v4.13.3
- chore(release): 4.13.3 — restore third-party inspection contract + lock it with a CI gate
- test(invariants): I2 allow-list — reheat writer shifted 177→182 by the lazy-psycopg guard block
- merge: fix/bare-container-contract — third-party inspection contract restored + blocking docker-smoke gate
- fix(docker): explicit-DATABASE_URL anti-silent-fallback boundary + stale tool count
- ci(docker): add blocking bare-container DB-less smoke gate
- fix(docker): restore the bare-container DB-less MCP contract (H4 root cause)
- docs(privacy): describe storage truthfully per surface — SQLite default (.mcpb/Cowork), PostgreSQL for the Claude Code plugin
- docs(readme): align tagline with the accountable-memory positioning
- fix(tests): exact-match URL assertions — resolves CodeQL incomplete-url-substring-sanitization (#97, #98)
Full Changelog: v4.13.2...v4.13.3