fix: Add tr-worker files, sanitize IPs, update validation checklists

- Add realtime_qdrant_watcher.py and mem-qdrant-watcher.service to tr-worker/
- Sanitize private IPs (10.0.0.x → <QDRANT_IP>, <OLLAMA_IP>)
- Replace absolute paths with placeholders
- Add GIT_VALIDATION_CHECK.md for security validation
- Update validation checklists to v2.4
- Remove session.md from git (local-only file)

checklist.md

@@ -536,7 +536,61 @@ Before releasing/sharing:
 
 ---
 
-### 13. Sign-off Checklist
+#### 12.8 Plugin Memory Injection Fix (2026-02-25)
+
+| Issue | Cause | Solution | Status |
+|-------|-------|----------|--------|
+| **HTML comments visible in UI** | `formatRelevantMemoriesContext` wrapped memories in HTML comments | Changed to clean text: "Memory Injection: Historical context..." | ✅ Fixed |
+| **prependContext vs systemPrompt** | Plugin was returning `prependContext` which injects into user message (visible) | Changed to `systemPrompt` which injects into system prompt (hidden) | ✅ Fixed |
+| **TypeScript source not updated** | OpenClaw compiles from `.ts`, edits were only to `.js` | Updated both `index.ts` and `index.js` | ✅ Fixed |
+| **Gateway restart needed** | Plugin changes require gateway restart to take effect | Restarted gateway after file updates | ✅ Fixed |
+
+**Files Modified:**
+- `/root/.openclaw/extensions/memory-qdrant/index.ts` - Main TypeScript source
+- `/root/.openclaw/extensions/memory-qdrant/index.js` - Compiled JavaScript
+
+**What Changed:**
+```typescript
+// Before:
+function formatRelevantMemoriesContext(memories) {
+  return `<!-- relevant-memories-start -->
+<relevant-memories>
+...`;
+}
+return { prependContext: formatRelevantMemoriesContext(...) };
+
+// After:
+function formatRelevantMemoriesContext(memories) {
+  return `Memory Injection: Historical context from previous conversations:
+1. [category] text`;
+}
+return { systemPrompt: formatRelevantMemoriesContext(...) };
+```
+
+**Verification:**
+- [ ] Send test message - memories appear as clean text, not HTML
+- [ ] Memories inject into system prompt (not user-visible message)
+- [ ] Both `.ts` and `.js` files updated consistently
+- [ ] Gateway restarted and running
+
+---
+
+### 12.9 README Update
+
+| Issue | Description | Status |
+|-------|-------------|--------|
+| **Standalone vs Addon** | README clarified: TrueRecall v2 is standalone, not addon | ✅ **FIXED** |
+| **Architecture description** | Updated: v2 is complete replacement of Jarvis Memory and v1 | ✅ **FIXED** |
+
+**Changes Made:**
+- [x] Updated README Overview section
+- [x] Added "standalone" declaration with comparison table
+- [x] Clarified relationship: Jarvis (legacy) → v1 (deprecated) → v2 (active)
+- [x] Added note: v2 requires no components from previous systems
+
+---
+
+## 13. Sign-off Checklist
 
 | Section | Status | Date | Checked By |
 |---------|--------|------|------------|