v2.23.0

Added

• Publish a harness-neutral catalog maintenance entry point with a runnable
  fictional offline round, private frozen inputs and budgets, durable start
  receipts, one-use holdout accounting and resumable monthly reference reviews.
  Keep review dates genuine and proposal queues bounded; no recurring job,
  customer collection or automatic promotion is activated.
• Add documented Convex custom-domain routing, ImprovMX and Forward Email MX
  routing and SPF policy references, plus Forward Email's nonempty verification
  marker. Preserve record roles, related-host scope and existing suffix grammar;
  no additional probes or active-use claims.

Fixed

• Bound supplied maintenance evaluation files, aggregate bytes, directory work,
  JSON nesting and record counts before reduction or holdout consumption. Hash
  and decode the same admitted bytes and reject incomplete malformed inputs.

• Refresh development-only filelock and virtualenv security floors and locks
  for SQLite side-file handling, shell prompts and exclusive file creation.

• Replace global and suite-wide typing relaxations with exact owned scopes and
  a blocking audit that restores their diagnostics. Check JSON containers and
  OIDC endpoint values, type rate-limit snapshots and shared fixtures, and
  repair canonical test imports without changing ordinary lookup commands.

• Gate cross-slug catalog overlaps with shared synthetic witnesses and reviewed
  retained provenance, including equal patterns and differently written
  regexes. Require exact review dispositions for rule additions, retirements
  and claim/provenance edits while keeping source-check dates distinct from
  editorial changes.

• Characterize shared-response identity deductions and distinguish individual
  model-unit masks from complete source withdrawal. Preserve separately
  supported roles, conflicts and missing observations in offline regression
  cases; clarify explanation limits without changing inference parameters.

• Require current role-observation bindings and effective evidence before
  Bayesian assurance assertions. Repair vacuous grouping, sensitivity and
  conflict-band scenarios, retain generic-vendor negatives, and record a
  reproducible finite sensitivity receipt without changing model parameters.

• Bound batch tenant/name peer projection, token expansion and indexed
  ecosystem pair work independently of qualifying results. Preserve small
  groups and existing JSON array/wrapper shapes, and add explicit diagnostics
  for unavailable comparisons, filtering, truncation and unfinished search.

• Keep unrecorded historical delta sets distinct from explicitly empty arrays.
  Withhold unsupported service, slug and signal changes and report missing
  confidence/domain-count comparisons in the existing incomplete diagnostic.

• Match built-in CNAME motif provider domains at validated DNS-label boundaries
  so deceptive prefixes and appended domains cannot create provider-chain
  observations. Preserve ordered matching, queried-host provenance and legacy
  custom substring markers; custom domain markers can select dns_suffix.

Tool Surface Changes

Tool surface changes: no CLI command or flag changes. Batch JSON adds optional
correlation completeness diagnostics; existing array/wrapper shapes remain.
No MCP tool, resource or prompt names change. Private catalog maintenance
helpers require a source checkout and do not change ordinary lookup setup.