Concrete verification harness, mechanized proofs, and freestanding execution engine.
proofs/Invariants.v (Coq 8.18.0, zero admitting)proofs/_CoqProjectruntime/src/lib.rs (Freestanding Rust #![no_std])runtime/Cargo.tomlM_alloc = 0 — Zero dynamic allocations; static footprint.S_max ≤ 4096 B — Fixed execution stack bounds.τ_override ≤ 11.99 ms — Maximum evaluate cycle ceiling.Δt_max ≤ 13.19 ms — Ingress-to-brake physical disengagement bound.C_ops = 0 — Fully static, zero-drag continuous deployment.