v0.1.0-alpha.255

What's Changed

• fix(graphql): R12 — close the static-schema-cache cross-account access bypass (security, A10) by @jonesrussell in #1900
• fix(admin-surface): R13 WP1 — gate list filter/sort field names through field-level access (security, A11) by @jonesrussell in #1901
• fix(api): R13 WP2 sanitize text_long richtext server-side to close cross-admin stored XSS (security, audit A11) by @jonesrussell in #1902
• fix(api): R14 gate list filter/sort fields through field-level access (security, audit A11) by @jonesrussell in #1903
• fix(genealogy): m-a extend living-person concealment to family/event, unify redacted placeholder (security) by @jonesrussell in #1904
• fix(graphql): R15 structural filter/sort field allowlist on resolveList (security, audit A11) by @jonesrussell in #1905
• fix(northcloud): bind the dead response cache, reject non-2xx as success, inject LoggerInterface by @jonesrussell in #1906
• fix(ai-vector): ship ServiceProvider (fixes semantic:warm/refresh crash) + gate EntityEmbedder::searchSimilar by @jonesrussell in #1907
• fix(cli): queue:retry keeps the failed job until dispatch succeeds (data-loss, audit A7 F5) by @jonesrussell in #1908
• fix(ai-agent): ai:purge-runs only deletes terminal runs, guarding queued/awaiting_approval rows (audit A7 F8) by @jonesrussell in #1909
• fix(cli): schedule:run exits nonzero when any due task fails (ops-safety, audit A7 F9) by @jonesrussell in #1910
• fix(cli): ingest:run normalizes non-Latin-script keys instead of collapsing them to empty (Indigenous orthography, audit A7 F7) by @jonesrussell in #1911
• fix(cli): audit:prune self-audit records the real deleted_count, not the kind-filtered match count (audit-integrity, audit A7 F10) by @jonesrussell in #1912
• chore(cli): delete orphan AbstractMakeCommand, superseded by AbstractMakeHandler (dead code, audit A7 F16) by @jonesrussell in #1913
• fix(telescope): make request recording best-effort (#1915, R16) by @jonesrussell in #1916
• fix(api): QueueController::retry() dispatches before forgetting failed record (#1915, R16) by @jonesrussell in #1917
• fix(seo): scrub invalid-UTF-8 entity labels before JSON-LD emission (#1915, R16) by @jonesrussell in #1918
• fix(workflows): WorkflowVisibility::isEntityPublic fails closed on missing status key (#1915, R16) by @jonesrussell in #1919
• fix(frankenphp): checksum-unavailable install now fails closed with explicit opt-out (#1915, R16) by @jonesrussell in #1922
• fix(wayfinding): stop rebuilding the anchor catalog per request (#1915, R16) by @jonesrussell in #1923
• fix(messaging): seed thread creator as participant (#1915, R16) by @jonesrussell in #1924
• fix(config): ConfigManager import fails fast; FileStorage writes atomically (#1915, R16) by @jonesrussell in #1925
• fix(search): access-filtered pagination shares one basis (#1915, R16) by @jonesrussell in #1926
• fix(#1920): CW-v1 WP-0 — permission-gate publication (status/workflow_state) by @jonesrussell in #1927
• docs(#1915, #1920): changelog for the R16 batch + CW-v1 WP-0 by @jonesrussell in #1928

Full Changelog: v0.1.0-alpha.254...v0.1.0-alpha.255