E28 CATCP conformance + IP & commercial evidence

Clean-room result: VALID (?/13 checks). Invariants 15 all-hold=True; attacks 12 all-contained=True; tests passed=3.

Verify: python3 verify_e28.py . · REPRODUCE.txt · manifest.json

Honest: same-project clean room, NOT third-party verification; no production claim.