- CI/CD: stop deleting the steward namespace on every deploy; use kubectl apply (dry-run -> apply) so the PVC and conversation memory survive deployments. - core: bound _histories with an LRU eviction (max 1000 active threads) to prevent unbounded memory growth. - core: wrap knowledge-base context in KB START/END delimiters and instruct the LLM to treat it as data, mitigating indirect prompt injection. - matrix: wrap message processing in try/except so failures are logged instead of silently dropped. - telegram: remove now-dead flush/tags prompt constants (centralized in core). Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>