- Hardened environment redaction and added strict profile validation.
- Added schema-backed suite, result, known-defect and compact catalog models.
- Added safe dry-run/mock orchestration, lifecycle/client/VPS/health/assertion boundaries and deterministic evidence reports.
- Added exhaustive critical catalogs, stateful scenarios and pairwise secondary coverage.
- Added Windows PowerShell 5.1 dependency-free tests and separately gated user-run scripts.
- Added honest run-mode and implementation-status reporting, exact Stage 3.4 client arrays, an asynchronous shared process boundary, fixture-backed mock evidence, real preflight contracts, and a gated issue206 PROXY-to-BLOCK smoke.