Agent ETA v0.10.0 — Saved export verification

Saved journal exports now have a built-in acceptance check: agent-eta verify-export FILE. It streams the existing file, checks its envelope, run/forecast ordering, manifest/end/actual counts and original-byte SHA-256, and exits nonzero for truncated, appended or inconsistent output. The old agentwhen alias also supports it.

Verification reads only the named file, creates no database and preserves every input byte. A complete export can still contain damaged original forecasts or orphan receipts; these remain evidence, with forecast validity explicitly unchecked. The report does not establish the original export process exit status, equality with a source database, authentic prospective collection or prediction accuracy.

Validation: 300 local tests; clean installed-package CLI/SDK/HTTP checks; unchanged same-sample synthetic prediction, evaluation and holdout output versus v0.9.2; four public Linux/Windows × Node 22/24 CI jobs. Packaged files were checked against the reviewed source and scanned for private database/workspace artifacts.

The default model, frozen evaluation protocols and original records remain unchanged. Independent real future-holdout evidence is still pending. This is an experimental GitHub release, not an npm registry publication.