[WP02 · SubStep 02.04] Add ArcScope compiled identity and independent version sources

[deku2026]

ArcScope now exposes offline --build-info --evidence PATH from compiled source/run metadata and embedded independent version sources. Candidate preparation executes the actual AOT application; portable verification rejects missing or modified internal identity even when archive hashes are recomputed. CI also inspects all four owned PE assemblies.

Only Build.Policy moves to the verified published 1.0.0-ci.20.1; Contracts stays at 1.0.0-ci.36.1. Reviewed ArcNotes 0c797e30690a10d8798ddca19ca7f37b16cecf01 source is adapted through immutable provenance r2, with r1 retained and exact source/target hashes. ArcScope format/storage future owners are explicit. Existing app IDs, offline startup, transport and five-platform native gates remain intact.

Local validation passed: locked restore, formatting, Release build, 109 tests, four actual PE identities, provenance/licence checks, no unrelated package-version changes, runtime environment independence and wrong-source build rejection. The clean Windows x64 Native AOT candidate passed offline metadata retrieval, native UI/live Cloud success/error checks and portable packaging. Hosted five-platform/security checks and merged-main public/runtime verification remain required.

Scope: WP02.04, following ArcForges-Design PR #52. This support metadata does not establish commercial instrument workflows or later format/storage compatibility.

[deku2026]

Complete review of the 24-file change at 265cd29 found no remaining actionable issue. The full adapted source was independently reconstructed from reviewed ArcNotes merge 0c797e30690a10d8798ddca19ca7f37b16cecf01 and compared byte-for-byte, including every r2 target digest. The original r1 record and full licence/attribution remain intact. ArcScope-specific absent format/storage sources and README distribution/source pointer were separately reviewed.

Checked nine-axis independence and absence semantics, actual source/run/dirty/timestamp metadata on all owned assemblies, offline runtime entry and environment independence, exact dependency locks, package internal metadata tamper rejection, owner-local references and unchanged live transport/app identities. The only changed resolved package version is Build.Policy 1.0.0-ci.20.1; tool transitive dependencies retain existing central pins.

ArcScope local evidence passed independently: 109 tests, locked restore/format/build, provenance and licence checks, four actual PE metadata comparisons, wrong-source rejection and runtime environment mutation. Clean Windows x64 Native AOT candidate executed offline build info and the real native UI/live Cloud success/error scenarios, then passed archive packaging. These are not borrowed ArcNotes runtime results.

Merge remains conditional on all applicable latest-head CI checks, followed by a separate merged-main public-byte and runtime verification.