LLM Wiki v2.0.7 makes provider consent and embedding-cache isolation fail closed.
Fixed
- New or switched embedding providers stay lexical until an approved run includes
--approve-embedding-build. - Successful approval persists only a SHA-256 provider fingerprint; raw custom endpoints, URL credentials, signed query tokens, and provider response bodies are never written to new cache rows or echoed in fallback warnings.
- Cache version 2 and mixed v2/v3 files are treated as legacy and require an approved delete/rebuild, removing raw endpoint metadata written by earlier releases.
- Same-provider searches automatically embed only new or changed sections after the initial approval, including one-section wikis.
- Added 19 provider-consent, cache-migration, provider-switch, incremental-update, and credential-redaction regressions.
Lexical retrieval remains local-only and unchanged.