Add fenced native operation runtime

[hotzenplotz5]

Summary

• implement the non-mutating vdr.native.probe runtime boundary defined by PR Define fenced native operation contract #145
• add typed Agent/SuiteBridge capability, execute, receipt, result, and authoritative readback contracts
• persist starting before local dispatch and reconcile ambiguous same-epoch dispatches without repeating native execution
• fence execution by Agent, Agent instance, backend generation, attempt, claim epoch, command, request fingerprint, and pluginInstanceEpoch
• add an epoch-bound fixed in-memory SuiteBridge receipt ledger with exact replay and conflict rejection
• keep mutations=disabled, sideEffectClass=none, and the existing BackendNode.online authority unchanged
• add unit, integration, transport, runtime, contract, regression, and static guard coverage
• add a reproducible non-mutating yaVDR acceptance runner and closeout documentation

Scope guards

This PR does not add timer, recording, search timer, remote, OSD, channel, EPG, configuration, or metadata mutation. It does not add provider ownership, provider selection, adapter fallback, a generic SVDRP tunnel, shell/process execution, a public listener, Phase 64 behavior, or mutations=enabled.

Final base and head

• base commit: 8150abc2c64c25f1a74a49378368b846f6484df0
• merge base: 8150abc2c64c25f1a74a49378368b846f6484df0
• final head: f69b695144096f056c424f48818de310e4d98ddb
• branch: agent/phase63-fenced-native-operation-runtime
• comparison: 21 commits ahead, 0 behind
• changed files: 37, restricted to the intended Agent, SuiteBridge, tests, build wiring, acceptance tooling, and Phase-63 documentation scope

Final verification

VDR-Suite CI

Run #7346 on final head f69b695144096f056c424f48818de310e4d98ddb: all five jobs passed.

• fast-regression-test: success
• make-test-audit: success
• packaging-regression-test: success
• frontend-regression-test: success
• docs-check: success

Real yaVDR acceptance

Acceptance passed on the exact final head with the previously built candidate artifacts reused only after strict ancestor, changed-file-scope, and SHA-256 verification.

Evidence directory:

/root/vdr-suite-phase63-fenced-native-operation-acceptance-f69b6951-retry-2

Verified markers:

• CANDIDATE_BUILD_REUSED=yes
• PHASE_63_FENCED_NATIVE_OPERATION_ACCEPTANCE=PASS
• BASELINE_NATIVE_PROBE_COMPLETED=yes
• CONTROL_PLANE_REPLAY_NO_NATIVE_REEXECUTION=yes
• LOST_LOCAL_RESPONSE_RECOVERED=yes
• PLUGIN_EPOCH_REPLAY_FENCED=yes
• NATIVE_RECEIPT_EVIDENCE_SEPARATE=yes
• NATIVE_RESULT_EVIDENCE_SEPARATE=yes
• AUTHORITATIVE_READBACK_VERIFIED=yes
• DAEMON_RESTART_PERSISTED=yes
• AGENT_RESTART_RECOVERED=yes
• VDR_NATIVE_STATE_UNCHANGED=yes
• EXISTING_AGENT_IDENTITY_PRESERVED=yes
• CREDENTIAL_GENERATION_PRESERVED=yes
• ORIGINAL_CONFIGURATION_RESTORED=yes
• VDR_ACTIVE=yes
• DAEMON_ACTIVE=yes
• AGENT_ACTIVE=yes
• wrapper result: ACCEPTANCE_RC=0, HOST_CONFIGURATION_UNCHANGED=yes, PHASE63_FINAL_ACCEPTANCE_WRAPPER=PASS

Closeout state

• PR is open and Ready for review
• mergeable: yes
• no submitted reviews at closeout
• no PR comments at closeout
• no review threads at closeout
• temporary Phase-63 bootstrap/fix branches checked and absent
• no code changes were made after the successful real yaVDR acceptance

The PR was marked Ready for review after successful final-head CI and real yaVDR acceptance. It has not been merged.