Lore 2.4.0

Highlights

Cloud opt-in for every outbound path: analyze, knowledge, format, summarize, improve, generate-titles and the handoff need --allow-cloud or LORE_ALLOW_CLOUD=1; the library refuses cloud providers without it.
Host/Origin hardening for lore-web: non-loopback Host headers and foreign Origins are rejected, and the web UI binds to 127.0.0.1 by default.
Safe prune and archive preservation: lore prune deletes only regular export files, and an archive filesystem error never drops an entry.
Private handoff and run logs: lore run writes raw transcripts as 0600 under 0700 directories, and handoff context is kept in a mode-0600 file under ~/.lore/handoff/.
Verified Docker and install matrix: the smoke test passes on Linux, macOS and Windows in CI and on 10 of 10 Docker targets.
Rewritten README and docs; slimmed repository (internal notes moved to the git tag archive/pre-cleanup-2026-10-26, calibration tools moved to tools/calibration/).
Semantic search (semantic extra), summaries, memory dedupe and import, and many new session readers.

Breaking changes (TRUSTED_PROXY values, watch extra removed, ai_history renamed to lore, LORE_* env names) are listed in CHANGELOG.md.

pipx install git+https://github.com/DnaMes/lore@v2.4.0

Native tool-history locations on macOS and Windows are not verified against real installations.
lore run PTY capture on Windows is not verified (use --no-pty there).