Model-aware capability discovery, public-safe filter-before-write collection, and the first privacy-safe application adapter for RyuDeck. Includes 19 diagnostic modules, expanded wiki/README coverage, Jupiter/Galileo validation, and 31 passing regression and safety tests.