Product MVP: guided local Project Decision Loop

[CasterlyGit]

Closes #36.
Closes #38.

Product outcome

Delivers one self-explanatory local product flow for exactly two explicitly opted-in synthetic projects. The first screen explains what Cognitive OS noticed, shows both source rationales and confidence, and requires a clear Approve/Reject choice. The outcome screen shows the bounded plan or blocker, non-effects, verification evidence, next decision, and persisted timeline.

Real versus simulated

Approve/Reject invokes the real ProjectDecisionLoop, writes actual append-only local state, runs the existing dependency-closed compiler, and reconstructs the same result after server restart. Only downstream Paver/Codex execution is simulated because no external authority is granted.

Safety boundary

• binds only to 127.0.0.1; bundled assets and no outbound calls
• exactly two manifest scopes; no ambient storage discovery
• exact proposal ID plus local decision token
• route preserves scope and P1 draft-only permission
• no GitHub, Krish, Paver, Codex, deployment, or other external effect

Verification

• python3 -m unittest discover -q — 146 passed
• real browser: initial product, Approve, Reject, and server-restart state restoration exercised
• full-page rendered inspection; zero browser console errors
• CLI/demo restart proof retained
• public-data guard and diff checks passed

Product boundary

No general multi-project field, dashboard, Sidecar, Graph Workbench, live dispatcher, adapter, Krish connection, or later vision stage. Merge remains human-only.