Release: Profile Readiness And Review Safety

Forgeflow 4.3.53 closes the remaining readiness gaps from the learning workflow: explicit user profile guidance now counts after it is written, first-run evidence can move to green, and the main review command has safer argument handling.

User Profile Readiness

• render-profile-bootstrap.js now recognizes existing explicit profile records instead of only counting flags supplied in the current command.
• risk is now part of the profile prompt model, matching the required operating preference set used by workflow readiness.
• Workflow readiness can now move to ready once the profile quality gate passes and required operating preferences are present.

Review Argument Safety

• /review normalizes raw command input into SAFE_ARGUMENTS before shell snippets inspect it.
• Shell-control characters and control characters are rejected while normal file paths and git refs remain supported.
• The wrapper drift report no longer flags commands/review.md as missing safe argument handling.

Learning And First-Run Evidence

• The project-learning smoke regression test now verifies that default context smoke stays budget-safe with a thin packet.
• Local learning status now reaches pass when project learnings, user profile, agent feedback, review outcomes, next-work outcomes, and first-run results are present.
• First-run rollups can report bounded passing trials without treating missing failure digests as release blockers.

Validation

• Full scripts/forgeflow/test-*.js suite
• node scripts/forgeflow/smoke-check.js --json
• node scripts/forgeflow/render-release-readiness.js --json
• node scripts/forgeflow/render-workflow-readiness.js --json
• node scripts/forgeflow/show-learning-status.js --json
• git diff --check