T04: deterministic semantic kernel

Alice/Bob/Carol runs end to end, deterministically, replayable from seed.
16 tests pass, no third-party dependencies.

- src/testdriver: intent, provenance, world, actions, drivers, observers,
  oracles, evidence, energy, scenario, runner
- lab/minimal.py: the SUT, exposing the independent observation channel
  required by D-07
- evidence is stratified S1/S2/S3; Runner refuses to attribute S2/S3 to an
  actor; claims are frozen and provenance-checked at construction
- missing evidence yields INCONCLUSIVE, which outranks PASS in the run verdict
- EnergyEvents captured, no scoring (H-005 dormant)

The observation channel records both stored state and an out-of-band
enforcement probe; their disagreement is an invariant and is what detects an
authorization defect that leaves the audit trail intact. A seeded
RevokeIsCosmetic lab fails the run via both the claim and that invariant.

Also closes TD-WP-0001-T02 (stack and commands now exist).

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1629012@bnt-lap001
Assistant-Session: 78d4fb13-8a1e-474b-87a3-9b9261c49a39

src/testdriver/__init__.py

@@ -0,0 +1,23 @@
+"""test-driver — verification assets that mature alongside the software they protect."""
+
+from .actions import SemanticAction, Surface, SurfaceNotPermitted
+from .drivers import DirectDriver, Realization
+from .energy import EnergyEvent, EnergyEventType
+from .evidence import EvidencePack, Observation, Stratum
+from .intent import Claim, Invariant, UseCase
+from .observers import StateObserver, Watch
+from .oracles import Judgment, Oracle, Verdict, overall
+from .provenance import InadmissibleProvenance, Provenance
+from .runner import CollectorIndependenceError, Runner, RunResult
+from .scenario import Scenario, Step, VerificationAsset
+from .world import Actor, ActorIsolationError, Cast, World
+
+__all__ = [
+    "Actor", "ActorIsolationError", "Cast", "Claim", "CollectorIndependenceError",
+    "DirectDriver", "EnergyEvent", "EnergyEventType", "EvidencePack",
+    "InadmissibleProvenance", "Invariant", "Judgment", "Observation", "Oracle",
+    "Provenance", "Realization", "RunResult", "Runner", "Scenario",
+    "SemanticAction", "StateObserver", "Step", "Stratum", "Surface",
+    "SurfaceNotPermitted", "UseCase", "VerificationAsset", "Verdict", "Watch",
+    "overall",
+]