v2026.08.13.04 – v2026.08.13.09 — 2026-08-13

• fix(isolation): apply cgroup slice limits at site provision, not just at agent start
• fix(isolation): slice migration covers ALL provisioned sites, not just cached ones
• feat(deliverability): include grade C in the domains 'needs attention' list
• chore(changelog): regenerate testing index for v2026.08.13.05
• docs(whatsnew): note per-site security score for next stable fold
• fix(mailhost): never let the TLS reconciler purge a freshly issued mail. cert
• chore(changelog): regenerate testing index for v2026.08.13.06
• i18n(mailhost): localise mail. activation outcome in all 15 languages
• feat(security): security-posture attestation + trend (G7)
• docs(security): publish honest security-architecture whitepaper (G15)
• chore(changelog): regenerate testing index for v2026.08.13.08