v2.9.0

Minor release: one backward-compatible feature on top of the full audit-backlog burn-down (36 → 8 bugs).

Added

• Relevance harness v2 (#84, #85): paired significance testing (cce relevance --compare), line-range anchors + token-level metrics, additive cce.relevance.report/v2 schema.

Fixed

• Both crown-jewel secret-exfiltration fixes — served record_id redaction + cce doctor scrub scan (#144), and same-delimiter / quote-glued / prefix redaction tail-leaks via an explicit quote-aware scanner (#142).
• Sync-core hardening: overwrite-guard + atomic marker/rename (#163, #123, #122), push-guard content verify + retention crash-safety (#113, #114, #150), checksum round-trip (#115), is_dirty parsing (#117), --commit HEAD guard (#116).
• MCP robustness (#124, #125, #143, #132); atomic index.json write (#101); memory append guard (#102); cce init file-safety (#99); input-hardening (#127–#130); walker/workspace (#105, #131, #133); retriever (#107, #109, #110); path-traversal guard (#121); and correctness singletons (#100, #103, #104, #106, #108, #111, #112, #119, #90, #92, #126).

Full detail in CHANGELOG.md.