Choice Core and frozen Mac demo loop

[thesongzhu]

Summary

• replaces the retired fixed-model outcome flow with the Host-owned Choice session loop and explicit account model/effort selection
• adds durable Choice begin/select/refine/confirm/resume state, bounded Markdown publication, exact Reminder Evidence/Receipt handling, and one-shot same-account iMessage reply authorization
• integrates the frozen Mac editorial UI states, reviewed English default Persona bundle, and Host-owned B2 real-source preparation/consent boundary
• keeps Global Off, restart, stale-result, privacy retirement, and duplicate-effect boundaries fail closed

Exact checkpoint

• HEAD: a11f2ba39473ec02e9087b0c58cff2e750fe2712
• tree: 1235cedd1b0aa8b377460715800ff7f28ab59db6
• complete base-to-HEAD binary patch: 3dde73e3b3884cd81564f270123d67afa5233263674f4990d929f33dae45bd4d (3,092,863 bytes)
• 69-path sorted content manifest: 48d7ed3fbe7d4ca4f54d27ec3ad0fce6ee45bbd5358e4a8064133e7b636afb42
• frozen UI artifact: 7b251d81e228d7cec11abc473c28ff23ce47db396233eb6c4eb3bd5eed050cd3

Validation

• cargo test --workspace --all-targets
• cargo clippy --workspace --all-targets -- -D warnings
• cargo build --workspace --release
• swift test --package-path macos/EffectBrokerBridge
• swift build --package-path macos/EffectBrokerBridge -c release -Xswiftc -warnings-as-errors
• strict Swift/Rust format, diff, secret/private-locator, retired-route, and frozen-UI checks
• Swift: 259 Swift Testing cases and 56 XCTest cases passed
• exact-head reduced Demo-gate product and safety reviews: P0/P1/demo-blocking-P2 = 0/0/0\n- exact-head GitHub Actions run 29872505699: Swift tests and Rust/Swift release/static verification passed
• complete ad-hoc package stage passed; exact Developer-ID App stage, external identity receipt, DMG creation, and mounted-copy verification passed for Team UHDY2275L5\n- DMG SHA-256: 8fad7151bf160b5716ce6093fa4fb3e9ec7c136264ef53d025922406ca5249c7 (unnotarized, not release proof)
• signed-candidate Keychain lifecycle remains a later signed-runtime gate, not a unit-test claim

Non-claims

This Draft checkpoint does not claim installation, notarization, release readiness, real Reminder or Messages effects, B2 semantic import/card/readback proof, C2 Skill proof, or complete installed dogfood. Those remain separately gated.