Add a deterministic committed bundle for separately released native clients: an OpenAPI projection of the 8 observer-client operations, generated fixtures, typed behavioral vectors, consumer audit data, and a digest manifest. Split the bundle authorities across generation, recording, verification, export, and compatibility modules. The fd-based no-follow traversal, renameat2(RENAME_NOREPLACE) export path, strict SemVer handling, and fail-closed git history probing are deliberate race-safety and release-safety properties.