fix: add safe analytics floor repair endpoint

fix: stabilize analytics totals across warm containers

fix: stabilize tenant routing and active db persistence

tests: tenant-scoped analytics + CSAT-scale charts, eval sqlite-first rows

reliability(§3): shared cross-container key-health store (modal.Dict)

eval panel: fix custom-tests 500, judge-key UX, product-question generation

security: production hardening — tenant isolation, email XSS, write limits, CSP

fix(retrieval): tighten quote-first and eval compatibility

feat(crawl): harden extraction cleanup and retrieval gating

fix(eval): correct product scoring and retrieval ranking

eval: derive tenant identity from runtime evidence

eval: trust runtime-grounded tenant rows

eval: fall back to runtime chunk seeds

eval: tighten tenant scope matching

eval: fix chat retrieval scoring and tenant scope fallback

eval: harden live run output and grounding filter

eval: tighten tenant scoping and fallback diagnosis

eval: respect requested generate and run counts

eval: tighten tenant filter and judge guidance

eval: deepen judge trace certainty

eval: trust tenant-local kb rows and tighten analytics filter

eval: allow request judge key and set row statuses

eval: fallback to kb when saved eval set is empty

eval: add workflow-trace evidence to llm judge

fix: patch _owner_eval_blocker in evals smoke test

evals: add owner RAG scoreboard UI + API

fix: sync-github owner-only + correct test failures found by running pytest

test: add pytest suite for tenant auth and CSRF