Six tasks: shared command_census module with unit tests; the atomic build.rs + grants + census-test commit with negative proofs; the embedded-manifest read-back test; the vitest import-closure check; the threat-model and CLAUDE.md rewrite; full verification and hand-off. Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>