fix(experiments): fix snapshot PAD/impulse collection errors

fix(auth): classify get_user errors properly — remove unreachable except branch

test: add coverage for core/encryption (79%) and core/auth_manager (72%)

research: add cognitive continuity (Exp 1) and memory robustness (Exp 2) experiment scripts

ci: add backend/core coverage gate (--cov-fail-under=20)

build: rebuild frontend dist

ci: add GitHub Actions (ruff F401/F811/F841 + pytest), drop legacy main_stable.py

refactor: remove dead code and unused imports across backend

fix(session_manager): thread-safe session storage + remove dead code

test(load): 50 concurrent sessions — изоляция, no-leak, валидный JSON (Phase C DoD)

A1-A3: контракты результата pipeline + RAG DecisionLayer

feat(session): make SessionManager a cache over Supabase Auth (Phase C4 complete)

test(impulse): add test for session isolation of Impulse Core (Phase C3 complete)

feat(workspace): implement active MemoryDecisionLayer filter for Active Path integration (ADR-0010)

feat(frontend): add Memory Analytics tab to Research platform for visual monitoring of Memory Decision Layer shadow stats

feat(api): add /api/v1/memory/shadow/stats endpoint for Memory Decision Layer analytics

feat(workspace): implement non-intrusive ShadowMemoryMonitor for Memory Decision Layer (ADR-0010)

docs(adr): add ADR-0010 for lightweight Memory Decision Layer based on memory research conclusions

research: add Real Memory Replay Experiment (Experiment 7) and final research conclusions report 16_memory_research_conclusions.md

research: add Memory Decision & Reranking Experiment (Experiment 6) and report 16_memory_decision_experiment.md

research: add Semantic Adversarial Retrieval & Needle-in-a-Haystack experiment (Experiment 5) and report 15_semantic_memory_selection.md

research: add Memory Selection Experiment (Experiment 4) and report 14_memory_selection_experiment.md

feat(workspace): implement Composite Cognitive Workspace (Phase D'-1 to D'-5 complete)

docs: document prod OpenRouter 401 'User not found' incident (damaged key + ENCRYPTION_KEY mismatch)

Merge feature/memory-d1-instrumentation into main

feat(logging): mask API keys in provider decryption logs + tests

fix(impulse): persist per-session state to data/ and ignore runtime artifacts

fix(tests): green full suite — repair pre-existing failures & collection

feat(memory): D'-3 lifecycle & forgetting — unified TTL/quota/importance eviction