feat: add private bounded inspection views

[binaryaaron]

Related Issue

No linked issue required: maintainer-owned private SDK Phase 10 work.

Plan Document

The operator-approved remediation plan is retained in the originating
worktree at .agent-work/p11/findings7-8-remediation-plan.md, SHA-256
315f0db5b6cad0c8c103124cdecac9ffc8fbd8e581d1f71c1e8f32c4b8cf9bf8.
The tracked outcome is
docs/development/phase-10-bounded-inspection-closeout.md.

This draft PR is stacked on #264. Review only the delta from
codex/anonymizer-result-compatibility-p10.

Do not merge or mark this PR ready while its predecessor stack remains draft.

Summary

• Add the private Phase 10 bounded-inspection contract and fixed-arity explain,
  inspect, and diagnose views.
• Capture bounded detached owner summaries, enforce runtime limits before
  publication, and reject oversized encoded payloads without partial output.
• Freeze an independent conformance corpus with privacy, retention,
  non-interference, permutation, hash-seed, and mutation evidence.
• Record the private Phase 10 closeout and the separate Phase 11/12 gates.

Type of Change

• Bug fix
• New feature
• Breaking change
• Documentation update
• Refactoring
• CI, release, or contributor workflow update

Compatibility and Non-goals

Public exports, CLI behavior, the approved P9 result contract, telemetry
schema, and protection execution routing are unchanged.

This PR does not publish public graph, session, or inspection APIs. It does not
start SDK Phase 11/12, retarget issues, or request /nvskills-ci.

Contributor Checklist

• PR title follows Conventional Commits, for example fix: handle empty entity list
• Related issue is linked, or a maintainer-owned no-issue reason is documented above
• For non-trivial changes, a plan document is linked above, or the no-plan reason is documented above
• Public API impact checked; skills/anonymizer/SKILL.md updated if needed
• No real PII added to tests, docs, notebooks, fixtures, or artifacts
• No API keys, service tokens, private keys, credentials, or real endpoint secrets added

Validation

• Commands and checks run:
  • Phase 10 suite: 851 passed
  • Combined Phase 8/10 suite: 1,189 passed
  • Full repository suite: 5,600 passed, 11 skipped
  • make check: passed
  • Strict documentation build: passed
  • Fresh installed wheel: expected contract and raw-resource digests admitted
  • Source-built omission wheel: rejected as required
  • CLI help: byte-identical to the P11 baseline
  • P9 result contract: unchanged approved digest
  • Two independent Tier 3 reviews: 0 Critical / 0 Warning / 0 Nit
• Skipped checks or known warnings:
  • 11 environment-gated Intake integration tests were skipped
  • the full suite emitted one existing W&B dependency deprecation warning

The documentation closeout received self-review; the two independent reviews
bind the Tier 3 implementation and conformance evidence at
3ed8d02417737a6363d5363494c9e182762f8458.

Documentation and Artifacts

• Docs updated, or not needed
• If docs changed: make docs-build passes locally
• If tutorial sources changed: notebooks regenerated with make convert-notebooks
• If e2e, benchmark, or model-provider behavior changed: relevant validation is listed above

No tutorial source changed; notebook regeneration was not required. The
ignored .agent-work/p11/ evidence bundle remains in the originating worktree
and can be transferred separately for reviewers who need the original logs.

Contract Pins

• Candidate: 794b6e19925f35c1e221b3bc30a72575e0813552
• Contract member SHA-256: 0d6e189bf3d89472a6880a76367ed99b5462b6c5d460818282e403e4a285eb95
• Raw resource SHA-256: 1b2bf397cfaed7d74b4ec2e0bb5db428d59a9ea24679faa7e2056705f00528bc
• Canonical corpus SHA-256: 4712ce2edbf95dc9cf998be5feb193394e5f4075c836205db51957f1126e3148
• Tier 3 reviewed binary diff SHA-256: 85dfc381db8cd566f5bbb1872fa331e4e6020c4926b4df464959dd628ee30d05

Reviewer Path

Start with the bounded-inspection contract and admission model. Then review the
owner capture reducers and encoding boundary, followed by the independent
reference model, privacy canaries, and mutation suites. Finish with the tracked
Phase 10 closeout.