Cuts the journal-access-API + cogitate-runtime architecture project (no external behavior change), security hardening (transfer-archive tarslip containment; journal config exclusive source for managed provider keys), and the journal-wide catalog fixes (web search restored, todos terminal-state guard, entity last-active local-day, owner-facing copy/terminology, convey UX polish). CHANGELOG drafted via the CMO changelog recipe; sensitive-content items (tarslip, provider-key exclusivity, network-access settings relocation) confirmed data-flow-neutral, shipped under founder autonomous-release authorization. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>