[milestone Milestone 12 — Symbolic Reasoning Core] `deploy/Dockerfile.z3` — variant image with Z3 native libraries: `apt install ...

[telleroutlook]

🤖 Auto-filed from milestone doc bullet.

Repo: WasmAgent/symkernel
Milestone: Milestone 12 — Symbolic Reasoning Core: Z3 Integration (Phase 1b)
Bullet:

deploy/Dockerfile.z3 — variant image with Z3 native libraries: apt install z3 libz3-dev in builder stage, copy libz3.so to distroless image via --scratch intermediate layer; non-Z3 variant remains default for Phase 0/1a compatibility

Relevant code context (from worktree)

new (does not exist yet): deploy/Dockerfile.z3
new (does not exist yet): 0/1a
contains 'deploy': ""/tmp/tmp.ufhVOKX3Uq"/wasmagent-js"/packages/cloudflare-worker/src/index.ts
contains 'deploy': ""/tmp/tmp.ufhVOKX3Uq"/wasmagent-js"/packages/core/src/policies/approvalStoreKv.ts
contains 'deploy': ""/tmp/tmp.ufhVOKX3Uq"/wasmagent-js"/packages/core/src/executor/ProgrammaticOrchestrator.ts
contains 'variant': ""/tmp/tmp.ufhVOKX3Uq"/wasmagent-js"/packages/capability-compiler/src/recordingPolicy.test.ts
contains 'variant': ""/tmp/tmp.ufhVOKX3Uq"/wasmagent-js"/packages/capability-compiler/src/recordingPolicy.ts
contains 'variant': ""/tmp/tmp.ufhVOKX3Uq"/wasmagent-js"/packages/cloudflare-worker/src/index.ts

Implementation note: Files marked "new (does not exist yet)" must be created from scratch. verify-first should return PROCEED (not NOT_YET) — there is no prerequisite blocking this work.

Acceptance criteria

• Command go build ./... passes
• The specific work described in the bullet above is implemented in the smallest number of files required.
• No unrelated files touched (git status --short output limited to the intended change).

Notes for the implementer

This issue was auto-created by SweepMilestoneBulletToIssue. The bullet text is verbatim
from the milestone doc. If ambiguous or too large for a single implement cycle,
verify-first should return NEEDS_SPLIT with sub-issue proposals or NEEDS_HUMAN with the blocker.

---

Filed automatically.