What's Changed

• chore(deps): update dependency telethon to >=1.43.2 by @bug-ops in #3558
• chore(deps): update debian:bookworm-slim docker digest to f9c6a2f by @bug-ops in #3553
• chore(deps): update ghcr.io/bug-ops/zeph:latest docker digest to 45d5ef5 by @bug-ops in #3554
• chore(deps): update github-actions by @bug-ops in #3555
• chore(deps): update ollama/ollama:latest docker digest to 05ab093 by @bug-ops in #3556
• chore(deps): update rust:1.95-slim docker digest to 8109983 by @bug-ops in #3557
• chore(deps): update rust-minor-patch by @bug-ops in #3559
• chore(deps): update tokio by @bug-ops in #3560
• chore(deps): update tracing by @bug-ops in #3561
• chore(deps): refresh cargo lock file by @bug-ops in #3562
• docs(memory): synthesize MemCoT, OmniMem, OCR-Memory; add APEX-MEM Research Backlog by @bug-ops in #3577
• feat(mcp): MCP server startup auto-retry with exponential backoff by @bug-ops in #3578
• chore(deps): pin dependencies by @bug-ops in #3580
• chore(deps): update ollama/ollama:latest docker digest to 5600a65 by @bug-ops in #3582
• chore(deps): update prom/prometheus docker tag to v3.11.3 by @bug-ops in #3583
• chore(deps): update github-actions by @bug-ops in #3581
• chore(deps): update rust-minor-patch by @bug-ops in #3584
• fix(mcp): map HTTP 4xx auth errors to non-retryable McpError::HttpAuth by @bug-ops in #3587
• chore(deps): refresh cargo lock file by @bug-ops in #3585
• feat(security): TrajectorySentinel and ScopedToolExecutor for capability governance by @bug-ops in #3588
• feat(tools): add per-turn ExecutionContext to ShellExecutor by @bug-ops in #3589
• fix(mcp): map HTTP 4xx auth errors to McpError::HttpAuth in OAuth paths by @bug-ops in #3590
• feat(memory): add MemCoT SemanticStateAccumulator and Zoom-In/Out recall views by @bug-ops in #3592
• feat(core,tools): goal lifecycle and TACO output compression by @bug-ops in #3591
• fix(lsp): handle mcpls object-wrapped diagnostics response by @bug-ops in #3594
• fix(lsp): inject hover notes immediately before LLM call (#3595) by @bug-ops in #3596
• feat(memory): log memory retrieval failures for OmniMem self-improvement loop by @bug-ops in #3597
• feat(cli): add zeph project purge command for full project state cleanup by @bug-ops in #3598
• fix(cli): return user-friendly error when project purge stdin is not a terminal by @bug-ops in #3600
• docs(specs): add gonka.ai integration specs (051-gonka-gateway, 052-gonka-native) by @bug-ops in #3616
• fix(memory.graph): add extract_provider to bypass quality_gate for extraction by @bug-ops in #3615
• feat(orchestration): orchestrator_provider (SLM-as-orchestrator) and AdmissionGate (admission control) by @bug-ops in #3617
• feat(config): add ProviderKind::Gonka, GonkaNode schema, and vault key resolution by @bug-ops in #3618
• feat(zeph-llm): RequestSigner and EndpointPool for Gonka native inference by @bug-ops in #3620
• feat(init): add GonkaGate option to --init wizard by @bug-ops in #3621
• feat(zeph-llm): GonkaProvider chat/chat_stream/embed via signed transport (#3611) by @bug-ops in #3622
• perf(tracing): add llm.turn_call span to main-turn LLM call by @bug-ops in #3623
• feat(zeph-llm): GonkaProvider chat_with_tools and chat_typed (#3612) by @bug-ops in #3624
• fix(zeph-llm): name wildcard match arm in gonka/tests.rs:467 by @bug-ops in #3627
• fix(hooks): add tracing instrumentation and propagate hooks in reload_config by @bug-ops in #3628
• feat(core+wizard): wire GonkaProvider end-to-end with native wizard branch (#3613, #3603) by @bug-ops in #3632
• fix(core): import build_provider_from_entry in mod tests so gonka_tests can resolve it by @bug-ops in #3634
• feat(memory): wire APEX-MEM write path and QualityGate config by @bug-ops in #3637
• feat(context): integrate TypedPage compaction into assembler pipeline by @bug-ops in #3638
• fix(memory): prevent unique index violation in insert_or_supersede by @bug-ops in #3639
• feat(core): wire SpeculationEngine into agent loop via SpeculativeConfig by @bug-ops in #3640
• fix(core): fix SpeculationEngine sweeper abort and requires_confirmation default by @bug-ops in #3647
• fix(build,tools): add testing to full feature; fix DynExecutor::requires_confirmation delegation by @bug-ops in #3649
• fix(tools)+feat(core): DynExecutor confirmation delegation and speculative ToolStartEvent wiring by @bug-ops in #3651
• feat(core): wire SpeculationEngine try_dispatch into SSE streaming and PASTE skill activation by @bug-ops in #3654
• test(core)+fix(core): unit tests and debug_assert! for commit_speculative_tier by @bug-ops in #3655
• feat(cli): add zeph gonka doctor diagnostic subcommand and live testnet test by @bug-ops in #3656
• release: v0.20.2 by @bug-ops in #3657

Full Changelog: v0.20.1...v0.20.2