phase1.0.1-accepted

Changes since phase1-accepted

Features

• feat(kanban): fill hook bodies + wire real Telegram send + escalation path (#61) (17db4ab)
• feat(anchors): implement slash commands (/lock /skip /cancel /confirm /new) (#59) (62a5dbb)
• feat(durability): wire Checkpoint.maybe_write into post_tool_call hook (#58) (1ca670d)

Fixes

• fix(deploy): override hermes-image ENTRYPOINT for escalation-watcher sidecar (#62) (d4b0968)
• fix(dr): update DR scripts + runbook for hermes service rename + removed services (#57) (acb517e)
• fix(durability): match Hermes' invoke_hook(**kwargs) contract — was silently failing (#56) (c38b478)

Security

• (none)

Documentation

• (none)

Other

• chore(security): non-root container + image digest pinning + scrubber wiring (#60) (b0c480c)

---

Full Changelog: phase1-accepted...phase1.0.1-accepted