v4.6.2 — Autopilot money-safety, ARIA approval routing, and swap-gate fixes

Release-readiness pass on the 4.6 line: safer unattended trading, tighter agent approvals, and a corrected swap gate.

Autopilot money-safety

• Cluster is re-validated every tick; an armed mandate auto-holds on a devnet switch so devnet balances can't green-light a real mainnet spend.
• Crash-safe ledger: each tick claims its row before it swaps, and interrupted ticks are held for review on restart instead of being replayed into a double-buy.
• Exit rules are validated (no silently-dead stop-loss), unattended slippage and price impact are capped, and exits sell only the mandate's own position.

Agents and approvals

• ARIA approval and patch cards are tagged per session, so a card can never render in or leak an approval into the wrong conversation.
• The ARIA terminal backend no longer deadlocks on approvals; piped aria exits cleanly.
• Approval channels reject untrusted senders, leverage changes always require typed confirmation, and approval cards show all material fields.
• Bridge and ARIA file reads deny secret-bearing paths (.env, keypairs, key material) and resist symlink escapes; swarm lanes run with a minimal environment and can't push.

Swaps and Windows

• Price impact is normalized to a single unit end to end, so ordinary low-impact swaps are no longer wrongly blocked.
• claude:install-cli works on Windows, and the auth-login path quoting is hardened.

Docs

• CHANGELOG backfilled through 4.6.2, README feature list refreshed, and the execution fee meter documented.

Full gate green: typecheck, 1003 tests, and Windows/macOS/Linux builds.

Install

• Windows: DAEMON-setup.exe
• macOS: DAEMON-arm64.dmg / DAEMON-x64.dmg
• Linux: DAEMON.AppImage

SHA-256 checksums are attached per platform.