v0.12.1

Three silences in the protocol, each measured before it was named. An edit made through sed inside another actor's scope was asked nothing — the PostToolUse hook now reports it after the fact, with the card and its holder, and never joins the guard's hot path. Nothing said a newer Workfile existed while every check stayed green — upgrade and the footer now ask the registry once a day, and the security model states exactly what is sent and to whom. The trail said who closed a card and never what closed it — produced_by now rides beside the actor, self-reported and labelled so, on the trail line and as a countable field. Around them: every --json answer has a written shape, with the MCP envelope one variable away ahead of 0.13.0; show --fields reads one key of any record; and the stills and the Workflow picture show the shell that ships.

Added

• A card records what produced each write, beside who made it (T-0209)
• show --fields reads one key of any record without the body (T-0247)
• workfile upgrade and the footer say when a newer Workfile is published (T-0208)

Changed

• Every --json answer has a documented shape, and the MCP envelope is one variable away (T-0246)
• Every published still shows the shell that ships, and one run writes all of them (T-0205)
• The Workflow picture draws the four collections as one graph (T-0165)

Fixed

• The scope guard now reports edits made through Bash after the fact (T-0227)