* fix(protocol): scope idempotency replay to mutations (#7383) (#7384)

* fix(protocol): scope idempotency replay to mutations

* fix(protocol): preserve legacy get_products key optionality

(cherry picked from commit 245108f)

* Version Packages (#7385)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

* fix(schema): backport legacy format asset variants (#7423)

* fix(tmp): backport single-user context privacy to 3.1 (#7424)

* fix(tmp): backport single-user context privacy

* fix(tmp): close expert-reviewed context privacy gaps

* fix(tmp): backport request-aware context caching to 3.1 (#7425)

* fix(tmp): backport request-aware context caching

* fix(tmp): keep context hashes out of observability

* Version Packages (#7426)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

* docs(release): correct v3.1.22 Context Match record (#7451)

* fix(compliance): backport required_tools OR-gate fixes to 3.1.x (#6774 subset + canonical_format_validate_input) (#7406)

* fix(compliance): drop get_adcp_capabilities from required_tools across 17 storyboards (OR-gate bug) (#6774)

* fix(compliance): drop get_adcp_capabilities from required_tools in billing_gate_dispatch and agent_notification_configs

required_tools uses OR semantics in the adcp-client SDK. Listing
get_adcp_capabilities alongside a capability-specific tool made the
storyboard-level gate trivially satisfied for every conformant agent,
causing billing_gate_dispatch and agent_notification_configs to run
against agents that lack sync_accounts / sync_agent_notification_configs
and fail at the first assertion instead of receiving a clean
coverage-gap skip.

Closes #6773

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01M3evZsz4Y3971B5RZVxhKh

* fix(compliance): sweep remaining 15 storyboards for get_adcp_capabilities OR-gate bug

Same pattern as billing_gate_dispatch (issue #6773): required_tools uses
OR semantics, so listing get_adcp_capabilities alongside a capability-
specific tool made the gate trivially satisfied for every conformant agent.

Affected: billing_out_of_band, canonical_supported_formats, evaluator_auth,
native_localization (creative); account_timezone_{seller_fixed,buyer_selected,
seller_assigned}, budget_cap_timezone_{account,fixed,override_rejected},
geo_{region_all_values_support,region_targeting,region_exclusion_support,
place_targeting}, portfolio_routing_scope (media-buy).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01M3evZsz4Y3971B5RZVxhKh

---------

Co-authored-by: Claude <noreply@anthropic.com>
(cherry picked from commit a1e72ec)

* fix(compliance): drop comply_test_controller from canonical_format_validate_input required_tools (OR-gate)

The per-storyboard gate (runner.js) admits a storyboard when any listed tool
is present, while the suite selector (comply.js) requires all of them. With
comply_test_controller in the list, every agent exposing the universal test
controller was selected for this storyboard and then failed all 17 steps on
the missing validate_input — on the hosted grader, 17 spurious failures on
each of two registered agents (#7404). Same shape as #6774.

Refs #7404 (bug 1 only).

(cherry picked from commit 40c59b1)

* fix(compliance): correct 3.1 backport changeset scope

Name only the four #6774 storyboards present on 3.1.x and keep the remaining hosted service work open.

Refs #7404 (bug 1 only).

---------

Co-authored-by: Brian O'Kelley <bokelley@scope3.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: evgen <evgen@SCIS-TE-IPSUM>

* Version Packages (#7486)

Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

* fix(compliance): backport creative format-kind assertions to 3.1.x (#7554)

* fix(compliance): backport governance storyboard routing to 3.1.x (#7555)

* fix(jobs): backport heartbeat timeout to 3.1.x (#7557)

* fix(release): preserve main schema discovery index

* fix(release): preserve main changelog history

* test(release): register forward-merged regressions

---------

Co-authored-by: aao-release-bot[bot] <280565558+aao-release-bot[bot]@users.noreply.github.com>
Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Co-authored-by: Ev <evgeny@gmail.com>
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: evgen <evgen@SCIS-TE-IPSUM>