v1.36.200

Add explicit internal memory write admission with bounded initial reads, JSON depth checks and output cost checks before preparation. Separate hard processing limits from target sizes so explicitly requested reductions can recover oversized stores without bypassing processing limits. Default CLI/MCP writer limits remain unchanged.

Restore the dry-run refusal code for memory mutations by checking write permission before publication starts; retain zero writes and duplicate no-op behavior.