feat(audit): Tier 2 code-soundness (corrected spec) + core.selftest hardening

feat(audit): Tier 2 code-soundness checks + selftest fixtures

feat(audit): core contract + runner + CLI