Datetime search attributes now preserve UTC instants and microseconds, including non-UTC input offsets. Embedded visibility predicates use those exact instants.
The new workflow:v2:repair-search-datetimes command previews or explicitly repairs selected datetime projections from matching retained, typed history. It refuses incomplete or conflicting evidence.
Derived timeline summaries are bounded by UTF-8 bytes, preserving complete canonical failure evidence and callback-authority recovery notices.
Implemented in #914, #916, and #917. Exact main 789f3b64 passed the full database, upgrade, quality and coverage checks, CodeQL, public boundary and Sonar. Normal published-package and affected-consumer verification follows publication; source checks do not claim that acceptance.