[uncoalesced]

Phase 7.4 plus the 2026-11-04 security and benchmark pass. Version bumped to 0.2.4 across pyproject, __version__, plugin, Gemini and Hermes manifests and the lock. Tag v0.2.4 on main after merge to publish.

Changes

• Firewall: scrubber redacts well-known prefixed API keys in page text (GitHub, OpenAI/Anthropic, Stripe, AWS, Slack, Google, GitLab, Hugging Face, npm).
• Code Mode: out-of-memory errors are named; bad wire.* arguments throw at the script line.
• Security:
  • joserfc moved to 1.8.0 in uv.lock (CVE-2026-119284, transitive via fastmcp, code path unused).
  • 7 CodeQL py/incomplete-url-substring-sanitization host checks in 6 channel files now go through new channels.base.on_host (exact host or subdomain), with a test. The 5 test-only alerts were dismissed as false positives.
  • Dependabot waits 7 days before routine uv upgrades (zizmor clean).
• CI: pinned actions moved to their Node 24 majors (release.yml path untested until this tag).
• Docs:
  • README has new benchmark tables (16 pages, cold, including a Jina Reader comparison), refreshed Code Mode and install-cost numbers, and a new "Supply chain" section.
  • SECURITY.md has a "Supply chain" section and no longer lists the private-address limitation.

Verified

• 383 offline tests pass; ruff check and format are clean.
• pip-audit over all locked packages including extras: no known vulnerabilities.
• bandit: nothing at medium severity or above. zizmor: no findings.
• Both 0.2.3 PyPI files pass pypi-attestations verify against release.yml.

[uncoalesced]

Pass