v0.75.0

What's Changed

• ci: run the unit suite as five pytest sessions so no worker outgrows the runner by @pacepace in #906
• backup: a restore drops COMMENT ON EXTENSION, which only the extension's owner may run (Yugabyte + Postgres, v0.75.0) by @pacepace in #905
• contain: a failed memory replace never writes twice, eleven broad handlers guard only the call they mean, and a call the registry fails is answered by @brookstalley in #903
• evals: the campaign page opens on a summary; the listing, page JSON and aspect label follow it by @brookstalley in #900
• testament: track the manifest, and test.sh hands its runs to the pool where testament is installed by @brookstalley in #902
• search: a transport failure says which HTTP status the provider answered with; core's retry error describes the last attempt by @brookstalley in #908
• evals: a rationed call is the provider's; a person's rating needs the host's word; a finding traces to its evidence; a holder's own writes keep its lease by @brookstalley in #907
• deps: security fixes, the lock brought current, and mcp 2.x / fastmcp 4.x with mcp 1.x still supported by @pacepace in #909
• search: a direct connection goes to the address the SSRF guard checked (DNS rebinding) by @brookstalley in #911
• evals: Brooks' post-#907 work — #848 person attestation for judge cases, #849 overload ownership, stable fingerprints, #910 floor recommendations by @pacepace in #913
• enforcement: jsonschema on 3tears-mcp's dependency floor is an owner ruling by @pacepace in #912
• agent-memory: a host read filter restricts every memory read inside the SQL by @pacepace in #915
• release: v0.75.0 by @pacepace in #914

Full Changelog: v0.74.0...v0.75.0