Integrate Solar v3 host and correct release protocol

.file-size-exceptions.json

@@ -3,8 +3,20 @@
     "max_lines": 7726,
     "reason": "Generated dependency lockfile; preserve resolver output and integrity hashes verbatim."
   },
+  "src/engine/native-lsdp-runtime.ts": {
+    "max_lines": 1024,
+    "reason": "This existing LSDP event owner retains the accepted snapshot, patch and committed-frame boundaries. Composition planning, queued publication, source selection, metrics and errors are extracted; the remaining composition calls are the exact points that bind those actions to the current document. Moving them would introduce a second apply/publish coordinator. Revisit if the runtime lifecycle is split."
+  },
+  "src/engine/vision-presenter.ts": {
+    "max_lines": 1020,
+    "reason": "The persistent Vision session owns engine acknowledgement, installation-font admission and serialized scene loads on one presenter and canvas per host lifetime. Tracking engine readiness separately from font readiness lets failed initialization retire an incomplete presenter while failed font admission reuses the acknowledged engine. Keep this recovery state with its lifecycle owner; revisit after a lifecycle extraction preserves the single presenter and queue owner."
+  },
+  "scripts/proof/qualify-repeat-runtime.mjs": {
+    "max_lines": 1500,
+    "reason": "This retained qualification intentionally drives one Prism-exported scene through a single RAM-only native server, Solar host, Vision engine and browser session. Keeping the initial Repeat mutations, malformed replacement, reconnecting snapshot and later presented mutations in one run is necessary to prove recovery without resetting the active runtime between phases. Revisit the ceiling if this driver expands beyond the one-session Repeat contract."
+  },
   "public/vision/pkg/lumencast_vision_web.js": {
-    "max_lines": 3118,
-    "reason": "Generated wasm-bindgen 0.2.129 glue including persistent engine/font preload and boolean live-texture clear; pinned by exact bytes and SHA-256, never manually split. The 29-line increase is generated wasm-bindgen glue for the tested direct scene-parts method; SHA-pinned with the rebuilt WASM, not handwritten application growth."
+    "max_lines": 3323,
+    "reason": "Generated wasm-bindgen 0.2.129 glue pinned by exact bytes and SHA-256 to signed Vision native-contribution-atlas source 4f466e8f424ab8afb968d88d9e64310de87122a4. New generated typed atlas/capture metadata API is qualified in the producer artifact manifest; never handwritten or manually split. Revisit only on a reviewed upstream regeneration."
   }
 }

.gitattributes

@@ -6,6 +6,9 @@ vendor/lsdp-native-browser/src/error.js -text whitespace=cr-at-eol
 vendor/lsdp-native-browser/src/strict-json.js -text whitespace=cr-at-eol
 vendor/lsdp-native-browser/tree-vectors.json -text whitespace=cr-at-eol
 
+# Keep the qualified upstream presenter bytes identical to vision-assets.json.
+public/vision/ui/mainpresenter.mjs -text whitespace=cr-at-eol
+
 *.png binary
 *.jpg binary
 *.jpeg binary

README.md

@@ -59,6 +59,15 @@ Merkle hash, and applies atomic `lsdp.apply/1` notifications. See
 [native local development](docs/development/native-lsdp.md) for the Rust server
 launcher and mutation endpoint.
 
+A trusted physical lane host may also set `nativeComposition: { width, height }`
+and `nativeCompositionLSDP: { url, resource: "solar/composition", graph: "A" | "B",
+producer_id }`. The separate LSDP resource carries an active-scene composition
+plan derived by Solar from the same LSML snapshot; Main owns the producer claim
+for that physical host. This opt-in metadata path does not alter LSML snapshots
+or mutation receipts. It is a planning/publication contract, not a claim of
+completed native Solar-band rendering: the current Pulsar consumer still
+rejects unsupported surface, mask and blend content.
+
 The `@zablab/solar/server` entry runs in a Node 22+/Electron-main host. It owns
 the packaged Rust receiver, injects declared Solar/Orion resources and waits for
 real protocol readiness. The browser entry never creates a process. Full LSML
@@ -83,9 +92,12 @@ assets, missing or changed copies, and every collision when the host is promoted
 to the installed runtime root. It runs at build completion, in `check:bundle`,
 before npm packing and immediately before release archive creation.
 The four engine/host files are SHA-256 pinned in public/vision/vision-assets.json.
-Regenerate those checked-in
-assets from the configured `lumencast-vision` source after changing its Rust or
-presenter code, then run `npm run check:bundle`.
+The generated JS and WASM are pinned from the signed Vision source revision in
+`vision-assets.json`. Vision now measures intrinsic image dimensions from
+admitted assets during layout, including linked image sources and live-media
+descriptors. Its separate Vision3D API is not exposed by this 2D host.
+Regenerate the checked-in assets from the configured `lumencast-vision` source
+after changing its Rust or presenter code, then run `npm run check:bundle`.
 
 ## Development and checks