Genesis Proof Hardening + Sweep Framework Landed

Genesis imported, hardened, and locally validated its v1.2 execution pack end to end, with fail-closed governance on unstable paths and proof anchored to a recorded receipt bundle.

• The v1.2 execution pack is now imported, hardened, and locally validated end to end.
• Governance now fails closed on the unstable ORCH-LG-01 path unless an explicit operator override is supplied.
• Hash-chain logging and data-path hardening were retained for multi-process safety and cross-version stability.

Genesis now has a stronger operating posture: validation is reproducible, risky paths are constrained by default, and proof is attached to a recorded receipt bundle instead of an undocumented local run.

• Latest full proof run result: PASS.
• Proof is anchored to commit b3e8c35 and a recorded receipt bundle.
• Service exposure posture is local-only by default.
• Override use requires explicit operator intent.

• Keep release notes aligned with any temporary override use.
• Expand proof reporting without weakening the default fail-closed stance.
• Preserve deterministic validation as additional execution paths are promoted.