Security hardening release: Unicode-normalized runtime prompt blocking, deny-by-default tools, OpenAI Responses function-call enforcement, bounded repository ingress, fail-closed audit recovery, hardened containers, explicit baseline decisions, GitHub SARIF upload, and refreshed real MCP evidence.