v1.4.11 2026-10-14
Independent audit hardening — 39 defects fixed across 3 audit rounds
- — First full independent code audit (DeepSeek Harness): every module read end-to-end, every finding reproduced locally before the fix — 40 findings (12 high / 15 medium / 13 low), 39 fixed in this release, 1 correctly deferred pending a live API check
- — The defining pattern the audit exposed: tools that fail silently-confidently. Fixed: MCP competitor_gap was 100% unusable (unsupported --json on every call), autocomplete null responses crashed every caller, pretty-printed JSON-LD was invisible, the homepage was always an orphan, consecutive robots.txt User-agent lines overwrote each other (Disallow: / read as unlisted), rank_tracker mangled domains with lstrip("www.") and fabricated ±996-place trends from the 999 sentinel
- — Intent classification corrected: "how to get more traffic" is informational not transactional; /blog/product-led-growth is a blog post not a product page; SERP percentages no longer divide by a hardcoded 10
- — Chinese content finally measurable: content_qc counts CJK characters (the publish gate was meaningless on Chinese drafts); keyword_cluster parses quoted CSV; GSC search_performance paginates rows so top-50 subtotals stop masquerading as totals; domain_rating cache falls back to ~/.zens_ink when site-packages is read-only
- — CLI dispatcher registered content_qc + llms_gen (were documented but "Unknown tool"); TOOLS_COUNT 20 → 22; MCP protocol negotiation honest (unsupported versions fall back); 18 regression tests pin every fix; full audit reports archived in the repo docs/