Development record

ultra-v0.6.8 altitude 1: the store redactor (internal/core/memory/redact.go) is applied at the Ingest call site only. fileBack in internal/core/memory/ask.go builds PageWrites from the host-delegated distiller's page and hands them to WritePages with no redaction, so a secret or an absolute home path the distiller echoes into a page body lands in the committed .abcd/memory store unscanned — GHSA-j5f5-phgm-9m73 one door over. Fix: redact inside WritePages, the single write primitive, so no PageWrite reaches disk unscanned; Ingest's per-body loop then collapses into it.