pakka v0.10.0
Whole-codebase audit hardening.
Fixed: commit-gate bypass via exec-wrappers (xargs/env/sudo/...); per-Bash-command hot-path latency; missing verdicts on chained/wrapped commits; cross-session meter-file collisions (session-id truncation); recall FTS5 query crashes on operator characters; report output-tokens accounting (max repo-filtered cumulative snapshot, not triangular sum); unbounded debug.log (now rotated at 2MB).
Changed: status-line meter reads cached; $ savings labeled (est) to mark the modeled output component; marketplace README synced to the 8-hub command surface.