The sidecar catalog; the Compliance Officer places and releases holds; the Tenant Compliance Officer is built now; shortening audit retention is recorded and surfaced, not gated on a second person; all seven new-install defaults, in Phase 3; the webhook finding fixed now as a bug; snapshots kept as long as the audit log.