add53faf

By: ValentinHirschi <valentin.hirschi@gmail.com>

Prove corrected rules from fresh ordinary sources and sample live sealed domains

Retain weighted proof assumptions unchanged while independently rebuilding exact ordinary-source certificates for checked runtime export. Add typed guard diagnostics and bounded read-only profiling of sealed production records; document real rule boundaries and the absence of demonstrated campaign gains.

Co-authored-by: Codex <noreply@openai.com>