v1.9.9

Added

• Introduce profile-scoped Task Flow employees as the canonical AI workforce model.
• Add employee org chart, markdown-backed employee descriptors, manager/delegation scope, and employee-specific prompt overlays.

Changed

• Task Flow profiles now represent organizations, flows represent projects, and active AI owners/reviewers/runtimes use employee principals.
• Manager/root employees receive orchestrator guidance; focused employees receive worker guidance.

Security

• Enforce employee runtime read isolation for queue views and direct task/comment/event/context/document reads.
• Make employee tool permissions default-deny when allowed_tools is not explicitly configured.
• Reject legacy ai_profile, ai_subagent, and subagent principals for new active Task Flow ownership/review/runtime inputs.

Verification

• uv run ruff check .
• uv run mypy afkbot
• uv run pytest -q