[cyharyanto]

Promotes the runtime to a dual binary + chartered_runtime::Agent library surface so embedders, the dashboard, and the verification harness share one execution path. Restraint becomes a first-class outcome: AgentOutcome::Quiet is what a governed loop produces when it observes and chooses not to externalize.

Spec adds §The Chartered Boundary: governance is a per-invocation property, not a layer. The Runtime is the surface across which the property is asserted; agents compose freely above and below it. The Subagents section is rewritten to accommodate ungoverned helpers alongside recursive Stewards. The dashboard mirrors the internal-vs-external Tool distinction in the Receipts UI.

Adds the verification pipeline as runnable code:

• examples/charters/synthetic-data (generator)
• examples/charters/gold-labeler (oracle, blinded from generator)
• examples/charters/same-context-baseline (strawman the harness contrasts against the separated Charter)
• examples/scenarios/{smoke,m-and-a}/ seed corpora with technique + failure-class tagging
• runtime/src/scenario_suite.rs + --scenario-suite <dir> CLI for in-process per-config runs
• scripts/compare-mode.sh fans one corpus across four governance configurations (naked / same-context-judge / separated-judge / separated-grounded) and emits a side-by-side summary
• scripts/passive-mode.sh + run.sh --mode passive|both demonstrates the environment-embedded agent pattern; restraint is the load-bearing behavioral property

Tooling: ci-checks.sh now runs cargo clippy --all-targets so examples cannot rot. Replaces deprecated examples/policies/ directory; renames findings.jsonl to records.jsonl across the demo plumbing for consistency with the dispatch crate.