Architecture decisions

• 0001: Go static binary
• 0002: subprocess NDJSON and local HTTP — superseded as the primary surface by 0005
• 0003: transactional install
• 0004: supply-chain verification
• 0005: SDK-first public API
• 0006: ordered source chains