v0.1.0-alpha.248

What's Changed

• WP14 messaging: enforce participant-only read/post with an access policy by @jonesrussell in #1734
• WP15 bimaaji: run SovereigntyGuardrails in MutationValidator (close the live-path bypass) by @jonesrussell in #1735
• WP16 entity-storage: thread the kernel access handler so getQuery() is fail-closed (#1714) by @jonesrussell in #1736
• WP17: remove superseded duplicate OIDC Http/ Discovery+JWKS controllers (dead code) by @jonesrussell in #1737
• WP17: remove dead legacy MCP controller stack (#1642) by @jonesrussell in #1738
• WP18: retract dead McpController-stack docs + unimplemented MCP field-redaction contract by @jonesrussell in #1739
• WP18: settle MCP field-redaction finding — /mcp enforces field access (no leak), marker is post-beta by @jonesrussell in #1740
• WP18: label three built-but-unwired features honestly (inertia partial-reload, note-ingestion, ingestion pkg) by @jonesrussell in #1741
• WP18: note ai-observability trace recording is dormant (no producer) by @jonesrussell in #1744
• WP18: README claim-mismatch sweep (geo, validation, github, http-client) by @jonesrussell in #1745

Full Changelog: v0.1.0-alpha.247...v0.1.0-alpha.248