docs: hand off private Windows runtime integration

docs/协作/evidence/windows-runtimes-01/backend.txt

@@ -0,0 +1,16 @@
+PASS defaults and complete bundle activate all tools
+PASS private tools precede original system paths, including spaces
+PASS disabled global preference preserves original environment exactly
+PASS per-tool disabled does not inject its paths
+PASS missing and incomplete bundle never reports active
+PASS Linux and macOS preserve original environment
+PASS case-insensitive PATH becomes one canonical key and survives MCP SDK merge
+PASS overlay introduces no credentials or unrelated variables
+PASS writable private caches and prefixes are scoped to active tools
+PASS overlay idempotence
+PASS IPC patch validation rejects malformed and unknown values
+PASS serialized updates merge toggles and preserve unrelated config
+PASS settings survive module restart without exposing config credentials
+PASS failed atomic save leaves the committed enable policy unchanged
+PASS corrupt, incomplete, and unreadable stored policy never silently enables tools
+Private runtimes: 15 regression groups passed; no Windows executables run.

docs/协作/evidence/windows-runtimes-01/bundle-integrity.txt

@@ -0,0 +1,8 @@
+npm warn Unknown env config "http-proxy". This will stop working in the next major version of npm.
+
+> ycode@0.0.7 runtimes:verify
+> node scripts/verify-runtime-bundle.mjs
+
+node 24.22.0: verified 1992 files (5cb4f80767f68d2c32d28fa4dbc51a3c00681e72e60288a783692df99458e53f)
+python 3.14.8: verified 1377 files (70d377bec4650e9a72cfc1395733c5d3a1010ecf597fb72e3a8460ef6ca14162)
+git 2.56.0.windows.2: verified 9614 files (8c7762472d6c1bb90c8a9b623fc2baf3a112efb108fbd2dacf32120b67a05349)

docs/协作/evidence/windows-runtimes-01/native-smoke.txt

@@ -0,0 +1,6 @@
+npm warn Unknown env config "http-proxy". This will stop working in the next major version of npm.
+
+> ycode@0.0.7 runtimes:smoke
+> node scripts/smoke-runtime-bundle.mjs
+
+SKIP: native toolchain smoke requires Windows x64; no Windows binaries executed.

docs/协作/evidence/windows-runtimes-01/packaging-tests.txt

@@ -0,0 +1,12 @@
+✔ source lock uses reviewed official HTTPS endpoints and fixed digests (1.103571ms)
+✔ inventory is deterministic and notices content changes (7.198965ms)
+✔ Python convenience launcher is relocatable and uses module pip (3.97465ms)
+✔ packaging rejects wrong platform and wrong arch (0.999448ms)
+ℹ tests 4
+ℹ suites 0
+ℹ pass 4
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 101.164492

docs/协作/evidence/windows-runtimes-01/ui-dom.txt

@@ -0,0 +1,24 @@
+{
+  "result": "PASS",
+  "checks": [
+    "exactly four accessible switches",
+    "ready status derives from backend",
+    "duplicate clicks produce one patch",
+    "saving retains acknowledged value and disables all controls",
+    "tool patch is narrow",
+    "master off preserves individual choices",
+    "master on restores choices",
+    "failed save does not change persisted checkmark",
+    "retry succeeds and clears error",
+    "reopen reloads saved choices",
+    "missing bundle is disabled with honest status",
+    "non-Windows disables controls and explains support",
+    "read failure offers recovery without enabling controls",
+    "read retry recovers actual state",
+    "save acknowledged after navigation is read on reopen",
+    "no unrelated security controls",
+    "future process and system fallback warning present",
+    "no uncaught renderer errors"
+  ],
+  "limits": "Controlled DOM/API fixture, not Windows execution or screenshot pixel parity."
+}