kill: purge old-paradigm dist/platform binaries from tree

The generated C, amalgams, vendored runtime pins, and compiled binaries
from the Claude Code era are removed from the worktree. The El sources
survive; this tree is now source-only for the first-principles rebuild.

Per Principal direction 2026-08-19.

tools/evidence/report.py

@@ -0,0 +1,62 @@
+#!/usr/bin/env python3
+"""report.py — the report is GENERATED from the artifacts. It is never composed.
+
+Every failure in this project's record lived at the report layer: the primary
+data was right and the summary of it was wrong. The enumeration said 7, the
+summary said 6. The harness ran 7 assertions and reported 6. The checker listed
+the new defect and printed 'ok'. Six agent results arrived and three were dropped.
+
+So the report layer stops being written by hand. Rules, enforced mechanically:
+
+  1. A number appears ONLY if it was extracted from a captured artifact.
+  2. An artifact whose bytes no longer match its manifest hash is a HARD FAILURE
+     -- the report refuses to render at all.
+  3. A claim naming an artifact that does not exist is a HARD FAILURE. It does
+     not degrade to a blank, a dash, or 'not available'.
+  4. Narrative may say why something matters. It may not contain a digit.
+"""
+import sys, os, csv, hashlib, re, subprocess
+
+class Unbacked(Exception): pass
+
+def sha256(p):
+    h = hashlib.sha256()
+    with open(p, 'rb') as f:
+        for b in iter(lambda: f.read(65536), b''): h.update(b)
+    return h.hexdigest()
+
+def load(evdir):
+    """Read a manifest and VERIFY every artifact before anything may be quoted."""
+    man = os.path.join(evdir, 'MANIFEST.tsv')
+    if not os.path.exists(man): raise Unbacked(f"no manifest at {evdir}")
+    rows = []
+    with open(man) as f:
+        for r in csv.DictReader(f, delimiter='\t'):
+            art = os.path.join(evdir, r['artifact'])
+            if not os.path.exists(art): raise Unbacked(f"artifact missing: {r['artifact']}")
+            actual = sha256(art)
+            if actual != r['sha256']:
+                raise Unbacked(f"artifact ALTERED: {r['artifact']}\n  manifest {r['sha256']}\n  actual   {actual}")
+            r['_path'] = art
+            rows.append(r)
+    if not rows: raise Unbacked(f"manifest at {evdir} has no rows -- nothing to report")
+    return rows
+
+def extract(rows, artifact, pattern, group=1):
+    """Pull a value OUT OF the captured stdout. Cannot be typed, only found."""
+    for r in rows:
+        if r['artifact'].endswith(artifact) or artifact in r['artifact']:
+            txt = open(r['_path'], errors='replace').read()
+            m = re.search(pattern, txt, re.M)
+            if not m: raise Unbacked(f"pattern not found in {r['artifact']}: {pattern!r}")
+            return m.group(group), r
+    raise Unbacked(f"no artifact matching {artifact!r} -- the number has no source")
+
+def cite(r):
+    return f"`{r['artifact']}` · sha `{r['sha256'][:12]}` · commit `{r['commit']}` · exit `{r['exit']}`"
+
+def narrative_ok(text):
+    """Rule 4. Prose may not carry a quantity."""
+    stripped = re.sub(r'`[^`]*`', '', text)
+    bad = re.findall(r'\b\d+(?:\.\d+)?\b', stripped)
+    return (not bad), bad