[ictechgy]

Scope: draft source qualification only

• Add a private same-process disposable qualification harness with retained provider/transport/lease ownership, finite retirement/probe/exit steps and bounded diagnostic journaling.
• Preserve normal Lab recovery API, capability advertisement and availability. No production quarantine unlock is enabled; even private Lab remains quarantined after private authority release.
• Require authenticated terminal barriers and remote identity/exit evidence; restart is diagnostic-only and cannot resume effects or reconstruct ownership.
• Add portable contracts and mandatory ordinary-CI helper compilation plus exactly three native/JVM recovery/neighbor tests. No device or emulator is launched by these checks.

Validation

Independent exact-source review passed. Host recovery 81 and lease 4 checks passed; G0 55, package 17, native contracts 311, capture 64, runtime resources 26 and CLI 33 passed. Exact source was restored from its verified bundle and 81 contracts rerun successfully. Actual helper compilation and three native/JVM tests remain pending CI; local JDK 17 was unavailable.

Explicit limits

Runtime remains UNQUALIFIED and T18 is not complete. No ordinary recovery API or persistent availability change, no automatic retry of uncertain input, no knownStart/replay/fixture promotion. No actual Android process, gesture, Binder, screenshot or app qualification. Future disposable-device testing and any production integration need separate authorization and review.

The existing helper startup bearer token can remain in private files/live-config.json until overwritten by later startup; this does not erase that residue. Recovery journals never store or reload that token, and restart cannot resume native effects. Failure may retain private output/live owners rather than claim disposal.

Public tool code and synthetic tests only. This PR is for draft publication and CI, not ready/merge, device runtime, company inputs, key generation or deployment.