Reviewer-facing and supply-chain hardening. No change to the deployed contract, ABI, signatures, or KAT goldens.

New:
- REVIEWER.md: 5-minute independent-verification guide (frozen target, claim->file:line map, scope boundaries).
- sdk/examples/verify_trelyan.py: now ASSERTS the pinned approval-program fingerprint (self-checking; ran 15/15 live).
- Makefile + Dockerfile.verify: one-command and hermetic read-only verification.
- Dockerfile.repro + scripts/verify_all.sh: full from-clean hermetic rebuild (pinned Falcon via ziglang ->
  digest gate -> byte-identity KAT -> read-only on-chain), verified 4/4 in a clean container.
- sdk/tests/fuzz/: coverage-guided fuzzing (atheris encoder harness + libFuzzer C-verifier harness),
  exercised 13.8M + 2.07M runs with zero crashes (ASan/UBSan).
- .github/workflows/release.yml + RELEASES.md: SLSA v3 provenance + cosign keyless signing on tags (actionlint-clean).
- AUDIT_READINESS.md: TEAL + Falcon-path audit scope sheet (claim->evidence map).

Corrected (docs only):
- TRELYAN_PROTOCOL_SPEC_v0.2.md: distinguish compressed-average (~1262 B) / padded-fixed (1280 B) /
  deployed det-compressed typical (~1222-1233 B, <=1423 bound); resolved the open 'confirm padded length' TODO.
- PUBLIC_CLAIMS_HARDENING / FALCON_ENCODING: sig-size figures aligned to the same distinction.

Reviewer-facing and supply-chain hardening. No change to the deployed contract, ABI, signatures, or KAT goldens.

New:
- REVIEWER.md: 5-minute independent-verification guide (frozen target, claim->file:line map, scope boundaries).
- sdk/examples/verify_trelyan.py: now ASSERTS the pinned approval-program fingerprint (self-checking; ran 15/15 live).
- Makefile + Dockerfile.verify: one-command and hermetic read-only verification.
- Dockerfile.repro + scripts/verify_all.sh: full from-clean hermetic rebuild (pinned Falcon via ziglang ->
  digest gate -> byte-identity KAT -> read-only on-chain), verified 4/4 in a clean container.
- sdk/tests/fuzz/: coverage-guided fuzzing (atheris encoder harness + libFuzzer C-verifier harness),
  exercised 13.8M + 2.07M runs with zero crashes (ASan/UBSan).
- .github/workflows/release.yml + RELEASES.md: SLSA v3 provenance + cosign keyless signing on tags (actionlint-clean).
- AUDIT_READINESS.md: TEAL + Falcon-path audit scope sheet (claim->evidence map).

Corrected (docs only):
- TRELYAN_PROTOCOL_SPEC_v0.2.md: distinguish compressed-average (~1262 B) / padded-fixed (1280 B) /
  deployed det-compressed typical (~1222-1233 B, <=1423 bound); resolved the open 'confirm padded length' TODO.
- PUBLIC_CLAIMS_HARDENING / FALCON_ENCODING: sig-size figures aligned to the same distinction.

The gate aborted on ubuntu at: N=$(echo "$OUT2" | grep -ic 'runtime error').
grep -c exits 1 when there are ZERO matches (the clean, passing case), and GitHub runs
steps under 'bash -e -o pipefail', so the failing command substitution aborted the step —
i.e. the gate failed precisely BECAUSE the build was clean. Added '|| true'. Validated
under bash -e -o pipefail (gate prints SANITIZER GATE PASSED, 0 UBSan errors).

Context: this was the last red. The KAT byte-identity already passed on macOS (clang) and
Windows (MSVC) in the prior run, so deterministic Falcon-1024 reproduces byte-for-byte
across compilers/OSes; ubuntu was blocked only by this shell bug, not by the signer.

The signature-kat job runs 'python sdk/ci/verify_pinned_digest.py falcon-src', but
update_repo.sh deleted the whole sdk/ci/ dir from the public copy, so the helper was
never published (the step failed with 'No such file or directory', exit 2). Keep the
helper script; only the workflow ci.yml is relocated to .github/workflows/. Together
with the prior tarball-fetch fix (abcab70), the pinned-digest gate now runs a published
script over byte-exact LF source.

The signature-kat job's 'Assert pinned-build digest' step failed on all 3 OSes because
git clone applies the runner's core.autocrlf and rewrites the C sources LF->CRLF, changing
their bytes (deterministic.c -> e005ebda instead of the pinned 601390dc). The GitHub source
tarball is LF on every OS and is byte-exact to the pin (and to what verify.html documents),
so the fetch step now downloads the tarball instead of cloning. Verified locally:
PINNED BUILD VERIFIED (file count 27, deterministic.c 601390dc, tree c6adf487, FPEMU=1/FPNATIVE=0).
No change to signatures or goldens — the compiler ignores line endings; only the digest gate
was affected.

- inner.h:846 misaligned uint64 load located, root-caused (optional FALCON_UNALIGNED fast path),
  fixed by build flag only (no source edit, pinned tree digest unchanged), PROVEN byte-identical to
  the KAT goldens and alignment-/UBSan-clean across keygen+sign+verify. See FALCON_BUILD_HARDENING.
- CI: -DFALCON_UNALIGNED=0 -fno-strict-aliasing in all lib builds + a sanitizer gate (alignment +
  -fsanitize=undefined, asserts the default build still traps so the gate is non-vacuous).
- Also: SECURITY/CONTRIBUTING/ROADMAP, commons-scope note, tightened public wording, Falcon header
  precision, sign-once-destroy SDK + isolated signer, KAT fixture, encoding rejection matrix.