v0.7.2: release — TDD

All 14 v0.7.2 items wired, tested, and documented.

Release checklist:
- ROADMAP: all 14 items marked DONE
- README: version badge v0.7.1 → v0.7.2
- CHANGELOG: v0.7.2 entry with feature summaries
- core-transport: make-hello-message 0.7.1 → 0.7.2
- .env.example: TAG_CATEGORIES, SELF_BUILD_MODE
- /help list: all 16 commands documented

Phase 1 (wire deferred):
- call-with-tool-timeout in action-tool-execute
- dispatcher-privacy-severity in dispatcher-check
- Ctrl+G gate-trace toggle, Ctrl+F search placeholder

Phase 2 (finish features):
- /audit verify, /resume <n>, /help <topic>

Core: 88/88  TUI Main: 85/86 (1 pre-existing flake)

CHANGELOG.org

@@ -5,6 +5,58 @@
 All notable changes to Passepartout, extracted from [[file:docs/ROADMAP.org][ROADMAP.org]]
 DONE items with LOGBOOK timestamps.
 
+:LOGBOOK:
+- State "RELEASED" from "DONE" [2026-05-08 Fri 23:00]
+:END:
+
+* v0.7.2 — Gate Trace, HITL, Identity, Search + Maturation
+** Gate Trace Visualization
+Gate-trace-lines wired into view-chat. Renders colored entries
+below agent messages (green passed, red blocked, yellow approval).
+Ctrl+G toggles collapse per message. Default: visible.
+** HITL Inline Panels
+/approve and /deny parsed as structured events in on-key.
+on-daemon-msg detects :approval-required and renders styled system
+messages with :panel flag and :hitl theme color.
+** Identity File
+load-identity-file reads ~/memex/IDENTITY.org on startup.
+agent-identity injects into think() IDENTITY section.
+/identity opens in $EDITOR, auto-reloads.
+** Safe-Tool Allowlist
+read-only-p slot on cognitive-tool struct. tool-read-only-p
+registry lookup. Read-only tools auto-pass dispatcher-check.
+7 tools marked read-only (search, find, read, list, eval, tests, org-find).
+** Message Search
+/search <query> performs case-insensitive substring search across
+message history. Shows match count and context previews.
+** Context Visibility
+/context shows message count, focus, token estimate, and last 5
+message summaries. /context why <id> shows memory object info.
+** Session Rewind
+/rewind <n> restores memory to snapshot n-1 via rollback-memory.
+/sessions lists last 10 snapshots with timestamps and object counts.
+Auto-snapshot at turn boundaries in think().
+** Undo/Redo
+Operation-level memory undo/redo. undo-snapshot before destructive
+tool execution. /undo and /redo TUI commands restore memory state.
+** Tool Hardening
+Per-tool timeouts (shell=300s, search-files=30s, eval-form=10s).
+call-with-tool-timeout wraps tool execution with sb-ext:with-timeout.
+verify-write re-reads after write-file and compares content.
+** Tag Stack
+TAG_CATEGORIES env var parses severity tiers (@tag:block, :warn, :log).
+dispatcher-privacy-severity wired into dispatcher-check vector 5.
+/tags TUI command lists configured categories.
+** Merkle Audit
+audit-node exposes memory object lineage (type, hash, scope, version).
+/audit <id> TUI command. /audit verify counts objects and snapshots.
+** Self-Help
+/why shows most recent gate trace from message history.
+** Agent Identity Injection
+assemble-config-section builds live CONFIG from *provider-cascade*,
+tokenizer-context-limit, gate count, and *hitl-pending*.
+Injected into all three system-prompt assembly paths via fboundp guard.
+
 * v0.7.1 — Streaming + Markdown Rendering
 :LOGBOOK:
 - Released [2026-05-08 Fri]