Bench scripts

determinism-run.sh: runs BENCH-DETERMINISM-401-057 harness (src/Bench/StellaOps.Bench/Determinism), writes artifacts to out/bench-determinism, and enforces threshold via BENCH_DETERMINISM_THRESHOLD (default 0.95). Defaults to 10 runs per scanner/SBOM pair. Pass DET_EXTRA_INPUTS (space-separated globs) to include frozen feeds in inputs.sha256; DET_RUN_EXTRA_ARGS to forward extra args to the harness; DET_REACH_GRAPHS/DET_REACH_RUNTIME to hash reachability datasets and emit dataset.sha256 + results-reach.*.
offline_run.sh (in Determinism/): air-gapped runner that reads inputs from offline/inputs, writes to offline/results, defaults runs=10 threshold=0.95, and calls reachability hashing when graph/runtime inputs exist.

Usage:

BENCH_DETERMINISM_THRESHOLD=0.97 \
DET_EXTRA_INPUTS="offline/feeds/*.tar.gz" \
DET_REACH_GRAPHS="offline/reachability/graphs/*.json" \
DET_REACH_RUNTIME="offline/reachability/runtime/*.ndjson" \
scripts/bench/determinism-run.sh