Publish provider-free EXP-001 live authorization preflight

[sneakocom]

Purpose

This is provider-free preparation for future EXP-001 live authorization.

It is not a live experiment, authorization consumption, provider qualification
completion, lifecycle advancement, permission to merge automatically, or
permission to execute any subject.

Publication identity

• Feature commit: 1dd76f73461da5cfdd17911127f470eaf8a4662a
• Base: opsle/research:main
• Authorization class: LIVE_PROVIDER_RUN
• Public authorization-set identity:
  sha256:8259f5b664235e5914ad4a53966a1155f8f90ad2014dc704f50ea394af32d0ec
• The external set has exactly four label-bound records. Public evidence
  validates cardinality, uniqueness, experiment/block binding, validity
  windows, and authorization identity without publishing the private labels,
  selected block, per-label authorization IDs, seed, or arm mapping.

Prepared evidence

• Qualification: PASS; 13 authorization-set validations.
• Fixture authorization is rejected by the live gate.
• Missing, extra, duplicate, expired, not-yet-valid, malformed, wrong-block,
  wrong-experiment, and duplicate-identity cases fail closed.
• Subject renderings: 0.
• Subject-visible canonical arm identifiers: 0.
• Deterministic replay: 2 runs with byte-identical payloads.
• Provider/model subject runs: 0.
• Authorization consumptions: 0.
• Experiment runs: 0.
• Experiment results: 0.
• Result envelopes: 0.
• Prior prepared qualification: 88/88 repository tests passed; registry
  validation, dashboard freshness, Ruff on the prepared preflight slice,
  Actionlint, and git diff --check passed.
• Publication preflight reconfirmed the registry validator, generated-dashboard
  freshness, prepared-slice Ruff, Actionlint, git diff --check, artifact
  hashes, and a redacted Gitleaks scan.
• EXP-001 remains PLANNED with no lifecycle advancement.

Unresolved readiness conditions

• Live account entitlement remains unresolved. Catalogue eligibility does not
  establish account-specific readiness.
• A distinct dated provider/model snapshot remains unresolved, so immutable
  model weights cannot be claimed.
• Current catalogue/pricing information does not authorize execution.
• The validated external authorization set remains unconsumed; any future
  subject launch requires separate explicit execution authority and fresh
  fail-closed launch-time checks.

Review boundary

This PR creates a reviewable provider-free artifact only. Do not auto-merge it
and do not use it to launch subjects, consume authorization, create an EXP-001
run/result, or advance the lifecycle. Substantive review should be performed in
a fresh independent reviewer context.