From 590cfa3fa71e46bae2fbcad40b28fa3b21932d57 Mon Sep 17 00:00:00 2001
From: Clay Good <hi@claygood.com>
Date: Sun, 13 Sep 2026 16:37:21 -0500
Subject: [PATCH] chore(release): 3.2.0

---
 CHANGELOG.md                                  | 22 +++++++++++++++++++
 package-lock.json                             |  4 ++--
 package.json                                  |  2 +-
 .../fixtures/configs/3.2.0-default.json       | 19 ++++++++++++++++
 src/core/services/fixtures/configs/README.md  |  2 ++
 5 files changed, 46 insertions(+), 3 deletions(-)
 create mode 100644 src/core/services/fixtures/configs/3.2.0-default.json

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 16ffd5e5..3a6c7f89 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -3,6 +3,28 @@
 All notable changes to OpenLore are documented here. This project adheres to
 [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [3.2.0] - 2026-09-13
+
+**The release where OpenLore checks the locks before reading the map.**
+
+- **See collisions before they land.** In-flight work now gets a real Git textual-merge verdict,
+  and changed or newly added tests are always selected with a plain-language reason.
+- **Find more of the code that actually runs.** Framework entry points, literal dispatch tables,
+  and config-wired files now participate in reachability instead of looking accidentally dead.
+- **Make governance portable.** Public-surface checks emit stable finding codes, recommend the
+  appropriate SemVer bump, and can export SARIF for code-scanning workflows.
+- **Give agents a better-sized map.** `orient` fits its entire answer to the requested token budget,
+  while generated spec links are checked against structural evidence before they are presented.
+- **Treat a repository like input, not a houseguest.** Git execution, network egress, symlinks,
+  artifact reads, terminal output, MCP arguments, regex cost, and trust labels all gained stricter
+  fail-closed boundaries. Dependabot is clear and the reviewed intentional-egress alerts are closed.
+
+No breaking changes. Existing commands and configuration remain compatible with 3.1.x.
+
+**Upgrade:** `npm i -g openlore@3.2.0` — or `openlore update`.
+
+**Full Changelog**: https://github.com/clay-good/OpenLore/compare/v3.1.1...v3.2.0
+
 ## [3.1.1] - 2026-09-07
 
 **The release where the first run stops being the worst run — and Windows joins CI.**
diff --git a/package-lock.json b/package-lock.json
index c5c8f418..69cb3e7c 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "openlore",
-  "version": "3.1.1",
+  "version": "3.2.0",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "openlore",
-      "version": "3.1.1",
+      "version": "3.2.0",
       "hasInstallScript": true,
       "license": "MIT",
       "dependencies": {
diff --git a/package.json b/package.json
index 25375a9b..673cd701 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "openlore",
-  "version": "3.1.1",
+  "version": "3.2.0",
   "description": "Persistent architectural memory and structural cognition for AI coding agents.",
   "type": "module",
   "main": "dist/api/index.js",
diff --git a/src/core/services/fixtures/configs/3.2.0-default.json b/src/core/services/fixtures/configs/3.2.0-default.json
new file mode 100644
index 00000000..9e697a44
--- /dev/null
+++ b/src/core/services/fixtures/configs/3.2.0-default.json
@@ -0,0 +1,19 @@
+{
+  "version": "1.2.0",
+  "projectType": "nodejs",
+  "openspecPath": "openspec",
+  "analysis": {
+    "maxFiles": 100000,
+    "includePatterns": [],
+    "excludePatterns": []
+  },
+  "generation": {
+    "model": "claude-sonnet-4-6",
+    "domains": "auto"
+  },
+  "panicResponse": {
+    "mode": "off"
+  },
+  "createdAt": "2026-09-13T00:00:00.000Z",
+  "lastRun": null
+}
diff --git a/src/core/services/fixtures/configs/README.md b/src/core/services/fixtures/configs/README.md
index 56845c3a..da5cf828 100644
--- a/src/core/services/fixtures/configs/README.md
+++ b/src/core/services/fixtures/configs/README.md
@@ -15,6 +15,8 @@ They intentionally do not move with the current schema.
   v3.1.0.
 - `3.1.1-default.json` captures the unchanged default configuration factory shape for v3.1.1 and
   schema 1.2.0.
+- `3.2.0-default.json` captures the unchanged default configuration factory shape for v3.2.0 and
+  schema 1.2.0.
 
 For each release, add at least one `<package-version>-*.json` fixture before changing the package
 version. Include both a factory-default shape and a realistic customized shape when the release