Publish AiNIR v1.0.0 RC2 profile and conformance SDK

[hamlet-lab]

Summary

Publishes the AiNIR v1.0.0 RC2 public refresh on the real GitHub lineage.

This change turns the bounded public demo into an externally inspectable profile-and-conformance SDK while preserving fail-closed trust boundaries. It adds stable artifact contracts and CLI surfaces, packaged schemas/resources, profile authoring and conformance, registry evolution and replay modes, deterministic offline EvidenceProvider contracts, bounded MCP tool-call preflight, and a host-owned non-executing OpenAI function-tool normalization example.

Safety boundaries

• model output is not evidence;
• unknown semantics remain fail-closed;
• external profiles cannot weaken or override the Trust Gate;
• evidence candidates are not automatically promoted;
• MCP/OpenAI adapters do not call APIs, handle credentials, submit outputs, or execute tools;
• historical receipts are not silently rewritten;
• this remains RC2, not v1.0 final and not a production runtime.

Verification

Local verified baseline before publication:

• 312 / 312 unique pytest cases passed;
• 81 / 81 built-in workflow conformance cases passed;
• 71 / 71 negative conformance cases passed;
• 10 / 10 golden traces passed;
• 26 / 26 MCP conformance cases passed;
• 4 / 4 generated external MCP profile cases passed;
• P7 readiness 10 / 10 passed;
• Phase 30 full 11 / 11 passed;
• distribution contracts 14 / 14 passed;
• wheel and sdist installed and checked outside the source tree.

Hosted checks on this PR must confirm Python 3.10-3.13 plus Windows and macOS before merge.

Review focus

Please review PROTECTED_INVARIANTS.md, public/private boundaries, exact receipt/registry bindings, external profile restrictions, no-execution adapter boundaries, release wording, and distribution resource parity.