[U37] Repeat the holistic trust and terminal composition audit

[ZempTime]

PRD: #1
Delivery unit: U37
Campaign: C11
Canonical graph: https://github.com/ZempTime/shortbread/blob/246320c73d81e5afdf0490b43a2b02272f40268b/docs/initiatives/2026-07-shortbread-v1/05_delivery_replan/output/2026-07-20-delivery-plan.md
Common unit contract: https://github.com/ZempTime/shortbread/blob/246320c73d81e5afdf0490b43a2b02272f40268b/docs/initiatives/2026-07-shortbread-v1/05_delivery_replan/output/UNIT-CONTRACT.md

• Acceptance umbrella / blockers: GitHub Establish core security and trust controls #14 and Rehearse release readiness and close the factory loop #17; blocked by U20, U27, U30, U32, U34, and U36.
• Outcome: Independent reviewers reconcile every PRD story/ADR/umbrella/leaf with merged behavior and repeat the complete trust/data-flow audit over offline, feedback, receipts, deletion, provider/provisioner, artifacts, fixtures, screenshots, runtime/browser network behavior, dependencies, logs, and private-content boundaries.
• Failure/recovery: Missing acceptance, unresolved review, secret/private/proprietary content, stale artifact/docs, unsafe network/log behavior, or unverified recovery is a blocker assigned to a bounded repair unit; it cannot be waived by vote.
• Evidence: Full browser/request/CLI/unit/provider-contract/static/security/license/secret/container/build/link/screenshot suites plus final Standards, Spec, security/operations, OSS/private-content, and clean-room verdicts.
• Central surfaces / impact: Final evidence/report only until a blocker creates a separate repair. Reviewers must be independent of the implementation under audit.
• Safe split: Review axes may run in parallel on the same fixed release candidate; U38 waits for one reconciled blocker-free verdict.

Every integration records a factory candidate with evidence or No reusable harvest.