v2.6.0

cogmem 2.6.0

Provenance hardening, an honest efficacy signal, and the verification surface.

Verifiable memory

• Issuer pinning — credentials, the transparency log, and the signed tree head are now pinned to a TOFU trust anchor ($COGMEM_HOME/trust.json); a chain re-signed under a foreign key is rejected.
• Key rotation — cogmem trust --rotate re-anchors to a new key while keeping prior DIDs trusted, so history still verifies.
• macOS Keychain custody (opt-in, config keychain: true) — moves the agent key out of the 0600 file into the login keychain.
• External transparency witness — cogmem witness keygen|trust|cosign|verify: a separate key co-signs the STH so the agent can't fork history alone.

Observability & evaluation

• cogmem doctor — end-to-end learning-loop health (daemon, API key, trust anchor, key custody, capture freshness, backlog).
• cogmem eval --outcomes — realized, non-circular recall efficacy from real-session feedback.

Robustness

• Guard tripwire matching bounded against ReDoS; daemon/recall socket reads capped.
• Consolidation dedup corpus bounded and scope-prioritized (no more unbounded-prompt cliff).
• Model IDs centralized in config; duplicated LLM helpers removed; portable hooks for Linux.

CI & docs

• CI now installs the real deps, runs all three suites, import-smokes the engine, and lints with ruff.
• COGMEM_HOME documented; PROVENANCE.md now in the repo; privacy and THREAT-MODEL claims corrected.

Full history regenerated in CHANGELOG.md.