Guards

Records which real checks ran and which files changed after them; status line, /evidence, and an evidence tool Claude reads before claiming tested.