{
  "summary": "Adds end-to-end-encrypted settings sharing with Allod SWG (Pull from SWG for IDP/OIDC and S3 storage config, sealed with nacl/box between each instance's own X25519 identity, TOFU-paired and failing closed on identity mismatch) and, alongside it, VRM's first real S3 admin surface with hot-swappable document storage so vendor e-signing activates without a restart. Fixed the SWG shadow-IT sync pipeline end to end: it had been failing on every cycle in production because the loopback SWG API is TLS-wrapped with a self-signed cert the sync client had no way to trust; sync status is now tracked and surfaced persistently in the UI instead of only reaching a log line, and UI-saved SWG settings are read back at startup instead of reverting to the static config file on every restart. Systems that resume traffic while offboarding, decommissioned, inactive, or rejected are now handled correctly - auto-reverted or notified rather than silently ignored - and rejected systems can be reactivated from the Triage page. Added an LDAP/Active Directory login backend alongside the existing OIDC option, with a Test Login panel that verifies real credentials against the saved connection (bind, resolved groups, and admin-group membership) without creating a session, and merged the standalone Auth tab into the directory/SCIM tab since they're the same connection. The top navbar's Triage, Classification, Cycle Types, and Contract Templates now live under one Admin dropdown instead of eight flat items - which surfaced a real bug where the dropdown never actually opened: bootstrap.bundle.min.js and tabler.min.js were both loading a full copy of Bootstrap's JS, so every click opened the menu and an unaware second listener immediately closed it again. Also fixes deleting a system leaving its scheduled reviews, vendor probe results, and RoPA data permanently orphaned - some of those tables never had a foreign key back to the system at all, and SQLite doesn't enforce the ones that do by default."
}