PR1: split ExecutionContext into Normative/Provisional/Trace; PR2: diagnostic isolation + semantic sensitivity conformance tests

Add kaysentinel-protocol crate: implementation-neutral shared error type (PR 1 / File 1)

Implement kaysentinel-ssz (SSZ wire format + Merkle Profile MP1); correct source spec's invalid test vector

Implement kaysentinel-hash (domain-separated BLAKE3 commitments, RC1 spec); update README and roadmap to reflect real progress

Add hydration/assembly split (HydratedAccountState, identity-consistency check) and Phase 5 StorageRootDeriver scaffolding

Fix storage_root/balance type drift; wire certificate assembly to real state_table + generations via AccountSnapshotSource

Add generation-resolution certificate module; add formal semantic architecture spec doc

Thread real TraceProvenance through lifecycle events; add CanonicalBalance scaffolding; fix then_owned compile bug; merge pre_states+generation+balance verification

Add lifecycle module (Phase 3+4): generation resolution + canonicalization over ObservedLifecycle, first passing test

refactor(builder): flatten IR into relational tables (RawIr/CanonicalKey), rewrite partition.rs to match, add contextual TimelineError

Refactor builder IR: split timeline/reduced modules, encapsulate reduction, drop access-list tracking pending lifecycle.rs decision

Implement lossless builder IR: timelines, reducible-timeline trait, partition frontend

Add Rust runtime workspace (cse ABI crate + workspace scaffold)

Add Rust runtime workspace (cse ABI crate + workspace scaffold)