[scbrown]

Add the repository-owned pendant builder, bounded share/stored queries, curated knowledge and read-only release verification. Nine source-backed records cover interfaces, the Quipu dependency, compatibility decision, freshness and start-here glossary; the alignment carrier is explicitly empty.

Native workers use private HOME/XDG directories and strip endpoint/upload credentials, with an explicit host-environment exception for the private policy helper. Imports preserve clean source checkouts; hold-inspection errors refuse publication. Existing install and release steps remain intact.

The repository context reuses the existing immutable repo_caboodle IRI. The old and new GitHub paths resolve to numeric repository 1348043660; source identity and pointer slug use tambo. No new identity mapping is asserted.

Validation: 25 pendant controls, six installer bootstrap controls and 13 registry controls pass. A bounded native index resolves all seven hash-checked defining files; missing pointer returns zero. The actual native query retains 567 chunk-lane triples while text/line/foreign/prefix and omitted-lane controls return zero. The initial incorrect Cargo.toml document pointer refused and was corrected to the observed code-module pointer. Native curated-data validation passes.

Source delivery only: complete hosted CI, tier review, merge/main watch and parent release/fresh-load/runtime acceptance remain separate. No README, engine, Gold, tag/upload, install, service or schedule changes.

Bead: aegis-ro425e.16.11

Overlap preflight: a0d3de5c5d30dd87cf30242eda7fe550e2a102634b711d9e865654be895cdd7c

• PR Add verified one-line install and concise stack overview #171 @ 6f82b5f: independent — Installer and README proposal changes disjoint paths; this proposal owns copied pendant job/query/curated knowledge only. No installer or README edits. Refresh curated source witnesses if a defining file changes before merge; no sibling absorption or runtime authority.