[kanfil]

Summary

Version bump 2.8.0 → 2.9.0 + CHANGELOG split for the two PRs that landed on main after v2.8.0 was already tagged and published:

• v2.8.0 was cut from 76df591 on 2026-11-03 (npm + GitHub Release) and contains only feat(workflow): declarative workflows and catalog subsystem #70.
• feat(workflow): add factory issue-to-PR workflows and per-agent model/mode support #72 (factory issue-to-PR workflows, per-agent model/mode) and chore(adlc): ADR-479 accepted + EVAL-001 goldset and grader for opencode session_end #68 (EVAL-001 goldset/grader) merged to main afterwards.
• npm versions are immutable → these ship as 2.9.0 (minor: backward-compatible additions).

[2.8.0] is trimmed back to what actually shipped; [2.9.0] carries #72 + #68.

Verification

• npm test: 872/872 pass
• npm run test:evals: 8/8 pass
• npm pack --dry-run: adlc-cli@2.9.0, 65 files, includes workflows/factory/{autonomous,supervised}

After merge

Tag v2.9.0 on the merge commit → publish.yml runs the test matrix, npm publish --provenance, and creates the GitHub release.

🤖 Generated with Claude Code

[kanfil]

Review Verdict: merge-ready

Reviewed revision: c81a888559622032d15b83721dfe4958101cc1d4 (PR #73)
Base branch: main

Scope of Changes against main

• package.json: Version bumped 2.8.0 → 2.9.0.
• CHANGELOG.md: New [2.9.0] section for #72 + #68; [2.8.0] trimmed to what actually shipped on npm (#70 only).

Policy Compliance Passes (REVIEW.md)

• pass: bugs (Important): Pass — no logic changes, metadata only.
• pass: security (Important): Pass — no security surface.
• pass: spec-compliance (Important): Pass — SemVer minor bump matches backward-compatible additions (#72, #68); changelog now truthfully reflects the immutable npm 2.8.0 tarball.
• pass: quality (Nit): Pass — Keep a Changelog format preserved.

Verification Summary

• npm test: 872/872 pass. npm run test:evals: 8/8 pass. npm pack --dry-run: adlc-cli@2.9.0.