[CompleteDotTech]

The paper qualification evaluator recorded its entry file but omitted four transitive helpers (constraints, plans, policy, and resolver). Changing those helpers could leave its code identity unchanged. This adds explicit roots to the static source scanner and roots the evaluator in its own import closure. Default scanner roots and strict identity comparisons remain intact; historical receipts are preserved.

Refs #97. This is a bounded public-source correction; the issue remains open for the private external verifier and execution-loader requirements.

Validation on signed head b73fa827ba2b00b3bb8f8543ef447fd41982f9ba:

• python tools/run_validation.py: 1,503 tests, 1,441 passed, 62 skipped, zero failures/errors; all supplemental checks passed. Python 3.12.14 with pinned dependencies. Skips include Windows-only cases, optional NumPy, and unavailable pinned legacy source.
• Causal reproduction: the original 89-entry map missed an authored helper change affecting a bound; the corrected 93-entry map detects each of the four helper mutations with the entrypoint unchanged.
• Independent extracted-source ZIP tests: 100 passed, zero skips/errors. Source manifest and archive bytes verified; every changed file is present. The existing packager omits unchanged docs/workflow/render.mjs; no private PDFs, model weights, or environment secrets are included.
• Genuine sdist and wheel builds passed. These experimental src/ entrypoints are delivered by the checkout/source ZIP and remain absent from distributions under the existing package layout. The wheel's unchanged trace_gc payload matches the separately smoke-tested baseline; that smoke does not test this fix.
• Independent Astra review approved the full final signed head b73fa827ba2b00b3bb8f8543ef447fd41982f9ba, tree b47ab6eaa1d78a91a7b4368c1de6c94f9fb05f6d, all 710 manifest records and 711 source-ZIP entries.

No native Windows, private-paper, live-provider, independent-human, or scientific acceptance is claimed. Hosted checks are not being waited on; this PR remains draft and is not merged.