Never store a credential: redact at every DB write and at boot; keep PDFs when Gemini refuses for budget reasons

Gemini token accounting: usageMetadata -> Extraction, VisionStats, PdfResult

pipeline sync: figure citation linking (figure_links.py, --link-figures) from the pipeline repo

Figure & graph mining in the autonomous cycle: figures.py + Postgres port, crops stored in DB, review UI

Initial deploy: autonomous ingestion agent (plan→discover→dedupe→download→ingest→report)