v1.11.4 — Gov hardening · RAG for everyone · better session sharing

v1.11.4

AskSage / government

• Lockdown enforced server-side, fail-closed: every maker, checker, and built-agent turn routes through the accredited gov gateway (it was renderer-only, so it could silently fall back to a direct model on relaunch or an omp respawn).
• Per-chat-session CUI vs Search mode — a CUI session blocks all public web search/egress to prevent spillage; a Search session can search while still gov-routed.
• A violet CUI banner, a DoD/STIG Notice & Consent banner (gov-gated, per launch), and the AskSage Datasets picker restored to the titlebar.
• New GPT-5.6 gov models (luna / sol / terra); the RAG route defaults to gpt-5.6-luna.

RAG for non-AskSage users

• A knowledge_search tool lets any model (Claude / GPT / local) ground on your own notes — an Obsidian vault, folders, or imported chat history — lexical today, and semantic via bring-your-own embeddings (a local Ollama for air-gap, or your OpenAI/Azure key; no bundled weights). New "Semantic search" settings card with a Test-endpoint probe + Re-index.

Everyday

• Settings → Clone a git repo now clones private repos headlessly (a host token, incl. a vault-stored PAT), like the agent does.
• The shared-session viewer now shows the host's thinking + tool calls (not just the final answer), and the watch window fills the app.

Installers (Windows .exe, macOS .zip/.pkg, Linux AppImage/.deb/.rpm) attach below once the build finishes; existing installs auto-update via electron-updater.

🤖 Release notes by Claude Code.