v2026.6.8

Added

• cleo doctor repair [--role <role>] [--dry-run] — malformed-DB recovery entry point that wraps the existing recover pipeline (quick_check → quarantine → restore-from-VACUUM-snapshot → re-quick_check), including the *.db-wal malformed case, giving operators a single repair verb (DHQ-060). (provenance: T11829; #980)
• docs.read core-SDK API — readDoc(slug) → typed DocReadResponse (decoded body + full provenance frontmatter; UTF-8 or base64 for binary blobs), a derived docs_wikilinks edge table (supersedes + relatedTasks + topics), and bidirectional cleo docs graph --backlinks with shares-topic doc↔doc edges — the live-view foundation for the docs SSoT. (provenance: T11825; #981)
• cleo docs fetch <slug> --content (alias --decoded) emits the decoded UTF-8 document body to stdout (default still returns the LAFS envelope), and cleo docs add --content "<text>" / --content - enable inline & stdin authoring without a pre-existing file (DHQ-017 / DHQ-056). (provenance: T10970; #982)

Changed

• Exodus on-open data-continuity gate now surfaces an abort to mutating callers: an exodusAbort marker + typed event on the re-opened handle, and assertWriteDurable() / ExodusAbortWriteUnsafeError (E_EXODUS_ABORT_WRITE_UNSAFE) reject on the write path while read opens never throw — closing the silent write-rollback gap where a rolled-back mutation returned success-shaped output (DHQ-059). (provenance: T11828; #979)

Docs

• ADR cross-store reconciliation: 20 disk-only ADRs, the canonical ADR-policy adr-090-canonical-adr-policy, and adr-076 + amendment AMD-002 ingested into the cleo.db docs SSoT; the two adr-079-r1 / adr-079-r2 tombstone forwarding stubs removed. (provenance: T11676; #977)