fix: placement verification and sidechat policy enforcement

- dm.py: placement-aware verify (verify_placement), checked_uuid logging, placement_mismatch events
- main-chat-watchdog.py: P0 alerts on placement_mismatch
- box-ctl.py: notify routes to sidechat, box policy command
- jobs: ops-audit and pipe-demo use sidechats
- response-harvester.py: chain deduplication

Session: sidechat/ops-restore

CHAT_POLICY.md

@@ -2,6 +2,7 @@
 
 **Status:** ACTIVE POLICY (Mandatory across all fleet automation, jobs, and operator tooling)  
 **Date:** 2026-10-04  
+**Version:** 2.0  
 **Applies to:** All autonomous agents (`muse`, `pip`, `646`, `opm`), scheduled jobs (`super job`), orchestrator tooling (`super dm`, `dm.py`), and human operators.
 
 ---
@@ -59,3 +60,17 @@ Main Chat is reserved **exclusively** for high-level human operator oversight, u
 
 1. **Dispatcher Guard:** Scheduled jobs with `schedule != "manual"` and no `dm_target` or `sidechat` configuration will be audited and retrofitted with dedicated sidechat targets.
 2. **Review Checklist:** Any PR, skill, rule, or script introducing automated messages must verify that output lands in a sidechat or log file, never in Main Chat.
+
+---
+
+## 5. Changelog
+
+### v2.0 — 2026-10-04: Sidechat-only enforcement
+* **New rule:** No DM lands in Main Chat unless explicitly authorized. `dm.py send` / `job-dispatch.py` refuse `--target main` without `--allow-main-chat` (exit 2, `main_chat_blocked` log event, before any browser navigation). Job JSON opt-in key: `"allow_main_chat": true`.
+* **Watcher:** `main-chat-watchdog.py` (every 5 min) classifies dm-log events into blocked/ authorized / violation.
+* **Triage:** `docs/SIDECHAT-POLICY-TRIAGE.md` `— where to look first on failure.
+* **Fix:** `SIDCHAT_ALIASES["heartbeat"]` de-collided — was pointing at 646's tasks thread (`1e75a740-...`); now points at the dedicated heartbeat sidechat (`0077e918-...`, reuse_key `heartbeat-opm` in `job-sidechats.json`).
+
+### v1.0 — 2026-10-04: Initial policy
+* Main Chat preservation: scheduled jobs and inter-agent communication must use dedicated sidechats.
+* Fleet addressing directory established.