Clean-room reauthor all SAF techniques

[fkautz]

Summary

• Re-author all 86 SAF techniques through the clean-room, source-or-omit workflow.
• Add per-technique evidence packets covering claim-level traceability, consulted and excluded sources, breach and vulnerability research, publication rights, author attribution, and clean-room attestation.
• Reconcile the framework model, source manifest, and alignment ledger, and add or replace detection rules with registered test artifacts.
• Strengthen the SAF technique-authoring skill with readable linkage and clean-room generation requirements.

Type of Contribution

• New Technique
• New Mitigation
• Update to existing content
• Documentation improvement

Checklist

• DCO sign-off included in commits (git commit -s)
• For technique contributions: see TEMPLATE-CHECKLIST.md
• For new techniques: research packet is complete and validate-technique-research.py passes
• For mitigation contributions: see TEMPLATE-CHECKLIST.md

Validation

• 86/86 strict technique-research validators pass.
• 86/86 registered detector suites pass.
• 86 framework techniques and 86 research packets reconcile.
• 1,077 source identifiers are unique; two intentional shared-endpoint exceptions are documented.
• All 1,019 YAML files parse successfully.
• 97 alignment issues are recorded with zero unresolved.
• No synthetic publishable technique IDs or stale SAFE-MCP branding remain.
• git diff --check passes.

The program-level status and audit summary are recorded in research/clean-room-program.yml.

Related Issues

None.