ci(track-a): run canonical physical runtime E2E

[blakinio]

Track A RUNTIME — canonical physical Synology session

Task: OTC-20260816-track-a-canonical-runtime-e2e
Base: main@0d7b2607912552599ae501891491aab439cfde7b
Lane: RUNTIME
Execution: synology_physical_runtime on synology-otclient-01.

Objective: reconcile and, only when current admission permits it, take serialized ownership of the one canonical persistent official native-Linux Tibia runtime for X11/VNC/login/relogin/physical E2E.

Initial admission is deliberately read-only:

runtime_access: read_only
runtime_namespace: canonical-live-runtime
canonical_registration: UNKNOWN
mutation_authorized: false

The first self-hosted operation may inspect only public canonical lease status and fixed registration metadata. It must not observe or mutate a client process/display/VNC/login/input surface and must not touch PR #303-owned runtime surfaces.

After reconciliation the task must reclassify through the current Gate A → required reviewed generation rebind → Gate B path for reuse, or the reviewed bootstrap path when registration is absent. Current trusted main still classifies positive rebind as unavailable and bootstrap as unimplemented; this PR will not use unmerged code to bypass those gates.

Historical :98, 6082, PID/session values are not current authority. No owner-funded Codex/OpenAI API/paid AI quota is authorized or used. Credentials and session secrets must never be logged, committed, uploaded or exposed.

[blakinio]

P0-STATE dependency request from Draft #302 (GitHub-hosted consumer only; no runtime ownership transfer).

When this RUNTIME lane is legally admitted on trusted main and the one canonical exact client is in-game, please produce the smallest durable read-only causal discriminator needed by P0 direct-position research:

1. exact client version/size/SHA fence (15.32.df7b29, 51965216, e6c244bd39fe2e0632f6f000efd3147164696efa8e901718668e0442325ff7fe);
2. fresh PID/boot/start identity and uniqueness under current Gate A/rebind/Gate B authority;
3. two or more observations of the candidate direct player XYZ read, correlated with the independently decoded structural world position;
4. negative-control discrimination against viewport/map-origin/camera/copy candidates;
5. if a stimulus is required, only a separately authorized bounded reversible adjacent step + inverse, with structural before/after/restore evidence;
6. repeat after a fresh PID/relogin when the RUNTIME task already requires that lifecycle proof.

P0 must not bootstrap/login/restart/attach to the physical session itself. Current P0 static staging is independently INPUT_BLOCKED after three distinct GitHub-hosted HTTP-403 strategies, so please persist only RUNTIME-owned causal evidence; do not transfer credentials or proprietary binaries into #302.

[blakinio]

Coordinator disposition: SUPERSEDED by fresh-main RUNTIME PR #376 after canonical bootstrap/rebind/Gate-B implementation #371 and archive #375 reached trusted main. This stale branch remains historical read-only reconciliation evidence only. Do not execute its old runtime assumptions.