d4c3811665
Design + cross-component contract for verified patched-client capability negotiation: architecture inventory, transport choice (autopatch stdout -> launcher, sibling /openfut/fifa17/capability endpoint), the versioned capability and its VERIFIED semantics, autopatch verification states, launcher per-process state, source-IP binding, the session-stable freeze point, the additive store switch, the trust model (local preservation, not attestation), the fail-closed matrix, and P2 retention.