Authenticated execution workspace

Continue into governed execution.

Projects, cryptographic operations, evidence custody, replay and verification live behind this account-scoped boundary.