v0.22.0 — every gate names what it cannot verify

An adversarial confrontation against the field survey on code-as-harness (arXiv 2605.18747) produced one candidate ADR in the morning, its sizing note in the afternoon, and this release in the evening. The deterministic, zero-network gate is unchanged — it now travels with its declared blind zone.

• Per-rule non-scope declaration (ADR-0040) — GATE_NON_SCOPE stated once (rules --json, explain, ISO readiness draft banner): an assessor reading green also reads what green does not prove. Per-rule nonScope: where narrower; four rules seeded. Gate path, manifest and lint untouched.
• Survey-grounded docs pass, skeptic-audited — third guardrail talking point (SWE-bench solved-correctly), ADR-0006 change-contract amendment, distillation-surface fence in regulated-adoption, the AHE frame in the ROADMAP.
• actions/attest migration — first live proof is this very release run.

Full changelog: CHANGELOG.md