### 2026-04-14: ArifOS Kernel Hardening & Widget Domain Fix

- **Widget Domain Fixed**: Patched FastMCP library to support explicit domains in `FastMCPApp` and tool decorators. All constitutional apps now correctly whitelist `arifos.fastmcp.app`.
- **App Restoration**: Successfully recovered `judge_app.py` and `init_app.py` from accidental overwrites during multi-file editing.
- **Lint Cleanup**: Resolved numerous Ruff warnings (unused imports, unsorted imports, redundant f-strings) across the app suite.
- **Protocol Conformance**: Maintained sealed state in the everything_conformance_runner.
- **State**: [REPO:DIRTY | KERNEL:HARDENED | WIDGETS:CONFIGURED]
