatelliteUseCase for create and adopt modes ([2ff50b1](https://github.com/beyondnetcode/evolith_arch32/commit/2ff50b10c8d122b7838f75017a575d6ecf02b3ac))
+* **domain:** GT-369 add SatelliteRecord entity, schema and InitializeSatelliteInput/Output types ([880e17e](https://github.com/beyondnetcode/evolith_arch32/commit/880e17eb88560dafd4682aa8286f146b1f72cecd))
+* **domain:** GT-372 add SatelliteAuditService and SatelliteAuditEntry type ([94cad95](https://github.com/beyondnetcode/evolith_arch32/commit/94cad9589e1f53a2b9f11474fc65366e9df11ea8))
+* **evaluation:** complete MVP dimensions 4 and 5 ([3624633](https://github.com/beyondnetcode/evolith_arch32/commit/3624633c50128a2340b5b9cf77bf96ea10792475))
+* **evaluation:** register the full KindEvaluator set on CLI + MCP (W-Parity / BR-008) ([b403d02](https://github.com/beyondnetcode/evolith_arch32/commit/b403d02dbad7b455fcc6cd33fa1cd9a897af2cc2))
+* **gaps:** close GT-314–GT-330 — 329/330 gaps resolved, 0 pending ([d26877d](https://github.com/beyondnetcode/evolith_arch32/commit/d26877d00cc7f4330786eff73451d1b1fec83b93))
+* **gaps:** close GT-314–GT-330 — all 17 pending gaps resolved ([d2b7d2b](https://github.com/beyondnetcode/evolith_arch32/commit/d2b7d2b79c91750b47549ade447fb158aa68982c))
+* **governance:** GT-357 DONE — board now reconciles with executed build/test evidence ([42cc1cb](https://github.com/beyondnetcode/evolith_arch32/commit/42cc1cb817e8af516c31ec492c9f2e18fea60a83))
+* **governance:** implement GT-419 to GT-423 architectural health and observability gaps ([4f00d51](https://github.com/beyondnetcode/evolith_arch32/commit/4f00d511f6669ef46f9db424ecc63935e1a58c36))
+* **harness:** seed self-improving loop ([5805eb0](https://github.com/beyondnetcode/evolith_arch32/commit/5805eb006ea182c3b3129b80e6b7c7c7eb5548d0))
+* **harness:** transition Winston playbooks to JSON Schema output (GT-421) ([583ee30](https://github.com/beyondnetcode/evolith_arch32/commit/583ee30e8f2160c72e1fbf8bfb949a50388bad51))
+* **infra:** GT-324 — CD pipeline builds+pushes core-api/mcp-server to GHCR + guarded Coolify deploy ([ab64c60](https://github.com/beyondnetcode/evolith_arch32/commit/ab64c609762171909b6f75918cce826215464bda))
+* **infra:** GT-363 add IGitHubApiClient interface and GitHubApiAdapter (native fetch, no new deps) ([daab4f7](https://github.com/beyondnetcode/evolith_arch32/commit/daab4f74b067a7414cfae8bd75c432e8dc741cdd))
+* **mcp:** GT-368 add satellite-create, satellite-adopt, satellite-list, satellite-status tools ([3dd6215](https://github.com/beyondnetcode/evolith_arch32/commit/3dd621521a587eb9d00040b2f4726faee3d5af1e))
+* **mcp:** production-ready Dockerfile for SSE deployment ([16c9699](https://github.com/beyondnetcode/evolith_arch32/commit/16c969953074162e59ddb836806f90ef34441632))
+* **mcp:** production-ready Dockerfile for SSE deployment ([3bccdbb](https://github.com/beyondnetcode/evolith_arch32/commit/3bccdbb6271704b17a3b1ef40009c5652e9b9fa8))
+* **opa:** re-anchor compliance-baseline.rego to input.context.{spec,satellite} (GT-380, L1c) ([f0d1cee](https://github.com/beyondnetcode/evolith_arch32/commit/f0d1cee7d45b9150ca448f5d909988fb91afa9d9))
+* **opa:** re-anchor dod.rego off input.story root → input.context.dod (GT-380, L1c) ([8a24969](https://github.com/beyondnetcode/evolith_arch32/commit/8a24969365a9fcb63766a4f955803c4ae6f9417c))
+* **opa:** wire phase-gates.rego into the aggregate + add schema/tests (GT-380, L1c) [PENDING CI] ([59be0d2](https://github.com/beyondnetcode/evolith_arch32/commit/59be0d21fa72b3567c301099781757a6eaadf8e7))
+* **orchestrator:** implement harness orchestrator router agent (GT-422) ([e2ce64f](https://github.com/beyondnetcode/evolith_arch32/commit/e2ce64fd5f2a5931d91e3167d9a01ed6400d17ff))
+* **release:** add npm publish pipeline for core-domain and infra-providers ([26907ce](https://github.com/beyondnetcode/evolith_arch32/commit/26907cee1e90767327807c460dd7f4a6f6c1fd97))
+* **runtime-api:** instrument API with OpenTelemetry Node SDK ([c07f1e5](https://github.com/beyondnetcode/evolith_arch32/commit/c07f1e55db4376710630780a7d9cf10910336e23))
+* **runtime:** add OpenTelemetry and Composite tracker adapters ([6f09344](https://github.com/beyondnetcode/evolith_arch32/commit/6f09344cf7ca5631fdef9cb7c00340949ceb372f))
+* **runtime:** GT-405 add McpInteractionAdapter via InteractionAdapterPort ([70a4572](https://github.com/beyondnetcode/evolith_arch32/commit/70a457294271edf38092cb28d3fb251ea47fc561))
+* **runtime:** GT-407 PolicyBasedEngineRouter with risk/privacy/cost routing ([3a36622](https://github.com/beyondnetcode/evolith_arch32/commit/3a3662298be2d9ed37047e2c219ae7443fe0f9ff))
+* **runtime:** GT-408 IKnowledgePort + InMemoryKnowledgeAdapter for corpus querying ([27e99b2](https://github.com/beyondnetcode/evolith_arch32/commit/27e99b218e289aea2c7100523be59d733122a7b9))
+* **sdk:** GT-373 add SatellitesClient — register, list, get, update, link ([51e1577](https://github.com/beyondnetcode/evolith_arch32/commit/51e1577dc5600c8532ee3622e99da38c6f3a0f0e))
+* **visual-map:** add i18n support and didactic callouts ([2a1419a](https://github.com/beyondnetcode/evolith_arch32/commit/2a1419af2092ebe75dbf4bd358679bc64b119730))
+
+
+### Bug Fixes
+
+* **adr:** bilingual + multi-format ADR header validation, add 20 missing dates ([2279499](https://github.com/beyondnetcode/evolith_arch32/commit/2279499b9aa9ae428d1945154aa8b930df50892e))
+* **agent-runtime:** stabilize opa adapter and fix policy drifts (GT-413, GT-414, GT-415) ([030e9dd](https://github.com/beyondnetcode/evolith_arch32/commit/030e9dd6acc2505a5f2b22f22868288d4396b483))
+* **api:** GT-393 enforce auth on /metrics endpoint via MetricsAuthGuard ([84545dc](https://github.com/beyondnetcode/evolith_arch32/commit/84545dcecc114cd3f49acecf71ce405fe50e9e12))
+* **api:** GT-411 wrap evaluation/gate/phase controllers in ADR-0073 envelope ([d8bb772](https://github.com/beyondnetcode/evolith_arch32/commit/d8bb7727494c111b0e09455a28d623f8f55994e9))
+* **audit:** correct docStatus and path matching in topology compliance script ([8cd470b](https://github.com/beyondnetcode/evolith_arch32/commit/8cd470b3d898e432230e7846dccd2ca49d6d7123))
+* **audit:** wire MetricsService into SecurityAuditInterceptor so recordHttpRequest fires ([ed51556](https://github.com/beyondnetcode/evolith_arch32/commit/ed51556f9cde43efcfec8e231b86e5fda1fd6239))
+* **bmad:** GT-410 adapter maturity analysis skill + checklist + executable ([f6f6e47](https://github.com/beyondnetcode/evolith_arch32/commit/f6f6e47256f4bda4e9753a553fc21e0e4e70a121))
+* **ci:** allowlist standard root files (root-cleanliness gate) ([d8e1c94](https://github.com/beyondnetcode/evolith_arch32/commit/d8e1c94056829c61eba34385df704e3e601f0424))
+* **ci:** build @evolith/* deps in the smart-cli Test job (TS2307 in CI) ([189b9c8](https://github.com/beyondnetcode/evolith_arch32/commit/189b9c82f084bab30c9234b13d13a42a55cb4ac6))
+* **ci:** build sdk/cli before its tests (integration specs spawn dist/main.js) ([d8c2ff2](https://github.com/beyondnetcode/evolith_arch32/commit/d8c2ff24961660ae007afcf5fd76670773ebde05))
+* **ci:** CD gate runs smart-cli unit suite, not the env-sensitive e2e ([2cde7b1](https://github.com/beyondnetcode/evolith_arch32/commit/2cde7b18a69db1f1b5dccab082a9d70449b19d14))
+* **ci:** docs validator — exclude inline code from prose-corruption checks + fix ES anchor ([88c9656](https://github.com/beyondnetcode/evolith_arch32/commit/88c9656dbd831ac156446f4592cdafa9c511df9a))
+* **ci:** fix test compilation errors + lint boundary crash ([1a79899](https://github.com/beyondnetcode/evolith_arch32/commit/1a7989928e2edb7f1b97239cf9cfdbce1a44796c))
+* **ci:** regenerate package-lock.json — npm ci was out of sync (broke all CI jobs) ([d07e8a2](https://github.com/beyondnetcode/evolith_arch32/commit/d07e8a20b3d8222c1b5f0d35fb8098fa297609ee))
+* **ci:** resolve sdk-cli-ci pipeline failures ([920210c](https://github.com/beyondnetcode/evolith_arch32/commit/920210c1687d1006cacf3c320c8488c4dd22fb2b))
+* **ci:** sync package-lock.json + fix opa-parity npm ci failure ([b10e6e6](https://github.com/beyondnetcode/evolith_arch32/commit/b10e6e663e96b2f173f452d30dae4f933ca16be6))
+* **ci:** unblock bilingual-parity + root-cleanliness in Evolith Core Validation ([1f46b04](https://github.com/beyondnetcode/evolith_arch32/commit/1f46b048953d2c569cbce43d7464ce18ef709a32))
+* **ci:** unblock dependency PR validation ([b72a87e](https://github.com/beyondnetcode/evolith_arch32/commit/b72a87e30d46334563f0b84bb9413257bd903194))
+* **cli,mcp:** align architecture commands with the 8 canonical topologies ([f9e5d6b](https://github.com/beyondnetcode/evolith_arch32/commit/f9e5d6ba096f24c1054d6ec5c2057b276d114814))
+* **cli,mcp:** merge — align architecture commands with 8 canonical topologies ([695fdb7](https://github.com/beyondnetcode/evolith_arch32/commit/695fdb745f01851003c42cf30e4e70fe987d1f05))
+* **cli:** correct directory structure for agents and upgrade commands ([b7dcf06](https://github.com/beyondnetcode/evolith_arch32/commit/b7dcf06857da8c13aa7d68076cfd8586d3575f47))
+* **cli:** GT-345 — restore validate @Command registration + gate.e2e version ([875fb3c](https://github.com/beyondnetcode/evolith_arch32/commit/875fb3c93df63b1a9d2d65a8f99c4aae0cce0345))
+* **cli:** GT-345 — smart-cli unit suite green (905/905) + add --version support ([b3cf0e2](https://github.com/beyondnetcode/evolith_arch32/commit/b3cf0e223ede2f14a3c55dff4cfdeef51891cbb0))
+* **cli:** GT-374 remove dead upgrade.command stub — real impl at commands/init/upgrade.command ([556f7c9](https://github.com/beyondnetcode/evolith_arch32/commit/556f7c9d3af878330b77395b8e34c5dcd30b7a4a))
+* **cli:** GT-399 replace hardcoded stubs with createAgentRuntime bootstrap + env-var overrides ([ba0e3a2](https://github.com/beyondnetcode/evolith_arch32/commit/ba0e3a24bd30d125a6c1da7ba5c1447160e572b5))
+* **cli:** merge — 1.1.3 release + build-info fix ([1693795](https://github.com/beyondnetcode/evolith_arch32/commit/16937956f31bfac79c08c12d646a6b2db788eda5))
+* **cli:** release 1.1.3 + prevent empty incremental builds ([2597fe1](https://github.com/beyondnetcode/evolith_arch32/commit/2597fe1fc33627f51aaa479a058f453328da6308))
+* **cli:** route smart cli through runtime adapter ([9ef081b](https://github.com/beyondnetcode/evolith_arch32/commit/9ef081b93aeba2385c6f1d490d78568980c446b8))
+* **cli:** skip cli.integration tests gracefully when dist/main.js not built ([4c921af](https://github.com/beyondnetcode/evolith_arch32/commit/4c921afb431288db54cf8dfe9285c7d538a296b0))
+* **cli:** update stale test references from commands/upgrade to commands/update ([a832ad4](https://github.com/beyondnetcode/evolith_arch32/commit/a832ad45c86cd7a54fbb38d8a15d3e5f4c63dc65))
+* **config:** add SWAGGER_ENABLED to env schema ([c340fdc](https://github.com/beyondnetcode/evolith_arch32/commit/c340fdcad3f2beb75e1c75370899efc965fa2d8d))
+* **config:** add SWAGGER_ENABLED to env schema ([dca137e](https://github.com/beyondnetcode/evolith_arch32/commit/dca137ed138861019c814fa0d919f24265085273))
+* **core-api:** add missing type deps + explicit Dirent type for TS build ([a725978](https://github.com/beyondnetcode/evolith_arch32/commit/a725978b0a0f826dc4bd5fd05f1f21e2863d4c13))
+* **core-api:** bust Docker cache — packages now live on npm ([35e81dc](https://github.com/beyondnetcode/evolith_arch32/commit/35e81dceba7f2ce8167a27859b3705cf06cec697))
+* **core-api:** include reference/ corpus so topologies endpoint returns data ([8845934](https://github.com/beyondnetcode/evolith_arch32/commit/88459340e5eefb558d7789e7d50280a846092dc7))
+* **core-api:** include reference/ corpus so topologies endpoint returns data ([685bd10](https://github.com/beyondnetcode/evolith_arch32/commit/685bd10ad1aa3b78677144409b537abb6701f40d))
+* **core-api:** upgrade keyv to 5.6.0 + legacy-peer-deps in Dockerfile ([de9b150](https://github.com/beyondnetcode/evolith_arch32/commit/de9b150826e1fb6ba1d1610eb4fede9fcb2bd7e9))
+* **core-domain:** add src/index.ts and src/application/index.ts so tsc generates dist entry points ([20c8108](https://github.com/beyondnetcode/evolith_arch32/commit/20c8108459a7b8aff83b36e454f0593ab74f7fe1))
+* **core-domain:** align InitializeSatelliteUseCase spec with current implementation ([bbcb271](https://github.com/beyondnetcode/evolith_arch32/commit/bbcb2712577ceb9a3f629e0aac1a673729467595))
+* **core-domain:** bundle rulesets inside npm package + fix __dirname path ([56b012f](https://github.com/beyondnetcode/evolith_arch32/commit/56b012f4c13259e5f449696230eb48c05a67fe00))
+* **core-domain:** enforce Rego policy execution in evaluation pipeline — GT-362 ([e2b1c12](https://github.com/beyondnetcode/evolith_arch32/commit/e2b1c12b5d849254b13acb670a5c817420d52cec))
+* **core-domain:** export GitHub API client types from domain barrel ([74f7c46](https://github.com/beyondnetcode/evolith_arch32/commit/74f7c46fb1ccbafdc51effd3ffb4400f69b0e269))
+* **core-domain:** GT-344 — embedded default workflow so published CLI never crashes ([1bdbc47](https://github.com/beyondnetcode/evolith_arch32/commit/1bdbc478250e97a47c7a54760d07cb71d0f6a9e8))
+* **core-domain:** GT-350 — remove new Function() code-exec sink in standards rule checks ([d243bab](https://github.com/beyondnetcode/evolith_arch32/commit/d243bab7d51f24f8221278a8f8e7c843592df8df))
+* **core-domain:** remove dead PhaseGateValidatorService inject in PhaseTransitionUseCase factory ([ed51556](https://github.com/beyondnetcode/evolith_arch32/commit/ed51556f9cde43efcfec8e231b86e5fda1fd6239))
+* **core:** GT-395 wire canonical ruleset validation into pipeline verdict ([e63cfa5](https://github.com/beyondnetcode/evolith_arch32/commit/e63cfa5a1d192ec0f21f90e906fea9ae3e90d470))
+* **core:** remove tenant-isolation from Core scope — belongs to Tracker ([ff4c8a2](https://github.com/beyondnetcode/evolith_arch32/commit/ff4c8a2a760850162bac84808d0455e2842bb2b1))
+* **core:** rephrase vendor rule — principle over name list ([49b12f6](https://github.com/beyondnetcode/evolith_arch32/commit/49b12f6e4e2b336d393e6837749221e8a4fd0438))
+* **cross:** GT-375/381 close umbrella + tracker integration with mock adapter ([8212ba0](https://github.com/beyondnetcode/evolith_arch32/commit/8212ba00a1d584e22b14a78db115e091d2f19631))
+* **docker:** copy root package-lock.json to builder ([4afe9e3](https://github.com/beyondnetcode/evolith_arch32/commit/4afe9e3060595a7603f08702832f574e24ebc843))
+* **docker:** copy root package-lock.json to builder — npm ci requires it ([9572e24](https://github.com/beyondnetcode/evolith_arch32/commit/9572e2427185d41d318a9c09a250c24dcb3e6237))
+* **docker:** copy rulesets to node_modules/ path expected by core-domain ([0c90560](https://github.com/beyondnetcode/evolith_arch32/commit/0c90560a77664e940e700ac802f3072f188a3dc7))
+* **docker:** correct healthcheck path /api/v1/health → /health + longer start period ([d4f96c2](https://github.com/beyondnetcode/evolith_arch32/commit/d4f96c2bc6e3f219025652ff34835cb3427bcf8a))
+* **docker:** use npm install instead of npm ci + add VPS Coolify deployment guide ([19e1a56](https://github.com/beyondnetcode/evolith_arch32/commit/19e1a564e00aca4118d20167f609a6ec553a33f1))
+* **docker:** use standalone package-lock.json for core-api ([b6bbc9c](https://github.com/beyondnetcode/evolith_arch32/commit/b6bbc9cdc4ff315d78b436cde98613cdb4b18f3e))
+* **docker:** use standalone package-lock.json for core-api build ([6148556](https://github.com/beyondnetcode/evolith_arch32/commit/61485567b2c4a015cf97b13e64519295ba96a1c5))
+* **docs:** green the documentation validator (links, symbols, mermaid) ([aae9052](https://github.com/beyondnetcode/evolith_arch32/commit/aae9052773165bdd6bc04f717510c64d2a8c6802))
+* **docs:** remove semicolon that broke mermaid sequenceDiagram render ([ef0ca21](https://github.com/beyondnetcode/evolith_arch32/commit/ef0ca2181904a0117989b00140fa28116d69f1b0))
+* **docs:** translate flagged terms to Spanish + make terminology lint prose-only ([4de15df](https://github.com/beyondnetcode/evolith_arch32/commit/4de15df35fc92a37c2c76256ffc8817052140a6b))
+* **docs:** update visual map links to point to github pages ([1cc44b8](https://github.com/beyondnetcode/evolith_arch32/commit/1cc44b8e5d188d5465cd52c3cc8383a40e24d7e1))
+* **domain:** GT-377 boundary guard — no *Repository for business entities in core-domain ([065b3b6](https://github.com/beyondnetcode/evolith_arch32/commit/065b3b6223880a413134a847d8adf187c0a1deb9))
+* **domain:** GT-396 formal SatelliteManifest schema — add facts + align phase enum ([11e059f](https://github.com/beyondnetcode/evolith_arch32/commit/11e059f2fd2782c3e2bfd35d94262e21a34e8c08))
+* **env:** remove dead ALLOWED_ORIGINS from .env.example (field removed from schema) ([ed51556](https://github.com/beyondnetcode/evolith_arch32/commit/ed51556f9cde43efcfec8e231b86e5fda1fd6239))
+* **eslint:** ESLint 9 flat-config boundary guards for mcp-server + core-api ([b0970ad](https://github.com/beyondnetcode/evolith_arch32/commit/b0970ad4843f197cca6b2574e6e14629d0054368))
+* **eslint:** real flat-config boundary guard for core-domain + stateless-repo ban ([b9f5048](https://github.com/beyondnetcode/evolith_arch32/commit/b9f5048905e589d7bdbb1eec58495c60ec90bb64))
+* **gap-tracking:** merge Spanish table separator fix from develop ([097e6e2](https://github.com/beyondnetcode/evolith_arch32/commit/097e6e24a0fe73ff549dc5583475ee0fe20c3e71))
+* **gap-tracking:** merge table separator fix from develop ([26775d9](https://github.com/beyondnetcode/evolith_arch32/commit/26775d9779e8f7dc66cb88d979527c7631090f32))
+* **gap-tracking:** remove extra column separator in gap table header ([84ad713](https://github.com/beyondnetcode/evolith_arch32/commit/84ad7131cb40c3da3f36a2ca4ddcd4cc86e55a56))
+* **gap-tracking:** remove extra column separator in Spanish gap table ([864b873](https://github.com/beyondnetcode/evolith_arch32/commit/864b873c082580035568d7223904e7ed6db7e33c))
+* **governance:** add source interface OPA parity ([f826a92](https://github.com/beyondnetcode/evolith_arch32/commit/f826a9271cb79d53a5c7a924e82c4a4df42ebc5d))
+* **governance:** close GT-385/392/409, defer GT-387/394/404/406 ([dcc2632](https://github.com/beyondnetcode/evolith_arch32/commit/dcc2632a798c5570d9afa2671411ffbd92151090))
+* **governance:** correct status inconsistencies in gap-tracking board ([3e6f055](https://github.com/beyondnetcode/evolith_arch32/commit/3e6f05565aabaadb20ccf011f3e27f95b770193f))
+* **governance:** GT-357 — register 36 missing closure-evidence records + reconcile maturity ([f5261bb](https://github.com/beyondnetcode/evolith_arch32/commit/f5261bbf7b66b13e792cdbe75499ec6771a1e5b0))
+* **governance:** GT-390 consolidate duplicate phase-gates.rules.json + CI guard ([f2b0eb4](https://github.com/beyondnetcode/evolith_arch32/commit/f2b0eb429c2f60b44727bc800501e9e12c9d19df))
+* **governance:** GT-391 CI schema validation via ajv over *.rules.json ([4acd6ab](https://github.com/beyondnetcode/evolith_arch32/commit/4acd6ab1f2cd4e8ce5bd5727b44444e9ada62c2c))
+* **governance:** repoint stale closure-evidence paths so 08-validate-tracking is green ([270c5cd](https://github.com/beyondnetcode/evolith_arch32/commit/270c5cdc008af350018e99a18aca43a649844ad6))
+* **harness:** GT-397 create 04-check-bilingual-parity.mjs wrapper ([34074dd](https://github.com/beyondnetcode/evolith_arch32/commit/34074ddbfd9a81f8895861ee5cc9ec6c205e038a))
+* **health-spec:** rewrite spec for async ready() with IFileSystem + ConfigService mocks ([ed51556](https://github.com/beyondnetcode/evolith_arch32/commit/ed51556f9cde43efcfec8e231b86e5fda1fd6239))
+* **hook+maturity:** sync-project-board local priority + maturity 329/330 ([a51b2e8](https://github.com/beyondnetcode/evolith_arch32/commit/a51b2e886dce00be85f1063dd2f87c291a407da4))
+* **hook:** sync-project-board prefers local when tracking file was last committed ([32f663a](https://github.com/beyondnetcode/evolith_arch32/commit/32f663a4d240aa75bc92429b64879b9da74bc8ea))
+* **infra:** GT-351 slice 1 — harden WebhookAdapter (timeout + retry + SSRF guard) + tests ([f66c802](https://github.com/beyondnetcode/evolith_arch32/commit/f66c8026a2e42838f06f9f7bc259efae0937e7ca))
+* **maturity:** update reconciliation to 329/330 — all pending gaps closed ([26a0198](https://github.com/beyondnetcode/evolith_arch32/commit/26a01989ffefc9ae23591277a84a4321ac6cfabb))
+* **mcp-server:** accurate startup auth log in production ([8e9869f](https://github.com/beyondnetcode/evolith_arch32/commit/8e9869f0a047cf0071dd921886735478567075e5))
+* **mcp-server:** GT-349 — ABAC OPA fails closed in production when policy.wasm is missing ([460e65f](https://github.com/beyondnetcode/evolith_arch32/commit/460e65f7f506ba28f075ff0710c2ea37af688807))
+* **mcp-server:** make production build deployable to Docker/Coolify ([64885dd](https://github.com/beyondnetcode/evolith_arch32/commit/64885dd8bfbaabeb0ccd379acaf82e8c95b2b38a))
+* **mcp-tools:** GT-352 — validate CallTool args against inputSchema + add README ([30b62b9](https://github.com/beyondnetcode/evolith_arch32/commit/30b62b9efb91174bdc7eee507ad33d4f17091f42))
+* **metrics:** @SkipThrottle() on MetricsController (Prometheus scraper was rate-limited) ([ed51556](https://github.com/beyondnetcode/evolith_arch32/commit/ed51556f9cde43efcfec8e231b86e5fda1fd6239))
+* **metrics:** store httpRequestsTotal reference so it can be incremented (was always 0) ([ed51556](https://github.com/beyondnetcode/evolith_arch32/commit/ed51556f9cde43efcfec8e231b86e5fda1fd6239))
+* **opa:** GT-347 — unblock the core governance test suite (was 100% unloadable) ([c915d01](https://github.com/beyondnetcode/evolith_arch32/commit/c915d0197ece433e5409d6adaf9289f4370b6b68))
+* **opa:** GT-358 — core governance suite green 197/197; complete GT-347 (gate + wasm) ([c5998d1](https://github.com/beyondnetcode/evolith_arch32/commit/c5998d1a60c9b3116817e1ac41b929164f47aded))
+* **opa:** install policy.wasm to both runtime lookup paths so gates enforce (GT-382 follow-up) ([ae3f373](https://github.com/beyondnetcode/evolith_arch32/commit/ae3f3737b8c6ec78bd861bf865af19996899b283))
+* **opa:** make threaded input.context facts enforce the gate verdict (GT-382) ([175de3d](https://github.com/beyondnetcode/evolith_arch32/commit/175de3da1eb6d344c8d14fbada53cc0d68538351))
+* **opa:** unbreak OPA toolchain — untrack wrong-arch binary + harden download (GT-380) ([68414dc](https://github.com/beyondnetcode/evolith_arch32/commit/68414dcc10cbb063e84b0acc6f6dc2ee96a2f9a9))
+* **post-audit:** 8 bugs found during secondary review ([ed51556](https://github.com/beyondnetcode/evolith_arch32/commit/ed51556f9cde43efcfec8e231b86e5fda1fd6239))
+* **readme:** restore div tag, add direct Gap Tracking link, remove deleted file refs ([57aee0a](https://github.com/beyondnetcode/evolith_arch32/commit/57aee0a4743cf7af3bf22d58bb9bb47d0e5cec87))
+* **runtime:** close deferred gaps GT-387/394/404/406 with stub/mock implementations ([00d8b02](https://github.com/beyondnetcode/evolith_arch32/commit/00d8b02bcea8275f19fa24f89b54e1c756ce9541))
+* **runtime:** enforce policy preflight ([2f3e0bb](https://github.com/beyondnetcode/evolith_arch32/commit/2f3e0bbe6c4b584c00d0683d909941aafddb8da1))
+* **runtime:** formalize interaction adapter contract ([2e0814d](https://github.com/beyondnetcode/evolith_arch32/commit/2e0814d3dfedc202f41a7eda40a6ac6ddc0e6d7c))
+* **runtime:** GT-383/384/388 close — version bump to 1.0.0 ([27b51b5](https://github.com/beyondnetcode/evolith_arch32/commit/27b51b585e73819b30b71facd1df0d434e80bd34))
+* **runtime:** GT-386 close — durable persistence adapters shipped ([2465ad3](https://github.com/beyondnetcode/evolith_arch32/commit/2465ad3a2a3ef37478849e00f25498d6121da7d3))
+* **runtime:** GT-389 pin @evolith/core-domain to ^1.0.5 + update public surface freeze ([5e5efa3](https://github.com/beyondnetcode/evolith_arch32/commit/5e5efa307ffe3ca765a63c2ac07bf251d5412fb7))
+* **sdk-client:** initProject URL /projects/init → /projects/initialize (always 404) ([ed51556](https://github.com/beyondnetcode/evolith_arch32/commit/ed51556f9cde43efcfec8e231b86e5fda1fd6239))
+* **sdk-client:** ProposeAdvanceRequest missing currentPhase field (broke propose-advance) ([ed51556](https://github.com/beyondnetcode/evolith_arch32/commit/ed51556f9cde43efcfec8e231b86e5fda1fd6239))
+* **security:** GT-313 part 1 — externalize GH_TOKEN; stop reading plaintext .env ([06a55da](https://github.com/beyondnetcode/evolith_arch32/commit/06a55dafc266e0a0d24aa509c2d65ef1646a4bf2))
+* **security:** GT-348/349 — remove file-system-race (TOCTOU) in abac-evaluator ([8feb045](https://github.com/beyondnetcode/evolith_arch32/commit/8feb04500b22065793adbfe62765d2a881681b0a))
+* **security:** resolve code-scanning findings — 2 ReDoS, 2 dep CVEs, 2 unused ([31abf29](https://github.com/beyondnetcode/evolith_arch32/commit/31abf29f682023367a87b4ad7b62ace19fa2ae82))
+* **security:** resolve CodeQL code-scanning alerts ([9ff7e09](https://github.com/beyondnetcode/evolith_arch32/commit/9ff7e09eb5702079ec7b2826b9c1beaef433af53))
+* **smart-cli:** GT-346 — run scaffolding providers shell-free (executeFile) + fix latent GT-351 regression ([d34bc3a](https://github.com/beyondnetcode/evolith_arch32/commit/d34bc3a5549238814d89aeb586b4de889b624c57))
+* **tracing:** SIGTERM only shuts down OTel SDK when it was actually started (avoids crash) ([ed51556](https://github.com/beyondnetcode/evolith_arch32/commit/ed51556f9cde43efcfec8e231b86e5fda1fd6239))
+* **tracking:** revert GT-330 to IN-PROGRESS — premature closure on flawed E2E evidence ([93ae64e](https://github.com/beyondnetcode/evolith_arch32/commit/93ae64eb5a66cfdb75afb2aac9b2254e2b82dc5a))
+* **vision:** remove Hybrid execution mode — no longer supported ([e52688f](https://github.com/beyondnetcode/evolith_arch32/commit/e52688f91ac27f451bab1d5483ca0d3cbda23541))
+* **vision:** remove tenant reference from Core value prop — Core is stateless ([27314a8](https://github.com/beyondnetcode/evolith_arch32/commit/27314a8bc407e59b661445f01ac5e773e7fe7ad2))
+* **visual-map:** change default mode to Vista Libre to fix hidden layers UX ([9aef3c9](https://github.com/beyondnetcode/evolith_arch32/commit/9aef3c9c1c5ab2d0d3e2a97573b28e01d2e212cb))
+
+
+### Performance Improvements
+
+* **docker:** eliminate build context bloat + smaller dist ([155d87b](https://github.com/beyondnetcode/evolith_arch32/commit/155d87b85b772a6c560fad3ecbdc8613900616ea))
+* **docker:** faster builds — npm ci + drop reference/ from image ([32ef2b9](https://github.com/beyondnetcode/evolith_arch32/commit/32ef2b91e2f91ce42618f1838c317b55a61e9974))
+* **mcp-server:** GT-348 — cache compiled ABAC OPA policy instead of recompiling per dispatch ([b857b7f](https://github.com/beyondnetcode/evolith_arch32/commit/b857b7f3e28df6ec1ed7850a2c92bf9b60eedd3d))
+* **runtime:** disable Swagger in production + remove lockfile from image ([3824a5e](https://github.com/beyondnetcode/evolith_arch32/commit/3824a5e8c9818f1d429635ec7377f536455f3056))
+
 ## 1.0.0 (2026-06-28)