[DM-085] Reconcile the merged V0 RC boundaries

[nicoechaniz]

Closes #122

Claim-ID: 3e9498b5-9a98-46ec-afe2-282a41e4ad2f
Deployment: not deployed

Scope

Complete the Matrix stage of the V0 RC closeout. Exact head is cd8a3c37e927ca391a7e385e64b26ef5339bc79e, tree d1ff7a6fc6b1351f67fd13171dcee51242fc9804.

The branch:

• reconciles the merged Matrix 09414d6…, Cluster 820e379… and Tribe 294e119… functional boundaries;
• records Tribe's reviewed e81c5da… tree-equivalent head and 148 zero-failure tests on Python 3.10–3.13;
• corrects Matrix suite semantics to 640 tests including 22 declared skips, zero failures;
• classifies freezer d3ac479d… as superseded historical evidence with its exact subject;
• replaces unreachable Hermes merge commit 0db191… with remotely reachable PR head 5c8870c1625761956a56fd2b225720dbe9083e45, which has the identical audited tree ac7dec02ca029e895963402788bd1cdc3afb36f8 and identical contract-file digests;
• regenerates Hermes provenance, schema and vectors for archive SHA-256 09789981423142fec1a26239d5209f96c41453078ff73e2fc4a11e1d45728660.

Tests

• Full source-isolated suite with the real reachable Hermes checkout: 640 tests, 21 skips, zero failures; shutdown emitted the known DM-022 TemporaryDirectory diagnostics after exit 0.
• Real Hermes import plus contract/profile tests: 9/9 pass.
• Ruff format/check, strict mypy on changed Python, compileall, vector --check, diff-check and packaged secret scan: pass.
• Reproducible build: two byte-identical outputs; wheel 11ef77b2b4c743cfa25d6652e9cad3594e41223cb73f558d5ead8f47bd43609d, sdist b23d66004039dc9d454c1bf4382b87a381c538fe8194a3c262440425ffa6de69.
• Independent adversarial review: PASS on exact cd8a3c3… / tree d1ff7a6…; remote reachability, tree/digest identity, archive, generators, real-Hermes suite, artifacts, docs and boundaries reproduced.
• GitHub CI: Python 3.11–3.14, Hermes contract, package, conformance and coordination all pass.

Limits

This closes only the Matrix repository stage. Cluster must pin the resulting Matrix main commit, then Tribe metadata and the external content-addressed manifest/preflight are finalized. It authorizes no host, SSH/access, service, real custody, participant contact, key operation, production, publication or cutover.