Add the real-host smoke path and record, the six-pair task bank and the evaluator repair

[ammarphp]

What this adds

• Real-host path for Claude Code. It covers:
  • a harness-owned, sha-pinned host copy;
  • a deny-default Seatbelt profile, with keychain services removed;
  • a per-launch allowlist proxy that serves only the host process;
  • a single-name credential exception that never reaches sealed records;
  • live checks and automatic stop rules;
  • a go/no-go gate after the first paid run.
• First real-host engineering smoke. 8 assignments on two synthetic development tasks, one model, one seed. All 8 were sealed, scored and verified. Costs were reconciled against the caps; CLI-computed usage totalled about $2.59 against a $16 envelope. The record, including its deviations from procedure, is docs/development/evaluation-study/smoke-record.md.
• WP12 development task bank. Six valid/fault pairs across five families. It adds task and claim contracts v2, new census and calc stages, and per-family scoring profiles. The independent oracles are cross-checked against the RAVEL kernel and stock pyhf.
• Evaluator repair. Driven by the failure classes the smoke exposed. Held-out cases were committed before each change, and the 8 smoke runs are kept as replay regressions. A read-only cli.py rejudge command re-scores sealed evidence into a separate directory.

What it is not

• Engineering evidence only: no treatment effect, no reliability claim.
• The scoring rules, the development bank and its oracles await a consolidated human review.
• No paid pilot has run.

Checks

• The staged export's full suite ran on macOS: 6707 collected, 6652 passed, 53 skipped (optional dependencies and dev-only state), 0 failed.
• The exporter's evidence, agent-surface and publication checks passed.
• The task bank builds from the staged tree.
• main moves only after this PR's Linux test suite job is green, by fast-forward (not a web merge).