test: add LOCAL REAL_ENVIRONMENT path without Apple Developer authority

[daniele21]

Outcome

Allow PRS-18 target-Mac physical evidence to be collected on a representative Apple-Silicon Mac even when Apple Developer Program distribution authority is unavailable, without weakening the canonical release contract.

Scope

• add a local-only artifact policy accepting only finalized, clean, exact-revision, macOS arm64, ad-hoc artifacts;
• add an adapter that reuses the existing measured target-Mac and PRS-16 contention owners without modifying their release-only artifact qualification;
• add python3 scripts/run_local_real_environment_suite.py as a one-command build/reuse + evidence runner;
• keep Developer ID, secure timestamp, notarization, stapling and distribution Gatekeeper explicitly BLOCKED and outside the local PASS verdict;
• keep VoiceOver subjective usability explicitly non-automated;
• store aggregate evidence under dist/evidence/local-real-environment/<revision>/;
• register the command in .engineering/commands.json and document the operator runbook/current state;
• add deterministic tests for ad-hoc artifact qualification, exact artifact reuse, adapter command routing and PASS-with-distribution-blocked semantics;
• after repeated target-Mac closedroom_window_missing evidence, add bounded AX/WindowServer diagnostics that distinguish AX exposure gaps from hidden/closed windows or process lifecycle issues without changing product behavior or weakening the failing gate.

Four axes

• PRODUCT: PRODUCT_NONE — evidence/tooling only; no product behavior change.
• DELIVERY: INTEGRATION into dev.
• VALIDATION: repository selector is authoritative; .engineering/commands.json changed, so no manual downgrade is permitted.
• EXECUTION: REMOTE_AUTOMATED for deterministic gates; REAL_ENVIRONMENT remains the actual user-run Apple-Silicon/TCC/MLX evidence.

Invariants

• canonical release runners remain unchanged and still fail closed without Developer ID/notarization proof;
• no cloud fallback or external meeting-data transfer;
• local PASS is never relabeled as release readiness;
• exact source/artifact identity and clean checkout remain required;
• aggregate evidence never copies arbitrary child error payloads, UI labels/titles, transcript or meeting text; only explicitly whitelisted numeric/boolean process/window metadata may surface for closedroom_window_missing diagnosis.