R20Q-S verification

R15 completed the controlled live zero-healthy core proof and retained the new active generation. R16 performed read-only verification with the corrected Direct-state oracle and completed publication without repeating the destructive live test.