v0.2.0 — engineering surface

Phase B hardening for Cadence (healthcare-deep-memory-agents).

Live: https://cadence-healthcare.vercel.app/

Included

• Root MIT LICENSE
• Honest SECURITY.md: Groq live chat, browser-only share codes, no HIPAA claim
• XSS fix: companion / timeline innerHTML now HTML-encodes
• faiss-cpu removed (never imported)
• Injectable DeepMemory embedder + lazy ollama import so CI stays torch-free
• pytest: consent grants, patient-scoped memory, keyword routing, clinician brief/note (25 tests)
• Playwright Chromium smokes: hero, demo fallback, share code → visit brief
• GitHub Actions: Python 3.11 unit + Node 22 e2e
• Dependabot: pip + npm + github-actions, patch/minor grouped, majors ignored

Honest notes

• Public UI is not the local Ollama memory engine
• Vercel env is still named OPENAI_API_KEY and holds a Groq key
• Educational prototype only — never real PHI