De-green UI + security hardening (audit fixes)

Analytics (events/dwell/run-completion) + sidebar sign-in row

Bump v2.0 effective date 2026-07-07 -> 2026-07-08 (full 30-day notice)

Security hardening: RLS-as-user, rate limiting, headers, PII + endpoint cleanup

feat: richer DE aggregate — substitution × ESM ΔLL bin (opt-in, gated)

feat: unified outcomes framework — tool-agnostic capture + aggregate + calibrate

feat: cross-user aggregate prior (the data moat) — built, run gated to 2026-07-07

Learning flywheel v1: Directed-Evolution active-learning loop (DBTL)

Retention 90→45 days + live auto-delete countdown in the saved hub

Unified "My designs" hub: save every tool, not just CRISPR

Plasmid Studio (M1+M2): import/annotate/map + restriction/digest + library

CRISPR M4: save & revisit designs (per-user, 90-day TTL)

Verify ES256 JWTs via Supabase JWKS (project migrated off HS256)

Library TTL: 90-day expiry for free tier + lazy cleanup on /api/run

Audit sweep: signin redirects, honest footer, runBtn defensive type, JWT refresh fix

Save libraries to Supabase Storage on run completion + plan helpers

Trial timer: 5-min anonymous window + in-engine sign-in modal