Validate hosted workbook state after auth

Harden router canary eval preflight and survey runs

Clear legacy Auth0 audience envs during deploy

Allow production deploy without canary target

Fetch LFS assets in eval workflows

Fix deploy workflow secret gating

Add enterprise runbooks and hosted validation gates

Hygiene cleanup: purge temp artifacts and add commit guardrails

Add release preflight, baseline gates, and review-queue observability

Improve unified KB speed/quality routing and add synonym pipeline

Speed up unified KB routing and lifecycle fast paths; rerun 150 eval in shards

Add unified KB eval150 runner, reports, and nightly CI

feat(router-rag): add semantic eval, citation gates, web budgets, alias growth; fix auth startup fallback

Add gated HF deploy flow with auth hard-fail and API abuse protections

Strengthen RAG quality gate with hard-fail policy checks and router web-assisted coverage

Add deterministic RAG quality gate with CI thresholds and reports

Initial commit for HF deployment