Make the boundary harder to trust and easier to falsify.

From frozen cases to a harder test.

1. Freeze Protocol v2, the threat model, registered cases and evidence invariants.
2. Test key separation, expiry, revocation, identity/action/target mismatch, tampering and replay.
3. Test restart, clock and evidence mutation, bounded storage and stronger interruption cases.
4. Build one narrowly scoped, non-production tool adapter with independently observable effects.
5. Commission a second, more independent operator-led reproduction and adversarial rerun.
6. Compare Sanctuary with a baseline action path.
7. Publish or privately provide a limited results report stating what was supported, falsified and still unknown.