## avifenesh/memra — v0.93.0…v0.94.0

_30 commits._

### Features
- **boundary: the gate had no rule for CREDENTIAL material — add the four classes this project issues** (274f378)
- **data: second full ref scan (187 refs, heads AND tags) — 174 new, and both defect fixes reproduce the audit's headline findings** (2f7c34c)

### Fixes
- **merge: lane/gemma-oracle-20260819 @ 78353d5e24 — MEMRA_FAST=0 illegal-address fix: matmul_pre guarded six raw-f32 arms and missed the seventh (!uses_q8_1_fast -> self.matmul), the only arm MEMRA_FAST=0 opens; now refuses loudly, and the batched gemma-4 arm materializes the f32 only under MEMRA_FAST=0 via rms_norm_decode (bit-identical to rms_norm_q8_1's reduction). Daily path bit-unchanged 3/3. SCOPE: verified on gemma-4-12B Q4_0, NOT the served 31B Q6_K.** (fc6e33d)
- **fix: rule-scope the boundary allowlist, report every matching rule worst-first, and scan every published ref** (fed7517)
- **exact(gemma): name the prefill program out loud, fix the MEMRA_Q4F16=1 footgun, add KV-prefix digests, and seam the t>sliding_window collapse** (6d42bc9)
- **fix: scan published refs under the current boundary policy, and hide paths in public logs** (69475ad)
- **fix: public-boundary — detect host destinations and the rest of the cloud inventory** (3934f18)
- **fix: the attention output-gate layout is a declared per-arch property, not a deny-list default** (d8fb006)
- **fix: an unknown pre-tokenizer is a hard load error, not one stderr line and wrong ids** (07559d9)

### Backend
- **battery rows: v0.94.0 re-gate after the origin/main fold — 9/9 above rolling median, one quiet window** (43bd1af)
- **check-flags: close both halves of the hole that hid MEMRA_ALLOW_UNKNOWN_PRETOKENIZER** (17e9f51)
- **Merge origin/main @ 274f378faf — credential-material rules, re-expressed rule-scoped** (e7ed8c1)
- **release: v0.94.0 candidate — security tooling + engine/server hardening train; version + internal pins** (c701779)
- **data: v0.94.0 candidate battery rows (local 5090, quiet window, 9/9 cells)** (377c494)
- **boundary: pin the bare-pod-id false positive the merge exposed (NVIDIA CMS uuids)** (bcd8a49)
- **server: log every engine fault where it is constructed, not at 27 call sites** (225efc6)
- **merge: lane/flags-docs-20260819 @ 0143fbd051 — docs only: 124 previously-undocumented MEMRA_* flags catalogued (546 read-site census, 0 stale), footguns marked** (2b2395d)
- **merge: lane/engine-hardening-20260819 @ d8fb006489 — unknown GGUF pretokenizer is a hard load error (gemma-4's absent `pre` explicitly allowlisted after a tensor-census audit), attn_out_gate() per-arch exhaustive declaration + read-site bounds check (compute-sanitizer: 51 invalid reads before, 0 after). Lane owed the perf battery; this train runs it.** (c4cfb77)
- **merge: lane/hermes-fixes-20260819 @ 863a379bbf — six security/robustness fixes (tooluse parser depth cap, 192 MiB body limit + clean 413, GIF decode-bomb bound, prompt_ids vocab check, capture.rs symlink guard, bare pod-id regex)** (b920aaf)
- **merge: lane/boundary-refs-p0-20260819 @ 2f7c34c2b2 — all-refs boundary audit, three missing scanner rules (aws_resource_id/cr-/subnet-/ami-), rule-scoped allowlist, severity-ordered all-rules reporting (29 tests; 66 findings pinned unremediated by owner decision)** (e9ca96b)
- **exact(gemma): give the Stage-A oracle a real activation — MEMRA_FAST=0 no longer reads out of bounds on dense gemma-4** (78353d5)
- **boundary: catch BARE 14-char pod ids (hermes: keyword-anchored rule missed naked ids)** (863a379)
- **server: refuse symlinked or foreign-owned MEMRA_CAPTURE_DIR before the 0750 chmod (hermes: set_permissions follows symlinks)** (a6b8a5d)
- **server: bound client prompt_ids by the model vocabulary at intake (hermes: OOV ids reached the embed gather)** (5ec94b9)
- **engine: bound the GIF video decode (hermes: pre-admission decode-bomb in the HTTP handler)** (cc1aa59)
- **server: explicit 192 MiB body ceiling on all inference routes (hermes: axum 2 MiB default capped the advertised surface)** (b5585f5)
- **server: depth-cap the gemma tooluse value parser (hermes: unbounded mutual recursion on model output)** (ac19834)

### Docs
- **docs: v0.94.0 truth pass — the three surfaces the merged lanes changed and did not document** (25d2bff)
- **docs: FLAGS.md drift audit vs v0.92.0 code — catalog the 124 read-site flags the residue policy had accumulated** (0143fbd)

### Chore
- **chore: rustfmt the lane base (formatting only, no behaviour)** (0ce89d8)

_Recap by [Repo Wrapped](https://repowrapped.com/gh/avifenesh/memra?utm_source=github-action)._