diff --git a/.cursor-plugin/marketplace.json b/.cursor-plugin/marketplace.json
index 3a4cc4b..4ff5381 100644
--- a/.cursor-plugin/marketplace.json
+++ b/.cursor-plugin/marketplace.json
@@ -6,14 +6,14 @@
   },
   "metadata": {
     "description": "Professional Cursor plugins with APEX workflow, SOLID principles, and expert development agents for Next.js, Laravel, Swift, Tailwind CSS, and more",
-    "version": "0.1.4"
+    "version": "0.1.5"
   },
   "plugins": [
     {
       "name": "core-guards",
       "source": ".cursor-plugin/plugins/core-guards",
       "description": "Core security guards (git, install, security) and SOLID enforcement hooks",
-      "version": "1.1.37",
+      "version": "1.1.38",
       "author": {
         "name": "Fusengine",
         "email": "hello@fusengine.ch"
diff --git a/.cursor-plugin/plugins/core-guards/.cursor-plugin/plugin.json b/.cursor-plugin/plugins/core-guards/.cursor-plugin/plugin.json
index 995fe1f..532fdbe 100644
--- a/.cursor-plugin/plugins/core-guards/.cursor-plugin/plugin.json
+++ b/.cursor-plugin/plugins/core-guards/.cursor-plugin/plugin.json
@@ -1,6 +1,6 @@
 {
   "name": "core-guards",
-  "version": "1.1.37",
+  "version": "1.1.38",
   "description": "Core security guards (git, install, security) and SOLID enforcement hooks",
   "author": {
     "name": "Fusengine",
diff --git a/.cursor-plugin/plugins/core-guards/hooks/hooks.json b/.cursor-plugin/plugins/core-guards/hooks/hooks.json
index ef10df7..cb80980 100644
--- a/.cursor-plugin/plugins/core-guards/hooks/hooks.json
+++ b/.cursor-plugin/plugins/core-guards/hooks/hooks.json
@@ -7,6 +7,11 @@
         "matcher": "Write|Shell|WebFetch"
       }
     ],
+    "beforeShellExecution": [
+      {
+        "command": "./scripts/hook.sh"
+      }
+    ],
     "beforeMCPExecution": [
       {
         "command": "./scripts/hook.sh",
diff --git a/.gitignore b/.gitignore
index 8ceeecd..d3275ad 100644
--- a/.gitignore
+++ b/.gitignore
@@ -23,8 +23,10 @@ coverage/
 .harness/
 .impeccable/
 .codex/apex/
+.cursor/apex/
 .claude/
 MEMORY/
+.cartographer/
 
 # bun.lock IS committed on purpose (bun docs: "Should it be committed to git? Yes."),
 # so `--frozen-lockfile` installs stay reproducible. Do not add it here.
diff --git a/CHANGELOG.md b/CHANGELOG.md
index aab2f9e..afafe2c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,15 @@
 # Changelog
 
+## [0.1.5] - 28-09-2026
+
+- fix(hooks): core-guards now wires `beforeShellExecution` → `./scripts/hook.sh`,
+  so shell commands pass the git/install/security guards before execution
+  (loader-verified: `git checkout -b` → deny + CONFIRM, `git status` → allow,
+  `git push --force` → deny G4 destructive)
+- chore(gitignore): `.cursor/apex/` and `.cartographer/` added to agent scratch state
+- chore(core-guards): PATCH bump 1.1.37 → 1.1.38, mirrored in `.cursor-plugin/marketplace.json`
+- chore(marketplace): suite `metadata.version` 0.1.4 → 0.1.5, README version badge updated
+
 ## [0.1.4] - 27-09-2026
 
 - chore(skills): port the claude-plugins 2026-09-27 skills refresh — latest
diff --git a/README.md b/README.md
index fc01351..d76332b 100644
--- a/README.md
+++ b/README.md
@@ -1,6 +1,6 @@
 # Fusengine Cursor Plugins
 
-![version](https://img.shields.io/badge/version-0.1.4-blue?style=flat-square)
+![version](https://img.shields.io/badge/version-0.1.5-blue?style=flat-square)
 ![plugins](https://img.shields.io/badge/plugins-24-brightgreen?style=flat-square)
 ![runtime](https://img.shields.io/badge/runtime-Cursor%20CLI-black?style=flat-square)
 ![License: MIT](https://img.shields.io/badge/License-MIT-yellow?style=flat-square)