release(v0.37.0): scry fusion premises (#314) + embedder passthrough (#315)

[avrabe]

v0.37.0 — downstream-boundary release

Bundles the two merged inc-1 producer increments:

• Expose cross-component value ranges + bounded-memory facts from the fused core for downstream specialization #313 inc 1 (feat(provenance): SCPV v3 fusion premises for scry (#313 inc 1) #314) — SCPV v3 fusion premises (bounded_memory, closed_world) in component-provenance; meld↔scry boundary live end-to-end (scry v2.0.0 consumer, scry#63).
• fuse: pass through embedder import cabi-arena-realloc instead of trying to satisfy it #301 inc 1 (feat(resolver): explicit embedder-passthrough recognition (#301 inc 1) #315) — explicit pulseengine:embedder passthrough recognition for the gale#89 single-address-space MCU lowering (LS-R-17).

Readiness audit

• rivet validate: PASS (70 pre-existing WARNING-level gaps from the v0.36 ASPICE tier).
• Full meld-core suite: all pass, 0 failed.
• Pre-release Mythos delta-pass (minor → Tier-5 + tier-4 since v0.36.0): satisfied by PR-time gates — provenance.rs + resolver.rs + merger.rs carry documented NO FINDINGS + mythos-pass-done; closed_world hardened through 3 adversarial findings (2 soundness over-assertions + a decoder DoS); lib.rs change is trivial wiring.
• CHANGELOG has falsification statement + disclosed carried gap (fuse --output component still rejects embedder passthrough — fuse: pass through embedder import cabi-arena-realloc instead of trying to satisfy it #301 inc 2, fixture-gated).

Version bump only (Cargo.toml/Cargo.lock) + CHANGELOG — no Tier-5 code touched, so no new Mythos surface. Tag v0.37.0 on merge → release.yml produces signed assets + SBOM + compliance report.

🤖 Generated with Claude Code

[github-actions]

LS-N verification gate

✅ 58/58 approved LS entries verified

	count
Passed (≥1 test, all green)	58
Failed (≥1 test failure)	0
Missing (no ls_*_NN_* test found)	0

_{Approved loss-scenarios.yaml entries are expected to have a
regression test named ls_<letter>_<num>_* (e.g. LS-A-11 →
ls_a_11_*). The gate runs each prefix via cargo test --lib --no-fail-fast and aggregates pass/fail/missing.}

Failed LS entries

(none)

Missing regression tests

(none)

_{Updated automatically by tools/post_verification_comment.py.
Source of truth: safety/stpa/loss-scenarios.yaml.}