test: enforce Intelligence OS ownership boundaries - #129

Outcome

Completes the machine-enforced ownership half of ACE 0.8B. Core, Intelligence, and application now have an executable dependency rule, and every top-level package in the historical core.engine tree has exactly one declared 0.8 owner and compatibility treatment.

Changes

• proves ace.core has no inward Intelligence, application, legacy-host, transport, or extension dependency
• proves ace.intelligence remains pure interpretation without application, host, transport, or extension imports
• proves ace.application composes only public ports
• blocks direct network/process/socket effect clients from all three public layers
• classifies every current core.engine package and fails if an unowned package appears
• freezes MAKE/SHIP-era arms, product surfaces, and Canvas as compatibility applications rather than canonical architecture

Evidence

• ownership/runtime/kernel boundary gate: 14 passed
• cumulative 0.7, activation, Watch, AM3 and AM4 focused gate: 68 passed
• real AM3 and AM4 Surreal restart checks: 2 passed
• Ruff and git diff --check: passed

Compatibility and rollback

No runtime API, stored record, schema, Domain Pack, source adapter, public MCP tool, or historical evidence is changed. The disposition manifest classifies the compatibility host; it does not delete or move it. Reverting this commit removes only the new guard and documentation.

Checklist

• No private data, credentials, proprietary fixtures, or private-extension code
• No domain code copied into Core
• Exact eleven-tool public MCP surface unchanged
• Ownership is machine checked rather than narrative-only
• Focused, restart, formatting, and diff checks passed

Part of #40. This is 0.8B2; the final 0.8B restart/legacy-caller convergence remains separate.