feat(review): add fail-closed local review cascade

[aurascoper]

Summary

• add a deterministic R0 validator and configuration-driven local R1/R2 cascade
• add manual-only advisory R3 adjudication, metadata-only artifacts, and synthetic contract tests
• add noninterference and research decision-register governance checks
• document the local smoke-test boundary and gate report

Scope Boundary

• No private corpus was accessed.
• No physical EEG was accessed.
• No model was downloaded or run.
• No training, preprocessing, labels, experiment budgets, promotion rules, or live-control behavior changed.

Validation

• 66 Python tests passed: local-review, quarantine, EEG pipeline, and structured-state contracts.
• 7 Swift CalibrationRecorder tests passed.
• Python compilation, JSON validation, changed-Markdown internal links, and git diff --check passed.

Disposition

science_status: pipeline_only
decision: insufficient_evidence
promotion_status: not_eligible
live_control: false

[aurascoper]

Closing as superseded by #33. The original branch preserved useful work but accumulated unrelated EEG research (JEPA/SVD scoping, function-space foundations), Android operations documentation, and Termux/Pi infrastructure changes, so it was no longer reviewable as a single local-review-cascade PR. No review-cascade findings were discarded; the replacement contains the minimal tested dependency closure.

The four cascade commits (c007c2b, 6ae9b96, 76a90e2, 2a8869e) are carried into #33 with their identities preserved — they were a contiguous prefix of this branch, so no cherry-picking or path surgery was required.

This branch is left intact as the archival record of the excluded research and infrastructure work; nothing here was force-pushed or rewritten.

One finding from verification, inherited by #33: test_synthetic_structured_state_replay_remains_shadow_only imports neuralcompose_eeg.structured_state, which was never committed on any ref (it exists only as an untracked working-tree file). That test could not pass on this branch either — build-and-test did not surface it because CI does not run Tests/eval. Tracked on #33.