Summary

• Make profile/profile-explain output distinguish installed generate/verify/inspect commands from proof/check paths.
• Make inspect-bundle include generated files, artifact scanner/runtime posture, proof/check path, and claim boundaries without printing payloads.
• Mark CLI explain/inspect polish done and proof-handoff boundary ready.

Files added/changed

• crates/uselesskey-cli/src/main.rs
• crates/uselesskey-cli/tests/cli.rs
• .uselesskey/goals/active.toml

Validation

• cargo xtask fmt
• cargo test -p uselesskey-cli --all-features profile -- --nocapture
• cargo test -p uselesskey-cli --all-features inspect_bundle -- --nocapture
• cargo clippy -p uselesskey-cli --all-targets --all-features -- -D warnings
• cargo xtask external-adoption-smoke --path .
• cargo +nightly xtask pr-lite
• cargo +nightly xtask pr
• git diff --check

Non-goals

• No v0.10.0 release prep, version bump, tag, or publish.
• No new contract packs, badges, public claims, installed proof command, provider compatibility claims, or production security claims.

What this enables next

• The lane can decide the installed proof handoff boundary from a CLI surface that already explains files, scanner posture, proof/check path, and boundaries.