[ancongui]

Long native tool conversations duplicated the same request history in checkpoint records, so a valid six-turn conversation could exceed the encoded snapshot budget. Version 3 stores that shared history once and reconstructs the exact canonical record before hash and credential checks. Existing v1/v2 snapshots remain readable, and size and digest refusals are reported separately without exposing record text.

The source profile advances to V13 with fresh native 250-case and SQL54/24/6 proof. All eight historical profile literals and seals are preserved. The published runtime is byte-identical to the qualified 0.2.44 candidate across all 655 source inputs, including the 22 loader inputs, 35 admission modules, and 315 templates. Four test-only current-version expectations and release documentation are updated separately.

Capacity remains bounded at 192 KiB encoded, 8 MiB raw, 256 KiB per WAL envelope and 4 MiB retained checkpoint/consume evidence per run. Chunked content-addressed overflow remains pending. Core 0.2.44 intentionally retains the unchanged Studio 0.2.42 source, assets and captures.

Validation:

• 141 focused host tests passed, including high-entropy six-turn SDK exact-wire restoration, legacy codec readability, malformed envelopes, current credentials and profile mutation guards.
• Mypy passed for 306 source files; configured Ruff and formatting checks passed.
• Fresh controlled local native250 and SQL54/24/6 qualification passed on the measured protected source, with cleanup and zero real model/provider calls.
• Standard wheel/sdist payload checks and extracted-package read-only SDK smoke passed on the qualified candidate; full public CI runs on this PR.

Merge and release remain held for final source review and all required public checks. This PR does not claim generated CRM completion or unlimited checkpoint storage.