feat: add PolicyPackSelectorComponent with tests and integration

- Implemented PolicyPackSelectorComponent for selecting policy packs.
- Added unit tests for component behavior, including API success and error handling.
- Introduced monaco-workers type declarations for editor workers.
- Created acceptance tests for guardrails with stubs for AT1–AT10.
- Established SCA Failure Catalogue Fixtures for regression testing.
- Developed plugin determinism harness with stubs for PL1–PL10.
- Added scripts for evidence upload and verification processes.

docs/signals/SHA256SUMS

@@ -0,0 +1 @@
+# Placeholder hashes; replace with real asset sums when inputs arrive

docs/signals/callgraph-formats.md

@@ -0,0 +1,15 @@
+# Callgraph Formats (outline)
+
+## Pending Inputs
+- See sprint SPRINT_0309_0001_0009_docs_tasks_md_ix action tracker; inputs due 2025-12-09..12 from owning guilds.
+
+## Determinism Checklist
+- [ ] Hash any inbound assets/payloads; place sums alongside artifacts (e.g., SHA256SUMS in this folder).
+- [ ] Keep examples offline-friendly and deterministic (fixed seeds, pinned versions, stable ordering).
+- [ ] Note source/approver for any provided captures or schemas.
+
+## Sections to fill (once inputs arrive)
+- Supported callgraph schema versions and shapes.
+- Field definitions and validation rules.
+- Common validation errors with deterministic examples.
+- Hashes for any sample graphs provided.

docs/signals/reachability.md

@@ -0,0 +1,16 @@
+# Reachability Signals (outline)
+
+## Pending Inputs
+- See sprint SPRINT_0309_0001_0009_docs_tasks_md_ix action tracker; inputs due 2025-12-09..12 from owning guilds.
+
+## Determinism Checklist
+- [ ] Hash any inbound assets/payloads; place sums alongside artifacts (e.g., SHA256SUMS in this folder).
+- [ ] Keep examples offline-friendly and deterministic (fixed seeds, pinned versions, stable ordering).
+- [ ] Note source/approver for any provided captures or schemas.
+
+## Sections to fill (once inputs arrive)
+- Purpose & scope (what “reachability” means across components).
+- States and scoring semantics.
+- Provenance and evidence sources.
+- Retention and TTL policy.
+- Sample payloads (with hashes recorded alongside).

docs/signals/runtime-facts.md

@@ -0,0 +1,15 @@
+# Runtime Facts (outline)
+
+## Pending Inputs
+- See sprint SPRINT_0309_0001_0009_docs_tasks_md_ix action tracker; inputs due 2025-12-09..12 from owning guilds.
+
+## Determinism Checklist
+- [ ] Hash any inbound assets/payloads; place sums alongside artifacts (e.g., SHA256SUMS in this folder).
+- [ ] Keep examples offline-friendly and deterministic (fixed seeds, pinned versions, stable ordering).
+- [ ] Note source/approver for any provided captures or schemas.
+
+## Sections to fill (once inputs arrive)
+- Runtime agent capabilities captured.
+- Privacy safeguards and opt-in flags.
+- Payload schema and field descriptions.
+- Examples and hash listings for sample traces.