Integrate MyOpenCommunity findings and original-evidence KB provenance

[anotherjulien]

Integrates reviewed OpenWebNet knowledge from the four preserved MyOpenCommunity repositories into the canonical Encyclopedia and machine-readable KB. The resulting 454 original-source-supported claims distinguish pinned client/library/simulator behavior from protocol, product and physical Firmware behavior. Existing pages carry the explanations; original evidence retains exact repositories, revisions, files, fingerprints, locations, examination methods, conditions and limitations.

The bounded research closure accounts for 176 finding records: 142 claimed, 14 corroborating, 18 deferred and two excluded. Expected-test inspection stays separate from executed helpers, and simulator output does not establish physical hardware behavior. Remaining runtime, capture and product/Firmware questions are recorded; indexed files are not represented as reviewed findings.

KB compatibility

This is a breaking, unpublished schema compatibility 2.0.0 candidate. Consumers must support the declared contract and preserve original artifact locators, claim-specific examinations and retrieval evidence dispositions. Static Firmware analysis and dynamic Firmware oracle remain distinct methods without an automatic credibility ranking. Published 0.2.0 and retained 0.1.2 snapshots keep their 0.1.0 parsing contract.

Published lifecycle identities remain accounted for; retained factual corrections keep their identifiers. One removed editorial summary retains a tombstone whose latest published release is corrected to 0.2.0. Colliding unreleased branch IDs use the existing revision-scoped migration. All 66,466 Device claim records remain unchanged.

The compatibility review fixes a retrieval-only finding-ID restriction that blocked future Firmware findings, corrects outdated consumer guidance, and documents the migration. See Provenance migration, merge compatibility review and bounded closure review.

Validation

Local validation passed the complete deterministic KB check (two clean rebuilds, freshness, schemas, cross-artifact consistency, references, provenance propagation, text hygiene, privacy and Device completeness), original-evidence/ID/schema/status regressions, 55 evidence acceptance tests, four evidence packages, ESG/ECV, the 807-artifact inventory and 58 local link/heading checks. The canonical-source audit passed with zero failures: six private artifacts were fetched and fingerprint-verified, five databases passed integrity checks, and 19 external public entries were handled as registered metadata without downloading their bytes. All hosted PR checks passed on ad9d0e5d4084cc2e9a02a762c91cd2d299408eac: 222 KB unit tests, eight schema tests, 12 status-transport regressions, generated-output freshness, deterministic double-build and cross-artifact integrity, both privacy runs, ESG/ECV and the authenticated exact-commit source/catalogue gate. Completed logs were inspected. See full KB validation, Encyclopedia compliance and PR privacy validation.

This also fixes the existing source-integrity CI pipeline that masked private-source audit failures. The trusted local gate must now pass the full canonical audit and Device/catalogue checks before publishing success. Hosted CI authenticates the exact-commit proof and public-input digest; private sources, credentials and database probes stay local. Missing, failed, superseded or stale proofs fail closed.

No merge or new Machine KB release is part of this PR preparation.