Three authors merged the sweep fix PRs overnight; each entry pins the merge
commit, which validates ok in a bare pip install -e . venv and scans safe/caution.
hermes-telemetry persists to local SQLite only (its one outbound call fetches a
public pricing list), so the telemetry opt-in policy is not engaged.
