complete ENGI demo V9 closure: proofs, source-to-shares, scenarios, and host runtime

Advance the ENGI demo from the earlier V9 baseline to a materially more complete and test-backed V9 implementation.

This commit finishes the main remaining V9 closure work across proof surfaces, source-to-shares accounting precision, seeded scenario depth, and host/runtime grounding.

What changed
- complete the next V9 pass in the canonical demo implementation and UI
- strengthen proof closure with additional witness-backed materialization and static-heuristics artifacts
- expand the public-safe artifact set and deliverables/proof witness coverage
- deepen source-to-shares precision with normalization ledgers, replay traces, and deterministic remainder ordering
- enrich the seeded scenario corpus with polyglot and many-asset normalization families
- add host capability/containerization truth for the local V9 prototype via Dockerfile, .dockerignore, and refreshed HOST_CAPABILITIES surfaces
- update the V9 implementation matrix and README to reflect the current V9 state

Notable V9 additions surfaced by this commit
- .engi/static-heuristics-registry.json
- .engi/materialization-proof.json
- .engi/materialization-exclusions.json
- stronger source-to-shares and accounting-precision reporting
- richer scenario fixture and coverage reporting
- minimal local container runtime/test support

Verification
- npm test passes cleanly: 61/61

Author: geraldarthurdavis

engi-demo/.dockerignore

@@ -0,0 +1,6 @@
+.git
+.gitignore
+data
+node_modules
+npm-debug.log
+coverage

engi-demo/Dockerfile

@@ -0,0 +1,20 @@
+FROM node:24-bookworm-slim
+
+WORKDIR /app
+
+ENV NODE_ENV=production
+ENV PORT=4318
+ENV HOST=0.0.0.0
+
+COPY package.json ./
+COPY server.js ./
+COPY src ./src
+COPY public ./public
+COPY test ./test
+COPY HOST_CAPABILITIES.md ./HOST_CAPABILITIES.md
+COPY HOST_CAPABILITIES.json ./HOST_CAPABILITIES.json
+COPY README.md ./README.md
+
+EXPOSE 4318
+
+CMD ["npm", "start"]

engi-demo/HOST_CAPABILITIES.json

@@ -1,5 +1,7 @@
 {
   "inspectedAt": "2026-04-03",
+  "specVersion": "ENGI Spec V9 deterministic local prototype",
+  "repo": "engi-demo",
   "host": {
     "os": "Darwin 25.4.0",
     "arch": "arm64"
@@ -11,53 +13,43 @@
     "python3": "3.13.12",
     "rustc": "1.94.1",
     "cargo": "1.94.1",
-    "java": "present"
+    "git": "2.53.0",
+    "docker": "29.1.3"
   },
-  "presentPrograms": [
-    "git",
-    "gh",
-    "docker",
-    "jq",
-    "rg",
-    "curl",
-    "openclaw",
-    "codex",
-    "node",
-    "npm",
-    "pnpm",
-    "python3",
-    "rustc",
-    "cargo"
-  ],
-  "absentPrograms": [
-    "ollama",
-    "claude",
-    "uv",
-    "bun",
-    "go"
-  ],
-  "github": {
-    "remote": "https://github.com/engineeredsoftware/ENGI.git",
-    "ghAuth": true,
-    "account": "garrettmaring",
-    "scopes": [
-      "gist",
-      "read:org",
-      "repo",
-      "workflow"
-    ]
-  },
-  "profileA": {
-    "implementedLocally": [
-      "deterministic evaluator stand-ins",
-      "deterministic vector stand-ins",
-      "local ranking and settlement flow",
-      "artifact generation",
-      "UI and tests"
-    ]
-  },
-  "profileB": {
-    "modeledButExternal": [
+  "programUsageTruth": {
+    "machineLocalStaticAnalysis": [
+      "github-actions.benchmark-parser.v9",
+      "github.repo-context.extract.v9",
+      "content-unit.extract-static-code-analysis.v9",
+      "asset.measurement.extract.v9",
+      "verification.issuance-checks.v9",
+      "verification.provenance-checks.v9",
+      "verification.sufficiency-checks.v9",
+      "verification.issuer-policy-checks.v9"
+    ],
+    "proofProgramUsage": {
+      "coreDemoExecutesExternalProofTools": false,
+      "proofBearingEvidenceMayReferenceExternalLogs": true,
+      "coreDemoAssembly": [
+        "materialization proof assembly",
+        "source-to-shares replay",
+        "settlement proof assembly",
+        "proof witness manifest assembly"
+      ]
+    },
+    "localCliOptional": [
+      "python3",
+      "rustc",
+      "cargo",
+      "git",
+      "docker",
+      "jq",
+      "rg",
+      "curl",
+      "openclaw",
+      "codex"
+    ],
+    "remoteBoundaries": [
       "GitHub App auth",
       "workflow artifact fetch",
       "branch and PR writes",
@@ -66,5 +58,67 @@
       "signer verification",
       "settlement network effects"
     ]
+  },
+  "github": {
+    "remote": "https://github.com/engineeredsoftware/ENGI.git",
+    "ghCliPresent": true,
+    "ghAuthStatus": "invalid-token",
+    "account": "garrettmaring"
+  },
+  "bootstrapAndFurnishing": {
+    "nativeRepoRequirements": [
+      "node",
+      "npm"
+    ],
+    "optionalRepoRequirements": [
+      "docker",
+      "openclaw"
+    ],
+    "referenceBootstrapPatterns": {
+      "repo": "/Users/garrettmaring/Developer/casa",
+      "bootstrapScript": "/Users/garrettmaring/Developer/casa/scripts/bootstrap.sh",
+      "packageInstaller": "/Users/garrettmaring/Developer/casa/scripts/install-packages.sh"
+    }
+  },
+  "availableConfigurations": [
+    {
+      "configurationId": "native-runtime",
+      "command": "npm start",
+      "purpose": "Serve the local V9 demo UI and API"
+    },
+    {
+      "configurationId": "native-test",
+      "command": "npm test",
+      "purpose": "Run the deterministic Node regression suite"
+    },
+    {
+      "configurationId": "docker-runtime",
+      "buildCommand": "docker build -t engi-demo-v9 .",
+      "runCommand": "docker run --rm -p 4318:4318 -e HOST=0.0.0.0 engi-demo-v9",
+      "purpose": "Serve the demo in a container"
+    },
+    {
+      "configurationId": "docker-test",
+      "buildCommand": "docker build -t engi-demo-v9 .",
+      "runCommand": "docker run --rm engi-demo-v9 npm test",
+      "purpose": "Run the regression suite in a container"
+    }
+  ],
+  "telemetryAndSafety": {
+    "atomicStateWrites": true,
+    "bodySizeLimitBytes": 1000000,
+    "pathTraversalBlocked": true,
+    "defaultProjectionPrincipal": "public",
+    "privateSourceMaterialPubliclyDisclosed": false,
+    "coreFlowRequiresNetwork": false
+  },
+  "containerization": {
+    "dockerfile": "Dockerfile",
+    "dockerignore": ".dockerignore",
+    "defaultPort": 4318,
+    "defaultHostEnv": "0.0.0.0",
+    "supportsServerRun": true,
+    "supportsTestRun": true,
+    "doesNotImplyProductionDeployment": true
   }
 }