v0.6.1 — constraint set 7 (chain 16)

v0.6.1 — constraint set 7, for chain 16 only

⚠️ Every verifier key and program digest changed. This build refuses to run or verify chains 14 and 15;
it runs only a genesis cut with it (chain 16: rand-node genesis --hardening-v6 --bundle-guest v2).
Circuits pin: b9ffc39.

🔐 Constraint set 7 (#52, #53, #54, #58)
LogUp blinding Every LogUp terminal is blinded (a BLIND bus, extension-field blinds) and every
declared table is floored at 2^7 rows (INT-2 / GV-1).
ZKM-1 / ZKH-2 Input and public words and the salt lanes are range-checked to 32 bits in the AIR.
HCS-4 POSEIDON2_LEN (syscall 7), the length-bound Poseidon2 sponge.
HCS-1 key_derivation_v2 is the verifier-key salt stream.
ISA-4 JALR clears bit 0 of its target and requires funct3 = 0.
VERIFIER-1 The rVM verifier program refuses a non-zero commit-phase PoW word, in-circuit.
ISA-1 (#53) The pc window is enforced by the prover and by Machine::verify.
CPUV-1 (#54) The verifier-key cache evicts least-recently-used and builds each key once.
R5 (#58) Every value any rVM chip writes or answers is bound on its row.
R4-b guest-sdk: keccak/sha256_compress take arrays; poseidon2 is unsafe.

🧭 v0.6 residuals
#55 Under hardening_v6 a call to a program with a public input is bound to its transaction.
#56 A keccak/sha256-bearing call proof's memory height is capped at its shape's honest ceiling.
#57 rand program deploy --input … / --check-call refuses, before paying, a program whose
call cannot be proved at tier 14.
#59 A sealed-form record's shape must be an admitted shape of its guest (sync path; dormant).
#46 Orphan proposals only from the current and next epoch sets, sixteen per proposer (CN-5).
#60 Every subcommand that opens RocksDB raises the open-files limit.
#61 Guest v2's real-proof cheating suite runs nightly in CI.

🚀 Deploy
deploy/cut-chain16-genesis.sh and deploy/cutover-fleet-chain16.sh (all-stop / all-start, 26 hosts).
The bridge relayer needs this release's rand (chain 16 pins guest v2 and the cs7 verifier keys).

Open: #45 (end-to-end forged-aggregate exercise) and the production rVM exit/aggregate proofs under
constraint set 7 (they need >128 GB) — aggregation stays off on every chain until both are done.
#49 (GPU kernel aliasing) needs a GPU run; #51 needs a design decision.