Ashlr Verse 3.17.2

Ashlr Verse 3.17.2 makes chat activity easier to inspect and module dependencies easier to follow.

• Each turn has a compact Tools and context disclosure with reported tool/MCP call counts, pending or failed results, cited sources and recorded playbook references.
• Module dependency links include checked source-line citations that open the relevant file and line. Coverage explains unresolved local imports, unsupported resolvers and citations outside the displayed sample.
• Chat and turn scoped caches prevent reused provider tool IDs from carrying facts or search text between conversations.
• DOMPurify is updated to 3.4.16, the patched release for GHSA-p98j-92pf-mc4p.

Plugin 1.36.4 provides separate ashlr-plugin and ashlr-mcp commands so Hub retains ashlr. Tools/context counts describe observed reports; they do not prove loaded skills, server identity or entitlement. Module relationships remain inferred from source patterns.

The macOS DMG uses Ashlr Local signing and is not Apple Developer ID notarized. This release does not activate resident authority or add the still-unverified native/external provider adapters.

Validated at 4ea7e2e2a47acfb096feb340fcb1ccbef1072e8d: the complete local release gate passed 37,863 tests across 1,779 files; all 10 exact-head hosted CI jobs and dependency audit passed. The script-free clean tarball install, CLI/YAML and compiled policy checks passed. The locally signed DMG passed read-only mounted checks, and the installed 3.17.2 runtime passed source, signature, executable, asset and phone-gateway verification.

Interactive desktop UI and physical phone acceptance still require operator unlock/device checks. Resident authority remains inactive until a current standing grant is signed and the resident is started by the operator.