diff --git a/.agents/scripts/memory-helper.sh b/.agents/scripts/memory-helper.sh
index 90572e8b5..d7be77843 100755
--- a/.agents/scripts/memory-helper.sh
+++ b/.agents/scripts/memory-helper.sh
@@ -537,9 +537,12 @@ cmd_recall() {
         return $?
     fi
     
-    # Escape query for FTS5 - escape both single and double quotes
+    # Escape query for FTS5 - wrap in double quotes to handle special chars
+    # FTS5 treats hyphens as NOT operator, asterisks as prefix, etc.
+    # Quoting the query makes it a literal phrase search.
     local escaped_query="${query//"'"/"''"}"
-    escaped_query="${escaped_query//\"/\"\"}"
+    # Escape embedded double quotes for FTS5 (double them), then wrap in quotes
+    escaped_query="\"${escaped_query//\"/\"\"}\""
     
     # Build filters with validation
     local extra_filters=""
diff --git a/TODO.md b/TODO.md
index 0bbecf679..50cac2520 100644
--- a/TODO.md
+++ b/TODO.md
@@ -57,7 +57,7 @@ Tasks with no open blockers - ready to work on. Use `/ready` to refresh this lis
 
 - [ ] t140 setup.sh: Cisco Skill Scanner install fails on PEP 668 systems (Ubuntu 24.04+) #bugfix #setup #linux ~1h (ai:45m test:15m) logged:2026-02-07
   - Notes: GH#415. pip3 install --user blocked by PEP 668 on modern Ubuntu/Debian. Fix fallback chain: uv -> pipx -> venv+symlink -> pip3 --user (legacy). Affects setup.sh lines ~2408-2432. Workaround: manual venv at ~/.aidevops/.agent-workspace/work/cisco-scanner-env/.
-- [ ] t139 bug: memory-helper.sh recall fails on hyphenated queries #bugfix #memory ~30m (ai:20m test:10m) logged:2026-02-07
+- [ ] t139 bug: memory-helper.sh recall fails on hyphenated queries #bugfix #memory ~30m (ai:20m test:10m) logged:2026-02-07 started:2026-02-07
   - Notes: GH#414. Hyphens in FTS5 queries interpreted as NOT operator. "qs-agency" becomes "qs NOT agency" causing column resolution error. Fix: quote hyphenated terms before passing to FTS5 MATCH clause.
 - [ ] t138 aidevops update output overwhelms tool buffer on large updates #bugfix #setup ~30m (ai:20m test:10m) logged:2026-02-07
   - Notes: GH#398. Raw git pull diff stat exceeds 51KB tool output limit on large updates (e.g. 500 file rename). Fix: quiet pull + filtered commit log (feat/fix/refactor only, head -20) in cmd_update(). Low severity, only affects large updates.
@@ -94,7 +94,7 @@ Tasks with no open blockers - ready to work on. Use `/ready` to refresh this lis
     - Notes: BLOCKED by supervisor: Max retries exceeded: backend_infrastructure_error    - [ ] t135.5.1 git rm --cached .scannerwork/ and .playwright-cli/ ~10m
     - [ ] t135.5.2 Add .playwright-cli/ to .gitignore ~5m
     - [ ] t135.5.3 Verify .scannerwork/ already in .gitignore ~5m
-  - [ ] t135.6 P1-C: Fix CI workflow code-quality.yml issues ~1h blocked-by:none
+  - [x] t135.6 P1-C: Fix CI workflow code-quality.yml issues ~1h blocked-by:none completed:2026-02-07
     - [ ] t135.6.1 Fix .agent typo to .agents on line 31 ~5m
     - [ ] t135.6.2 Fix references to non-existent .agents/spec and docs/ ~10m
     - [ ] t135.6.3 Add enforcement steps (shellcheck, json validation) that fail the build ~45m blocked-by:t135.6.1,t135.6.2