## Summary

<!-- Briefly describe the change and why it's needed -->

## Changes

<!-- List the key changes made in this PR -->

## Testing

<!-- Describe how you tested these changes -->

<!-- ============================================================================ -->
<!-- Phase 2.5 attestation (required for PRs touching `isKnowledgeBaseVisibleToAgent`) -->
<!-- ============================================================================ -->

## Phase 2.5 attestation

If this PR modifies `convex/crystal/knowledgeBases.ts` and touches the `isKnowledgeBaseVisibleToAgent` function, you MUST complete this section:

- [ ] `.omc/plans/phase-2.5-attestation.json` committed to this PR
- [ ] Attestation status is `CLEAN` OR includes redacted-config diff + restart timestamp
- [ ] Scan run within last 24h

**If your PR does NOT touch `isKnowledgeBaseVisibleToAgent`, you may delete this section.**
