ContextCanopy v1.0.2 changes learning from append-only accumulation into active-rule maintenance. Learn now classifies add, no-op, correct, narrow, broaden, replace, merge, relocate, and retire transitions; project rules must reach the real injected instruction surface; Sync removes superseded projection text; and Doctor requires paired fresh-session proof that new behavior works and retired behavior exits. Public/private authority, privacy, permission, local-only, and private-remote boundaries are unchanged. Validation passed for the Vault compiler/lint/graph, 27 compiler tests, 24 MCP tests, 16 Skill packages, isolated full-Vault stdio smoke, package dry run, npm audit, mirror equality, and fresh behavior probes.