Project Corpus 2.2.0

Project Corpus 2.2.0 adds optional Context Intelligence to the Python Runtime. Project Corpus Protocol remains 2.0, Markdown-first, and usable manually without Runtime.

• Rebuildable policy-scoped SQLite provenance index without stored source text; native confined cache publication rejects link and reparse escapes.
• Deterministic lexical, authority, and temporal retrieval with exact source references; explicit supersession and cycle diagnostics.
• Context Bundle/Receipt v1 with a full-corpus snapshot digest, bounded selected-source map, mandatory primary-read pointers, and a 65,536-byte canonical JSON envelope ceiling.
• Evidence-bound candidate validation, Memory Doctor, and deterministic CorpusEval with separate retrieval and bundle checks.
• context CLI commands and capability-gated read-only stdio MCP tools.

Existing Protocol V2 corpora and manual workflows remain compatible. The runtime has no new third-party dependencies. Context output is non-authoritative and requires primary-source readback; candidates are never promoted automatically. Retrieval is lexical and local, without embeddings, an LLM judge, graph database, or network service. max_tokens estimates excerpt text only; the separate envelope byte ceiling bounds canonical JSON.

Qualified commit: 95f22ec2a7caa73332ed4d11ee1f4e44152b9c34. The six-platform/Python CI matrix and release qualification passed. The full local-history P10 gate reproduced only the exact 13 documented, non-secret legacy findings under the Owner's narrow exception; it found no credential, token, private-key, or embedded-credential finding.