v2.5.0 — audit-repair release: retrieval honesty, write integrity, ops hardening

Highlights

Retrieval honesty — anchor-ratio demotion (weighted-idf-4-anchor) stops sentence-form queries from rewarding noise n-grams on small corpora; closed-class stop words can no longer masquerade as rare content terms; single-char aliases (妈/她) no longer get noise-suppressed, so colloquial queries finally reach core events.

Write integrity — MCP write tools no longer report false isError on in-flight captures (no more retry → duplicate records); ledger repair trust rules rewritten (attachment-only links preserved, no disposition flips); version chains now cover decision records.

Ops hardening — CLI reads are capture-gated like MCP (--capture-id or --maintenance); install_mcp refuses to hijack a live registration tree; backup_archive --no-cloud; dangling entity links now surface instead of vanishing.

Followups — official closure channel resolve_followup (13th MCP tool) with optional answer-capture binding; missing source/expiry fields now remind instead of silently passing.

On-demand hypotheses — causal hypotheses load only when query terms hit, not on every read.

Tests: 113 → 171 green · CI ubuntu/windows × py3.10/3.13 · wheel byte-identical to source.

中文

审计修复版本：检索诚实性（锚定比值降权、停用词降权、单字别名豁免）、写入一致性（写工具不再误报 isError、台账修复信任规则重写、decision 版本链）、运维加固（CLI 读闸门对齐、install_mcp 防劫持、备份 --no-cloud）、回访闭环（resolve_followup 第 13 个 MCP 工具，可绑定回答原话）。因果假设改为按需加载。完整清单见 CHANGELOG。

Full Changelog: v2.4.1-pre-2500-repair...v2.5.0