Skip to content

Release history

great_cto releases

Engineering-management layer of 34 specialist AI agents covering the full SDLC (architect, PM, senior-dev, reviewer, QA, security, devops, L3-support + 18 archetype-specific reviewers) with auto-detected archetypes and compliance gates (PCI-DSS, HIPAA, FedRAMP, GDPR, EU AI Act). Runs in Claude Code, Cursor, Codex CLI, Aider, and Continue via AGENTS.md + MCP. MIT.

Back to tool Latest release

All releases

74 shown

No immediate action
v2.88.0 Breaking risk

macOS quota warning

Open
No immediate action
v2.87.1 New feature

Next block routing

Open
Review required
v2.87.0 New feature
Auth RBAC

Edit scope + handoff package + metrics

Open
Review required
v2.86.0 Mixed
Auth RBAC

ADR-007 improvements + failure reporting

Open
No immediate action
v2.85.2 Bug fix

Measured cost delivery fix

Open
No immediate action
v2.85.1 Bug fix

Dashboard viz contract fix

Open
No immediate action
v2.85.0 New feature

Flint charting contract

Open
No immediate action
v2.84.0 New feature

Real token usage + cache pricing

Open
No immediate action
v2.83.0 New feature

BM25 ranked recall

Open
No immediate action
v2.82.3 Bug fix

Cost savings + notifications

Open
No immediate action
v2.82.2 Bug fix

Tax/procurement/MSP detection fix

Open
No immediate action
v2.82.1 Bug fix

Fix legal/insurance misclassification

Open
No immediate action
v2.82.0 New feature

Five domain reviewers

Open
No immediate action
v2.81.0 New feature

Legal archetype + reviewer

Open
No immediate action
v2.80.1 New feature

Healthcare reviewer auto‑attaches

Open
No immediate action
v2.80.0 New feature

Interactive upgrade prompt

Open
No immediate action
v2.79.0 New feature

Update notifier

Open
Review required
v2.78.0 Breaking risk
Auth RBAC

Structured logging

Open
No immediate action
v2.77.2 Breaking risk

Project slug deduplication + cache retention

Open
No immediate action
v2.77.1 New feature

Bundled board server

Open
No immediate action
v2.77.0 Bug fix

Board server split

Open
No immediate action
v2.74.0 Breaking risk

AI Product Builder transition

Open
Review required
v2.73.1 Bug fix
Auth Breaking upgrade

Monitor step operation fix

Open
Config change
v2.73.0 New feature
Breaking upgrade

Demo case feeder

Open
No immediate action
v2.72.5 Bugfix

Inbox ID overflow fix

Open
No immediate action
v2.72.4 Breaking risk

Graphical Flow diagram

Open
No immediate action
v2.72.3 Bug fix

Bogus alert badge fix

Open
Config change
v2.72.2 Breaking
Auth Breaking upgrade

Autopilot removal

Open
No immediate action
v2.72.1 Bug fix

Logs fix + version badge

Open
Config change
v2.72.0 New feature
Auth RBAC

safeMode + Flow tab

Open
No immediate action
v2.71.0 New feature

Review recall + effort + fan‑out + aesthetics

Open
Config change
v2.70.1 Breaking
Auth

Telemetry silent re‑enable fix

Open
Config change
v2.70.0 New feature
Auth

Opt‑in anonymous telemetry

Open
No immediate action
v2.69.0 Maintenance

Routine maintenance and dependency updates.

Open
Config change
v2.68.0 Breaking risk
Auth RBAC

Operator console separation

Open
No immediate action
v2.67.0 New feature

Gate timestamps + document links

Open
Config change
v2.66.0 Mixed
Auth

Pipeline human gate + expiring invites

Open
No immediate action
v2.65.2 Bug fix

PATH resolution for bd

Open
Review required
v2.65.1 Security relevant
Auth

CSRF mitigation

Open
Config change
v2.65.0 New feature

Fable 5 support + agent-model override

Open
No immediate action
v2.64.3 Bugfix

Empty prompt error handling

Open
Config change
v2.64.2 Bugfix
Breaking upgrade

Agent run error surface

Open
Config change
v2.64.1 Bug fix
Auth

Error clarity + env stripping

Open
Review required
v2.64.0 New feature
Auth RBAC

Headless Claude Code agent streaming

Open
No immediate action
v2.63.0 New feature

Operator console upgrade

Open
No immediate action
v2.62.0 New feature

Workers‑comp, Estate, Patent

Open
No immediate action
v2.61.0 New feature

Three new verticals

Open
No immediate action
v2.60.0 New feature

Tier-3 ops endpoints UI

Open
No immediate action
v2.59.0 New feature

Cost model + dead-letter + health

Open
No immediate action
v2.58.0 New feature

SLA escalation + calibration

Open
No immediate action
v2.57.0 Feature
RBAC

Tabbed operator console

Open
Config change
v2.56.0 New feature
Crypto / TLS

Webhook ingestion, audit integrity, encryption

Open
No immediate action
v2.55.0 Feature

Operator console redesign

Open
No immediate action
v2.54.0 Feature

Explainability + AI drafts

Open
No immediate action
v2.53.0 New feature

AI recommendations + override logs

Open
No immediate action
v2.52.0 New feature

Analytics + dispositions + escalation

Open
Config change
v2.51.0 New feature
Auth RBAC

Operator invite links

Open
Config change
v2.50.0 Breaking risk
RBAC

RBAC restrictions

Open
Config change
v2.49.0 New feature
Auth RBAC

Build vs Operate separation

Open
No immediate action
v2.48.0 New feature

Keyless-live adapters

Open
No immediate action
v2.47.0 New feature

Customs, Audit, Pharma verticals

Open
Review required
v2.46.0 New feature
Auth RBAC

Human‑approved autopilot runs

Open
No immediate action
v2.45.0 New feature

8 new live connectors

Open
No immediate action
v2.44.0 New feature

New verticals, connectors

Open
Config change
v2.43.0 New feature
Auth RBAC

Human‑checkpoint enforced for irreversible actions

Open
No immediate action
v2.42.0 New feature

Live connectors for all verticals

Open
No immediate action
v2.41.0 New feature

Live connector execution

Open
No immediate action
v2.40.0 New feature

AI autopilots + scorecard

Open
No immediate action
v2.39.0 New feature

Governance phases addition

Open
Upgrade now
v2.33.1 Bug fix
Auth

SessionStart config fixes

Open
No immediate action
v2.33.0 Breaking risk

digital-health-pack fix

Open
v2.32.0 Breaking risk
⚠ Upgrade required
  • `great-cto ci` now runs only archetype-drift and budget checks; existing pipelines continue to function without security findings.
  • The `secret-scan` pre‑commit hook remains unchanged.
Breaking changes
  • Removed `great-cto scan` CLI command and its `--severity` / `--scanner` flags
  • Removed `great-cto list-rules` CLI command
  • Removed `scan` and `list_rules` MCP tools (now only 7 tools remain)
Full changelog

Removed: AgentShield scanner

The bundled AgentShield static scanner has been fully removed. It was an
AI-security pattern scanner (OWASP LLM Top 10) that shipped its own CLI
commands, MCP tools, rule files, and SARIF/JUnit output. Pre-implementation
threat modelling is now owned entirely by the ai-security-reviewer agent,
which is a better fit for the gated-pipeline model.

Breaking — removed CLI surface:

  • great-cto scan command (+ --severity / --scanner flags)
  • great-cto list-rules command
  • scan and list_rules MCP tools (MCP now exposes 7 tools:
    detect_archetype, estimate_cost, query_decisions, project_status,
    cost_summary, pipeline_stages, recent_verdicts)
  • The ~/.great_cto/guardrails.yml file is no longer created on bootstrap
  • agentshield-rules/ rule files dropped from the published npm package

great-cto ci survives — the command now runs archetype-drift and
budget checks only (--no-archetype / --no-budget to skip). Existing CI
pipelines keep working but no longer fail on security findings.

Unchanged: the secret-scan pre-commit hook is a separate subsystem and
is unaffected. Per-file opt-out remains // great_cto:allow-secrets; the
whole hook honours GREAT_CTO_DISABLE_SECRET_SCAN=1.

View release on GitHub
No immediate action
v2.25.0 New feature

Triage gate + hand‑off rules + loading discipline

Open
No immediate action
v2.19.0 New feature

Token economy phases

Open

Beta — feedback welcome: [email protected]