v5.5.0

What's Changed

• docs(openclaw): distinguish fresh-install memory defaults and Guard opt-in by @TARSDrakon in #643
• fix(deps): MCP SDK 1.31.0; waive sharp librsvg advisory with measured reachability (#655) by @jarvis-drakon in #656
• Revert #656 (merged before owner review) by @jarvis-drakon in #657
• fix(deps): MCP SDK 1.31.0; waive sharp librsvg advisory (#655) — re-proposed for owner review by @jarvis-drakon in #658
• feat(posture): #613 per-runtime posture record (Tars r2.1 §1 schema), self-reports, doctor rows, policy-evidence by @jarvis-drakon in #616
• docs(security): waiver wording follow-ups from the #658 reviews by @jarvis-drakon in #659
• fix(doctor): name the largest measured DISK consumer (#649) by @TARSDrakon in #664
• test(embeddings): remove remaining 200ms worker cold-start assumptions by @TARSDrakon in #665
• docs(memory): clarify seeded defaults and host-hook prerequisites by @TARSDrakon in #666
• feat(doctor): warn when Iron Dome runs on stock defaults (#516) by @CASE-Drakon in #636
• fix(session-lease): hook-plane records name the harness pid so #438 reaping does not free them (#553) by @CASE-Drakon in #646
• docs(guard): accurately describe watch-only self-protection exceptions by @TARSDrakon in #669
• docs(openclaw): align memory hook claims with subscribed events by @TARSDrakon in #670
• docs(config): describe watch-only self-protection exceptions accurately by @TARSDrakon in #671
• docs: sell ShieldCortex on the README, move ops detail to a guide by @mkdelta221 in #672
• fix(approve): recover the macOS session leader so humans can approve by @mkdelta221 in #676
• fix(scan): anchor newline-run patterns to stop catastrophic backtracking by @TARSDrakon in #677
• release: v5.5.0 by @CASE-Drakon in #663

Full Changelog: v5.4.0...v5.5.0