v4.1.0
* refactor(knowledge): modularize KB and RAG internals * fix(release): accept holdout scenario evidence * fix(sources): correct HTTP provenance contract * chore(package): simplify dependencies and documentation * docs(sources): preserve HTTP fetch invariants