lode v1.5.0

lode brand: name resolution, visual identity, and a docs site (lode-fhql)

Brand identity settled and a published docs site shipped end to end.

• Brand brief: positioning, name story, palette, type, voice (lode-fhql.3); clear-space rule restated for the assembled lockup (lode-wqw2)
• SVG logo mark + wordmark under docs/assets/, with a dark-theme lockup so the README logo is visible on GitHub dark mode (lode-fhql.4, lode-fhql.19)
• ASCII/Unicode wordmark in lode version and the TUI help overlay (lode-fhql.5)
• Favicon (legible against dark browser chrome) and OG/social card derived mechanically from the mark (lode-fhql.6, lode-fhql.22, lode-fhql.17)
• README carries the identity and a working Install section (wheel from GitHub releases; a PyPI lode warning) (lode-fhql.7, lode-fhql.2)
• Docs site: MkDocs-Material chosen (lode-fhql.8), GitHub Pages publish workflow (lode-fhql.9), landing page (lode-fhql.10), GitHub-compatible heading slugs and anchor fixes (lode-fhql.21, lode-rmsf), strict docs-link gate (lode-fhql.20)
• Generator-derived keymap and runtime-settings reference pages, published on the site (lode-fhql.15, lode-7uze, lode-gecm)
• Docs CI fixed (package install, toolchain deps) and scoped to docs-affecting paths (lode-fhql.23, lode-xx46, lode-ui7m); one pinned mermaid-cli image everywhere (lode-3ld8, lode-pi9y); published-set drift gates (lode-zznx)
• Distribution renamed to lode-kb (CLI and import package stay lode) (lode-w3wt)

Backport the harness-export improvements into lode (lode-s9xe)

The /land workflow's destructive shell moved out of prose into tested scripts.

• Extracted, tested scripts: land-heartbeat, stacked-graph, drop-from-accepted, land-merge-batch, land-replay, worktree-gc-sweep, harness-doctor (lode-s9xe.1–.6, .13, .14)
• /land SKILL.md invokes the scripts; the fenced destructive bash is gone (lode-s9xe.6)
• tests/README.md survey of the test suite (lode-s9xe.7); CLAUDE.md non-interactive-shell + glossary sections (lode-s9xe.8, lode-ohya); AGENTS.md keep-decision recorded (lode-s9xe.9)

Features

• lode stats: read-only corpus-inspection CLI — tombstone breakdown and corpus metrics (lode-tyhy)
• Per-note no_egress: lode no-egress --note, a TUI browse toggle with confirmation on clearing, and visible markers (lode-82wt, lode-a50f)
• TUI theme config: [tui.theme] base + per-colour overrides, and lode theme export printing round-trippable TOML (lode-cwyk)
• CLI theme config: [cli.theme] semantic style names, validated at config load (lode-mk9j)
• Fenced code blocks coloured in TUI note bodies; note-body markdown palette retuned off the terminal ANSI range (lode-lab1, lode-dmbc)
• Browse: BM25 quick search rebound to /, retiring the summary-only progressive search (lode-wdm0)

Fixes

• Settings.no_egress_default now actually applies to new notes and new externals rows (lode-a43n, lode-ge8w)
• A broken config.toml no longer takes down lode <cmd> --help or lode theme export (lode-moq7, lode-rtcx, lode-bmpg)
• Privacy-bearing settings fallbacks log a WARNING instead of silently using library defaults (lode-xa5d)
• lode backfill with no connector is a uniform usage error (full help, exit 2); jira registers its connector explicitly like confluence (lode-pk54, lode-6hi3, lode-2uil)
• lode status dead-letter hints: split by job type, accurate self-healing claims, softened severity when all dead letters self-heal (lode-8vcq, lode-tix0, lode-tr3i)
• TUI help binding works under the Kitty keyboard protocol (Ctrl+Minus variants) (lode-av50)
• LLM provider: context-window-exceeded stop reason named explicitly in error hints (lode-cai6)
• CLI resolves settings once per invocation instead of twice (lode-bsga, lode-stxz, lode-up3w); EditScreen opens one DB connection per note open (lode-nnqp)

Internal / workflow

• TUI dedup: shared YesNoConfirmScreen and one .confirm-dialog tcss frame across eight modals (lode-1ip2, lode-f0qf)
• Nox gate buckets: three blessed tags with a registration gate and a staged builder/reviewer gate policy (lode-6ldh, lode-b9qy)
• Coding conventions: parenthesized multi-exception except fiat with a corpus-scan gate (lode-buay, lode-z1ig, lode-hk72); comment-style fiat plus the /comment-audit pipeline (auditor → veto → groomer) and a src/lode comment sweep (lode-e7tb, lode-js5g, lode-15qh, lode-fu4g, lode-zdqt)
• /land hardening: replay baselines nox -t fix and the everything-else bucket, machine faults stop the replay instead of bouncing innocent branches, MISTAKES.md filing reachable on every pass, lock token idiom harmonized (lode-lmu9, lode-mps0, lode-om7o, lode-k6h0, lode-fdod, lode-3cda, lode-xlcm)
• SHA-fabrication guards: validate-sha40.sh required at every review_head/land_head write site, mechanically gated (lode-0a4n, lode-uvjr)
• /sweep: full actionable list every pass; dependency-blocked human tickets surfaced report-only and excluded from the digest and statusline count (lode-8xl2, lode-csxh, lode-48gj, lode-7guf)
• Autonomous MISTAKES.md filing wired into every workflow stage (lode-v1rk); dangling-cross-reference checks pre-handoff (lode-nbh1)
• Test-suite hygiene: live-checkout escape hatches closed (lode-6hl9), xdist flakes fixed (lode-o7rt, lode-887o, lode-d7xw), CI runs without beads (lode-fqob), stale spike tests retired (lode-lr0y, lode-d1dt), shared git-repo helpers hoisted (lode-9egu)
• Link/docs gates: every tracked *.md scanned, slug regex drift fixed, one text cache per check (lode-act5, lode-6e9c, lode-d3k0)
• worktree-gc-sweep: --base-ref dropped; predicate divergence recorded as correct-by-design (lode-0867, lode-2132)
• update-deps.sh files a churn-evaluation ticket on green promotes (lode-i642)