Repair opaque dependency boundary selection

[sneakocom]

Summary

• preserve AV-EXP-002 as a permanent FAIL
• preregister AV-EXP-003 before repaired outcomes
• require check-level dependency completeness in plan v2
• force only checks with incomplete, unknown, or open opaque boundaries
• add a bounded deterministic Python boundary inspector with provenance
• replay AV-EXP-001/002 and run ten adversarial SHADOW cases
• expose exact safety-policy additions in Visible Value receipts

Result

• AV2-006: old miss; repaired replay selected in both AV arms
• AV-EXP-001 repaired misses: 0; added test executions: 0
• AV-EXP-002 repaired misses: 0; added test executions: 6 core / 7 selector arm
• AV-EXP-003 adversarial misses: 0; 7 added checks; 10/10 remain targeted
• lifecycle: VERIFIED; trust: OBSERVE/SHADOW

Verification

• npm run verify
• 107 tests
• 15 conformance scenarios
• 10 determinism checks
• AV-EXP-003 result and regression-matrix verification
• 10/10 value receipts pass the released Opsle validator