Separate Val surface. Deterministic source/diff/syntax verification only. Does not claim independent physical execution provenance, canonical authority, or P_real.