[leonagente]

Summary

• README full rewrite: honest v0.1 scope, env contract (install variance: tabbtd38.ini sandbox vs tabula.ini default), 10-tool tables with risk columns, safety model, live-verified quirks, development + Status sections, unofficial-integration disclaimer
• coverage-manifest.json: all 10 tools, honest sandboxVerified flags
• SECURITY.md, server.json (registry shape; publication not claimed), inert-until-human-linked npm OIDC release.yml, CHANGELOG 0.1.0

Orchestrator additions on this branch

• Live case (g): update_record create→UPDATE→verify→delete round-trip — verified against sandbox, manifest flipped to sandboxVerified=true with evidence
• Final coverage: 8/10 tools sandbox-verified; upload_attachment + set_text honestly marked unverified (unit-tested only)

Verification: lint/tsc/146+ unit tests green; pack whitelist clean.