Reopen native persisted image checkpoints without a historical viewer-state receipt #398

Owner: Singer, independent source-only persisted-result inspection/reopening surface. Dalton owns the rejected biological candidate; parent owns live acceptance. Related #134, with shared-file crossings #394 and selected-plane writer #397 explicitly excluded until coordinated.

Original retained witness: neurite-development-skill383-20261001/output/ASSISTED-2-FAINT-PROCESS-QA-CHECKPOINT.rst under /home/ts/wt/openhcs-issue-batch-20260929. Candidate1b completed and saved checkpoint TIFFs plus graph ROI. Its OpenHCS metadata contains typed source-artifact projections, selected w2/channel2 provenance and physical scale, but no historical viewer-state receipt exists because candidate viewing was disabled after the original finalization failure.

Public failures remain unchanged: explicit result-directory inventory lists five images with source_path=null; streaming those exact images rejects with exact source receipt required; bounded plate sampling cannot find the physical artifact; graph reopen rejects missing native ROI source metadata. The source receipt decoder only accepts historical ViewerWindowStateResult JSON and exact image_payload_binding_for, so fabricating a receipt or guessing source identity from filenames is not a solution.

A guarded read-only source check of the ordinary public PlateInspectionService query on the saved output root also returns zero records with the original no-main warning: Multiple OpenHCS metadata subdirectories exist, but none is marked main. No viewer, native runtime, MCP process, scientific execution or installed environment was changed.

Acceptance: reuse existing native metadata, source projection/inventory, image window and ROI binding owners through the actual public DTO/service routes. Persisted images must reopen/sample with exact components, crop/domain, calibration and provenance without requiring a viewer to have previously rendered them. Unbound, conflicting, foreign or denied metadata/files must still fail closed. Source tests must cover a viewer-disabled synthetic output with two no-main metadata branches and misleading filenames, full public inventory -> bounded sample -> transport-boundary stream workflow, and retained original failures. Graph needs a separate coordinated original writer/ROI metadata hook; do not fork the capture or source stores. No pipeline filename heuristics, fabricated snapshots, new registry, widened deadline, copied loader, provider/install/download/startup or live scientific acceptance claim.