Changelog

• –Fix: cache fingerprint hash collision on identical prefix lengths
• –Improvement: VS Code extension gutter counts now update on file save
• –Improvement: anomaly detection baseline window reduced to 5m (was 15m)

• –New: Windsurf MCP integration
• –New: Flow-level token aggregation for multi-turn Windsurf actions
• –Fix: config file hot-reload without restarting MCP server

• –New: Governance module — spend caps, anomaly webhooks
• –New: RBAC roles (owner, admin, analyst)
• –New: SOC 2 Type II certification
• –Breaking: config format changed from JSON to TOML

• –New: Cache intelligence report (tokenistt cache-report)
• –New: Per-engineer spend attribution in team workspaces
• –Improvement: Optimization engine v2 — 15% better token reduction