feat(phase-34): add api/routes/case_memory.py with 3 endpoints

feat(phase-34): add api/routes/self_learning.py with 4 endpoints

feat(phase-34): add api/routes/forensics.py with 5 endpoints

feat(phase-34): wire BenfordsAnalyzer + GhostCompanyDetector + ShadowDirectorDetector into risk scorer

feat(phase-33): add api/routes/timeline.py with 2 endpoints

feat(phase-33): add 4 graph analytics endpoints to api/routes/graph.py

feat(phase-32): add api/routes/resolve.py with 4 endpoints

fix(LOGIC-1): remove 2 duplicate pressrelease keys in LABEL_QUERIES; fix LIMIT $lim -> $limit to match query runner kwarg

fix(SEC-6): reject empty-string ADMIN_SECRET -- empty string was falsy and bypassed authentication check

fix(CodeQL#16-17): use validated real_out path for FileResponse and media_type check in export.py

fix(CodeQL#23): log exception type only in investigation.py -- full exception message may expose Neo4j URI

fix(M-08): add pressrelease alias in LABEL_QUERIES so frontend filter button works

fix(M-08): add 'pressrelease' alias key in LABEL_QUERIES -- frontend filter button now correctly filters to PressRelease nodes

fix(M-03,M-06,M-08): add mobile CSS overrides for inline grid layouts; add NONE risk level for score=0; clamp risk score to 0-100

fix(CodeQL#23): log exception type only, not full message in investigation.py -- prevents Neo4j URI/credentials leaking into logs

fix(H-08): replace substring audit name match with relationship-based + word-boundary match -- eliminates false positives for common words like 'India', 'National'

fix(H-07,CodeQL#12-17): use file-anchored absolute paths for path traversal guards in dossier_generator and export -- relative realpath() was CWD-dependent

fix(H-04): enforce ADMIN_SECRET even when DEBUG_MODE=true -- prevents production DB wipe via accidental debug flag

fix(BUG-17): wire blockchain.audit_chain.store_daily_root() to dossier export -- README SHA-256 claim now accurate

fix(NEW-A3 part1): replace em-dashes/smart-quotes in 56+ Python files -- CI requires pure ASCII source

fix(BUG-15): remove duplicate entity_type param from /search; keep only entity_type_param with alias='type'

fix(BUG-6,NEW-A6): add X-Admin-Secret auth on /admin/seed and /admin/pipeline; add threading.Lock for pipeline race condition

fix(BUG-1): use str(depth_safe) literal in Cypher path pattern -- Neo4j rejects parameters in *min..max

fix(encoding): strip non-ASCII from 4 remaining files

fix(api+graph+pipeline): M-04+M-05+M-08+M-09 -- misc medium fixes

fix(api+ai): M-01+M-02+M-03 -- version consistency and duplicate assignments

fix(api+pipeline): C-05+C-06 -- unsearchable nodes and hardcoded ICIJ names

fix(api): C-04 -- /investigate was using DeepInvestigator not MultiInvestigator

fix(api): C-02+H-04 -- risk None crash and missing risk signals

fix(encoding): strip non-ASCII chars from all modified files

fix(api): BUG-17 -- fragile rstrip(s) filter normalisation in search

fix(api): BUG-10 -- deduplicate graph edges before sending to frontend

fix(api): BUG-10 -- deduplicate graph edges before sending to frontend

feat(api): add GET /runtime endpoint

fix

fix(admin): BUG-21/22/30 — driver reuse, bond key, 7 missing scrapers

fix(search): BUG-1/4/10/18 — type() crash, missing types, source map

fix(BUG-03/22): removed duplicate fallback block; added sources field to ProfileResponse

fix(BUG-08): DossierGenerator no longer caches stale Neo4j driver

fix(BUG-04): all investigation routes wrapped in try/except — no more raw 500s

fix(BUG-02/15/16): pipeline loads all 13 scrapers; reuses driver; auto-detects loaders

fix(BUG-07): generic fallback for AuditReport/Contract/NGO/ElectoralBond profiles

fix(BUG-09): depth via Cypher param not f-string; use explicit node/rel RETURN

fix(BUG-03/08): RiskScorer() takes no args; scorer.score()→use get_risk() route

fix(BUG-06): replace full-scan MATCH(n) with 14 indexed label queries — HTTP 500 on non-English

fix(BUG-05): per_label was 20÷14=1; now max(10, limit*2÷types)

fix(profile): generic fallback for AuditReport/Contract/NGO/ElectoralBond entity types

fix(search): replace full-scan MATCH(n) with 9 indexed queries — fixes HTTP 500 on non-English search

fix(admin): seed now creates relationships, bump version to 0.29.0

feat(search): add 6 new entity types to search route