fix(runtime): stabilize live admission boot path (#102)

validator: harden isolation probe shell construction

Merge origin/main into codex/issue-78-80-20260308

Merge pull request #85 from open-cybernauts/fix/issue-80-patchability-strict

fix(validator): add structured exec results and strict patchability outcomes

validator: fail patchability on remediation/retest inconclusive

Merge remote-tracking branch 'origin/main' into codex/issue-79-81-20260308

Harden exploitability check expectations (#84)

fix(validator): harden evidence checks and fail unvalidated golden steps

fix(validator): harden mysql credential handling and prove lint packaging

fix(validator): sanitize reward grounding command construction

Ground mutation-added vulns in real task paths

Fix difficulty calibration, deduplicate golden path, harden prompts

Remove hardcoded fallbacks, add snapshot-driven service lifecycle

Tighten graph checks and trust-principal lint

Implement canonical base graph and mutation policy

Add live admission for rendered child snapshots

Production all-in-one container with real service execution

Add snapshot lineage and parent-based mutation runtime (#49)

Full OpenRange implementation: environment, builder, validator, agents, tests