TR39 homoglyph detection, MCP tool definition scanning, memory session
isolation + provenance, 72-test red-team suite, catalog metadata
reconciliation (#16), integrity manifest fixes, audit docstring truth
fix (#15). First tagged release — arms the PyPI publish workflow.