Review checkpoint and shared-server regression

Current-state check after 06631548, on the shared main worktree. This is not a full-review completion audit or pristine-release verification.

Pass-5 requirement Evidence rerun Result / remaining work
#1 symbol owners check-region-decls --check-owners 212 owners verified.
#2 version authority check-browser-cache-versions --self-test One build-info/WINE_BUILD authority; 75 page scripts, seven Worker scripts.
#3 discovered tiers test-tiers --check 1,444 files placed: 1,085 unit, 353 e2e, six smoke.
#4 duplication ratchets aw-census --check, wat-dup-census --check A/W divergent 3, both-stub 0; 134 exact groups / 522 members, at the existing ceiling.
#5 shared implementations test-review-shared-families Nine named families, 21 edges, five negative controls pass. Structural evidence only; broader string-copy and COM inventories remain open.
#6 shared test infrastructure test-static-server Regression found and repaired here: three copied servers violated the existing ratchet. Control-session behavior was not rerun in this checkpoint.
#7 generated adapters and quiet APIs test-api-generation-metadata, check-silent-stubs 258 generated / one handwritten test adapter; 249 manual quiet handlers + 22 metadata stubs. WSAIsBlocking registration/semantics and remaining quiet API behavior are open.
#8 carried cleanup manifest, sync-object-name and silent-history tests 108 fragments included; shared name decoder and history separation pass. See the earlier scope-specific carried-cleanup audit; no new broad behavioral claim.

Regression and repair

test-static-server.js failed because Atomic Bomberman gameplay, the D3D9 pipeline browser fixture and the OPFS overlay browser test had reintroduced their own http.createServer implementations. All three now use startStaticServer; no exception or relaxed ratchet was added.

Verification after migration:

The native memory/permission, dirty-write and lifetime gaps in the other review documents remain open. These counts and browser fixtures do not close earlier review passes, prove all APIs correct, or establish a performance result.