Audit-backed runtime hardening: routine-step prompts, session metadata replacement, busy-session protection, title generation, and OpenAI-compatible API aliases now match verified runtime contracts.
Safer owner-reviewed learning: profile, relationship, routine, and tool-quirk candidates now require explicit evidence or manual review instead of speculative mutation.
Truthful roadmap state: roadmap, channel, embedding, and reference-audit docs now distinguish implemented slices from partial or reference-parity gaps.
Fixed routine-step context rendering to use canonical RoutineStep fields instead of missing description metadata.
Fixed SQLite replace_messages() so omitted metadata preserves existing session metadata.
Fixed direct/API busy-session protection so user messages no longer bypass active work by default while explicit internal bypass and resume intents remain supported.
Fixed provider-safe title generation by avoiding unsupported provider methods.
Fixed F-level lint/import issues found during release verification.
Clarified Docker execution as transient/stateless command execution instead of hardened stateful container parity.