WU-SEMANTIC-OWNERSHIP-01: align implementation with design truth

[noho]

Summary

• continue and close the existing WU-SEMANTIC-OWNERSHIP-01 umbrella remediation; this is not a replacement work unit
• remove transitional/local-minimum semantics across Doc, Web, Host projection/evidence, wait polling, Fins, and CLI/init/upload boundaries
• preserve concrete local permission and defense-in-depth controls without introducing a unified tool-authorization framework
• close all accepted Topic 1-7 code fixes and later review findings; retain Topic 8 and Topic 9 as explicit no-code decisions

Validation

• canonical suite: 5260 passed, 10 skipped, 5 deselected
• exact-exclusion coverage: 5259 passed, 10 skipped, 6 deselected; 219 of 219 changed production files at or above 80 percent
• pyright: 0 errors
• full accepted Ruff set: 142 current findings, 0 added
• build, diff check, README triggers, source/propagation/security/configured-secret scans, focused owner tests, public smokes, HKEX official cumulative smoke, and aggregate dual deep review passed
• PR deepreview finding PR179-DR-F01 was fixed at the Host ToolRuntime owner boundary; focused 6 tests, ToolRuntime aggregate 179 tests, projection/integration 37 tests, and 85 percent modified-file coverage passed
• final PR head 9d3f45242e3bae94b4929e858c96aade76fcb1ff: Windows R11 run 29716531143 passed and Windows R12 run 29716531138 passed
• all accepted/open, needs-evidence, design-contradiction, blocker, and unclassified finding ledgers are zero; remaining remediation sub-WU count is zero

Security and boundaries

• no unified tool authorization framework, permission schema, policy DSL, role/capability model, or generic sandbox was added
• existing Doc allowed paths, containment/symlink controls, Web DNS/peer/resource/challenge controls, atomic mutation, storage containment, and process/late-publication fencing remain active
• config and Host-internal SQLite/EventLog are the same trusted local domain and may contain configured credentials; plaintext credential/header values remain forbidden from Tool Trace, audit output, public/log/LLM-readable material, and review evidence
• residual AR-F06 remains retained, unfixed, and unwaived with the future Host scheduler/lifecycle owner; it is not a current accepted finding or a new work unit
• deferred capabilities remain owned by Issue 142, Issue 151, Issue 175, Issue 177, Issue 178, and the existing Web/WeChat/render trackers
• Gemini quota behavior is an expected non-blocking low-budget test-account condition

Closeout

• final closeout artifact: docs/reviews/wu-semantic-ownership-01-final-closeout.md
• accepted closeout transaction: 2af146522212996fdc7f932cdcefbc8befad8408
• controller state: final-closeout-pass; active work unit: None; default next work unit: None
• this PR remains draft/open and intentionally has no closing keyword for deferred issues; merge, mark-ready, reviewer requests, branch deletion, and deferred-issue closure are not part of this closeout