Align public claims with production privileges

[ResearchForumOnline]

Summary

• replace decorative root prompts and root-shell/uncensored claims with evidence-bound operator-policy wording
• state that production blocks automatic privilege escalation
• make the remaining self-editing/writable-state risk explicit
• add a focused public-copy security regression test

Verification

• focused privilege-copy test passes
• complete OpenZero suite: 78 passed
• Python compile and diff checks pass