v0.7.0: scroll notify + autocomplete — TDD

Scroll notification: :scroll-notify flag in add-msg when scrolled up.
Autocomplete: @ file paths, /theme subcommand defaults, /focus dirs.
4 new TDD tests (6 assertions), 100% pass.
Core: 135/135 (100%).

Remaining deferred: scroll pads (needs Croatoan terminal), setup wizard (v0.8.0).

docs/ROADMAP.org

@@ -1399,6 +1399,20 @@ The privacy tag filter (~dispatcher-check-privacy-tags~) is binary: a tag matche
 - Backward compatible: existing ~PRIVACY_FILTER_TAGS~ env var becomes the default ~:block~ tier entries
 ~50 lines in ~security-dispatcher.lisp~ + ~20 lines TUI command.
 
+*** TODO Merkle provenance audit — ~/audit <node-id>~
+:PROPERTIES:
+:ID:       id-v062-audit
+:CREATED:  [2026-05-08 Fri]
+:END:
+
+Every Passepartout memory object has content-addressed identity via Merkle hashing (v0.2.0). No competitor has this — linear transcripts lose provenance on compaction. Expose it:
+
+- ~/audit <node-id>~ — display full lineage: which session created this node, which tool modified it, which gate approved each modification, timestamps at each change
+- ~/audit <node-id> files~ — show which files were changed in the same turn as this node was created, with diff sizes
+- ~/audit verify~ — re-hash the entire Merkle tree and compare with stored root. "✓ 847 nodes verified, root hash matches." Catches silent corruption.
+- Provenance data is already in the Merkle tree's parent-child hash chain. This is a rendering exposure, not new data.
+~30 lines on existing Merkle infrastructure.
+
 ** v0.8.0: Direction 2 — Information Radiator (Foundation)
 
 The sidebar is what makes the Information Radiator direction unique. No competitor can render gate traces, focus maps, or rule counters because none has deterministic gates, foveal-peripheral context, or rule synthesis. The sidebar makes this data permanently visible. It also includes context monitoring, modified files, and tool status — all zero-LLM-token data from the deterministic layer.