Wire get_graph_depth() into 5 internal investigator queries (R-5, partial)

Wire get_cache_ttl() into _STATS_TTL and _VERIFY_TTL (R-5, partial)

Extend provenance badges to search results (D8)

Add provenance badges to the entity profile view (D8)

Migrate admin-secret generation to try the OS keychain first (D6)

fix: desktop-mode-adapt dossier output; unify 3 hardcoded copies of its path (P-1)

fix: centralize + desktop-mode-adapt the logs directory (P-1)

feat(D1): local config-file loading + desktop-mode admin-auth hardening

cleanup(input_validator): remove dead ALLOWED_CHARS regex

fix: version-string drift (F-8) and dead ALLOWED_CHARS regex (F-9)

fix(timeline route): invalid Cypher syntax '{id: }' and bare LIMIT

fix(forensics route): invalid Cypher syntax '{id:}' in 3 query blocks

fix(risk route): invalid Cypher syntax + wrong field names in 3 Phase-34 blocks

fix(search): remove dead 'pressrelease' LABEL_QUERIES branch

chore: bump version to 0.36.0 -- Phase 35 complete

chore: bump version to 0.35.0 -- Phase 34 complete

feat(phase-34): register forensics, self_learning, case_memory routers

feat(phase-34): add api/routes/case_memory.py with 3 endpoints

feat(phase-34): add api/routes/self_learning.py with 4 endpoints

feat(phase-34): add api/routes/forensics.py with 5 endpoints

feat(phase-34): wire BenfordsAnalyzer + GhostCompanyDetector + ShadowDirectorDetector into risk scorer

chore: bump version to 0.34.0 -- Phase 33 complete

feat(phase-33): register timeline.router in api/main.py

feat(phase-33): add api/routes/timeline.py with 2 endpoints

feat(phase-33): add 4 graph analytics endpoints to api/routes/graph.py

chore: bump version to 0.33.0 -- Phase 32 complete

feat(phase-32): load AliasGraph at startup + register resolve.router

feat(phase-32): add AliasGraph import and singleton to api/main.py

feat(phase-32): register resolve.router in api/main.py

feat(phase-32): add api/routes/resolve.py with 4 endpoints

fix(M-09): confirm dirname guard in save_json; bump version to 0.32.0

fix(NEW-3): expand _FEED_LABELS from 6 to 14 node types

fix(B-01): define _stats_lock -- NameError crashed GET /stats on every call

fix(BACKEND-2): add threading.Lock for _stats_cache -- prevents concurrent full-graph scans

chore: bump version to 0.31.5 -- Sprint 7 complete (31 commits, 30+ bugs fixed)

fix(SEARCH-2,SEARCH-3): add datagov/crimereport filter buttons; add Arabic script U+0600-U+06FF to ALLOWED_CHARS for Urdu/Sindhi search

fix(SEARCH-1): call setup_schema() in API lifespan startup -- fulltext index created on fresh deployment without waiting for daily scrape

fix(BACKEND-1): move rate limiter eviction AFTER current key pruning -- prevents losing rate-limit tracking on burst-after-idle patterns

fix(LOGIC-1): remove 2 duplicate pressrelease keys in LABEL_QUERIES; fix LIMIT $lim -> $limit to match query runner kwarg

fix(SEC-6): reject empty-string ADMIN_SECRET -- empty string was falsy and bypassed authentication check

fix(CodeQL#16-17): use validated real_out path for FileResponse and media_type check in export.py

fix(CodeQL#23): log exception type only in investigation.py -- full exception message may expose Neo4j URI

fix(FEED-3): replace deprecated asyncio.get_event_loop() with get_running_loop() in WebSocket handler

fix(SyntaxError): remove duplicate stats cache block in api/main.py -- global must precede all use of variable

fix(H-07): add 60s cache for /stats endpoint -- prevents full MATCH(n) scan on every homepage load

fix(M-08): add pressrelease alias in LABEL_QUERIES so frontend filter button works

chore: bump version to 0.31.4 -- Sprint 5 complete (36 bugs fixed across 36 commits)

fix(H-07): add 60s cache to /stats endpoint -- prevents full graph scan (MATCH (n)) on every homepage load

fix(M-08): add 'pressrelease' alias key in LABEL_QUERIES -- frontend filter button now correctly filters to PressRelease nodes

fix(M-03,M-06,M-08): add mobile CSS overrides for inline grid layouts; add NONE risk level for score=0; clamp risk score to 0-100