This release adds 1 notable feature for engineering teams evaluating rollout.
✓ No known CVEs patched in this version
Topics
+12 more
Summary
AI summaryAdded advisory lint for missing required methods on classes extending dominant bases.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Low |
Adds per-edit advisory for missing required methods in class contracts Adds per-edit advisory for missing required methods in class contracts Source: llm_adapter@2026-07-18 Confidence: high |
— |
| Performance | Low |
Ensures the artifact reaches every lint path (in-process, tool, daemon) Ensures the artifact reaches every lint path (in-process, tool, daemon) Source: granite4.1:30b@2026-07-18-audit Confidence: low |
— |
Full changelog
Added
- A per-edit
missing-required-methodadvisory closes an effectiveness gap: the
class_contractartifact (an archetype's required methods, derived at bootstrap)
was advertised in the pre-edit block but no lint ever verified it. Now, on a
post-edit lint, a class that extends the archetype's dominant base but omits a
method the entire cohort defines is nudged (an ActiveJob subclass without
perform, a service withoutcall). It is advisory-only (never block-eligible),
Ruby + Python, and false-positive-safe by construction:- Only a method the cohort defines at 100% frequency is enforced. A genuine
abstract-method contract is always 1.0 (the base raisesNotImplementedError,
so every subclass implements it); a method in the 0.95-0.99 band is instead a
commonly-overridden method with a base default, or one some members inherit via
a mixin -- flagging it is a false positive the file-level check cannot see
through. Measured ~0 false positives at 1.0 versus ~91% below it, across
gitlabhq, ef-api, mastodon, maybe, and Django (1500+ files, 0 false positives). - Only a class DIRECTLY extending the dominant base is in the cohort (matched on
the full qualified base name, or its unqualified short form -- not a different
class that merely shares a common tail likeFoo::Base); the base class itself
is exempt; and the method is flagged only when it is defined nowhere in the file. - Wired through every lint path (in-process, the
lint_filetool, and the daemon)
so the artifact reaches the check rather than silently vanishing.
- Only a method the cohort defines at 100% frequency is enforced. A genuine
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Chameleon
All releases →Beta — feedback welcome: [email protected]