v5.1.0 — Full-tree audit: real memory privacy, the orchestration layer, v4-rudiment sweep

A file-by-file audit (four independent review passes) plus the maintainers' multi-agent orchestration practice, generalized into an opt-in layer.

Added

• Orchestration layer (.kit/advanced/orchestration-layer/, opt-in): executor / recon / idea-validator agents, /session-review + /second-opinion skills, and four rules (orchestrator fact-check · parallel development + worktree isolation · doc governance · decisions log). One cp set enables it.
• MEMORY-TEMPLATE.md + hook self-heal: session-start.py creates MEMORY.md from the template on first run.

Changed

• MEMORY.md is now actually gitignored — the README's privacy claim is finally true; your hot memory can't leak with a push.
• v4-rudiment sweep: the default rule scaffold and the opt-in /close-day skill no longer reference the retired NSP / daily/-as-default.
• Hook fixes: periodic-save counts real human turns only; pre-compact checks all three caps; protect-tests parses JSON properly and never blocks notes.
• lint.py wikilinks resolve against knowledge/concepts/; aggregate_usage.py handles dotted project paths; stale-refs.py cleaned of author-specific paths; settings.json no longer pre-approves rm/mv/chmod.
• ~16 MB of unreferenced social graphics removed from the tree.

Removed

• BREAKING: /memory-query — asking the agent in conversation covers it.
• Orphaned knowledge/log.md and dead config constants.

Migration notes: .kit/CHANGELOG.md § 5.1.0.