security: publish hardened v1 initiative snapshot

Publish the reviewed security policy and evidence, exact runtime ABI enforcement, orphan-output and permission safeguards, dead-upstream cleanup, and the evidence-gated v1 launch plan.

This commit is an exact sanitized export from the private development record. Material implementation and review were assisted by OpenAI Codex; Cole Speelman reviewed the changes and accepts human responsibility.

Himesan-Output-Permission: v1.0
Signed-off-by: Cole Speelman <gamertan@noreply.localhost>

internal/compiler/model.go

@@ -86,6 +86,7 @@ type CompiledFile struct {
 	Digest     string
 	Code       []byte
 	source     *sourceFile
+	sourceMode uint32
 }
 
 // FileResult describes one source/output pair processed by Generate or Check.