docs: release-parity sweep and evidence re-issue for v1.6

CHANGELOG [Unreleased] records the source-import hardening landing via
#154 (deterministic missing detection, denial-guard supersession,
generation-guarded finalization, keyset manifest paging, constant-time
finalized check). Skills reference documents the fast retrieval profile
and every engraphis_answer parameter; update-check docs state the opt-in
default the code actually has; README gains ENGRAPHIS_UPDATE_CHECK/_URL
rows, the new sync CLI surface, and the facade note; ARCHITECTURE_V3
qualifies schema-3 as historical; SYNC.md documents the shared-folder
workspace_name residual risk and append-only ledger growth. Skill-asset
manifest re-pinned; offline evidence artifact re-issued binding the
edited eval/grounded.py (numbers unchanged) across all pinned surfaces.

Author: Coding-Dev-Tools

.claude-plugin/skill-assets.sha256

@@ -2,5 +2,5 @@
 94bfa06317a8fe6a6a7e204bb70c5abdc9e4bbc34d79dd6f8447a30140bc8b85  .claude-plugin/plugin.json
 055655db84af07561d002f0c69744313d8413c39f3e873f941f0fa0b1e76dc66  skills/engraphis-memory/references/CONVENTIONS.md
 62019760766ff472a76a0f81437898f39e3c1fe2631732b7b7733e50c1ad837f  skills/engraphis-memory/references/SCOPING.md
-96c8e9b9cee1b3cb43c4bef9e48c57ed92af707f7f7a5d28d73b1ac247d2f0c6  skills/engraphis-memory/references/TOOLS.md
+449eb1428cac05e42d9ad0a7d816dc43f1acb67994f542935649d024c7b78623  skills/engraphis-memory/references/TOOLS.md
 0f98098df695b9a00dc78402911124ebf09a4a058f6c8bec2c6234ec61fac13a  skills/engraphis-memory/SKILL.md

BENCHMARKS.md

@@ -11,7 +11,7 @@ For the locked operator sequence for a public canonical run, see
 Every exact public aggregate retained below comes from the checked-in, public-safe
 [`offline-fixtures-v1.json`](docs/benchmark-evidence/offline-fixtures-v1.json) artifact. Its
 SHA-256 is
-`c3a74f1770ad3f868f55261ba11680e2dadca30167082ac2cb6669f9e3bdfad2`, also recorded in the
+`0f60b0868444f676fe14c5f94d7db2c475e22669930c4d760881d0842eaa6800`, also recorded in the
 adjacent `.sha256` file. The artifact contains no raw questions, answers, prompts, customer data,
 or per-record content fingerprints.
 

CHANGELOG.md

@@ -97,6 +97,9 @@ All notable changes to Engraphis are documented here. Format loosely follows
 - Added `docs/GRAPH_PERFORMANCE.md` documenting the two graph presentation profiles,
   worker layout, progressive rendering, and the 20,000-node / 200,000-relation safety
   ceilings.
+- Source-import manifest paging now uses keyset (cursor) pagination instead of OFFSET,
+  so concurrent writes during a source re-import can no longer skip or duplicate rows
+  mid-scan (PR #154).
 
 ### Fixed
 
@@ -131,9 +134,15 @@ All notable changes to Engraphis are documented here. Format loosely follows
   to register, instead of replaying the same broken asset response.
 - Existing Galaxy preferences migrate only the retired `48` orbital-separation default to `60`;
   deliberate custom values, including Gravity `0`, remain unchanged.
+- Source-import hardening lands via separate PR #154: deterministic missing-item detection
+  now guards an unknown baseline instead of reporting spurious misses, denial-guard
+  supersession binds digests computed from the parsed record rather than raw input,
+  import-job finalization is generation-guarded so a stale worker cannot finalize over a
+  newer attempt, and the finalized-state check completes in constant time.
 
 ### Security
 
+
 - HTTP error responses in `vault.py` and `service.py` no longer echo user-controlled paths back
   to the client, preventing filesystem structure leakage (SEC-001).
 - Graph visibility SQL helpers now use parameterized queries instead of `repr(float)` string

README.md

@@ -1,7 +1,8 @@
 # Engraphis v3 architecture
 
 This document is the design outline for the repo-graph, intent-native memory, resource-ingestion,
-retention-supervision, and privacy-receipt additions introduced with schema version 3.
+retention-supervision, and privacy-receipt additions introduced in the schema-3 era (the
+current schema version is 16).
 
 ```mermaid
 flowchart LR

docs/ARCHITECTURE_V3.md

@@ -109,7 +109,7 @@ the [memory write trust model](WRITE_REVIEW.md) and [recall recovery guide](RECA
 | Governance | `engraphis_promote` | Widens an explicitly approved memory's scope while preserving and linking its narrower history. |
 | Session | `engraphis_start_session` / `engraphis_end_session` | Starts or closes a work session. Exact retries are safe; `force_new=true` creates another session. |
 | Operations | `engraphis_stats` | Returns memory counts for health checks. |
-| Operations | `engraphis_check_update` | Refreshes the release cache and reports whether a newer version is available. |
+| Operations | `engraphis_check_update` | Refreshes the release cache and reports whether a newer version is available. Update checks are OFF unless `ENGRAPHIS_UPDATE_CHECK` is set to an affirmative value; `=0` keeps them off. |
 
 The classic recall, grounded, and answer tools (`engraphis_recall`,
 `engraphis_recall_grounded`, and the `engraphis_answer` alias) accept `planning="off"|"auto"`,

docs/MCP_TOOLS.md

@@ -110,6 +110,17 @@ has no hosted identity, seat, availability, support, or managed-storage guarante
 Folder caps, oversize omissions, and snapshot races are observable incomplete failures rather than
 successful partial backups.
 
+Anyone who can write to the shared folder can also choose the target `workspace_name`, so
+content arriving from a peer you do not control should be treated as untrusted: it is
+quarantined under local `trusted: false` provenance until you review and approve it.
+
+Operator note: the `operation_receipts`, `events`, and `audit` tables in the local SQLite
+database grow append-only by design - rows are hash-chained, and pruning them would break
+chain verification. Watch their size in the database file (for example with
+`sqlite3 engraphis.db "SELECT count(*) FROM operation_receipts"`) when planning capacity;
+the supported path for long-lived installations is archiving or rotating the whole database,
+not deleting rows.
+
 ## Merge semantics
 
 Sync exchanges bounded workspace snapshots and merges them deterministically. Existing

docs/SYNC.md

@@ -9,13 +9,13 @@
     "contains_per_record_fingerprints": false
   },
   "suite": {
-    "digest": "4d7e40607319cd4bf8caee3897f1e416dbe5b81998b37a7e4839409ee2923537",
+    "digest": "4bfdfd6ccdf34ff7daa7441b8e788371c31985efe031b6520a265ef11f71ed1b",
     "digest_method": "sha256(canonical compact JSON mapping each sorted path to its file SHA-256)",
     "files": {
       "eval/chunking_eval.py": "a16544353940c0a8c40cea3b9932d3399b35ea5994b809b78f5dbe4a952c467f",
       "eval/datasets/codemem.jsonl": "341313023c22850a2e14f02742b571ad1deca824f886a1654a59541304c01f3c",
       "eval/datasets/longdoc.jsonl": "7f5ade95e1f283d0db8cf78e53ed8995d3534f847e616d2c0005fd8da37ac790",
-      "eval/grounded.py": "a5dd62d10c079b0098917a4640315254c65a4f1d7d71d8c3a669f290a29277e5",
+      "eval/grounded.py": "75ba96a4427508f2718323d283f7889fc90901a6176f12c4b3518f1ede5d96dd",
       "eval/performance.py": "e17ea78095e4e592717bc5d9d8e34d55fd98c3fd28d1a8104a20c227d4d619c9"
     }
   },

docs/benchmark-evidence/offline-fixtures-v1.json

@@ -1 +1 @@
-c3a74f1770ad3f868f55261ba11680e2dadca30167082ac2cb6669f9e3bdfad2  offline-fixtures-v1.json
+0f60b0868444f676fe14c5f94d7db2c475e22669930c4d760881d0842eaa6800  offline-fixtures-v1.json