v0.6.0 — pin gbrain v0.54.1.1

v0.6.0 — pin gbrain v0.54.1.1

Engine pin lineage (continuing from v0.5.0)

• v0.4.0: mnemosyne-memory 3.15.1 → 4.0.0b3 — recall provenance logging (upstream PR #957, shipped in Mnemosyne v0.7.3)
• v0.5.0: release hardening — health-gated start, liveness vs auth doctor split
• v0.6.0 (this release): gbrain pin v0.50.0.0 → v0.54.1.1

What v0.54.1.1 carries over v0.50.0.0

• 0.50.5 security hardening wave
• 0.51.0 durable concurrent writes
• 0.51.7 search fixes
• 0.52–0.54 repair and preview UX

Note: upstream gbrain has since published newer releases; this pin tracks the version validated in a 24h dogfood of the live stack. A fast-follow bump is expected.

Also shipped from dev

• Prompt-injection CI gate: scripts/check_prompt_injection.py (stdlib, in-repo, auditable — hidden Unicode/BIDI, homoglyphs, LLM delimiters, injection/exfil patterns, base64 blobs in markdown; --self-test fixtures). Required check on every PR and pushes to main; docs-only PRs skip the heavy code gates via a changes-detection job.
• Fix: hooks recall uses top_k (was limit)
• Docs: documented deliberate divergence from upstream capture policy

Full Changelog: v0.5.0...v0.6.0