Record Netclaw Bash v0.3 acceptance

[Aaronontheweb]

Records the completed static Bash downstream migration without closing the remaining bounded-loop or PowerShell gates.

Evidence:

• Netclaw PR PR 2: BashLexer + opaque-region scanner #5 migrated approval analysis to occurrence, ancestry, cwd, compatibility argument, and explicit redirect facts.
• Netclaw PR PR 3: verb tables + BashCommandParser core #6 hardened macOS alias and authored redirect traversal handling.
• The reviewed 120-case approval matrix remains fail closed for incomplete or unknown facts.

Validation:

• openspec validate v0-3-structured-shell-analysis --strict
• Release build and all 2,370 tests passed on this documentation branch before the final text-only evidence update.
• Header verification passed.
• Adversarial review: GO on staged diff SHA-256 2aca9ecdc0c4d4556903dc3c3f7a7a1235763c0b9de090a6509e81145352208d.