v5.10.6

What's Changed

• fix(dashboard): quarantine bulk selection drops items that left the pending list (#831) by @TARSDrakon in #833
• fix(update): read Guard posture without writing; unreadable config is unknown (#773 follow-up) by @TARSDrakon in #782
• fix(cli): --help is a real gate for every dispatched command (#767) by @TARSDrakon in #771
• test(embeddings): 400ms worker-disposal scenarios no longer assume a fast thread start (#624) by @TARSDrakon in #841
• docs(config): enforce-when-ready copy qualifies Hermes by its own SHIELDCORTEX_ENFORCE setting by @TARSDrakon in #842
• ci: run the docs-contract node:test files on the Linux job (#843) by @TARSDrakon in #844
• fix(database): key the displaced startup lock by one path per database (#837) by @TARSDrakon in #851
• test(defence): re-measure #86-redos scaling ratios before failing (#845) by @TARSDrakon in #846
• ci: fail the docs-contract step when a contract drops out of the glob (#847) by @TARSDrakon in #850
• fix(lease): the guard no longer refuses its own session's lease (#854) by @TARSDrakon in #856
• docs(cli): list every dispatched command in the top-level --help (#777) by @TARSDrakon in #849
• fix(doctor): #651 warning hygiene (partial) — Hermes absence is INFO only on positive evidence by @TARSDrakon in #852
• fix(api): restore the 5.6.0 public sensitivity shapes (5.7.0 compat) by @TARSDrakon in #859
• fix(doctor): warn, not fail, when every ledger problem is the legacy project backfill and the #674 trigger is present (#834) by @CASE-Drakon in #836
• fix(retry-control): retain pending denial identities for 48 hours (#682) by @TARSDrakon in #700
• fix(consolidate): keep every deleted duplicate's tags when pairs share a survivor (#860) by @TARSDrakon in #862
• revert(api): keep the 5.7.0–5.10.5 public SensitivityLevel in 5.x (revert #859) by @TARSDrakon in #864
• docs(readme): the Hermes plugin enforces on its own setting, not the shared Action Guard switch by @TARSDrakon in #865
• fix(cli): help gate follows each value flag's real occurrence model (#838) by @TARSDrakon in #869
• fix(capture): raise a redacted PERSONAL prompt to CONFIDENTIAL (#858) by @TARSDrakon in #867
• release: v5.10.6 by @TARSDrakon in #863

Full Changelog: v5.10.5...v5.10.6