feat: add PolicyPackSelectorComponent with tests and integration

- Implemented PolicyPackSelectorComponent for selecting policy packs.
- Added unit tests for component behavior, including API success and error handling.
- Introduced monaco-workers type declarations for editor workers.
- Created acceptance tests for guardrails with stubs for AT1–AT10.
- Established SCA Failure Catalogue Fixtures for regression testing.
- Developed plugin determinism harness with stubs for PL1–PL10.
- Added scripts for evidence upload and verification processes.

docs/sdks/SHA256SUMS

@@ -0,0 +1 @@
+# Placeholder hashes; replace with real asset sums when inputs arrive

docs/sdks/go.md

@@ -0,0 +1,16 @@
+# SDK Guide: Go (outline)
+
+## Pending Inputs
+- See sprint SPRINT_0309_0001_0009_docs_tasks_md_ix action tracker; inputs due 2025-12-09..12 from owning guilds.
+
+## Determinism Checklist
+- [ ] Hash any inbound assets/payloads; place sums alongside artifacts (e.g., SHA256SUMS in this folder).
+- [ ] Keep examples offline-friendly and deterministic (fixed seeds, pinned versions, stable ordering).
+- [ ] Note source/approver for any provided captures or schemas.
+
+## Sections to fill (once inputs arrive)
+- Module import and version pinning (`go.mod`).
+- Auth helpers and tenancy headers.
+- Context-first patterns, retries, telemetry defaults.
+- Streaming and large payload handling.
+- Examples (CLI + library) with hash-listed fixtures.

docs/sdks/java.md

@@ -0,0 +1,16 @@
+# SDK Guide: Java (outline)
+
+## Pending Inputs
+- See sprint SPRINT_0309_0001_0009_docs_tasks_md_ix action tracker; inputs due 2025-12-09..12 from owning guilds.
+
+## Determinism Checklist
+- [ ] Hash any inbound assets/payloads; place sums alongside artifacts (e.g., SHA256SUMS in this folder).
+- [ ] Keep examples offline-friendly and deterministic (fixed seeds, pinned versions, stable ordering).
+- [ ] Note source/approver for any provided captures or schemas.
+
+## Sections to fill (once inputs arrive)
+- Build tooling and version pinning (Maven/Gradle) with checksums.
+- Auth helpers and tenancy headers.
+- Retry/pagination/telemetry defaults.
+- Streaming/upload helpers.
+- Example usage with hash-listed fixtures.

docs/sdks/overview.md

@@ -0,0 +1,17 @@
+# SDKs Overview (outline)
+
+- Language guides will align once generator outputs drop.
+
+## Pending Inputs
+- See sprint SPRINT_0309_0001_0009_docs_tasks_md_ix action tracker; inputs due 2025-12-09..12 from owning guilds.
+
+## Determinism Checklist
+- [ ] Hash any inbound assets/payloads; place sums alongside artifacts (e.g., SHA256SUMS in this folder).
+- [ ] Keep examples offline-friendly and deterministic (fixed seeds, pinned versions, stable ordering).
+- [ ] Note source/approver for any provided captures or schemas.
+
+## Sections to fill (once inputs arrive)
+- Supported languages and parity guarantees.
+- Auth, pagination, retries, telemetry defaults.
+- Versioning/pinning guidance for offline bundles.
+- Links to per-language guides with hash-listed samples.

docs/sdks/python.md

@@ -0,0 +1,17 @@
+# SDK Guide: Python (outline)
+
+## Pending Inputs
+- See sprint SPRINT_0309_0001_0009_docs_tasks_md_ix action tracker; inputs due 2025-12-09..12 from owning guilds.
+
+## Determinism Checklist
+- [ ] Hash any inbound assets/payloads; place sums alongside artifacts (e.g., SHA256SUMS in this folder).
+- [ ] Keep examples offline-friendly and deterministic (fixed seeds, pinned versions, stable ordering).
+- [ ] Note source/approver for any provided captures or schemas.
+
+## Sections to fill (once inputs arrive)
+- Installation & version pinning (pip/poetry/pipenv) with hashes.
+- Auth helpers (PAT/OAuth2) and tenancy headers.
+- Sync vs async clients usage.
+- Pagination, retries, telemetry defaults.
+- Streaming/upload helpers.
+- Example notebooks/scripts (hash-listed).

docs/sdks/typescript.md

@@ -0,0 +1,17 @@
+# SDK Guide: TypeScript (outline)
+
+## Pending Inputs
+- See sprint SPRINT_0309_0001_0009_docs_tasks_md_ix action tracker; inputs due 2025-12-09..12 from owning guilds.
+
+## Determinism Checklist
+- [ ] Hash any inbound assets/payloads; place sums alongside artifacts (e.g., SHA256SUMS in this folder).
+- [ ] Keep examples offline-friendly and deterministic (fixed seeds, pinned versions, stable ordering).
+- [ ] Note source/approver for any provided captures or schemas.
+
+## Sections to fill (once inputs arrive)
+- Installation & version pinning (npm/pnpm/yarn with lockfiles).
+- Auth helpers (PAT/OAuth2) and tenancy headers.
+- Pagination, retries, telemetry defaults.
+- Streaming/download helpers.
+- CI/offline bundle usage notes.
+- Example snippets (with hash-listed fixtures).