Agent Wiki 0.9.3 — runtime security and HTTPS hosting

Agent Wiki 0.9.3 patches the shipped dependency runtime and clarifies support for authenticated HTTPS hosting.

• Updates DOMPurify to 3.4.16 and KaTeX to 0.18.2.
• Uses OpenSSL 3.6.5 throughout the application runtime and SQLite 3.53.3 in both Node and Python. Removes unused Git interpreter extensions and enforces these properties in the package check.
• Clarifies operator responsibilities for authentication, logging, backups and recovery. Application permissions, optional per-identity MFA and persisted formats remain unchanged.

Source revision: 2155742d3b2ff64ba869fbe1799a4adcea7bf568.

The attached Linux/amd64 OCI package is qualified with source checks on macOS and Linux, the package check, a synthetic native upgrade from 0.9.2, and container adoption/replacement/backup-restore checks. Native host closure distribution is not published by this release.

Security scans remain nonempty. The signed security review reconciles all 24 reported runtime advisory/component pairs with exact source patches or product/platform mismatches. One unpatched npm advisory, affecting sprintf-js and three transitive dependents, remains outside the reviewed application execution paths. Read the attached security review, raw scans and provenance for the evidence and limitations; this is not a blanket clean-scan claim.

Verify the SSH-signed tag and signed asset checksums using the published release key, confirmed through a trusted maintainer channel. See packaging and upgrading, including the MFA restore boundary introduced in 0.9.0.