Require qualified seed history for one-unit attribution and preserve owned policy helper source

[EHotwagner]

One-unit pre-Arm checks now require retained qualified seed history and a fresh, same-generation empty queue baseline. Lifecycle observations carry owning-generation identities so foreign, replaced or stale actors cannot satisfy production attribution. The native proof host retains the raw event journal and six compiled attribution controls. StockSelection compiler capture now retains bounded command/output evidence with explicit stock NuGet configuration.

The full candidate includes all seven commits since protected main fb00d0f77b6c7d0998f85a2039931c0c5eed2472: compiler-capture preparation, host attribution controls/journal, one-unit source gates, roadmap state, and the complete seed helper source with its portability/CI repair. The 49-file delta contains 5,876 insertions and 38 deletions. The helper source records real snapshot bracketing, finite empty-observed→one-shot seed setup, typed configuration observations, and the concrete owned direct-policy transport. Its profiles and native operation grants are absent.

Validation and coverage:

• Exact 71 portable Python source controls passed without real subprocess, compiler, Node, Lua or game execution. The committed observer baseline is hash-bound; the control no longer reads an operator-local historical path.
• Retained bounded preparation passed restore/build and six compiled attribution controls; the retained full compiler/PDB proof and installed capsule preparation remain separate evidence. Forty-two authored host compiler inputs match the selected product source exactly; existing host receipts are retained, with no claim of a new host/Fable/Cargo compilation.
• The fresh narrow policy restore/build and composed pure proof passed: two projects, two PE/PDB pairs and 19 actual source checksum joins. SourceLink remote-content verification remains unknown.
• Native complete-record-source now runs the 71 portable helper/producer controls before its existing typed policy/Quint gate. Native prearm-source-controls retains its 14 readiness and three synthetic live-boundary controls and adds the one-unit and mocked compiler-capture JavaScript tests. At the preserved prior head, the 71-control/full typed-policy gate and new JavaScript controls passed. The live gate failed because repeated-parent code dereferenced the next multiplexed frame as a result. This successor awaits the exact parent/input/stage with controller, module and basis joins, validates permitted paired observations, and refuses other frames under a three-second/eight-envelope bound. The successor passed source diff checks; compilation and exact-head native CI are pending.

The added-source audit found no private evidence paths or credential-shaped literals; the fixed temporary attempt root is an intentional implementation contract. This bounded audit is not a secret-scanner guarantee. Controls that launch the real policy/apphost or buffered-writer subprocesses require separately selected compiled/private inputs and are outside the portable gate. Canonical source adoption/placement separately passed against retained helper head 37e66d74daf8d38c703b22b21086aac65b17523a; this test-only successor leaves those helper bodies unchanged. Lua syntax/runtime compatibility, canonical current-process/final qualification, actual no-game owned policy transport, seed operation and requested-unit production remain separately admitted qualifications. Post-last-snapshot disconnect coverage remains unresolved. Source delivery does not grant actor eligibility or any of the six useful-play outcomes.