hannsxpeter · hannsxpeter · Jul 13, 2026 · Jul 13, 2026
diff --git a/.godpowers/PROGRESS.mdx b/.godpowers/PROGRESS.mdx
@@ -40,7 +40,7 @@
 - [DECISION] PRD and ROADMAP were reconstructed from the shipped v2.1.1 codebase with stable requirement ids, and the linkage map was populated via `scripts/reconstruct-self-ledger.js`. Deliverable status lives in `.godpowers/REQUIREMENTS.mdx`: 32 of 33 requirements done, 1 in progress (deliverable-progress, unreleased), 100% requirement-to-code coverage.
 
 <!-- godpowers:state-view:begin -->
-<!-- godpowers:checksum sha256:361e2e191d6d8d3aa758e2a2d41c7221bac7253b3643a4e18b5edba6db9f63c4 -->
+<!-- godpowers:checksum sha256:43ad0c2c63cddd9fcbeb6e0b87ffefb2adb85a2298d234942df353cb2ca1b4fa -->
 # Godpowers Progress
 
 - [DECISION] This file is a generated human-readable view of `.godpowers/state.json`.
@@ -61,18 +61,18 @@
 | 4 | Orchestration | Tech Debt | done | tech-debt/ASSESSMENT.mdx | 2026-07-13T05:12:51.236Z |
 | 5 | Orchestration | Greenfield Simulation | done | audit/GREENFIELD-SIMULATION.mdx | 2026-07-13T05:12:51.236Z |
 | 6 | Orchestration | Greenfieldify | done | audit/GREENFIELDIFY-PLAN.mdx | 2026-07-13T05:45:00.000Z |
-| 7 | Orchestration | Sync | done | SYNC-LOG.mdx | 2026-07-13T05:56:21.000Z |
+| 7 | Orchestration | Sync | done | SYNC-LOG.mdx | 2026-07-13T07:06:46.000Z |
 | 8 | Planning | PRD | done | prd/PRD.mdx | 2026-07-13T05:57:20.000Z |
 | 9 | Planning | Design | not-required | - | 2026-07-13T05:12:51.236Z |
 | 10 | Planning | Product | not-required | - | 2026-07-13T05:12:51.236Z |
 | 11 | Planning | Architecture | done | arch/ARCH.mdx | 2026-07-13T05:45:00.000Z |
-| 12 | Planning | Roadmap | done | roadmap/ROADMAP.mdx | 2026-07-13T05:57:20.000Z |
+| 12 | Planning | Roadmap | done | roadmap/ROADMAP.mdx | 2026-07-13T07:06:46.000Z |
 | 13 | Planning | Stack | done | stack/DECISION.mdx | 2026-07-13T05:12:51.236Z |
 | 14 | Building | Repo | done | repo/AUDIT.mdx | 2026-07-13T05:57:20.000Z |
 | 15 | Building | Build | done | build/STATE.mdx | 2026-07-13T05:16:48.669Z |
-| 16 | Shipping | Deploy | done | deploy/STATE.mdx | 2026-07-13T05:55:15.000Z |
+| 16 | Shipping | Deploy | done | deploy/STATE.mdx | 2026-07-13T07:06:46.000Z |
 | 17 | Shipping | Observe | done | observe/STATE.mdx | 2026-07-13T05:12:51.236Z |
 | 18 | Shipping | Harden | done | harden/FINDINGS.mdx | 2026-07-13T05:45:20.000Z |
-| 19 | Shipping | Launch | done | launch/STATE.mdx | 2026-07-13T05:55:15.000Z |
+| 19 | Shipping | Launch | done | launch/STATE.mdx | 2026-07-13T07:06:46.000Z |
 
 <!-- godpowers:state-view:end -->
diff --git a/.godpowers/build/STATE.mdx b/.godpowers/build/STATE.mdx
@@ -1,5 +1,5 @@
 <!-- godpowers:state-view:begin -->
-<!-- godpowers:checksum sha256:74305dc41794495bba93778964295151c40f619c72c7aa1adcbf485050be2c1d -->
+<!-- godpowers:checksum sha256:41ec06cd9742c7cf11fdaf4cae0ad7493855edc690716e34fddc364ed9825c3a -->
 # Godpowers Build State
 
 - [DECISION] This file is a generated human-readable view of `.godpowers/state.json` for `tier-2.build`.
@@ -25,6 +25,6 @@
 
 | Field | Value |
 |---|---|
-| release-version | 5.3.0 |
+| release-candidate-version | 5.3.1 |
 
 <!-- godpowers:state-view:end -->
diff --git a/.godpowers/deploy/STATE.mdx b/.godpowers/deploy/STATE.mdx
@@ -1,5 +1,5 @@
 <!-- godpowers:state-view:begin -->
-<!-- godpowers:checksum sha256:1041dc55bb122c8a8dcf232ebb0179d280acadeaa414957d2c890026d714cf45 -->
+<!-- godpowers:checksum sha256:9d4c95871e9eb144214d589b2b06a21de66ca2fdbda7ba8a950a384f7ee70f55 -->
 # Godpowers Deploy State
 
 - [DECISION] This file is a generated human-readable view of `.godpowers/state.json` for `tier-3.deploy`.
@@ -9,8 +9,8 @@
 - [DECISION] Step: Shipping: Deploy.
 - [DECISION] Status: `done`.
 - [DECISION] Artifact: `.godpowers/deploy/STATE.mdx`.
-- [DECISION] Updated: 2026-07-13T05:55:15.000Z.
-- [DECISION] Notes: Godpowers 5.3.0 and the MCP companion are published with provenance from merged main and their registry integrity matches the GitHub Release assets..
+- [DECISION] Updated: 2026-07-13T07:06:46.000Z.
+- [DECISION] Notes: Local and CI-verifiable npm deployment readiness is complete and the 5.3.1 publication path is authorized..
 
 ## Verification Commands
 
@@ -28,9 +28,9 @@
 
 | Field | Value |
 |---|---|
-| publication-targets | https://github.com/hannsxpeter/godpowers/releases/tag/v5.3.0, npm godpowers@5.3.0, and npm @godpowers/mcp@5.3.0 |
-| rollback-evidence | The v5.2.0 tag resolves locally as the prior release rollback reference. |
-| target-evidence | GitHub Release assets and npm registry packages share exact integrity values; published CLI and MCP executable verification passed. |
-| verified-target-type | published-npm-release |
+| publication-targets | npm root package, npm MCP package, GitHub tag, and GitHub Release assets |
+| rollback-evidence | The v5.3.0 tag resolves locally as the prior release rollback reference. |
+| target-evidence | Root and MCP package allowlists pass against npm pack output on the Godaudits 2.0 integration tree. |
+| verified-target-type | authorized-release-candidate |
 
 <!-- godpowers:state-view:end -->
diff --git a/.godpowers/launch/STATE.mdx b/.godpowers/launch/STATE.mdx
@@ -1,5 +1,5 @@
 <!-- godpowers:state-view:begin -->
-<!-- godpowers:checksum sha256:b6f713042e197e3257049ac39c572e12e472cd0b1830703ecf694ca2014ed119 -->
+<!-- godpowers:checksum sha256:c1703239ffb4832b871b5a4e80b93ece2c7cb2041eeb642bdedd4e9eacd88cee -->
 # Godpowers Launch State
 
 - [DECISION] This file is a generated human-readable view of `.godpowers/state.json` for `tier-3.launch`.
@@ -9,8 +9,8 @@
 - [DECISION] Step: Shipping: Launch.
 - [DECISION] Status: `done`.
 - [DECISION] Artifact: `.godpowers/launch/STATE.mdx`.
-- [DECISION] Updated: 2026-07-13T05:55:15.000Z.
-- [DECISION] Notes: Version 5.3.0 is published on GitHub and npm, registry integrity matches the release assets, and published-install verification passes..
+- [DECISION] Updated: 2026-07-13T07:06:46.000Z.
+- [DECISION] Notes: The 5.3.1 launch-readiness scope is complete and publication is authorized through the verified tag workflow..
 
 ## Verification Commands
 
@@ -27,9 +27,9 @@
 
 | Field | Value |
 |---|---|
-| launch-scope | published-release |
+| launch-scope | release-publication-approved |
 | production-user-evidence | unavailable; repository records zero production users |
-| publication-verification | passed for GitHub Release, npm root, npm MCP, published root install, Claude, Codex, and MCP executable |
-| release-version | 5.3.0 |
+| publication-verification | required after the tag workflow completes |
+| release-candidate-version | 5.3.1 |
 
 <!-- godpowers:state-view:end -->
diff --git a/.godpowers/roadmap/ROADMAP.mdx b/.godpowers/roadmap/ROADMAP.mdx
@@ -1,14 +1,14 @@
 # Roadmap
 
-> Reconciled against the published Godpowers 5.3.0 release. Increments carry a
+> Reconciled against the Godpowers 5.3.1 release candidate. Increments carry a
 > stable M-slug id, a Status, and the PRD requirement ids they deliver. Status is
 > derived from current artifacts, linkage, and executable evidence.
 
 ## Evidence Provenance
 
-- [DECISION] Evidence generated at: `2026-07-13T05:57:20.000Z`.
-- [DECISION] Source version: `5.3.0`.
-- [DECISION] Source hash `package.json`: `sha256:d9184b8af2fba78e000dbf5c9e8b1c23147a6408d11d32e93848340171f73843`.
+- [DECISION] Evidence generated at: `2026-07-13T07:06:46.000Z`.
+- [DECISION] Source version: `5.3.1`.
+- [DECISION] Source hash `package.json`: `sha256:0333d2042a73c58b586ba1e68b6f046e74372905fa37bada26dbe0a5d9880ed2`.
 - [DECISION] Source hash `.godpowers/prd/PRD.mdx`: `sha256:239990ed2eb267c26d3de744bf318d6260bfd67463fec8e7ccccbc348fc1712c`.
 - [DECISION] Source hash `.godpowers/arch/ARCH.mdx`: `sha256:ec90f0ec06d07fbc67c3b5ac22f3ae882a10d714ef230316f75823709e44642b`.
 - [DECISION] Source hash `.godpowers/stack/DECISION.mdx`: `sha256:cc9e9227262d9d472fa7806fbafc9a83b8e621728c3652fae1a423a867989ce3`.

diff --git a/.godpowers/state.json b/.godpowers/state.json
@@ -70,8 +70,8 @@
         "status": "done",
         "artifact": "SYNC-LOG.mdx",
         "artifact-hash": "sha256:c8c11458826463e04d569455dfac45f43ab27b827dee4366caa13de1dc5941fd",
-        "updated": "2026-07-13T05:56:21.000Z",
-        "notes": "Version, surface, state, GitHub Release, npm publication, integrity, and published-install evidence are synchronized."
+        "updated": "2026-07-13T07:06:46.000Z",
+        "notes": "Version, surface, state, and Godaudits 2.0 release-candidate documentation are synchronized."
       }
     },
     "tier-1": {
@@ -102,9 +102,9 @@
       "roadmap": {
         "status": "done",
         "artifact": "roadmap/ROADMAP.mdx",
-        "artifact-hash": "sha256:907cfcfb5548bca771053b0d5508cfc268d71ae36ca5b08168fca30eb39d3a0a",
-        "updated": "2026-07-13T05:57:20.000Z",
-        "notes": "Roadmap provenance is pinned to current source hashes and version 5.3.0."
+        "artifact-hash": "sha256:86758390bb9c9037b958168c3b5402d204a48141ccc0e1ad51d7469af995d063",
+        "updated": "2026-07-13T07:06:46.000Z",
+        "notes": "Roadmap provenance is pinned to current source hashes and version 5.3.1."
       },
       "stack": {
         "status": "done",
@@ -164,16 +164,16 @@
             }
           ]
         },
-        "release-version": "5.3.0"
+        "release-candidate-version": "5.3.1"
       }
     },
     "tier-3": {
       "deploy": {
         "status": "done",
         "artifact": "deploy/STATE.mdx",
         "artifact-hash": null,
-        "updated": "2026-07-13T05:55:15.000Z",
-        "notes": "Godpowers 5.3.0 and the MCP companion are published with provenance from merged main and their registry integrity matches the GitHub Release assets.",
+        "updated": "2026-07-13T07:06:46.000Z",
+        "notes": "Local and CI-verifiable npm deployment readiness is complete and the 5.3.1 publication path is authorized.",
         "verification": {
           "commands": [
             {
@@ -230,10 +230,10 @@
             }
           ]
         },
-        "verified-target-type": "published-npm-release",
-        "target-evidence": "GitHub Release assets and npm registry packages share exact integrity values; published CLI and MCP executable verification passed.",
-        "rollback-evidence": "The v5.2.0 tag resolves locally as the prior release rollback reference.",
-        "publication-targets": "https://github.com/hannsxpeter/godpowers/releases/tag/v5.3.0, npm godpowers@5.3.0, and npm @godpowers/mcp@5.3.0"
+        "verified-target-type": "authorized-release-candidate",
+        "target-evidence": "Root and MCP package allowlists pass against npm pack output on the Godaudits 2.0 integration tree.",
+        "rollback-evidence": "The v5.3.0 tag resolves locally as the prior release rollback reference.",
+        "publication-targets": "npm root package, npm MCP package, GitHub tag, and GitHub Release assets"
       },
       "observe": {
         "status": "done",
@@ -305,8 +305,8 @@
         "status": "done",
         "artifact": "launch/STATE.mdx",
         "artifact-hash": null,
-        "updated": "2026-07-13T05:55:15.000Z",
-        "notes": "Version 5.3.0 is published on GitHub and npm, registry integrity matches the release assets, and published-install verification passes.",
+        "updated": "2026-07-13T07:06:46.000Z",
+        "notes": "The 5.3.1 launch-readiness scope is complete and publication is authorized through the verified tag workflow.",
         "verification": {
           "commands": [
             {
@@ -357,9 +357,9 @@
             }
           ]
         },
-        "launch-scope": "published-release",
-        "release-version": "5.3.0",
-        "publication-verification": "passed for GitHub Release, npm root, npm MCP, published root install, Claude, Codex, and MCP executable",
+        "launch-scope": "release-publication-approved",
+        "release-candidate-version": "5.3.1",
+        "publication-verification": "required after the tag workflow completes",
         "production-user-evidence": "unavailable; repository records zero production users"
       }
     }
@@ -514,7 +514,7 @@
   },
   "godpowers-features": {
     "feature-set-version": 1,
-    "runtime-version": "5.3.0",
+    "runtime-version": "5.3.1",
     "known": [
       "planning-system-migration",
       "source-system-sync-back",

diff --git a/ARCHITECTURE-MAP.md b/ARCHITECTURE-MAP.md
@@ -640,7 +640,7 @@ godpowers/
 ├── README.md, CHANGELOG.md, LICENSE, CONTRIBUTING.md, SECURITY.md, USERS.md
 ├── ARCHITECTURE.md                <- Design doc
 ├── ARCHITECTURE-MAP.md            <- This file
-├── package.json (v5.3.0)
+├── package.json (v5.3.1)
 ├── .github/workflows/              <- CI + npm publish workflows
 │
 ├── bin/install.js                 <- CLI installer (15 runtimes)
@@ -736,7 +736,7 @@ godpowers/
 
 ---
 
-## Numbers (as of v5.3.0)
+## Numbers (as of v5.3.1)
 
 | Component | Count |
 |-----------|-------|

diff --git a/ARCHITECTURE.md b/ARCHITECTURE.md
@@ -1,6 +1,6 @@
 # Godpowers Architecture (v3 Design Target)
 
-> Status: STABLE v5.3.0 published release (self-project truth, active-session host evidence, explicit Quick Proof scope, lifecycle reconciliation, outcome metrics, mdx-first artifacts, and the existing production runtime surface)
+> Status: STABLE v5.3.1 release candidate (Godaudits 2.0 canonical JSON integration, typed remediation synchronization, fail-closed import safety, and the existing production runtime surface)
 > Authors: Godpowers Team
 > Last updated: 2026-07-13
 

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [5.3.1] - 2026-07-13
+
+Godaudits 2.0 interoperability patch. This release makes the canonical JSON
+audit ledger authoritative throughout Godpowers migration, remediation, and
+staleness workflows while retaining generated and legacy report fallbacks.
+
 ### Added
 
 - Regression coverage for canonical godaudits 2.x JSON detection, parsing,

diff --git a/README.md b/README.md
@@ -2,7 +2,7 @@
 
 [![CI](https://github.com/hannsxpeter/godpowers/actions/workflows/ci.yml/badge.svg)](https://github.com/hannsxpeter/godpowers/actions/workflows/ci.yml)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
-[![Version](https://img.shields.io/badge/version-5.3.0-blue)](CHANGELOG.md)
+[![Version](https://img.shields.io/badge/version-5.3.1-blue)](CHANGELOG.md)
 [![npm](https://img.shields.io/npm/v/godpowers.svg)](https://www.npmjs.com/package/godpowers)
 
 **Ship fast. Ship right. Ship everything. Ship accountably.**

diff --git a/RELEASE.md b/RELEASE.md
@@ -1,39 +1,41 @@
-# Godpowers 5.3.0 Release
+# Godpowers 5.3.1 Release
 
-> Status: Published
+> Status: Approved for publication
 > Date: 2026-07-13
 
-- [DECISION] Godpowers 5.3.0 is the product trust hardening release.
+- [DECISION] Godpowers 5.3.1 is the Godaudits 2.0 interoperability patch release.
 - [DECISION] The public surface contains 122 slash commands, 40 agents, 13 workflows, and 44 recipes.
 - [DECISION] The core package contains 98 runtime library modules and keeps zero production dependencies.
-- [DECISION] The `@godpowers/mcp` companion remains read-only and shares version 5.3.0.
+- [DECISION] The `@godpowers/mcp` companion remains read-only and shares version 5.3.1.
 
 ## Changes
 
-- [DECISION] `lib/self-project-truth.js` blocks release when package versions, public counts, Pillars, state, progress, requirements, roadmap provenance, or lifecycle artifacts contradict one another.
-- [DECISION] `lib/host-capabilities.js` separates installed capability metadata from active-session evidence and prevents `full on unknown` output.
-- [DECISION] `lib/quick-proof.js` labels fixture evidence explicitly and uses `--inspect-project` for read-only current-project inspection.
-- [DECISION] `lib/outcome-metrics.js` reports time to accepted change, cost, manual intervention, resume success, deployment completion, and rollback proof only when events support the claim.
-- [DECISION] The default core profile contains 15 high-level commands, while builder, maintainer, suite, and full profiles preserve progressive access to all 122 commands.
-- [DECISION] PRD, architecture, roadmap, stack, repository, build, deploy, observe, harden, launch, final sync, checkpoint, and Pillars evidence are reconciled for this source release.
+- [DECISION] `lib/sibling-artifacts.js` reads `.godaudits/AUDIT.json` as canonical machine state and retains checks, evidence metadata, findings, accepted risks, compliance, coverage, score caps, and typed GA tasks.
+- [DECISION] Generated `.godaudits/AUDIT.mdx` and legacy `.godaudits/AUDIT.md` remain supported fallbacks without overriding canonical JSON.
+- [DECISION] `lib/planning-systems.js` synchronizes open GA remediation into an idempotent managed todo section while preserving user-owned todo content.
+- [DECISION] Invalid JSON, unsupported schemas, malformed core records, oversized inputs, and non-regular sibling artifacts fail closed without dispatching remediation or seeding harden work.
+- [DECISION] Godaudits staleness follows canonical JSON so regenerated human reports do not create false drift.
+- [DECISION] Audit, migration, fix, preflight, doctor, context, orchestration, routing, workflow, template, and architecture documentation now describe the Godaudits 2.0 contract.
 
 ## Validation
 
 - [DECISION] `npm run release:check` passes on the final source tree.
-- [DECISION] Aggregate coverage is 94.69% lines, 79.48% branches, and 96.85% functions.
+- [DECISION] Aggregate coverage is 94.76% lines, 79.09% branches, and 96.90% functions.
 - [DECISION] Per-file line coverage is at least 70% across all 96 expected non-browser runtime modules.
 - [DECISION] The self-project truth gate passes 141 checks and fails closed on missing lifecycle steps, stale generated bodies, artifact drift, version drift, public surface drift, and stale roadmap hashes.
+- [DECISION] The sibling integration suite passes 49 checks, including canonical authority, fallback behavior, safety boundaries, todo synchronization, and staleness.
+- [DECISION] A live contract probe passes against the Godaudits 2.0 compiler and renderer.
 - [DECISION] Root package validation covers 577 files and MCP package validation covers 8 files.
 
 ## Upgrade
 
-- [DECISION] After publication, install with `npm install -g godpowers@5.3.0` or `npx godpowers@5.3.0`.
-- [DECISION] Existing 5.x projects need no artifact migration because MDX-first reads retain legacy Markdown fallback.
-- [DECISION] Re-run the installer for each host runtime so the narrowed core profile and updated skills replace installed copies.
+- [DECISION] After publication, install with `npm install -g godpowers@5.3.1` or `npx godpowers@5.3.1`.
+- [DECISION] Existing 5.x projects need no Godpowers artifact migration.
+- [DECISION] Projects with Godaudits 2.0 should keep `.godaudits/AUDIT.json` canonical and regenerate `.godaudits/AUDIT.mdx` after remediation.
+- [DECISION] Re-run the installer for each host runtime so the updated skills and runtime helpers replace installed copies.
 
-## Publication Evidence
+## Publication Boundary
 
-- [DECISION] GitHub tag `v5.3.0` and the GitHub Release point to merged main commit `9c6efed128b22df6458273c9428d0ceb0a0b0312`.
-- [DECISION] The GitHub Release contains the exact 577-file root tarball and 8-file MCP tarball whose integrity values match the npm registry.
-- [DECISION] The tag-triggered workflow verified both package versions and merged-main ancestry, passed the complete release gate, and published npm `godpowers@5.3.0` plus npm `@godpowers/mcp@5.3.0` with provenance.
-- [DECISION] Registry verification, root published-install verification, Claude and Codex installation, and the published MCP executable all pass.
+- [DECISION] Publication is authorized for npm `godpowers@5.3.1`, npm `@godpowers/mcp@5.3.1`, GitHub tag `v5.3.1`, and a GitHub Release containing both package tarballs.
+- [DECISION] The tag-triggered workflow must verify that the tag matches both package versions and belongs to merged main before it runs `npm run release:check` and npm publication with provenance.
+- [DECISION] Published-install verification is required before the release is recorded as complete.
diff --git a/USERS.md b/USERS.md
@@ -1,6 +1,6 @@
 # Users and Community
 
-The current source version is v5.3.0, and the latest published release is v5.3.0.
+The current source version is v5.3.1, prepared for release. The latest published release remains v5.3.0 until the tag-triggered workflow completes.
 
 ## Track record