docs: land the ruled caveat sentence + fix the signing-default contradiction

docs(roadmap): annotate Position C's "the song does not" rather than harmonising it

docs(roadmap): run provenance added to Next; output grounding shipped; model-agnosticism amended

fix(provenance): an artifact could still name a Merkle root the tree never had

build(deps): clear all six open advisories, floors raised to the first fixed release

docs(demo): delete two safety-property comments whose properties moved into code

test(lint): two structural checks nobody has to remember to run

fix(validator): a counter leaf recorded the provider it was configured with, not the one that produced it

fix(plugin): a shared message promised a fallback only one of its two callers performed

fix(cli): pcis search dead-ends without Ollama — make the message legible and the claim true

refactor(display): derive every status-bearing element from the value it describes

fix(integrity): make a comment's safety claim fail the suite when it stops being true

fix(boot): the fix reproduced the defect it fixed — two survivors

feat(provenance): trace retrieval at the three emitters — the feature goes live

refactor(provenance): remove private-system references from the public surface

feat(provenance): append-only provenance ledger (no hash chain, by decision)

test: stop test_telegram_notify poisoning sys.modules for later tests

test: track test_crypto_parity.py

feat(provenance): ProvenanceRecord v0.2 + verified retrieval trace (no journal yet)

fix(demo): close str(e) privacy leak in the last two generic-500 branches

fix(demo): harden per pre-push review — belief/history truncation, pluralization, UTC, generic-500 hygiene

fix(demo): close the remaining 4 cold-read cosmetics (Merkle tile, date, boot copy, boot layout)

fix(demo): dashboard cosmetics from the cold read

fix(demo): /api/run-validation degrades gracefully when Ollama is unreachable

fix(demo): /api/ingest degrades gracefully when Ollama is unreachable

fix(demo): wire COUNTER leaves to CONTRADICTS synapses so the belief panel sees challenges

setup: note the expected "could not connect to ollama server" on first run

demo: reframe the ablation around substance — the note grounds the challenge, it doesn't find the plant

demo: recover scrambled leaf-ids + stop --live running a silent ablation

fix(demo): friendly Ollama guard on --live; parse_counters mangles no more temp-0.7 output

fix(windows): step 2 runs the integrity check from $REPO with relative paths

debug(windows): PCIS_DEBUG=1 prints step 2's captured bytes (od -c) + inline-python stderr

fix(windows): strip CR from captured Python stdout so start_demo step 2 stops false-failing

tools: add scripts/diagnose_demo_tree.sh for the Windows demo-tree integrity failure

test(cp1251): entry-point coverage for verify.sh and run_demo.sh

fix(cp1251): encode the two .sh-embedded tree reads; test the real start_demo entry point