~anthropic/claude-sonnet-latest → B (7:3)

Side B is a real security/design fix: an XSS-critical bug where the reducer was silently mangling stored identity strings (double-canonicalizing usernames/agents), replaced with strict parse-at-the-boundary validation, consistent wire format, optional delegates, and updated tests across CLI/server/integration suites. Side A adds a genuinely useful sanitize-on-render fix for untrusted HTML but is a much smaller, single-purpose patch mostly composed of a large auto-generated Cargo.lock diff for a new dependency, with limited actual logic (one small module plus two call-site edits).