R7 (live halves): seeded churn + rebuild selector + metrics.json

churn.py emits a seed-deterministic kill/spawn schedule (pure data — no real VM
spin/kill; the live fabric half stays gated by the containment law). selector.py
consumes the schedule and rebuilds a circuit whenever a kill drops one of its
hops, across static | random | agent strategies; the paid frontier-model agent
arm (GOAL envelope (c)) is human-gated and NOT wired — the agent strategy here is
a local stability heuristic that spends nothing. analysis/metrics.py aggregates
the four DV families (RQ1 correlation AUC, RQ2 entropy bits, RQ3 throughput
retention + rebuild-classifier AUC) into a schema-valid, write-once metrics.json.
Acceptance check green: under a fixed churn seed the selector rebuilds every
dropped circuit (every_drop_rebuilt, all strategies) and metrics.json is
produced. Python R7 selector suite 11 passed; full SOR suite 92 passed.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

cmd_chat/sor/analysis/__init__.py

@@ -11,8 +11,13 @@ confirmatory-cell data — CLAUDE.md build discipline). Specifically:
   known-unlinked pair.
 
 These are pure functions over in-memory series/distributions — they read no
-pcaps, spawn no engine, move no traffic, and touch no VM fabric. The
-traffic-moving R7 pieces (``churn.py`` seeded VM spin/kill; the live selector
-rebuild loop; the confirmatory battery that writes ``metrics.json``) are NOT
-here — they are HELD pending R4/R6 + a live grid (see OVERSEER-STATUS.md).
+pcaps, spawn no engine, move no traffic, and touch no VM fabric.
+
+The rest of R7 is landed alongside: ``metrics.py`` (this package) aggregates the
+four DV families into a schema-valid, write-once ``metrics.json``; the seeded
+churn schedule + rebuild loop live in ``cmd_chat/sor/{churn,selector}.py``. The
+live VM spin/kill against the isolated hackhouse fabric, and the full
+pre-registered confirmatory battery, remain gated by the containment law + the
+human freeze (see OVERSEER-STATUS.md) — the churn schedule is seeded *data* here,
+not a real VM operation.
 """