v2.1.0

2.1.0 (2026-08-23)

Features

• auth: hierarchical scope-tag foundation — scope column + parity-proven visibility evaluator (default-off) (#316) (8e2af77)
• db: computed views for tenant counters behind STATS_VIEWS_ENABLED (95cf3bb)
• db: validate stack on SurrealDB 3.2.4, bump CI/dev pins, add prod cutover runbook (d5ee2a1)
• db: write-time derived-staleness event (0089) — closes the 0072 nightly-drain hole (9a8bcdf)
• provenance: char-span grounding quotes — deriver emit + mechanical anchoring + provenance API spans (#310) (4125f7b)
• search: trace-derived usage ranking factor — readCount as a bounded, default-off ranking signal (#314) (ee14fe6)
• security: memory-injection red-team suite + opt-in ingest unicode sanitization (#312) (4a05c5c)
• staleness: 0089 fact_staleness event — write-time derived-fact marking (f1b8cab)
• stats: 0088 computed count() views for tenant counters behind STATS_VIEWS_ENABLED (3bc1187)
• strategy: ReasoningBank-shape strategy-memory lane — separate store, k=1 advisory retrieval, distill + lifecycle cron (#313) (7a83ba4)
• synthesize: fact-lifecycle-gated answer cache — exact-match serving with check-on-read invalidation (#311) (51ebb53)
• synthesize: L3 confidence-gated escalation — full-session raw-context generation on verifier failure (#315) (f12f2b2)