v2.4.0 — Documentation Honesty & Dead Code Cleanup

What Changed

Documentation Integrity

• Removed all false claims from README and 8 additional doc files
• Fabricated performance metrics (hardcoded aspirational constants) eliminated
• False security claims removed: no differential privacy, no encryption at rest, no GDPR/PCI/SOX compliance
• XGBoost and GNN properly labeled as optional/experimental (not core algorithms)
• Added Security Notice and Known Limitations sections to README

Dead Code Removed (-7,191 lines)

• server_v2.py — unused alternative entrypoint
• security.py — complete OWASP module never integrated into active server
• cli.py — standalone CLI with zero test coverage
• 8 misleading documentation files (PRD, security audits, integration guides)

New Features

• Prometheus metrics endpoint on port 9090 (configurable via FRAUD_DETECT_METRICS_PORT)
• Compliance dashboard bug fix (missing timezone import)

Test Improvements

• 20 broken tests fixed (FastMCP API migration + sandbox-safe temp paths)
• All 24 MCP tools now have test coverage
• Compliance integration tests strengthened with data assertions
• 831 tests passing, 88%+ coverage

Dependency Cleanup

• requirements.txt split: core (15 deps) / dev / optional
• ~35 unused dependencies moved out of core requirements
• setup.py synced with split requirements, added extras_require

CI Fix

• GitHub Actions now installs requirements-dev.txt (includes pytest)

What's Real

• 24 MCP tools (19 core + 5 defense compliance)
• Isolation Forest + Autoencoder ensemble (default pipeline)
• Behavioral biometrics (keystroke, mouse, touch)
• Agent-to-agent protection pipeline (6 classes)
• Defense compliance (insider threat, SIEM, cleared personnel, dashboard)
• NetworkX graph analysis
• 831 tests, 88%+ coverage