The CLI shell (argv join/strip, --json consumed only at argv[1], the
always-trailing-newline print quirk, Python json.dumps byte-parity:
insertion order + ", "/": " separators + ensure_ascii) over the full
deterministic preflight chain — route authority mirrored from
src/go/adaptive-router (rrf cgo membrane, DeriveSufficiency,
ClassifyRoute), capsule render from src/go/builder-bridge. Reactive
seams excluded per event-wait precedent (memory retrieval, construction
projection — the oracle's own degrade paths; PL1 lessons empty by
design). Frozen truth 13 cases from the live oracle subprocess under
pinned seams (frozen clock via sitecustomize rig, empty memory/
construction stores, HOME isolation — the selector's shard sources read
a hardcoded ~/.config/opencode that ignores RUNE_* isolation); replay
byte-identical; live parity Go binary == Python oracle 13/13; go build/
vet/gofmt clean; rune's truncate is rune-safe (Python str[:n] law).
