Advance the research runtime, adaptive inference, and safe shadow control plane

[kai9987kai]

Summary

• adds a fail-closed, append-only shadow study control plane with seal → commit → close → reveal → verify, strict canonical artifacts, canonical session-hash inputs, and read-only Studio/browser status
• upgrades randomized execution provenance to ledger-issued, route/session/policy/context-bound records; namespace-shaped or wrapped shadow hashes now fail closed
• protects Windows seed capsules with a native current-user-only DACL verified before write, after fsync, and on read; POSIX remains 0600
• unifies runtime compute controls and automatic budget selection across source, terminal, browser, and packaged runtime surfaces
• adds v51 prediction-stability and top-k Jensen–Shannon shadow diagnostics, plus verifier-aware Qwen selection and expanded Omni v42 training coverage
• broadens the deterministic runtime manifest to syntax-check and hash the full source/package runtime closure

Research and experiment evidence

The v51 CPU pilot evaluated 5 policies × 3 fresh seeds × 32 held-out requests (480 total). The default patience-2 / tolerance-0.005 policy preserved 100% prediction agreement across 96 requests while reducing mean reasoning cycles by 28.8%; the aggressive policy changed one prediction and remains rejected. The distribution-drift diagnostic is shadow-only and cannot alter an answer or trigger an exit.

Validation

• 546 passed, 2 skipped full repository suite
• 309 passed integrated security/runtime/training gate
• source/package model-variant parity current
• compile-all, manifest freshness, conflict-marker scan, and git diff --check clean
• PyInstaller SupermixRouteShadow.exe built and visually inspected in File Explorer
• frozen EXE lifecycle: 1 commitment, 1 match, 0 mismatches, final state reveal_verification_complete, read-only status, execution disabled
• frozen EXE SHA-256: 2265ED2E939129FC61077B174DC35BC2AD8D8B4B9820C81017E78E06E9DA11C8
• Studio browser status verified as GET-only with no mutation controls and no console errors

No route activation or automatic policy promotion is introduced.