Enforce WP00.02 project licence boundaries

[deku2026]

Change

All 35 DesktopPlatform build scopes now declare their AGPL boundary. Source inventory, actual MSBuild/IDE evaluation, and configured CMake target gates reject missing or overridden declarations before packaging. The standalone family audit reads the nine explicit owner roots without importing or building adjacent source.

Design PRs ArcForges/ArcForges-Design#18 and #19 are merged. Refresh the Design pin/derived identities to 3825a24fd7530cb51c3fb30b757e644ebab33459; the glossary content and alias policy are unchanged. Contracts#17 has merged and published its matching declaration pin.

Validation

• 25 Design/licence policy tests, actual 48 managed and 16 IDE evaluations, and the 75-project family source inventory passed.
• Locked .NET 10.0.400 restore/build, architecture tests and formatting passed. Windows IDE Release|x64 built with zero warnings/errors.
• Both Windows CMake profiles configured, built and installed; four native tests and the managed P/Invoke probe over their staged outputs passed. Audited native source/notice closure staged successfully.
• Ten local NuGet candidates passed package checks and isolated consumers; five JIT/Native AOT cases, independent C17, and wrong-RID/missing/tampered native-library rejection passed.
• Complete local diff reviewed; actionlint 1.7.12 and whitespace checks passed.

PR CI remains required before merge. Main CI/publication, public ten-package availability and clean merged consumer evidence remain post-merge gates. Mobile's separate distributable dependency audit is still in progress; the family source inventory does not claim to close it. Branch/worktree retained.

[deku2026]

Review of head 61de610: read the complete changes and checked source/effective property coverage, all 35 declarations, CMake target admission, closed repository assignments, Apache-to-AGPL direction checks, CI ordering, preserved native/source notices and unchanged publication identities. The remote diff has the same stable patch ID as the locally reviewed diff (4891f279c470915e2060fe3befb0078ad918c6d1). All locally feasible required checks passed, including CMake/Windows IDE builds and isolated JIT/AOT/C17 package consumers. No remaining actionable review findings. Merge is pending all latest-head CI; main publication and public package verification are subsequent required gates.
All 12 applicable latest-head PR checks in run 35403506860 are now successful, including both licence/Design OS jobs, native build and isolated package consumers. No pending PR findings.

[deku2026]

Post-merge verification completed for 18a0a68. Main run 35404166391 passed including actual publication. All ten NuGet 1.0.0-ci.10.1 artifacts are now publicly downloadable and match the immutable candidate contents (registry signature excluded from ZIP comparison). Both OS declaration receipts, Windows IDE declarations and eight configured native target declarations are bound to this clean merged commit. Five isolated consumers passed JIT and Native AOT; C17 and four wrong/missing/tampered-runtime rejection cases passed. The primary checkout was synchronized; branches/worktrees are retained. The CTest exemption defect found during post-merge review is fixed in separately reviewed, green and merged PR48; that revision is undergoing its own required publication verification.