diff --git a/CHANGELOG.md b/CHANGELOG.md
index d4ddeb5f..5d4f9900 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,208 @@
 # Changelog
 
+## 1.0.0 (2026-06-26)
+
+
+### Features
+
+* ABAC policy for agentic MCP tools (GT-136, ADR-0087) ([1d78117](https://github.com/beyondnetcode/evolith_arch32/commit/1d78117dc627822b5eff59cc962bc51bc3f21c80))
+* add agentic code review CI step (GT-132) ([9d5d66d](https://github.com/beyondnetcode/evolith_arch32/commit/9d5d66d325eab94b8a54d634231ea8c08fd461d7))
+* add intelligent data strength assessment and audit script ([1b45d08](https://github.com/beyondnetcode/evolith_arch32/commit/1b45d08be1861b4b35e6c8cfba723e7abb6b320e))
+* add merge method selector + owner-gated CI skip to husky hooks ([30adda6](https://github.com/beyondnetcode/evolith_arch32/commit/30adda61ca32d074e541f541229658a4df6e61d0))
+* add Spanish gap reference catalog entries for intelligent data audit gaps (GT-283-GT-311) ([e0dda8d](https://github.com/beyondnetcode/evolith_arch32/commit/e0dda8d50a978f57131275fc3093043e28504a71))
+* agent infinite loop prevention and circuit breaker standard (GT-144, ADR-0092) — 145/147 gaps ([77e503f](https://github.com/beyondnetcode/evolith_arch32/commit/77e503fc7ffa1c1c777fa56fa62eb2715a953ec6))
+* **agentic-ai:** implement GT-169 operational controls ([19fb0c4](https://github.com/beyondnetcode/evolith_arch32/commit/19fb0c41c54719c21ed9024b6fa816eddf92ef13))
+* **agents:** enhance BMAD agents with Evolith Core governance context ([361acd4](https://github.com/beyondnetcode/evolith_arch32/commit/361acd4615fd1e56ad839570402ab91e500c6db7))
+* **agents:** enhance BMAD agents with Evolith Core governance context ([361acd4](https://github.com/beyondnetcode/evolith_arch32/commit/361acd4615fd1e56ad839570402ab91e500c6db7))
+* **agents:** enhance BMAD agents with Evolith Core governance context ([48d59ae](https://github.com/beyondnetcode/evolith_arch32/commit/48d59aee0cdd95789d5979dd73186d8ef6583728))
+* **agents:** enhance BMAD agents with Evolith Core governance context and self-improvement mandate ([48d59ae](https://github.com/beyondnetcode/evolith_arch32/commit/48d59aee0cdd95789d5979dd73186d8ef6583728))
+* **agents:** enhance BMAD agents with Evolith Core governance context, self-improvement mandate, and full bilingual parity ([00839f2](https://github.com/beyondnetcode/evolith_arch32/commit/00839f2cee24b46878e90adb099345db67d4d14e))
+* **ai:** complete agentic topology controls ([f07a914](https://github.com/beyondnetcode/evolith_arch32/commit/f07a914ad1ec6a1a983da7d3c5eb3d71f9ac4b64))
+* **architecture:** add operationalBudgets to agentic-ai manifest (GT-219) ([7da34b3](https://github.com/beyondnetcode/evolith_arch32/commit/7da34b372b7f16b000e39e9e2ecc879ac700a514))
+* **architecture:** add starter rules for event-driven and agentic-ai topologies ([f64b014](https://github.com/beyondnetcode/evolith_arch32/commit/f64b01489185088e9ba576cc7f9bd99a38ef4055))
+* **architecture:** add starter rules for serverless topology and close MT-A18 ([1ee04e6](https://github.com/beyondnetcode/evolith_arch32/commit/1ee04e678aab3165b5770de8d5922d3a9f5ce2e1))
+* **architecture:** create agnostic baseline (GT-209) + reorder gap-tracking pending-first ([2e58fd4](https://github.com/beyondnetcode/evolith_arch32/commit/2e58fd46661bd0592783ad85c00de4554168e84b))
+* **cache:** implement Redis caching layer for Core API and MCP (GT-249) ([4a876d5](https://github.com/beyondnetcode/evolith_arch32/commit/4a876d5ac46be74a05f69730753a48f19c6800fc))
+* **ci:** add skip mode + sync option to CI menu ([37c23a6](https://github.com/beyondnetcode/evolith_arch32/commit/37c23a664e44f3fbf17867035aebfe542524a868))
+* **ci:** close GT-145 — truthful provider-neutral RAG vector sync ([444c12c](https://github.com/beyondnetcode/evolith_arch32/commit/444c12cc8a97c961ec66c753c19ba748ab7e8301))
+* **ci:** close GT-146 — secure, provider-neutral, token-bounded agentic review ([c5b8c6a](https://github.com/beyondnetcode/evolith_arch32/commit/c5b8c6aa0b2c07f505e7afbfbb26303a4ac083ec))
+* **ci:** close GT-147 — operational capability & efficiency drift audit ([f4b163b](https://github.com/beyondnetcode/evolith_arch32/commit/f4b163b7fb92d6c6deaea81b2eb56fc6f9aa63ad))
+* **ci:** executable OPA evaluator + Native/OPA parity gate (GT-149) ([5f9fd11](https://github.com/beyondnetcode/evolith_arch32/commit/5f9fd110c9488e2abfc1e4f16b5e85737a28a0b7))
+* **ci:** GT-149 progress — executable OPA + Native/OPA parity gate (~70%, not closed) ([0c5c57d](https://github.com/beyondnetcode/evolith_arch32/commit/0c5c57d52a89db364626725b40062d6d9ce9da03))
+* **ci:** operational capability & efficiency drift audit (GT-147) ([861505e](https://github.com/beyondnetcode/evolith_arch32/commit/861505eef043406dcad4d15a030017bb52d2b641))
+* **ci:** parity gate scoping, version stamps, scheduled full run (GT-149) ([06ffd2f](https://github.com/beyondnetcode/evolith_arch32/commit/06ffd2f69f05fecfdb166460db6ff707d2a0edce))
+* **ci:** provider-neutral review port + adapters (GT-146) ([1edc6d3](https://github.com/beyondnetcode/evolith_arch32/commit/1edc6d3143c2ccd02aa7a3a9b8978907890f431d))
+* **ci:** secret-redacting, token-bounded review input for agentic review (GT-146) ([4866a95](https://github.com/beyondnetcode/evolith_arch32/commit/4866a95549220bcc5ef479b9e75f16895c3ac726))
+* **ci:** truthful provider-neutral RAG vector sync (GT-145) ([06a8ed5](https://github.com/beyondnetcode/evolith_arch32/commit/06a8ed51997eea945476ff79211eb6499854de9f))
+* **ci:** versioned, fail-closed review-result schema validation (GT-146) ([c911e4a](https://github.com/beyondnetcode/evolith_arch32/commit/c911e4ae1136be912a8afa3b9ed59d833462bad7))
+* **cli:** add topology support and deprecate arch-level ([7ffd7ba](https://github.com/beyondnetcode/evolith_arch32/commit/7ffd7baa26544b93f0f799cc8d47300056209c7e))
+* **CLI:** GT-100 API browser + GT-101 auto-update ([e3792aa](https://github.com/beyondnetcode/evolith_arch32/commit/e3792aa01c5a71d7864703b0430ecf3ccaa0a09a))
+* **CLI:** GT-102 Real-time progress/streaming ([b4c2dcc](https://github.com/beyondnetcode/evolith_arch32/commit/b4c2dcc95a6f00de53782546ae51ea975a03fce7))
+* **CLI:** GT-104 Package manager distribution ([4084db5](https://github.com/beyondnetcode/evolith_arch32/commit/4084db5e61f5f54e691de61c1ba8a169c0291663))
+* **CLI:** GT-107 Interactive wizards ([973013a](https://github.com/beyondnetcode/evolith_arch32/commit/973013ab210ac2ab6631601caf839ca966706e54))
+* **CLI:** GT-114 Human-in-the-Loop for Mutative MCP Tools ([9430857](https://github.com/beyondnetcode/evolith_arch32/commit/94308575101b1ecd1bd571026003d9b1b276a7e7))
+* **CLI:** GT-115 Auto-fix of Architectural Failures via MCP Tools ([a5bc7f9](https://github.com/beyondnetcode/evolith_arch32/commit/a5bc7f9c7164915a8d375c7186b38ee390e5ef6b))
+* **cli:** implement GT-108 fixtures command with reproducible test data ([0304f6b](https://github.com/beyondnetcode/evolith_arch32/commit/0304f6b3daa638f5374835b0166268e8e8580289))
+* **cli:** resolve GT-103 nested CLI subcommands and update gap tracking evidence ([2c45e89](https://github.com/beyondnetcode/evolith_arch32/commit/2c45e89340539adf0bc83180a2f50c04144fe779))
+* close all pending gaps — infrastructure + closure evidence (GT-216/217/220-227/231/232/234/235/237-248) ([1244af0](https://github.com/beyondnetcode/evolith_arch32/commit/1244af0721f80a3dae1a2aed35f69d89c8713553))
+* close GT-155 and GT-156 core API conformance and documentation ([a9297f4](https://github.com/beyondnetcode/evolith_arch32/commit/a9297f4e580b1fb462a52b879f175ab06ea2fbca))
+* complete GT-312 composable validation engine ([00bb08d](https://github.com/beyondnetcode/evolith_arch32/commit/00bb08d5bdbabcd3ae27d74c16c58421df9e6630))
+* **core-api:** add topology discovery endpoints ([af871fc](https://github.com/beyondnetcode/evolith_arch32/commit/af871fcf907c0fb50529c5705c50928bfc751c49))
+* **core-api:** close GT-159 REST versioning and deprecation linter/tests ([956bba2](https://github.com/beyondnetcode/evolith_arch32/commit/956bba247a8bcfbb68ecc2d891e6a52cb0ab4be7))
+* **core-api:** fix queries for topology-aware rulesets and close GT-117 ([6049045](https://github.com/beyondnetcode/evolith_arch32/commit/6049045d733553958136bc60cd436dfd9d2fb38d))
+* **core-api:** GT-155 envelope conformance with ADR-0073 ([6f266f3](https://github.com/beyondnetcode/evolith_arch32/commit/6f266f3b54ce851e812e9e5f0ef20fde76d1d041))
+* **core-api:** GT-159 REST URI versioning + deprecation policy (ADR-0098) ([f57294e](https://github.com/beyondnetcode/evolith_arch32/commit/f57294ee52862cda765b96677844d74c9683f970))
+* **core:** add topology catalog and workspace contracts ([2010ce0](https://github.com/beyondnetcode/evolith_arch32/commit/2010ce0d62c889336f1d5f60261cf5b2b7dac149))
+* **core:** topology-aware ruleset discovery and dual-engine parity (MT-A17) ([1067a41](https://github.com/beyondnetcode/evolith_arch32/commit/1067a4179228a23ccafa4ae1a5cbce0344a44803))
+* **cross:** close GT-160 correlation-ID and context propagation ([af62206](https://github.com/beyondnetcode/evolith_arch32/commit/af62206817f277aa41494251f2196ac8dca8217c))
+* establish multi-topology reference corpus ([f19be96](https://github.com/beyondnetcode/evolith_arch32/commit/f19be96bb150b8280386422dd9f70b7e81a40914))
+* establish standardized MCP tools registry ([f84c3ac](https://github.com/beyondnetcode/evolith_arch32/commit/f84c3ac4a2ea4d24bf83bb44a4f8cb09c5af060b))
+* **evaluator:** implement 5 native rule handlers + parity fixtures for GT-229 ([6ba915c](https://github.com/beyondnetcode/evolith_arch32/commit/6ba915c118c9637554c5523a94cc557e2136f1e4))
+* **examples:** implement GT-168 cross-topology composition reference ([4e8fcad](https://github.com/beyondnetcode/evolith_arch32/commit/4e8fcad3c912e49208c9a198adb7b76abbdc9cf2))
+* execute 20 gaps in parallel — docs, OPA, CI, security, CLI/MCP (GT-216/217/220-226/232/234/235/237/240/241/244/247/248) ([f1d9814](https://github.com/beyondnetcode/evolith_arch32/commit/f1d9814f74ea78fce65baf4374fd3fd34a364f6e))
+* extend GT-312 to composable multi-entry-point validation ([f5fdcd1](https://github.com/beyondnetcode/evolith_arch32/commit/f5fdcd1084b9d225ed99446995b221a8de439940))
+* **GAP-003:** Close - Coverage thresholds met (80.41%/67.35%/79.92%/81.17%) ([5d68902](https://github.com/beyondnetcode/evolith_arch32/commit/5d689023dc24d6c149973b162f7c82c98e8a2b95))
+* **GAP-006:** Close - Document auto-fix in architecture ([6e4d2b9](https://github.com/beyondnetcode/evolith_arch32/commit/6e4d2b98baa0804b2116ed2ec9040fb4f0505ca8))
+* **GAP-008:** Close - Complete tool design principles ([43a822c](https://github.com/beyondnetcode/evolith_arch32/commit/43a822c526a0fc1d31e8ccfc3e22a93a286db2e3))
+* **GAP-009:** Close - Complete MCP security guidelines ([30d80a0](https://github.com/beyondnetcode/evolith_arch32/commit/30d80a01cf57017ce18db584054137222f93b640))
+* **GAP-010:** Close - Audit BFF documentation coherence ([4ab6677](https://github.com/beyondnetcode/evolith_arch32/commit/4ab66772c0ba94f1b5b53d1d00e4db66181f5876))
+* **gaps:** add GT-266 - API key provisioning service for MCP HTTP ([67fb9df](https://github.com/beyondnetcode/evolith_arch32/commit/67fb9dfed4419bb8de1568764c7ba49e6bc79ff7))
+* **gaps:** add GT-266 - API key provisioning service for MCP HTTP ([7370aaf](https://github.com/beyondnetcode/evolith_arch32/commit/7370aaf5c90d7c8ec07817056deb7084a9bd4be6))
+* **gaps:** close GT-102/104/107/114/116 closureCommits, integrate 34 NXT items as GT-175-208, translate 18 ES files ([bef6d47](https://github.com/beyondnetcode/evolith_arch32/commit/bef6d470e5c39e492a81b68d6b951c134cca692a))
+* **gaps:** close GT-150 (topology maturity) and GT-149 (OPA parity gate) ([8606a96](https://github.com/beyondnetcode/evolith_arch32/commit/8606a96d217d1d00485dd2bb305364664e103c47))
+* **gaps:** close GT-150 (topology maturity) and GT-149 (OPA parity gate) ([85d2e4a](https://github.com/beyondnetcode/evolith_arch32/commit/85d2e4acc7bc161ec34d6f8676218515e6cef077))
+* **gaps:** close GT-151 — complete Native/OPA rule-ID coverage ([5d46b8a](https://github.com/beyondnetcode/evolith_arch32/commit/5d46b8a6939dfa3c8c2c5a0b37f6e8e8c900597f))
+* **gaps:** close GT-152/153/154 — knowledge contract, lifecycle, RAG parity ([572c59a](https://github.com/beyondnetcode/evolith_arch32/commit/572c59a50c9a7aeffda17e747576460301fe20f0))
+* **gaps:** close GT-171 GT-172 GT-173 - surface parity, contract test, OTel ([c6ff59c](https://github.com/beyondnetcode/evolith_arch32/commit/c6ff59cd809e3ce05614202b91500fb49f0d651c))
+* **governance:** add governance metadata to all 8 topology manifests (GT-213) ([67fac2b](https://github.com/beyondnetcode/evolith_arch32/commit/67fac2bd8188970edbf7cbe055c96eff1190f888))
+* **governance:** close GT-174 envelope schemaVersion compatibility matrix ([4078471](https://github.com/beyondnetcode/evolith_arch32/commit/407847150b2a3b55f6487b81f3e5eddc198a7a3b))
+* **governance:** R-25 parity certification 39/39, R-30, SDLC gate fixes, infrastructure OPA ([abe29e2](https://github.com/beyondnetcode/evolith_arch32/commit/abe29e2e15c025adb438100317f1cb83bf09cd22))
+* GT-273 — ephemeral DAST ZAP scan in CI + GT-20 ADR Technology Watch backfill ([2d51059](https://github.com/beyondnetcode/evolith_arch32/commit/2d510597f75c0151a91a89c6a0140bebb67538cd))
+* **harness:** validate topology rule coverage ([7e5493a](https://github.com/beyondnetcode/evolith_arch32/commit/7e5493a61f6beb8e02fa975d4c6610cd48ee4998))
+* implement dynamic CI runner, enforce BMAD signatures, establish agent sandbox, unify OPA logic ([5d4dc98](https://github.com/beyondnetcode/evolith_arch32/commit/5d4dc9824d3c108473a1eda6e652cff7bf25026c))
+* implement GT-312 composable validation engine ([d067857](https://github.com/beyondnetcode/evolith_arch32/commit/d067857d486905e7eec7ee26c20164677c3630e7))
+* **knowledge:** automate knowledge intake pipeline (GT-236) ([266f435](https://github.com/beyondnetcode/evolith_arch32/commit/266f4357af92594d6d7e52fa0e2b812549bb8dcf))
+* **knowledge:** establish governed multi-architecture intake ([de5521e](https://github.com/beyondnetcode/evolith_arch32/commit/de5521e9630734627ed117865f35bf8be9f8a28a))
+* MCP concurrency control and resource locking standard (GT-141, ADR-0093) — 146/147 gaps ([7eac5bb](https://github.com/beyondnetcode/evolith_arch32/commit/7eac5bb1374519f5094c0033336d9003e020d1d1))
+* **mcp-server:** add topology resources and tools ([683c5e1](https://github.com/beyondnetcode/evolith_arch32/commit/683c5e15b5b41e8c172c173d051af40f393f1aee))
+* **mcp-server:** close GT-158 Human-in-the-loop and ABAC scoping for mutative tools ([4fd5c6e](https://github.com/beyondnetcode/evolith_arch32/commit/4fd5c6ebbdb5cb499fc6c2ac54d7bfacb762d532))
+* multi-agent handoff and task delegation standard (GT-143, ADR-0094) — Wilson Audit V3 COMPLETE (147/147) ([2e94694](https://github.com/beyondnetcode/evolith_arch32/commit/2e94694f651ab0cc0bf1b0571782c8c8bc2568d8))
+* **opa:** add Phase 1 OPA policies for 5 cross-cutting rulesets (GT-216) ([96b17fe](https://github.com/beyondnetcode/evolith_arch32/commit/96b17fe8b96485ed590e83884b8631636444f3b5))
+* **opa:** close GT-161 JSON input schemas and validation gate ([ccfa947](https://github.com/beyondnetcode/evolith_arch32/commit/ccfa9471b3c6eaddf28884d16cd9ea78044270ce))
+* **OPP-001:** Close - Implement auto-fix domain strategies (6 strategies) ([f456fda](https://github.com/beyondnetcode/evolith_arch32/commit/f456fda5c56420747d03e4894383336199ad53d6))
+* **OPP-003, OPP-009:** Close - Test UX improvements ([b5b1b05](https://github.com/beyondnetcode/evolith_arch32/commit/b5b1b059acaf62ac89da2f4cf28bb01eb00bae73))
+* **OPP-006, OPP-007, OPP-008:** Close - Complete remaining opportunities ([b39a0bf](https://github.com/beyondnetcode/evolith_arch32/commit/b39a0bf38e16fe9d21604bfca689e54b1aece1f4))
+* **OPP-010:** Close - Add confirmation timeout config ([49d59f2](https://github.com/beyondnetcode/evolith_arch32/commit/49d59f2b85ce4d49ebcb728d26c7a173f5d39da7))
+* RAG knowledge governance standard (GT-139, ADR-0090) — Wilson Audit V2 COMPLETE (142/142) ([f12f060](https://github.com/beyondnetcode/evolith_arch32/commit/f12f060ebb722286156f93ce66e1426f9a4ccd9f))
+* real LLM bridge pipeline in CI for agentic reviews (GT-142) — 144/147 gaps ([10fa496](https://github.com/beyondnetcode/evolith_arch32/commit/10fa4962c7fa69c00a04c6a374e11aa2dfb4ce4f))
+* register GT-312 SDLC validation orchestration master gap ([08ab178](https://github.com/beyondnetcode/evolith_arch32/commit/08ab1789ed2d528d4c00ae37e389074ee333d4fd))
+* register intelligent data audit gaps in gap-tracking boards ([44b00d2](https://github.com/beyondnetcode/evolith_arch32/commit/44b00d2e0870b75d006fcb938723dd7e8aa7a0d6))
+* register Wilson Audit V3 gaps (GT-140 to GT-144) — 142/147 gaps closed ([2573143](https://github.com/beyondnetcode/evolith_arch32/commit/25731436b478c1befef94e4eb93cd62f890c06f1))
+* **rulesets:** add satellite-contracts standalone WS1 entrypoint (GT-292) ([cd40dd8](https://github.com/beyondnetcode/evolith_arch32/commit/cd40dd8b2da60081fdb182277740199023246b22))
+* **rulesets:** implement GT-162 OPA aggregator tests and parity validator ([72bfe62](https://github.com/beyondnetcode/evolith_arch32/commit/72bfe629c784c400096499b4ede4edf8ba76f13d))
+* **rulesets:** implement GT-163 topology manifest references validation ([fcd5d2a](https://github.com/beyondnetcode/evolith_arch32/commit/fcd5d2af05ddab488698a8cda55866f3eb5cecb7))
+* **rulesets:** implement GT-164 event-driven and data-mesh ruleset richness ([bbe5db9](https://github.com/beyondnetcode/evolith_arch32/commit/bbe5db914965e11577574b488df30a735cea08d9))
+* **sdlc:** add Phase 05 rollback rehearsal + on-call handoff templates (GT-218) ([bb00773](https://github.com/beyondnetcode/evolith_arch32/commit/bb00773043ec798ec8060dc21be83ac466c48812))
+* **sdlc:** close GT-281 pipeline + GT-282 actionable reports, reach 75% (6/8) ([661a884](https://github.com/beyondnetcode/evolith_arch32/commit/661a8846e74336452ec8972eb13287d59cd0c1b9))
+* **sdlc:** implement 01.1 Knowledge-First Discovery / KDD Readiness subphase ([479a549](https://github.com/beyondnetcode/evolith_arch32/commit/479a549a0517c61265f9c9c822bc5d92e00bc8ee))
+* **sdlc:** Phase 3 Construction Baseline — playbook, docs, and code integration ([46697d3](https://github.com/beyondnetcode/evolith_arch32/commit/46697d3edc46ce447a0ce8f59ca8b7d5ba4f0839))
+* **sdlc:** Phase 5 Production Live — code, docs, and gate integration ([41a508a](https://github.com/beyondnetcode/evolith_arch32/commit/41a508a358b792df73d070dfc55c7012737352a8))
+* standalone NestJS MCP gateway + Core/BFF boundary docs ([5da361b](https://github.com/beyondnetcode/evolith_arch32/commit/5da361bca8a8aef66878772f48b9815e93eb770d))
+* standalone NestJS MCP gateway + Core/BFF boundary docs ([73547eb](https://github.com/beyondnetcode/evolith_arch32/commit/73547eba8153dca848c128aa13315eac487542f6))
+* **topologies:** close GT-165 concrete SLO and cost budgets for serverless and edge ([a8e70ac](https://github.com/beyondnetcode/evolith_arch32/commit/a8e70ac3eff3768667dfcba6c7fe371fa4c4416a))
+* **topology:** add compliance audit playbook, register in Wilson, add GT-277/278/279 ([314d1df](https://github.com/beyondnetcode/evolith_arch32/commit/314d1df6acee48418104cc50c608a233aa4a7b6b))
+* **topology:** add compliance audit playbook, register in Wilson, add GT-277/278/279 ([b7c379c](https://github.com/beyondnetcode/evolith_arch32/commit/b7c379c00f2143490073c830177ca89a810016ae))
+* **topology:** add corpus maturity standard ([0fc716a](https://github.com/beyondnetcode/evolith_arch32/commit/0fc716a48dc24ea2bec348a42b3780661de5a0b4))
+* **topology:** close GT-126 serverless maturation ([8566249](https://github.com/beyondnetcode/evolith_arch32/commit/8566249bbefe547f87116d90ecb8c8a797e5cc2b))
+* **topology:** close GT-127 event-driven maturation ([e72d8c1](https://github.com/beyondnetcode/evolith_arch32/commit/e72d8c1de0fa10ee0abc853c5c04be36f032830f))
+* **topology:** close GT-128 data mesh maturation ([a506ea5](https://github.com/beyondnetcode/evolith_arch32/commit/a506ea5e033814382d97086173563c2c14b7bd71))
+* **topology:** close GT-277 with 8 OpenAPI specs, bump global score to 90% ([8f14459](https://github.com/beyondnetcode/evolith_arch32/commit/8f14459bf4d3dcaf1834b5f86ee3d335326b31df))
+* **topology:** close GT-277 with 8 OpenAPI specs, bump global score to 90% ([78e9908](https://github.com/beyondnetcode/evolith_arch32/commit/78e9908100b2c743223da090e4202563ff9bbce6))
+* **topology:** close GT-278 with 8 MCP manifests, bump global score to 95% ([2a4b3bd](https://github.com/beyondnetcode/evolith_arch32/commit/2a4b3bd4d53fbcb92b3dbb3c7461e75b9432ae80))
+* **topology:** close GT-278 with 8 MCP manifests, bump global score to 95% ([7bed54d](https://github.com/beyondnetcode/evolith_arch32/commit/7bed54d05814bb2d4fe8e5b2f93839387e6eb0b6))
+* **topology:** close GT-279 with 16 CLI flow files, reach 100% (168/168) ([0afeeb8](https://github.com/beyondnetcode/evolith_arch32/commit/0afeeb8264b94ab8bc1f71b3131b08f6055b6ae3))
+* **topology:** close GT-279 with 16 CLI flow files, reach 100% (168/168) ([089c9b1](https://github.com/beyondnetcode/evolith_arch32/commit/089c9b16a8c68338091bb4447609824e88d0cfdd))
+* **topology:** GT-165 operational budgets for serverless and edge ([8a0be89](https://github.com/beyondnetcode/evolith_arch32/commit/8a0be8954690fd0eae8106cb28b899a1e2cd79d8))
+* **typescript:** enable strict mode across all packages (GT-187) ([7a3aa44](https://github.com/beyondnetcode/evolith_arch32/commit/7a3aa44caffe4102eeaf51f4edd4897cddc96099))
+* **wiki:** add auto-sync wiki generation and CI workflow ([92142c9](https://github.com/beyondnetcode/evolith_arch32/commit/92142c9b3fec78f25fa4fbf95ad7dbe0bf4108a5))
+* workload identity token rotation standard (GT-140, ADR-0091) — 143/147 gaps ([6173c8e](https://github.com/beyondnetcode/evolith_arch32/commit/6173c8edce1fdbc325331150b139b613f7632ff7))
+
+
+### Bug Fixes
+
+* **adr:** renumber OPA bundle ADR 0076 to 0099 to resolve duplicate ID (GT-175) ([47e670b](https://github.com/beyondnetcode/evolith_arch32/commit/47e670b7c2fb79b8220396c8123e1a7dd3a1b437))
+* **adrs:** resolve 0049/0056 status — 0049 Accepted, 0056 Accepted (extends, not supersedes) ([cfb4acb](https://github.com/beyondnetcode/evolith_arch32/commit/cfb4acb531600bd4f1158897de51621332f3fde0))
+* **agents:** GT-260 add Spanish translation of PO agent persona ([8ba7b74](https://github.com/beyondnetcode/evolith_arch32/commit/8ba7b7469752a79766bf9e3f8761461e5036f6e6))
+* align gap statuses with closure evidence ([cecda24](https://github.com/beyondnetcode/evolith_arch32/commit/cecda2404080750f4a11f8214d8681828c02b349))
+* **ci:** add npm ci to core-validation jobs missing it (GT-197) ([507382f](https://github.com/beyondnetcode/evolith_arch32/commit/507382f3d64403a553ba3b562bfc6781385c8e54))
+* **ci:** add SECURITY.md to optimize-repo allowedFiles + remove stale release-please entries ([f8e848b](https://github.com/beyondnetcode/evolith_arch32/commit/f8e848bc02398b65b929b3b42e359e9a05e23b67))
+* **ci:** add wiki/ to root cleanliness whitelist, fix wiki-sync workflow ([0de7b8a](https://github.com/beyondnetcode/evolith_arch32/commit/0de7b8a3547ddf14433372c1769d54c2e753a5fa))
+* **ci:** GT-259 change publish trigger to tag-based ([dae62ce](https://github.com/beyondnetcode/evolith_arch32/commit/dae62ce3a22d4f8741adfc3b9ee418900fe95d39))
+* **ci:** restore 3 missing CI scripts + add CI mode selector, close GT-268 ([c3fc078](https://github.com/beyondnetcode/evolith_arch32/commit/c3fc0782a7f1feaade32f835d4878d34fc7419dc))
+* **ci:** restore SECURITY.md and add to root cleanliness whitelist ([79da82d](https://github.com/beyondnetcode/evolith_arch32/commit/79da82d33a822900e717fa9f66d40998634dd48e))
+* **cli:** clear remaining no-explicit-any to green the lint rule (GT-55) ([48a0f97](https://github.com/beyondnetcode/evolith_arch32/commit/48a0f9790fb6922aad4037d3d6a6da8fcbda333d))
+* **cli:** close GT-124 e2e regressions ([e93c68a](https://github.com/beyondnetcode/evolith_arch32/commit/e93c68ae6ff5cfaee776a134d259ea3315425a76))
+* **cli:** repair progress e2e import (GT-124 partial) ([de8944d](https://github.com/beyondnetcode/evolith_arch32/commit/de8944d9d3e07f6e3bdd963788a09fc51a27e9b1))
+* **cli:** repair progress e2e import path (GT-124, partial) ([45267a6](https://github.com/beyondnetcode/evolith_arch32/commit/45267a6b30f6c61d023beb7a3cb786514b332732))
+* **cli:** restore green tsc build (GT-123) ([31f8f07](https://github.com/beyondnetcode/evolith_arch32/commit/31f8f079313c58b6b5d551d770ab7dea7653057b))
+* **cli:** restore green tsc build + lint (GT-123, GT-55) ([c9f5eee](https://github.com/beyondnetcode/evolith_arch32/commit/c9f5eeee0020ab5d5fcb23dbff1f2987ebfe934f))
+* close GT-276 bilingual coverage dashboard area pairing ([c047eb7](https://github.com/beyondnetcode/evolith_arch32/commit/c047eb7165c02bc9af9eb4ce1e6a81531ec66b49))
+* consolidate gap tracking — reopen GT-20, sync progress, fix GT-229/GT-250 status ([b36ee9e](https://github.com/beyondnetcode/evolith_arch32/commit/b36ee9ef27c536b278847cc765ce71655c754a96))
+* **core-domain:** inject topology catalog mock in ruleset tests ([8d4e580](https://github.com/beyondnetcode/evolith_arch32/commit/8d4e5803ee93b321b77104d22940105eb78aa156))
+* correct maturity reconciliation pending count (29→0) to match OPEN status ([3bfca4b](https://github.com/beyondnetcode/evolith_arch32/commit/3bfca4bb2dbfc9dd3cb02a011a4db3de70fd4fe8))
+* **deps:** pin all dependency versions and sync lockfile ([a17473d](https://github.com/beyondnetcode/evolith_arch32/commit/a17473d1a44727b9b133f03da0d6e17a259f4ebd))
+* **docs:** fix BILINGUAL_INDEX 1,740 broken links + .bmad-core stale references ([22a6612](https://github.com/beyondnetcode/evolith_arch32/commit/22a661227843e1dcf114801bb035fa4cb4215736))
+* **docs:** resolve critical issues from 3-audit sweep ([3de3233](https://github.com/beyondnetcode/evolith_arch32/commit/3de3233928ca8d825a93e9921e467e1b4782e5c2))
+* **docs:** resolve critical issues from 3-audit sweep ([5cdee3e](https://github.com/beyondnetcode/evolith_arch32/commit/5cdee3e34258fef1d6605c87d0109ec1a186908d))
+* **engine:** fix async import bug in orchestration engine (GT-228) ([a426801](https://github.com/beyondnetcode/evolith_arch32/commit/a42680110a67624b577872c7d7fb942a4b09cb55))
+* **engine:** GT-228 add CLI wrapper for orchestration engine ([593f5a6](https://github.com/beyondnetcode/evolith_arch32/commit/593f5a6e133315cc63bccaab69afd76044aee2df))
+* executive summary now data-driven — accurate when all gaps closed ([6ad78d9](https://github.com/beyondnetcode/evolith_arch32/commit/6ad78d9e32a6b0504ba9dda145adf3b7a6bf0c2c))
+* **GAP-001:** Fix 21 failing CLI tests ([50ab8b2](https://github.com/beyondnetcode/evolith_arch32/commit/50ab8b246ffa4b4526541aaef97fe9cf076e79fa))
+* **GAP-003:** Improve test coverage (74.5% → 76.87%) ([bc30e20](https://github.com/beyondnetcode/evolith_arch32/commit/bc30e204df9031f5ed8d2869a19000866600b517))
+* **GAP-007:** Remove emoji from documentation ([13df2f8](https://github.com/beyondnetcode/evolith_arch32/commit/13df2f821d8f4372e36babd24d311adcac31c57f))
+* **GAP-011:** Close - Fix WizardService goBack navigation drift ([6cb7f28](https://github.com/beyondnetcode/evolith_arch32/commit/6cb7f28b33291a9dd705930f652fa9737aa02ba1))
+* **gap:** correct GT-108 closure commit SHA to 0304f6b ([1c86749](https://github.com/beyondnetcode/evolith_arch32/commit/1c867495aa6b970d5915c964981a5f682a77de12))
+* **gap:** correct GT-82 closure commit SHA to e7f4490 ([686bb2f](https://github.com/beyondnetcode/evolith_arch32/commit/686bb2fc416897379f7d90300ccc3196c212ac1d))
+* **gaps:** reorder gap-tracking by status, criticality, complexity ([e33016c](https://github.com/beyondnetcode/evolith_arch32/commit/e33016cd87fbc5d59d7d7a6078e1aa6e4f88de26))
+* **governance:** reconcile topology closure evidence ([dadaeeb](https://github.com/beyondnetcode/evolith_arch32/commit/dadaeeba433e99f22f6b92a9addbca4441509bcf))
+* **gt-151:** fail closed on topology rule divergence ([b443dcd](https://github.com/beyondnetcode/evolith_arch32/commit/b443dcd25560c0354cde08a83f2d67bea008558f))
+* **gt-250:** fail-closed MCP auth when no API key configured ([866bbe8](https://github.com/beyondnetcode/evolith_arch32/commit/866bbe8ddb8dbe61e998c5de905dfc7bc20543e4))
+* **gt-250:** resolve merge conflicts in gap-tracking ([2251e5f](https://github.com/beyondnetcode/evolith_arch32/commit/2251e5f2cb9f9d6324ece78f0671e59e1562be64))
+* **gt-274:** harden cleanup-temp-files against tracked-file deletion ([60221b3](https://github.com/beyondnetcode/evolith_arch32/commit/60221b30b7bf4b43ad81a259b9eaceb2941745c6))
+* implement GT-286 compliance baseline ruleset path ([2396bc7](https://github.com/beyondnetcode/evolith_arch32/commit/2396bc77a7309e704804a238d879e2f3f01bc87b))
+* implement GT-287 definition of done ruleset path ([c001e60](https://github.com/beyondnetcode/evolith_arch32/commit/c001e6029dd422fbad826a0a78c233548577d39e))
+* implement GT-288 engineering manifesto ruleset path ([fd2ba02](https://github.com/beyondnetcode/evolith_arch32/commit/fd2ba022a8c1ebf950d59939fbd60df6b1b58523))
+* implement GT-289 repository taxonomy ruleset path ([c41e7d7](https://github.com/beyondnetcode/evolith_arch32/commit/c41e7d77021845983ed1421a37a87c8d284583bc))
+* implement GT-290 phase gates ruleset path ([fba055e](https://github.com/beyondnetcode/evolith_arch32/commit/fba055ef97d4d204d3227b8cd554b48e18324185))
+* implement GT-291 quality thresholds ruleset path ([46beae2](https://github.com/beyondnetcode/evolith_arch32/commit/46beae2630d346901f508d9b7e00a38206b6865e))
+* **infra:** GT-256 add --ping=true to Traefik healthcheck ([e83abea](https://github.com/beyondnetcode/evolith_arch32/commit/e83abeaf63fb857d0c28b3a15a71a2550052f646))
+* **infra:** GT-257 pin MongoDB image to 7.0 ([6fb9be1](https://github.com/beyondnetcode/evolith_arch32/commit/6fb9be1bdb19aff927b103d8f77ef1f0e3af55d2))
+* **infra:** GT-270 pin mutable images, disable dev defaults ([c5f4206](https://github.com/beyondnetcode/evolith_arch32/commit/c5f42067cf4fa3c6493c2ff860393444d4791649))
+* **mcp-server:** GT-266 API key provisioning service for MCP HTTP transport ([c760bcf](https://github.com/beyondnetcode/evolith_arch32/commit/c760bcfd42765762f67a5137efce86f88848311f))
+* **mcp-server:** resolve GT-267 — fix CacheModule mock + handleListTools async + parseArgs boolean flags ([3b2e6ad](https://github.com/beyondnetcode/evolith_arch32/commit/3b2e6ad8edd723a027f7282cc9a55a18905a0a64))
+* move evolith.config.json to reference/config directory ([4e46ba6](https://github.com/beyondnetcode/evolith_arch32/commit/4e46ba61156fda437e8d77a6d51a5a96021bc7ac))
+* **opa:** fix syntax for OPA 0.65.0 + add missing test coverage ([5c2bc36](https://github.com/beyondnetcode/evolith_arch32/commit/5c2bc3683e743045a4c6254320018ac1c826342f))
+* **opa:** wire 19 orphaned policies into main.rego aggregator (GT-252) ([08c883b](https://github.com/beyondnetcode/evolith_arch32/commit/08c883b65304585616f9c960304c08420fe40557))
+* **patterns:** remove duplicate patterns/es/ subdirectory (GT-176) ([825a668](https://github.com/beyondnetcode/evolith_arch32/commit/825a668ad91134667b7aec0ec1203ea7157f698e))
+* re-sync tracking after bidirectional gap sync ([426db1d](https://github.com/beyondnetcode/evolith_arch32/commit/426db1d9193fe969fab1571529c4542af71a1423))
+* rename agent ID from [@wilson](https://github.com/wilson) to [@winston](https://github.com/winston) across entire codebase ([940a45e](https://github.com/beyondnetcode/evolith_arch32/commit/940a45e2409425462ecbcadd213d567872ea4f77))
+* restore gap statuses after merge conflict ([742be2d](https://github.com/beyondnetcode/evolith_arch32/commit/742be2df2cabfd47cc01e7f49ebb3f29ae1f8bb5))
+* restore global documentation and tracking gates ([95159a9](https://github.com/beyondnetcode/evolith_arch32/commit/95159a9465c3ac18b090ec2c319c7b3b040a9fb3))
+* restore GT-267 workspace cache baseline ([96dc111](https://github.com/beyondnetcode/evolith_arch32/commit/96dc111b4d8c152aea428bac84f80ae73ab6833a))
+* **sdlc:** Phase 1+2 code corrections — artifact paths, blocking criteria, bounded context map ([0e7d141](https://github.com/beyondnetcode/evolith_arch32/commit/0e7d14189d5404f1421f185c5ad97f6e0d85927c))
+* **sdlc:** Phase 4 code + docs — artifact mappings, blocking criteria, quality thresholds ([1e2a063](https://github.com/beyondnetcode/evolith_arch32/commit/1e2a0638833030d1d763158c687125cfd697f63a))
+* secure GT-272 OPA sidecar bundles ([e26aa2e](https://github.com/beyondnetcode/evolith_arch32/commit/e26aa2eb8da9d6ed800344aa3d8c8a5a09093339))
+* **security:** GT-251 command injection fix, GT-253 trivy-action pinning, GT-250 evidence backfill ([bbd2e51](https://github.com/beyondnetcode/evolith_arch32/commit/bbd2e5173178f3422404ad09148625826c7d3d8a))
+* **security:** GT-254 path traversal protection in MCP resource resolution ([6d39274](https://github.com/beyondnetcode/evolith_arch32/commit/6d39274101286b3ecdaf8fc6e779c9096a6f2aee))
+* **security:** GT-255 add CSP/security headers to MCP HTTP transport ([46354c0](https://github.com/beyondnetcode/evolith_arch32/commit/46354c00f9dc9ae30c432e68e1e0c452d9f04c0e))
+* **security:** resolve 72 code scanning alerts — unused imports, variables, and path sanitization ([1ecbd91](https://github.com/beyondnetcode/evolith_arch32/commit/1ecbd9159b73a4ba9f85c8d7c767b10a94dce648))
+* sync progress counters after gap-track sync hook ([825de9c](https://github.com/beyondnetcode/evolith_arch32/commit/825de9c5b6205fd789d3b3de802638c1c07c2fa2))
+* **topology:** version corpus manifest contract ([3e94ab5](https://github.com/beyondnetcode/evolith_arch32/commit/3e94ab5d05fd5b89499724398f8f813c4aa2fef2))
+* **tracking:** demote 14 gaps to PENDING per catalog checkbox state ([c25270b](https://github.com/beyondnetcode/evolith_arch32/commit/c25270b0b3c22c955470f10360c1fcc901300b06))
+* update Last Updated date in gap tracking to 2026-06-23 ([4b54c3c](https://github.com/beyondnetcode/evolith_arch32/commit/4b54c3c7a64275c312a84824f275e731a9997802))
+* update maturity reconciliation with new gap totals (282→311) ([637f36e](https://github.com/beyondnetcode/evolith_arch32/commit/637f36eb865f0938514fff14cbb9d2db66e4524c))
+* use /dev/tty for TTY detection so prompts work with git commit -m ([3bf4c88](https://github.com/beyondnetcode/evolith_arch32/commit/3bf4c885ff3adc4e70b9c077b3a436dcaddcc37b))
+
 ## [1.1.0](https://github.com/beyondnetcode/evolith_arch32/compare/v1.0.0...v1.1.0) (2026-06-16)
 
 
diff --git a/package-lock.json b/package-lock.json
index 8529e5a0..c1157e6e 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "evolith",
-  "version": "1.1.0",
+  "version": "1.0.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "evolith",
-      "version": "1.1.0",
+      "version": "1.0.0",
       "workspaces": [
         "sdk/*",
         "apps/*",
diff --git a/package.json b/package.json
index 690ea52c..5721785a 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "evolith",
-  "version": "1.1.0",
+  "version": "1.0.0",
   "private": true,
   "description": "Evolith Architecture Reference - Monorepo root",
   "scripts": {