Bug Fixes

• event-bus: keep the fan-out subscription across its keep-alive ping (0436bae)
• amqp: retry a failed delivery once, then dead-letter it; settle payloads that are not JSON (bd357e8)
• analytics: report tenant costs from settled session costs, on London days (62e70a2)
• api: reject reversed or unbounded from/to ranges (49f9646)
• auth: verify v2 signed identities bound to an organisation (2701ff9)
• bootstrap: quarantine legacy global history instead of handing it on (dac46b7)
• costs: book session energy with the meter rules, per connector, whoever owns the samples (83b4488)
• costs: keep tariff history right when settings events arrive out of order (e95cfd0)
• costs: price each meter interval on the tariff in force when the session started (c45c3d3)
• health: cheap dependency checks, a real readiness probe, bounded metric labels (1dee1ec)
• ingest: sessions keyed by station, unknown energy, ordered live state, delayed retries (a3bf5de)
• meter-backfill: fetch two baseline readings, and audit with meter-api's readings only (9f6861d)
• meter-data: serve consumed energy at every granularity, local days, and validated pages (31ad5f0)
• meter-retention: delete whole UTC days, keep each connector's baseline, one replica per pass (542390c)
• meter-shadow: reject misaligned, future and tenantglobal aggregates; one replica per comparison (e67f4ab)
• meter: count consumed energy once, and stop the backfill deleting history it cannot rebuild (08db061)
• report-runs: cap on-demand report runs per subject (0f05b6d)
• reporting: widen to sibling tenants only on a signed organisation grant (23f4871)
• reports: retire the fake /reports/generate endpoints (560a114)
• sse: fan dashboard events out to every replica; bound and cap streams (d43341f)
• amqp: believe tenant changes only from their publisher's broker user (6dfdcf9)
• event-bus: seal the dashboard fan-out and never publish it unsealed (b2249eb)

Features

• amqp: replay a dead letter by moving it back onto its source queue (f908c74)
• meter-backfill: recompute aggregates from reporting's own samples, dry-run first (c4d676b)