v2026.5.11 — Provider Detection + Local Issue Sync

Codex-aware provider detection, local issue sync documentation, media transcript sidecars, and release doc-sync hygiene.

v2026.5.11 — Provider Detection, Local Issue Sync, and Media Transcript Prep

Tag: `v2026.5.11` · Released: 2026-05-25 · npm: `npm install -g [email protected]`

This patch release prepares AIWG for the next stable cut by tightening provider selection, documenting local issue synchronization, and running a broad code-to-docs audit over the actual AIWG capability corpus: all of `agentic/code/` plus repository Markdown.

It also ships the first concrete time-based media primitive, `transcribe-media`, while keeping the larger research-media handoff explicit as follow-up work instead of overstating the release scope.

What's new

Codex-aware provider detection now prefers active runtime/process evidence in mixed workspaces. Refresh, regenerate, steward, channel sync, and related tests cover the cases where Claude and Codex files coexist but the current session should target Codex output.

Local issue workflows now have documented import/export and live sync paths. Projects can follow the local issue migration guidance, preserve backups, and use the configured issue-tracker topology rather than guessing where issue state belongs.

Media-curator now exposes `transcribe-media` for acquired audio/video. The workflow records source metadata, media and transcript hashes, timestamped segments, optional speaker labels, and explicit degraded plans when local transcription tooling is unavailable.

Security-engineering gained additional scaffolding for banned APIs, sanitizer/fuzzing CI emitters, DFIR readiness routing, and supply-chain audit provenance.

Documentation updates

  • Added this release announcement and the 2026.5.11 changelog section.
  • Updated release configuration so doc-sync covers all of `agentic/code/` plus all repository Markdown files.
  • Updated release configuration to route release tags through `tools/release/cut-tag.sh`, preserving the regular-commit and release-tag signing-key split.
  • Updated the system-wide `cli-secondary` rule: raw CLI commands augment skills, while skills own orchestration, final formatting, presentation, synthesis, gates, and recovery.
  • Refreshed media-curator docs and README references for transcript sidecars and research handoff preparation.
  • Recorded a 2026-05-25 doc-sync report under `.aiwg/reports/` with the audit scope, evidence, fixes, and remaining follow-up issues.

User impact

  • Codex users in mixed-provider workspaces get more predictable generated guidance and provider refresh behavior.
  • Teams using local issues have a clearer migration and live-sync path.
  • Media archive workflows can now produce transcript sidecars suitable for downstream review and future research induction.
  • Release operators have a stronger documented gate for the true AIWG capability corpus and a safer tag-signing path.

Known follow-up

The full media-curator to research-complete bridge remains open: REF templates, timestamp citation policy, citation sidecars, `induct-media`, and quickref/generated-guidance discoverability are tracked separately. Cargo/Rust supply-chain audit discovery also remains open because Cargo queries still route to npm-specific guidance first. The skill-first CLI augmentation audit is tracked as #1480.

Verification

Release-readiness checks for this line:

npm run check:versions
npm run typecheck
npm run build:cli
npm test
npm run uat