Passes 2937–2945: global protected support, Landauer compiler, and OAM evidence

[wilcompute]

Scope

This PR exists to obtain and retain observable evidence for the Passes 2937–2945 source packet already published on master.

Exact results

• full 120-observable affine-support problem now has the proved bracket 13 ≤ n ≤ 16 at binary distance four;
• the 16-bit witness is the binary image of an isodual, non-self-dual [8,4,4]_3 code;
• its coordinate automorphism group is S4 and monomial group is C2 x S4;
• all sixteen one-symbol syndromes are distinct, giving a four-trit / 16-entry correction architecture;
• complete uniform 81-state diagnosis has invariant compressed transcript entropy log2(81);
• all 51,840 projective symplectic-similitude actions have maximum cyclic orbit 12 and no 40-cycle, obstructing a single-shift OAM address ring.

Modelled boundaries

• calibrated active diagnosis uses an explicit independent false-positive/false-negative channel;
• the M36 result is a circuit-independent adversarial accepted-fault envelope, not a compiled-circuit threshold;
• OAM radial leakage remains a symbolic repository model, not measured crosstalk.

Evidence workflow

1. recompute and verify the exact certificate;
2. run eight focused regressions;
3. simulate 81 clean words and 1,296 directed one-bit faults with Icarus;
4. synthesize and place the syndrome decoder on HX8K using Yosys/nextpnr;
5. integrate photonic_holonet.tex, holonet_machine_blueprint.tex, and docs/index.html idempotently;
6. compile all three canonical PDFs with Tectonic;
7. retain logs and PDFs as workflow artifacts.

Do not merge until the dedicated workflow is green and generated evidence has been inspected.