Kayan depth closeout: safer retrieve, grounded answers, and ops you can trust

Fixed

• Outbound stamps this run’s trace, activity joins by message, and CSV export keeps the range, tool, and verify-fail filters you picked.
• Prompt injection is delimited and gated in CI. Retrieved chunks cannot issue refunds. Phones, emails, and card patterns leave traces. Empty catalog and knowledge hand off instead of inventing.
• Merchants ingest files and links as knowledge, roll back a bad FAQ, retrieve Arabic for Arabic shoppers with an English fallback when Arabic chunks are empty, and the shared prompt builder no longer branches on a shop name. Catalog prices require a live search and ship as cards. Retrieval fuses ranked lists with Reciprocal Rank Fusion.
• Configurable first-response hours, a unified audit timeline, a trace explorer, channel-health warnings, a platform quality console without message bodies, answer cache for verifier-ok replies with no price or stock claims, token budgets, model cascade knobs, SSE replay of the finished web-chat reply, and a delete path for public-site transcripts.