Address the Codex and CodeRabbit cache review findings. Restore bounded extra-window arrays through the QML contract, keep token costs hidden for stale usage across lifecycle updates, and use receipt time for future live timestamps. Update usage and development guidance; TODO scope and CLI contracts are unchanged.