Raised .lw-status-bar z-index from 10 to 1001; the status bar's stacking context was bounding the popover's z-index: 10100 below the tile-layer (1000).
Flags qa-feedback, system-index, and graph-visual-inventory tiles as requiresDevMode: true; renames command-deck-section label and 3 i18n strings to "Keyboard Shortcuts."
Adds developer.devMode boolean (schema v94) to settings, wires requiresDevMode filtering to the Tiles popover, and delivers a verified toggle in Advanced settings.
Closes Phase 4. Wires the silence/abstention path into search and context, and verifies the full pipeline end-to-end against the dev vault.
Builds the full retrieval pipeline: trace writing to DB, ContextPacket assembly, and the cerebra context command end-to-end.
PolicyOverviewCard and PolicyValidateCard land the final phase of ADR-008, giving the desktop dashboard a full policy management surface alongside two new Tauri commands.
Enforced noUncheckedIndexedAccess across the UI, added mock fallbacks so browser preview loads without Tauri, and added offset-based pagination to report list and audit list.
Established the contract layer for all CLI output shapes with Draft-07 JSON Schemas, paired mock fixtures for browser preview, and split the monolithic types.ts into 12 domain-scoped modules.
Six new command groups — scan, git, integrity, lockdown/preserve/clearance, and policy — expose the full Tier 1 feature set from the terminal.
Per-project overrides, a dry-run simulator, an audit history replayer, and a structural validator make policy authoring safe and testable before deployment.
A dedicated scan engine combines Shannon-entropy string detection with a pattern library covering API keys, tokens, and credentials across major providers.
Policy Scout can now install a pre-commit hook that checks staged files before each commit and detect lockfile tampering between commits.
One-command lockdown, YAML-driven runbooks per threat class, and evidence preservation land as a structured incident response layer.
Policy Scout now verifies SHA-256 checksums of its own bundled data files at startup, catching tampered registries before any decision is made.
Every JSONL audit entry now carries a cryptographic chain so any deletion or alteration of past records is detectable before a security review.
Replaces the Motion spoke stub with a live toggle for reduce motion and a classification-grouped effect safety reference (safe/low/moderate).
Replaces the Type spoke stub with 3 live typography role cards (display/body/mono) reading from typographyRegistry.
Wired the existing exportGlobalThemeOverrideBundle to a real download flow. Export sub-area now shows a reactive button that enables when global overrides exist.
Replaced 11 arc-number-bleed strings with user-language equivalents; removed 3 standalone gwells debug console.log calls.
Embeddings, lexical FTS, graph store, artifact store, index-state, and event-driven freshness shipped. Vault re-embedded with mxbai-embed-large-v1 (1024-dim). Vector retrieval verified across 8 queries; 0.21 discrimination gap, 0 parse failures, sensible rankings throughout.