fix: disable ChromaDB telemetry in all client creation paths (closes #1427)

Set anonymized_telemetry=False via chromadb.config.Settings on all
PersistentClient calls:

- nexus/mempalace/searcher.py: _get_client()
- scripts/mempalace_export.py
- scripts/audit_mempalace_privacy.py
- scaffold/deep-dive/relevance/relevance_engine.py

ChromaDB enables anonymous telemetry by default. For a sovereign,
local-first system this is a data leak. Now disabled everywhere.

nexus/mempalace/searcher.py

@@ -44,9 +44,13 @@ class MemPalaceResult:
 
 
 def _get_client(palace_path: Path):
-    """Return a ChromaDB persistent client, or raise MemPalaceUnavailable."""
+    """Return a ChromaDB persistent client, or raise MemPalaceUnavailable.
+
+    Telemetry is disabled for sovereignty — no data leaks to Chroma Inc.
+    """
     try:
         import chromadb  # type: ignore
+        from chromadb.config import Settings
     except ImportError as exc:
         raise MemPalaceUnavailable(
             "ChromaDB is not installed. "
@@ -59,7 +63,10 @@ def _get_client(palace_path: Path):
             "Run 'mempalace mine' to initialise the palace."
         )
 
-    return chromadb.PersistentClient(path=str(palace_path))
+    return chromadb.PersistentClient(
+        path=str(palace_path),
+        settings=Settings(anonymized_telemetry=False),
+    )
 
 
 def search_memories(

provenance.json

@@ -9,28 +9,28 @@
   },
   "files": {
     "index.html": {
-      "sha256": "562418d180da01b0eae320ee6604c33cf70aeee03d0ff918c27d0aa36509d6d5",
-      "size": 20989
+      "sha256": "71ba27afe8b6b42a09efe09d2b3017599392ddc3bc02543b31c2277dfb0b82cc",
+      "size": 25933
     },
     "app.js": {
-      "sha256": "df304e3d4d76ecca6f84a477d7729625fe51ff23ef3a24df554a61cf5b8f2d43",
-      "size": 140652
+      "sha256": "2b765a724a0fcda29abd40ba921bc621d2699f11d0ba14cf1579cbbdafdc5cd5",
+      "size": 132902
     },
     "style.css": {
-      "sha256": "a7228e516f8210bac580a1caa2f6223ec9ec533e46c58b585a7cbc53bc047fba",
-      "size": 60727
+      "sha256": "cd3068d03eed6f52a00bbc32cfae8fba4739b8b3cb194b3ec09fd747a075056d",
+      "size": 44198
     },
     "gofai_worker.js": {
-      "sha256": "01d1444b1e4c899a7579aa4e5624d5a0683e10b54a924005a7003534c607a500",
-      "size": 1925
+      "sha256": "d292f110aa12a8aa2b16b0c2d48e5b4ce24ee15b1cffb409ab846b1a05a91de2",
+      "size": 969
     },
     "server.py": {
-      "sha256": "79292dfd6955020f5d8ae368e8ce61a4831255dc1a935cbf8f51b35eaa2e4498",
-      "size": 4389
+      "sha256": "e963cc9715accfc8814e3fe5c44af836185d66740d5a65fd0365e9c629d38e05",
+      "size": 4185
     },
     "portals.json": {
-      "sha256": "82f91c3b8707d197e6295e594e616e92f9e215399a7181a130874e23381efa9f",
-      "size": 6399
+      "sha256": "889a5e0f724eb73a95f960bca44bca232150bddff7c1b11f253bd056f3683a08",
+      "size": 3442
     },
     "vision.json": {
       "sha256": "0e3b5c06af98486bbcb2fc2dc627dc8b7b08aed4c3a4f9e10b57f91e1e8ca6ad",
@@ -41,8 +41,8 @@
       "size": 495
     },
     "nexus/components/spatial-memory.js": {
-      "sha256": "0945845828b3cfaac6060050bf138463b5108b6c135e4c396751da92a7376534",
-      "size": 38272
+      "sha256": "60170f6490ddd743acd6d285d3a1af6cad61fbf8aaef3f679ff4049108eac160",
+      "size": 32782
     },
     "nexus/components/session-rooms.js": {
       "sha256": "9997a60dda256e38cb4645508bf9e98c15c3d963b696e0080e3170a9a7fa7cf1",

scaffold/deep-dive/relevance/relevance_engine.py

@@ -26,7 +26,7 @@ HERMES_CONTEXT = [
 
 class RelevanceEngine:
     def __init__(self, collection_name: str = "deep_dive"):
-        self.client = chromadb.PersistentClient(path="./chroma_db")
+        self.client = chromadb.PersistentClient(path="./chroma_db", settings=chromadb.config.Settings(anonymized_telemetry=False))
         self.embedding_fn = embedding_functions.SentenceTransformerEmbeddingFunction(
             model_name="all-MiniLM-L6-v2"
         )

scripts/audit_mempalace_privacy.py

@@ -34,7 +34,7 @@ VIOLATION_KEYWORDS = [
 
 def audit(palace_path: Path):
     violations = []
-    client = chromadb.PersistentClient(path=str(palace_path))
+    client = chromadb.PersistentClient(path=str(palace_path), settings=chromadb.config.Settings(anonymized_telemetry=False))
     try:
         col = client.get_collection("mempalace_drawers")
     except Exception as e:

scripts/mempalace_export.py

@@ -18,7 +18,7 @@ DOCS_PER_ROOM = 5
 
 
 def main():
-    client = chromadb.PersistentClient(path=PALACE_PATH)
+    client = chromadb.PersistentClient(path=PALACE_PATH, settings=chromadb.config.Settings(anonymized_telemetry=False))
     col = client.get_collection("mempalace_drawers")
 
     # Discover rooms in this wing