fix: defaults and permissions
chore: release plan