[LloydCoder]

Summary

• Add a tenant-role-gated fas export <analysis-id> [--snapshot-id ...] --format json command.
• Export the analysis, immutable snapshot, complete paginated artifacts/observations/evidence/graph/findings, snapshot-scoped tool runs, and audit events.
• Bind export to a snapshot belonging to the requested analysis; reject cross-analysis snapshot selection.
• Add canonical SHA-256 over sorted compact JSON (excluding only the digest field), a JSON Schema contract, reference documentation, service tests, and CLI end-to-end coverage.

Security and integrity

• No benchmark oracle or expected verdict data is read.
• FAS output remains an untrusted submission to independent FAS-Bench evaluation.
• All source evidence and provenance are retained; no findings or verdicts are fabricated.
• Export includes records across pagination boundaries and filters tool runs to the selected snapshot.

Validation

Require the complete Python 3.11–3.14, CodeQL, schema-parity, quality/coverage, and dependency-security workflows to pass on this exact head.