v0.1.99

Highlights

• Added delimiter-safe untrusted-context handling across repository, memory, summary, advisor, MCP, search, and shell data.
• Made concurrent tool validation race-safe and inference slot limits per-server.
• Hardened lifecycle hooks with cancellation, timeouts, process-group cleanup, and secret-scrubbed environments.
• Added a default-off batched-tool-call experiment with safe provider fallback and benchmark request-count measurements. Public configuration remains gated on live llama.cpp Qwen3VL acceptance.
• Added the three-file benchmark task and reconciled release/backlog documentation.

Verification

• go test ./...
• go vet ./...
• go test -race ./...
• git diff --check

Full Changelog: v0.1.98...v0.1.99