Menu bar restoration: all File/Edit/Mark/Object/View/Window/Help menus now appear on launch (previously Motion showed only the 'Motion' app menu because our onboarding bypass short-circuited Motion's menu restore chain). Bridge robustness: NSNull scrubber prevents null-in-params crashes across 200+ handlers, debug.eval rewritten to use KVC (fixes SIGSEGV on primitive-returning selectors like 'count'), Lua VM self-initializes + UTF-8 safe + 5s timeout, command.execute validates action type. New RPCs: window.list enumerates ALL windows (off-thread fallback when main thread is blocked), modal.dismiss accepts 'title' substring match and 'emergency: true' for [NSApp abortModal]. Expanded blocklist: pasteAsPlainText: (pointer-auth fault in OZEditTool snap timer).