v0.11.0

0.11.0

Added

• EXPLAIN_ERRORS_RAG_EMBED_BASE_URL and EXPLAIN_ERRORS_RAG_EMBED_API_KEY settings, so RAG embeddings can use a different provider than chat.
• Local embeddings backend (EXPLAIN_ERRORS_RAG_EMBED_BACKEND = "local") via the new local-embeddings extra, with all-MiniLM-L6-v2 as the default model. No embeddings API key needed.
• Index metadata (backend, model, dimension), with a one-time warning and traceback-only fallback when the index doesn't match the current settings.
• Clear EmbeddingsNotSupportedError when RAG is pointed at Anthropic, which has no embeddings endpoint.
• README Privacy section documenting what is sent where, redaction behavior and limits, and telemetry.
• Manual real-embeddings workflow for verifying the local backend against a real model.

Changed

• An embeddings API key is now required when the embeddings base URL differs from the chat base URL. The chat key is never sent to a different host.
• README reorganized: features list, section order, and Anthropic RAG options.

Fixed

• Redactor now catches suffixed secret names (SECRET_KEY, AWS_SECRET_ACCESS_KEY), quoted dict keys, whole quoted values, URL credentials, and common API key shapes. Non-secret Django settings like AUTH_USER_MODEL are never redacted.
• Production Safety no longer claims local variables are sent.
• Test suite works with openai 3.x (httpx2).