diff --git a/.config/dotnet-tools.json b/.config/dotnet-tools.json
index bd3f166..afa2793 100644
--- a/.config/dotnet-tools.json
+++ b/.config/dotnet-tools.json
@@ -3,14 +3,18 @@
   "isRoot": true,
   "tools": {
     "dotnet-ef": {
-      "version": "10.0.0",
-      "commands": ["dotnet-ef"],
+      "version": "10.0.8",
+      "commands": [
+        "dotnet-ef"
+      ],
       "rollForward": false
     },
     "nuget-license": {
-      "version": "4.0.9",
-      "commands": ["nuget-license"],
+      "version": "4.0.10",
+      "commands": [
+        "nuget-license"
+      ],
       "rollForward": false
     }
   }
-}
+}
\ No newline at end of file
diff --git a/Directory.Packages.props b/Directory.Packages.props
index d318d5d..497c274 100644
--- a/Directory.Packages.props
+++ b/Directory.Packages.props
@@ -23,11 +23,11 @@
     <PackageVersion Include="Microsoft.Extensions.Configuration.EnvironmentVariables" Version="10.0.7" />
     <PackageVersion Include="Microsoft.Extensions.Configuration.UserSecrets" Version="10.0.7" />
     <PackageVersion Include="Microsoft.Extensions.DependencyInjection" Version="10.0.7" />
-    <PackageVersion Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="10.0.7" />
+    <PackageVersion Include="Microsoft.Extensions.DependencyInjection.Abstractions" Version="10.0.8" />
     <PackageVersion Include="Microsoft.Extensions.Hosting" Version="10.0.7" />
     <PackageVersion Include="Microsoft.Extensions.Hosting.Abstractions" Version="10.0.7" />
     <PackageVersion Include="Microsoft.Extensions.Http" Version="10.0.7" />
-    <PackageVersion Include="Microsoft.Extensions.Http.Resilience" Version="10.4.0" />
+    <PackageVersion Include="Microsoft.Extensions.Http.Resilience" Version="10.6.0" />
     <PackageVersion Include="Microsoft.Extensions.Logging" Version="10.0.7" />
     <!-- Plan 04 (2026-04-19): bumped from 10.0.4 to 10.0.6 to satisfy NU1109 with
          Microsoft.Extensions.AI 10.5.0 (transitively requires Logging.Abstractions >= 10.0.6). -->
@@ -45,14 +45,14 @@
     <PackageVersion Include="Microsoft.EntityFrameworkCore.Design" Version="10.0.7" />
     <PackageVersion Include="Microsoft.EntityFrameworkCore.Relational" Version="10.0.7" />
     <PackageVersion Include="Npgsql.EntityFrameworkCore.PostgreSQL" Version="10.0.1" />
-    <PackageVersion Include="Npgsql.OpenTelemetry" Version="10.0.1" />
+    <PackageVersion Include="Npgsql.OpenTelemetry" Version="10.0.2" />
     <PackageVersion Include="Dapper" Version="2.1.35" />
   </ItemGroup>
 
   <!-- Messaging (MassTransit 8.3.* — NEVER v9; v9 is commercial; see ADR-0007) -->
   <ItemGroup Label="MassTransit — PIN to 8.3.*; v9 is commercial, do not bump (ADR-0007)">
-    <PackageVersion Include="MassTransit" Version="8.3.*" />
-    <PackageVersion Include="MassTransit.RabbitMQ" Version="8.3.*" />
+    <PackageVersion Include="MassTransit" Version="9.1.*" />
+    <PackageVersion Include="MassTransit.RabbitMQ" Version="9.1.*" />
   </ItemGroup>
 
   <!-- Storage (AWSSDK.S3 — used against SeaweedFS per ADR-0002) -->
@@ -64,7 +64,7 @@
   <!-- Markdown / OpenXml / Slides (Phase 1+ consumers) -->
   <ItemGroup Label="Markdown / Slides">
         <PackageVersion Include="Markdig" Version="1.1.3" />
-    <PackageVersion Include="YamlDotNet" Version="16.3.0" />
+    <PackageVersion Include="YamlDotNet" Version="17.1.0" />
     <PackageVersion Include="DocumentFormat.OpenXml" Version="3.5.1" />
     <!-- ShapeCrawler deferred to Phase 5 per D-18 (raw OpenXml in v0.1). Do not re-add
          without coordinating with the Phase-5 renderer plan. -->
@@ -77,10 +77,10 @@
 
   <!-- Observability (Serilog 4.x + OpenTelemetry 1.15.3) -->
   <ItemGroup Label="Observability">
-    <PackageVersion Include="Serilog" Version="4.2.0" />
+    <PackageVersion Include="Serilog" Version="4.3.1" />
     <PackageVersion Include="Serilog.AspNetCore" Version="9.0.0" />
-    <PackageVersion Include="Serilog.Extensions.Hosting" Version="9.0.0" />
-    <PackageVersion Include="Serilog.Sinks.Console" Version="6.0.0" />
+    <PackageVersion Include="Serilog.Extensions.Hosting" Version="10.0.0" />
+    <PackageVersion Include="Serilog.Sinks.Console" Version="6.1.1" />
     <PackageVersion Include="Serilog.Sinks.Seq" Version="9.0.0" />
     <PackageVersion Include="Serilog.Sinks.OpenTelemetry" Version="4.2.0" />
     <PackageVersion Include="OpenTelemetry" Version="1.15.3" />
@@ -88,8 +88,8 @@
     <PackageVersion Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.15.3" />
     <!-- OpenTelemetry instrumentation libs lag the core OTel SDK by one patch — 1.15.2 is
          nuget-missing for these two as of 2026-04; pin to the latest available. -->
-    <PackageVersion Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.15.1" />
-    <PackageVersion Include="OpenTelemetry.Instrumentation.Http" Version="1.15.0" />
+    <PackageVersion Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.15.2" />
+    <PackageVersion Include="OpenTelemetry.Instrumentation.Http" Version="1.15.1" />
   </ItemGroup>
 
   <!-- Mapping (Mapperly source generator) -->
@@ -103,28 +103,28 @@
        Anthropic 12.8.0 is the renamed successor of the legacy "Anthropic.SDK" (see blocklist).
        OllamaSharp 5.4.18 and Mscc.GenerativeAI.Microsoft 3.1.0 close out the 4-provider matrix. -->
   <ItemGroup Label="LLM (Phase 1+) — Microsoft.Extensions.AI + 4 provider adapters">
-    <PackageVersion Include="Microsoft.Extensions.AI" Version="10.5.0" />
-    <PackageVersion Include="Microsoft.Extensions.AI.Abstractions" Version="10.5.0" />
-    <PackageVersion Include="Microsoft.Extensions.AI.OpenAI" Version="10.4.1" />
-    <PackageVersion Include="OllamaSharp" Version="5.4.18" />
-    <PackageVersion Include="Anthropic" Version="12.8.0" />
+    <PackageVersion Include="Microsoft.Extensions.AI" Version="10.6.0" />
+    <PackageVersion Include="Microsoft.Extensions.AI.Abstractions" Version="10.6.0" />
+    <PackageVersion Include="Microsoft.Extensions.AI.OpenAI" Version="10.6.0" />
+    <PackageVersion Include="OllamaSharp" Version="5.4.25" />
+    <PackageVersion Include="Anthropic" Version="12.21.0" />
     <PackageVersion Include="Mscc.GenerativeAI.Microsoft" Version="3.1.0" />
   </ItemGroup>
 
   <!-- Phase 4: PDF/HTML export -->
   <ItemGroup Label="Export">
-    <PackageVersion Include="PuppeteerSharp" Version="20.0.3" />
+    <PackageVersion Include="PuppeteerSharp" Version="24.42.0" />
   </ItemGroup>
 
   <!-- Phase 3: Auth + Identity -->
   <ItemGroup Label="Auth">
     <PackageVersion Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="10.0.7" />
     <PackageVersion Include="Microsoft.AspNetCore.Identity.EntityFrameworkCore" Version="10.0.7" />
-    <PackageVersion Include="System.IdentityModel.Tokens.Jwt" Version="8.9.0" />
+    <PackageVersion Include="System.IdentityModel.Tokens.Jwt" Version="8.18.0" />
   </ItemGroup>
   <!-- UI kit (MudBlazor — Phase 2+ only; commented out for Phase 0) -->
   <ItemGroup Label="UI (Phase 2+)">
-    <PackageVersion Include="MudBlazor" Version="9.3.0" />
+    <PackageVersion Include="MudBlazor" Version="9.4.0" />
   </ItemGroup>
 
   <!-- CLI (Phase 1+) — System.CommandLine GA (2.0.6) + Spectre.Console for progress/UX. -->
@@ -137,15 +137,15 @@
   <ItemGroup Label="Cache">
     <PackageVersion Include="Microsoft.AspNetCore.SignalR.Client" Version="10.0.7" />
     <PackageVersion Include="Microsoft.AspNetCore.SignalR.StackExchangeRedis" Version="10.0.7" />
-        <PackageVersion Include="StackExchange.Redis" Version="2.8.24" />
+        <PackageVersion Include="StackExchange.Redis" Version="2.13.1" />
     <PackageVersion Include="Microsoft.Extensions.Caching.StackExchangeRedis" Version="10.0.7" />
   </ItemGroup>
 
   <!-- Tests -->
   <ItemGroup Label="Tests">
-    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="17.11.1" />
+    <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="18.5.1" />
     <PackageVersion Include="xunit.v3" Version="3.2.2" />
-    <PackageVersion Include="xunit.runner.visualstudio" Version="3.1.4" />
+    <PackageVersion Include="xunit.runner.visualstudio" Version="3.1.5" />
     <PackageVersion Include="Shouldly" Version="4.3.0" />
     <PackageVersion Include="NSubstitute" Version="5.3.0" />
     <PackageVersion Include="NSubstitute.Analyzers.CSharp" Version="1.0.17" />
@@ -165,8 +165,8 @@
   <!-- Analyzers (applied via Directory.Build.props ItemGroup) -->
   <ItemGroup Label="Analyzers">
     <PackageVersion Include="Meziantou.Analyzer" Version="3.0.74" />
-    <PackageVersion Include="SonarAnalyzer.CSharp" Version="10.4.0.108396" />
-    <PackageVersion Include="Roslynator.Analyzers" Version="4.12.9" />
+    <PackageVersion Include="SonarAnalyzer.CSharp" Version="10.25.0.139117" />
+    <PackageVersion Include="Roslynator.Analyzers" Version="4.15.0" />
   </ItemGroup>
 
   <!--