[0z5a]

Workers can agree on revision strings while importing an unregistered source tree. Freeze the qualification runtime from VIME/RLT Git objects and the retained patched MCore archive, check file bytes before launching, and compare observed worker module hashes after recovery.

The finite launcher now requires a source manifest and roots for execution, passes verified roots to the child, and binds all phase receipts to that manifest. Resume rejects a different manifest. The post-run audit rechecks raw runtime/rollout records and requires the Ouro and MCore implementation modules in each phase.

Stacked on #21; the diff contains only this increment. Model, optimizer and serving implementations are unchanged.

Validation: 89 CPU tests pass, including 22 new source/controller cases. A finite Python child verifies its import root and exits naturally. All 768 retained source files match, and 202 real CPU-imported modules match the frozen sources. The later RLT working tree is correctly rejected against the older qualification pin. Raw logs, XML, hashes and the report are included in benchmarks/results/native-source-membership/ and docs/native_source_membership.md.

Comparison	Baseline throughput	ScaleRLT throughput	Speedup	Peak memory reduction	Reward convergence
Official Ouro Thinking continuous/fresh-worker recovery	NOT_RUN	NOT_RUN	NOT_MEASURED	NOT_MEASURED	NOT_ESTABLISHED
RLTT / FlashLoop / slime / Megatron campaign	NOT_RUN	NOT_RUN	NOT_MEASURED	NOT_MEASURED	NOT_ESTABLISHED

This verifies source-file membership using trusted records; it does not attest live code or compiled dependencies. Official Ray/CUDA E2E execution and reward convergence remain pending.