Proactive recall. A UserPromptSubmit hook pipes each prompt to munin context, which injects up to 3 high-confidence curated memory chunks as labeled background context — or stays completely silent. Off by default, enabled per project by registering the hook.
- Curated sources only: imported transcript text never auto-injects unless explicitly opted in (provenance flag, index schema 2)
- Boundary-escaped injection wrapper: retrieved text is data, never instructions; chunks cannot forge the block boundary
- No feedback loop:
munin importstrips injection blocks from transcripts - Fail-safe: any error means no injection and an untouched prompt — always exit 0, never a download, never a block
- Gates: tests 68/68, golden recall set 10/10, injection probes 8/8, median latency 0.803 s
This completes the Munin roadmap (M1–M5).