tools(verify): fast/medium/full verification tiers with a compiled-in source stamp (L39); research R6

BuildLinux.sh hashes a sorted manifest of compiled inputs into VOXELFORGE_SOURCE_STAMP, printed first by
every executable; Standalone/Tools/verify/verify.py checks it before and after each tier and records
binary/input hashes and the resolved recipe, style map and layout. Fast (163 s) runs on the canonical owner
world only and asserts FI Style 2 / SW Style 1; medium (8 min) and full (26 min) add the style matrix,
GCC, determinism and cost. Controls: stale source, mislabelled style-0 owner, all-black capture, L30/L31,
L35/L36 and the L38 step are all rejected. No geometry change; owner hashes identical to L37.
Research R6: leak table, generator contract and a 10-step metre-native migration plan.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016dhxM43dnWvUu2B5Ph1iG1

Standalone/Research/WorldAssemblerM3/Linux37/CaptureMouthOverviewL37.py

@@ -3,13 +3,15 @@
 import math
 import os
 import subprocess
+import sys
 import time
 from pathlib import Path
 
 ROOT = Path(__file__).resolve().parents[4]
-OUT = Path(os.environ.get("VOXELFORGE_L37_OUT", ROOT / "Saved/Linux/l37"))
+OUT = Path(os.environ.get("VOXELFORGE_L37_OUT",
+                          os.environ.get("VOXELFORGE_VERIFY_OUT", ROOT / "Saved/Linux/l37")))
 CAPTURES = Path(os.environ.get("VOXELFORGE_L37_CAPTURE_DIR",
-                               Path(__file__).resolve().parent / "captures"))
+                               OUT / "captures"))
 MESH = Path(os.environ.get("VOXELFORGE_L37_MESH",
                            OUT / "owner-fi-ground-mouth.vfmesh"))
 RENDERER = Path(os.environ.get("VOXELFORGE_L37_RENDERER",
@@ -20,6 +22,8 @@ MOUTH = (5.600, 0.445, -55.156)
 CAMERA = (MOUTH[0] - 9.75, MOUTH[1] - 11.4, MOUTH[2] + 8.0)
 TARGET = (6.298233, 1.137233, -55.468264)
 FOV = 80.0
+sys.path.insert(0, str(ROOT / "Standalone/Tools/verify"))
+from runner import current_stamp, first_stamp, bounded_run
 
 
 def normalize(vector):
@@ -42,6 +46,11 @@ def run(name, command):
     log = OUT / f"capture-overview-{name}.log"
     wrapped = ["taskset", "-c", "0-11", "prlimit", "--as=6442450944", "--",
                "timeout", "1800s", *map(str, command)]
+    expected = current_stamp() if Path(command[0]) == RENDERER else None
+    if expected is not None:
+        probe = bounded_run([str(RENDERER), "--print-source-stamp"], timeout=15)
+        if probe is None or probe.returncode != 0 or first_stamp(probe.stdout or "") != expected:
+            raise SystemExit(f"{name} refused an unstamped or stale renderer: {RENDERER}")
     started = time.monotonic()
     with log.open("w", encoding="utf-8") as stream:
         result = subprocess.run(wrapped, cwd=ROOT, stdout=stream,
@@ -49,6 +58,10 @@ def run(name, command):
     elapsed = time.monotonic() - started
     print(f"[L37OverviewCaptureRun] step={name} elapsed={elapsed:.1f}s "
           f"exit={result.returncode} log={log}", flush=True)
+    if expected is not None:
+        output = log.read_text(encoding="utf-8", errors="replace")
+        if first_stamp(output) != expected or current_stamp() != expected:
+            raise SystemExit(f"{name} source stamp mismatch; see {log}")
     if result.returncode != 0:
         raise SystemExit(f"{name} failed; see {log}")
 
@@ -67,6 +80,7 @@ def main():
         "--tile-edges=off", f"--focus-region={fmt((*MOUTH, 20.0))}"])
     run("jpeg", ["ffmpeg", "-nostdin", "-hide_banner", "-loglevel", "error",
         "-y", "-i", PNG, "-frames:v", "1", "-q:v", "4", JPEG])
+    run("quality", [sys.executable, ROOT / "Standalone/Tools/verify/capture_quality.py", JPEG])
     size = JPEG.stat().st_size if JPEG.exists() else 0
     distance = math.dist(CAMERA, MOUTH)
     print(f"[L37OverviewCapture] file={JPEG.relative_to(ROOT)} camera_to_mouth_m="