@@ -19,7 +19,6 @@ All notable changes to the pstack-hermes port tooling will be documented in this
 - **Single-source installs.** The package now installs from this one repository: the built tree is published to its `dist` branch, which is the repository's default branch, so `hermes plugins install iap/pstack-hermes` works root-level and `hermes plugins update pstack` updates natively. The separate dist repo is retired; no second repository is ever published. (A `main`-subdir install of `pstack/` remains as a legacy pinned-style alternative.) `dist` also carries a scheduler stub so the weekly drift watchers keep firing despite the default-branch flip; manual recovery for dispatch-only workflows is `gh workflow run <file> --ref main`.
 - **Re-pin to upstream `c47b1284` (pstack v0.15.5); `pstack/` rebuilt.** Every converter anchor was re-anchored or pruned against the new upstream text (36 dead anchors at the new pin -> 0; `T8`-`T14` + delegation), **F16 retired** (upstream now ships the slug-agnostic lane check itself), `reflect`'s 4-column reviewer table adopted with the upstream `budget` key in the setup-written panel shape, and the two new upstream principles ported (`principle-attack-the-premise`, `principle-test-behavior-not-implementation`) - 45 -> 47 skills. Prose model defaults refreshed (`grok-4.7-xhigh-fast`, `claude-opus-5-5-max`); the shipped panel keeps its vendor-qualified verified slugs. `UPSTREAM_PIN` bumped in all four workflows (lock-step enforced by `tools/check_pins.py`); details and the triage correction (no `skills/orchestrate` ever existed) in `docs/ADAPTATIONS.md` section 4.
 - Docs / agent policy (Phase A, no package rebuild): `AGENTS.md` and `docs/USING.md` codify the stock-skills write surface — Hermes self-improvement (`skill_manage` / learning) targets local skills, skill taps, or a dist fork, not stock plugin skills. Stack forge freeze: **Graphite (`gt`) default**, **GitHub (`gh`) fallback**, **GitLab (`glab`) halted**. README Known limitations aligned (was incorrectly describing Graphite as optional-only).
-- **Repository Actions policy tightened (#81, settings + docs):** allowed actions are now an allowlist - GitHub-owned plus `astral-sh/setup-uv@*` and `oven-sh/setup-bun@*` - SHA pinning stays required, and the default `GITHUB_TOKEN` can no longer create or approve pull requests. `CONTRIBUTING.md` documents the policy and the add-to-allowlist-first rule; every action ref in the repo was verified compliant.
 
 ### Fixed
 - Dev-tree README skill counts corrected: the skills bullet said 45 (24 + 21 `principle-*`) while the generated package README and `.build-provenance.txt` already said 47 (24 + 23) after the v0.15.5 re-pin. Docs-only; `pstack/` untouched (#80).