Clean public release after removing internal prompt artifacts from the file tree and Cursor co-author trailers from reachable commit history. Validation gate passed: 293 tests, Docker/Compose validation, repo and policy checks, bandit, pip-audit, CodeQL/Gitleaks/Trivy/SBOM workflows. Checksums are unsigned.