Reviewed and explicitly approved by the user before staging. Includes named compile-only acceptance/rejection scenarios, semantic contract checks, declaration-only exports and CI dependency coverage. Runtime graph unchanged; Docker runtime execution remains deferred.