docs: pin verified energy successor boundary

DEPRECATED.md

@@ -1,19 +1,20 @@
 # DEPRECATED — this repo has been consolidated into `szl-energy-attest`
 
-**Status: DEPRECATED (Wave D consolidation). Canonical home: [`szl-holdings/szl-energy-attest`](https://github.com/szl-holdings/szl-energy-attest).**
+**Status: DEPRECATED (Wave D consolidation). Canonical home:**
+[`szl-holdings/szl-energy-attest@4d8d105c`](https://github.com/szl-holdings/szl-energy-attest/tree/4d8d105c3d5ea67b5eb25826e8a2a35ca35f4043).
 
 `governed-inference-meter` was a duplicate SZL *energy* micro-repo. To keep ONE
 canonical energy package, its **unique** code has been **copied (folded) into
 the canonical `szl-energy-attest` repo** under the subpackage
-[`szl_energy_attest.inference_meter`](https://github.com/szl-holdings/szl-energy-attest/tree/main/szl_energy_attest/inference_meter).
+[`szl_energy_attest.inference_meter`](https://github.com/szl-holdings/szl-energy-attest/tree/4d8d105c3d5ea67b5eb25826e8a2a35ca35f4043/szl_energy_attest/inference_meter).
 
 Nothing here was deleted. This repository is **kept intact and reversible** —
 **archiving it is a later founder step**, not part of this consolidation.
 
 ## What moved (and where)
 
-Only the code the canonical package did **not** already have was folded in — the
-**live inference metering** surface:
+The fold contains the **live inference metering** surface plus the legacy
+meter-specific compatibility adapters required to preserve public imports:
 
 | This repo (`governed_inference_meter`) | Canonical home (`szl_energy_attest.inference_meter`) |
 | --- | --- |
@@ -21,18 +22,43 @@ Only the code the canonical package did **not** already have was folded in — t
 | Advisory policy gate: `PolicyResult`, `allow_all`, `deny_all`, `evaluate`, `ALLOW`/`DENY` (`_policy.py`) | same names under `szl_energy_attest.inference_meter` |
 | `ReceiptChain` + `meter()` / `metered()` wrappers with tokens-per-joule (`_receipt.py`, `__init__.py`) | `szl_energy_attest.inference_meter.ReceiptChain` / `meter` / `metered` |
 | `selfcheck`, `receipt_head/count/tail/verify` | same names under `szl_energy_attest.inference_meter` |
-| `test_meter.py` | `szl-energy-attest/tests/test_inference_meter.py` |
+| Meter-specific in-toto/compliance adapter (`_attest.py`) | `attest`, `to_intoto_statement`, `compliance_evidence`, `verify_statement` |
+| Meter-specific PCGI spine/signing-facing adapter (`_spine.py`) | `emit_szl_receipt`, `from_meter_receipt`, `meter_szl_receipt`, receipt/statement verifiers |
+| `test_meter.py` plus migration invariants | [`test_inference_meter.py`](https://github.com/szl-holdings/szl-energy-attest/blob/4d8d105c3d5ea67b5eb25826e8a2a35ca35f4043/tests/test_inference_meter.py) and [`test_inference_meter_migration.py`](https://github.com/szl-holdings/szl-energy-attest/blob/4d8d105c3d5ea67b5eb25826e8a2a35ca35f4043/tests/test_inference_meter_migration.py) |
 
-### What was NOT re-copied (deduped)
+### Compatibility surfaces retained with provenance
 
-The canonical `szl-energy-attest` package **already provided** these, so the
-duplicates here were intentionally *not* copied (to avoid drift):
+The canonical `szl-energy-attest` root package already has its own energy-receipt,
+attestation, PCGI, and signing surfaces. Those are a distinct receipt schema, not
+a drop-in replacement for every legacy meter import. For continuity:
 
-- the attestable, hash-chained energy **receipt schema** + offline verifier,
-- the **in-toto / SLSA-shaped** attestation + EU-AI-Act / NIST-AI-RMF mapping
-  (`_attest.py`),
-- the canonical **PCGI szl-receipt** binding / spine fold (`_spine.py`),
-- the DSSE/HMAC **signing** layer.
+- the meter-specific `_attest.py` adapter is retained with only its package name
+  and install guidance rewritten to the canonical successor;
+- the meter-specific `_spine.py` adapter is retained with only the package import
+  and install guidance rewritten to the canonical successor name;
+- the hardened `_receipt.py` chain verifier is retained byte-for-byte;
+- signing and statement construction continue to delegate lazily to the shared
+  `szl-receipt` library rather than forking cryptography.
+
+The successor's immutable
+[`MIGRATION_PROVENANCE.json`](https://github.com/szl-holdings/szl-energy-attest/blob/4d8d105c3d5ea67b5eb25826e8a2a35ca35f4043/MIGRATION_PROVENANCE.json)
+records both legacy and successor SHA-256 digests and the bounded `_attest.py` /
+`_spine.py` transformations. This preserves import and signing-facing continuity
+without claiming that the legacy and root successor receipt schemas are equal,
+that a key is configured, or that any receipt is signed.
+
+## Deprecation boundary
+
+- New integrations use `szl_energy_attest.inference_meter` at the verified
+  successor revision above.
+- This GitHub repository and its Hugging Face kernel remain readable as
+  provenance and rollback surfaces; deprecation is not deletion.
+- No new capability, install, schema-parity, measured-energy, or signature claim
+  is made by this pointer correction.
+- Archiving is **not authorized by this document**. It remains an explicit owner
+  decision after the GitHub and Hugging Face pointers are live, active inbound
+  references are repaired or classified, CI remains green, and rollback evidence
+  is retained.
 
 ## Migration
 

README.md

@@ -20,9 +20,28 @@ tags:
 
 > # ⚠️ DEPRECATED — consolidated into [`szl-energy-attest`](https://github.com/szl-holdings/szl-energy-attest)
 >
-> **This repo is DEPRECATED (Wave D consolidation).** Its unique code (the **live inference metering** path — power-integral / trapezoidal energy fallback, `capability_report`, the advisory policy gate, the `meter()` / `metered()` wrappers, the tokens-per-joule `ReceiptChain`, and `selfcheck`) has been **folded into the canonical energy package** [`szl-holdings/szl-energy-attest`](https://github.com/szl-holdings/szl-energy-attest) under the `szl_energy_attest.inference_meter` subpackage. **Canonical: `szl-energy-attest`.**
+> **This repository is deprecated.** Its live inference meter and meter-specific
+> attestation, hardened receipt-chain, PCGI spine, and signing-facing compatibility
+> APIs were folded into the canonical
+> [`szl_energy_attest.inference_meter`](https://github.com/szl-holdings/szl-energy-attest/tree/4d8d105c3d5ea67b5eb25826e8a2a35ca35f4043/szl_energy_attest/inference_meter)
+> package in verified merge
+> [`4d8d105c3d5ea67b5eb25826e8a2a35ca35f4043`](https://github.com/szl-holdings/szl-energy-attest/commit/4d8d105c3d5ea67b5eb25826e8a2a35ca35f4043).
 >
-> The attestation / spine / signing code was **not** copied because `szl-energy-attest` already provides it (deduped). Nothing was deleted; this repo is kept intact and reversible. **Archiving is a later founder step.** See [`DEPRECATED.md`](./DEPRECATED.md) for the migration guide. Λ remains **Conjecture 1 (advisory, uniqueness OPEN)** — never upgraded to proven.
+> Three legacy modules (`_energy.py`, `_policy.py`, `_receipt.py`) are exact
+> hash-preserving copies; `_attest.py` and `_spine.py` carry only bounded
+> package/import and install-guidance rewrites. The immutable
+> [`MIGRATION_PROVENANCE.json`](https://github.com/szl-holdings/szl-energy-attest/blob/4d8d105c3d5ea67b5eb25826e8a2a35ca35f4043/MIGRATION_PROVENANCE.json)
+> records every source and destination digest, and the
+> [migration regressions](https://github.com/szl-holdings/szl-energy-attest/blob/4d8d105c3d5ea67b5eb25826e8a2a35ca35f4043/tests/test_inference_meter_migration.py)
+> verify that boundary.
+>
+> **Boundary:** the successor's root energy receipt remains a different schema;
+> compatibility does not imply schema equality, a configured signing key, or a
+> signed receipt. This legacy repository and its Hugging Face artifact remain
+> readable for provenance and rollback, but are not the target for new
+> integrations. Archiving requires a separate owner decision after pointer and
+> inbound-link gates are evidenced. See [`DEPRECATED.md`](./DEPRECATED.md).
+> Λ remains **Conjecture 1 (advisory, uniqueness OPEN)** — never upgraded to proven.
 
 **Energy-metered, governed inference receipts.** A lightweight, dependency-light
 Python utility (and Hugging Face *universal* kernel) that wraps any inference