release: v2026.10.20.1 pins

.claude-plugin/marketplace.json

@@ -12,7 +12,7 @@
       "source": {
         "source": "github",
         "repo": "better-isms/grcskills",
-        "ref": "v2026.10.20"
+        "ref": "v2026.10.20.1"
       },
       "category": "security",
       "tags": [

AGENTS.md

@@ -14,21 +14,21 @@ This is the grcskills library: open, task-level GRC skills (Agent Skills format)
 
 ## Install
 
-Install from the current release tag, `v2026.10.20`, never from `main` (the integration branch). Releases are immutable and carry a build provenance attestation.
+Install from the current release tag, `v2026.10.20.1`, never from `main` (the integration branch). Releases are immutable and carry a build provenance attestation.
 
 ```bash
-npx skills add better-isms/grcskills#v2026.10.20                                  # whole library, interactive
-npx skills add better-isms/grcskills#v2026.10.20 --skill <skill-name>             # one skill
-npx skills add better-isms/grcskills/skills/<author-slug>#v2026.10.20             # one author
-npx skills add better-isms/grcskills#v2026.10.20 --list                           # list
-git clone --branch v2026.10.20 https://github.com/better-isms/grcskills           # clone
+npx skills add better-isms/grcskills#v2026.10.20.1                                  # whole library, interactive
+npx skills add better-isms/grcskills#v2026.10.20.1 --skill <skill-name>             # one skill
+npx skills add better-isms/grcskills/skills/<author-slug>#v2026.10.20.1             # one author
+npx skills add better-isms/grcskills#v2026.10.20.1 --list                           # list
+git clone --branch v2026.10.20.1 https://github.com/better-isms/grcskills           # clone
 ```
 
 The `#<tag>` suffix makes the skills CLI clone that tag. Target an agent with `-a claude-code`, `-a cursor`, `-a codex`. Claude Code users can also run `/plugin marketplace add better-isms/grcskills` then `/plugin install grcskills@grcskills`; the plugin pins the release tag. Without a terminal, download the skill folder from the release and place it in the agent's skills directory.
 
 ## Run the whole library against a setup
 
-1. Make the library available: an install, or `git clone --branch v2026.10.20 https://github.com/better-isms/grcskills` into a temporary folder (ask first).
+1. Make the library available: an install, or `git clone --branch v2026.10.20.1 https://github.com/better-isms/grcskills` into a temporary folder (ask first).
 2. Open `skills/tristan-roth/grc-setup-review/SKILL.md` and follow it. It reads only the frontmatter of every skill, inspects the user's compliance material read-only, ranks the top 10 skills with impact, effort and a cited reason, audits what is broken, duplicated or missing, and writes `grc-setup-review/*.md` in the user's working folder.
 3. To run any ranked skill, read its `SKILL.md` in full, then follow it. Each skill names the files it writes.
 

CHANGELOG.md

@@ -4,7 +4,10 @@ Release tags are `vYYYY.MM.DD[.n]`. Installers and the Claude Code plugin consum
 
 ## Unreleased
 
-- grcskills.com shows a one-line heyGRC bar above the menu on every page ("From the grcskills team: heyGRC checks each pull request against your frameworks. See how"; a shorter line on phones). A visitor can close it and it stays closed: one flag in the browser's localStorage, written only on that click, nothing sent anywhere. It replaces the footer heyGRC line; the home band and the skill and list page cards stay.
+## v2026.10.20.1
+
+- grcskills.com shows a one-line heyGRC bar above the menu on every page ("From the grcskills team: heyGRC checks each pull request against your frameworks. See how"; a shorter line on phones). A visitor can close it and it stays closed: one flag in the browser's localStorage, written only on that click, nothing sent anywhere. It replaces the footer heyGRC line; the home band and the skill and list page cards stay (#9).
+- Every install pin moves to `v2026.10.20.1`.
 
 ## v2026.10.20
 

README.md

@@ -4,7 +4,7 @@
   <img alt="grcskills. Open GRC skills for AI agents. It does the legwork. You make the calls." src="assets/banner-light.svg" width="100%">
 </picture>
 
-[![License: MIT](https://img.shields.io/badge/license-MIT-0f172a?style=flat-square)](LICENSE) [![Release v2026.10.20](https://img.shields.io/badge/release-v2026.10.20-0f172a?style=flat-square)](https://github.com/better-isms/grcskills/releases/tag/v2026.10.20) [![60 skills](https://img.shields.io/badge/skills-60-0f172a?style=flat-square)](https://grcskills.com/skills/) [![Agent Skills format](https://img.shields.io/badge/format-Agent%20Skills%20(SKILL.md)-0f172a?style=flat-square)](AGENTS.md) [![Works with Claude Code, Codex and Cursor](https://img.shields.io/badge/works%20with-Claude%20Code%20%7C%20Codex%20%7C%20Cursor-0f172a?style=flat-square)](#install) [![By ISMS Copilot](https://img.shields.io/badge/by-ISMS%20Copilot-0f172a?style=flat-square)](https://www.ismscopilot.com/mcp?ref=grcskills-readme)
+[![License: MIT](https://img.shields.io/badge/license-MIT-0f172a?style=flat-square)](LICENSE) [![Release v2026.10.20.1](https://img.shields.io/badge/release-v2026.10.20.1-0f172a?style=flat-square)](https://github.com/better-isms/grcskills/releases/tag/v2026.10.20.1) [![60 skills](https://img.shields.io/badge/skills-60-0f172a?style=flat-square)](https://grcskills.com/skills/) [![Agent Skills format](https://img.shields.io/badge/format-Agent%20Skills%20(SKILL.md)-0f172a?style=flat-square)](AGENTS.md) [![Works with Claude Code, Codex and Cursor](https://img.shields.io/badge/works%20with-Claude%20Code%20%7C%20Codex%20%7C%20Cursor-0f172a?style=flat-square)](#install) [![By ISMS Copilot](https://img.shields.io/badge/by-ISMS%20Copilot-0f172a?style=flat-square)](https://www.ismscopilot.com/mcp?ref=grcskills-readme)
 
 # Open GRC skills for AI agents.
 
@@ -51,25 +51,25 @@ The prompt carries no version: [grcskills.com/llms.txt](https://grcskills.com/ll
 
 ## Install
 
-Every install path is pinned to a release tag (`v2026.10.20`). Releases are immutable and carry a build provenance attestation; `main` is the integration branch and is not an install source.
+Every install path is pinned to a release tag (`v2026.10.20.1`). Releases are immutable and carry a build provenance attestation; `main` is the integration branch and is not an install source.
 
 ```bash
 # the whole library, with an interactive picker (skills.sh)
-npx skills add better-isms/grcskills#v2026.10.20
+npx skills add better-isms/grcskills#v2026.10.20.1
 
 # one skill
-npx skills add better-isms/grcskills#v2026.10.20 --skill risk-register-first-pass
+npx skills add better-isms/grcskills#v2026.10.20.1 --skill risk-register-first-pass
 
 # see what is there
-npx skills add better-isms/grcskills#v2026.10.20 --list
+npx skills add better-isms/grcskills#v2026.10.20.1 --list
 ```
 
 The `#<tag>` suffix makes the skills CLI clone that tag instead of the default branch. Add `-a claude-code`, `-a cursor` or `-a codex` to target one agent.
 
 **Clone** the release tag:
 
 ```bash
-git clone --branch v2026.10.20 https://github.com/better-isms/grcskills
+git clone --branch v2026.10.20.1 https://github.com/better-isms/grcskills
 ```
 
 **Claude Code plugin** (every skill plus the optional framework lookup server):