Bounded complete-buffer BAO proof verification Local implementation on exact Radio parent `b933829cbe273d2f31fe75ca83125f3ddd8917a2`. Fresh PLAN and CODE reviews approved; required broad gates remain red and require a decision. Three production paths add a concrete no_std proof job and sealed…