v0.72.0: saved API drafts and original receipts

Saved API connections can now draft Planner Agent proposals. A planner selects a saved connection and model, previews the shared context and selected projects, and accepts the disclosure before a turn starts. A proposal opens its full payload for separate human approval. Approval runs through the original action registry, Delivery shows the original draft, and reopening recovers the original receipt without another provider call or business write. Drafts remain unsubmitted. Profile admission stays closed by default.

This release also carries the Next.js 16.4.2 security update (#368) for the advisories published October 22, 2026: GHSA-2464-fhr4-w9xw, GHSA-673q-mjm6-r5xr and GHSA-p3m5-59mp-jv5r, plus ip-address 10.7.4 for GHSA-rxp7-6hxx-x8q5. Self-hosted installations should upgrade.

Upgrade: apply 20261021215752_assistant_chat_turns.sql before deploying. The tree holds 430 migrations.

What was exercised

• Before publication, the repeat path gained an original-approval guard: repeating an unapproved proposal now refuses with 42501 instead of creating a new card. A new native case covers the refusal and the approved clone.
• The managed database received the chat migration once, after a fresh read-only database and Storage capture and passing reader and writer gates. Readback passes 35 of 35 catalogue criteria and the preservation check. History holds 431 rows with the 430 earlier rows unchanged. Admission is closed and the four chat tables are empty.
• Main aed7d0675f86 passes every recorded GitHub check, including QA, shuffled Vitest, live RLS, the upgrade path, ODM worker and nightly QA. The tag commit 6bf9f7ad8 adds only the changelog record; its tree is the one CI tested on #369.
• The hosted check signs in through the ordinary form and reaches Dashboard, Planner Agent Activity, Projects, Reports, Travel modeling, Plans and Grants at 1440px, opens the Planner Agent panel, and reaches Dashboard and Planner Agent Activity at 390px without horizontal overflow. It records zero console errors or warnings, zero page errors and zero HTTP 400-plus responses, with 36 aborted requests. Vercel reports no runtime errors from promotion through the check.

Limits

No chat turn, approval or business write ran on the hosted system, so hosted chat behavior is not accepted by this release. The database capture is not atomic, has not been restored and is not offsite. Two surviving mutations of the repeat guard are unreachable defense in depth. Full A0, all 19 contexts, real provider operation, complete M2c and separate nationwide AequilibraE and ActivitySim validation remain open. The Reports jurisdiction-readiness finding remains PARTIAL. See CHANGELOG.md for the complete candidate record.