sync from GitHub source-of-truth: 0-CDN restraint surfaces + FedRAMP not-held scoping

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

R5: add a11oy_grc_restraint.py (Restraint control contribution to /grc) — additive.

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

R5 Restraint -> Governance + GRC + Nav (additive): AR-006 restraint signal in Auto-Review; Restraint control contribution in /grc matrix+OSCAL; /restraint + /restraint-bench nav + flagship cross-link. 0 CDN; 0 codenames; additive-only; aligns-with not certified.

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

R4: RESULT_R4_ENERGY_BENCH.md (audit record, additive doc)

R4: additive /energy frugality panel injection (front-win wrapper; no edit to szl_energy_sovereign)

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

feat(restraint): R2 - serve /agent-loop trace UI (restraint verdict column) from react_core; embedded byte-identical web/agent-loop.html so the surface renders without a Dockerfile COPY. Ponytail MIT, governed. Byte-identical to GitHub 7bbae21. Additive; PENDING until R1.

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

R4: wire a11oy Restraint -> ENERGY + estate KPI + MEASURED bench dashboard (additive)

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

feat(restraint): R2 front-end - 'Restraint applied' indicator on /nemo (rung+lines-saved+ceilings+signed receipt) and restraint verdict column on /agent-loop trace. Ponytail MIT, governed. Byte-identical to GitHub 3a8305e. Additive; PENDING until R1 live.

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

chore(sync): mirror front-door files to Space (hf-sync)

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

feat(restraint): a11oy Restraint — governed + measured frugality gate

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

sync(hf): mirror corpus theorem-runtime-manifest doctrine fix to live Space (additive)

sync(hf): mirror GitHub-canonical lean_commit_sha pins to live Space (additive)

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

F4 fix: 3D Energy hologram into LIVE energy page (szl_energy_sovereign._html) — additive toggle, 2D fallback, J/token ROADMAP honest

F5: 3D constitution/quant at distinct *-3d paths (additive, no clobber of sibling /constitution /quant)

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

F2 fix: drop string workspace from /classify body (was 500ing the verdict sphere)

F5: /constitution /quant /estate-hologram 3D sovereign surfaces (additive, image-only)

Mirror web/holo.html from GitHub main (unblock Docker build: COPY web/holo.html not found)

F4: 3D inference router + energy hologram + GRC OSCAL matrix (additive, 2D fallback, 0 CDN)

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

F2: Factory3D + AutoReview3D holographic enhancements (additive, 2D fallback)

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

chore(sync): mirror front-door files to Space (hf-sync)

fix(citations): repoint 7 phantom proofs to real Lean (task #938)

dry-run: verify HF write access (no-op re-commit)

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

chore(sync): mirror front-door files to Space (hf-sync)

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

Sign live MEASURED cert + anchor DSSE in public Sigstore Rekor (logIndex 1814643067)

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)

chore(sync): mirror backend .py + Dockerfile to Space (hf-sync-backend)