…H-MATCH-001 (SPEC §86.6 closure) (#1761)

Codifies the INV-INIT-ARCH-MATCH-001 invariant authored as runtime code
in PR #1760 (`validate_init_arch_matches_tensor_evidence` in
aprender-train::train::pretrain_real). Adds:

- FALSIFY-INIT-ARCH-MATCH-001: integration falsifier bound to the
  unit-test family `cargo test -p aprender-train --lib
  inv_init_arch_match_001` (7 tests covering: canonical §86 reject,
  inverse reject, matching qwen2 accept, matching llama accept, None
  metadata skip, unmappable metadata skip, GGUF-unknown tensor skip).
- INV-INIT-ARCH-MATCH-001 proof_obligation: safety invariant — when
  both metadata.architecture and tensor-name-inferred family resolve
  to concrete distinct slugs, gate MUST fail-fast before any training
  step. No false-positive when either side returns "unknown".

## Salvage path

The error message includes an inline `apr stamp` recipe (PR #1757):

```
apr stamp <pre-p0k.apr> --architecture qwen2 --hf-architecture Qwen2ForCausalLM \
                       -o <stamped.apr>
apr pretrain --init <stamped.apr> ...
```

## Refs

- PR #1742 (PMAT-690 P0-K base — producer-side stamping)
- PR #1750 (P3-A `apr inspect --quality` — surfaces hf_identity=0/20 pre-stamp)
- PR #1754 (SPEC §85 P2-E findings — context)
- PR #1757 (apr stamp HF identity extension — salvage path)
- PR #1758 (SPEC §86 amendment — defect specification this contract closes)
- PR #1760 (INV-INIT-ARCH-MATCH-001 runtime implementation)
- memory/feedback_upstream_metadata_masquerade.md (methodology #33)

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>

…t (P3-C prep) (#1764)

Author the HuggingFace model card for `paiml/albor-370m-v1` and the
publish-readiness pre-flight script. Per SPEC §88: this model is
shipped as a stack-existence-proof, not a production code-completion
model. Both artifacts make that framing explicit so HF Hub users
calibrate expectations correctly.

## docs/model-cards/albor-370m-v1.md (255 lines)

Standard HF model card with model-index frontmatter:

- YAML metadata: Apache-2.0, code/python/stack-existence-proof tags,
  Qwen2.5-Coder-0.5B-Instruct base, codeparrot + the-stack-dedup
  datasets, val_loss=4.6227 / val_perplexity=101.78 metrics.
- §88 framing section spelling out the stack-existence-proof purpose.
- Training procedure table (architecture, optimizer, LR schedule,
  hardware, wall time, throughput — all from the §85 P2-E run).
- Trajectory table (every 5 epochs from 7.43 → 4.62).
- Intended uses (✅ stack demos, infra validation, tokenization
  round-trip, quantization research) vs NOT-recommended uses
  (production code-LM, zero-shot reasoning, long-context, HumanEval
  submission).
- Limitations (compute-bounded, plateau evidence, init lineage,
  val drift).
- Training data table (sources, sizes, licenses, role).
- How-to-use code snippets (apr CLI, Rust direct load, format export).
- Reproduce-the-run shell example using the exact §85 P2-E recipe.
- Citation, license/provenance, acknowledgments.

## scripts/publish/albor-370m-publish-readiness.sh (182 lines)

7-gate pre-flight checklist. GO / NO-GO verdict before invoking
`apr publish`. Gates:

1. `apr validate` exits 0
2. `apr inspect --quality` ≥ 90 (P3-A scorer; surfaces §86 salvage
   recipe inline if hf_identity < 20 or provenance < 25)
3. `apr qa --json` verdict = GO (8 gates)
4. Model card present + has HF YAML frontmatter
5. HF_TOKEN set
6. Smoke `apr run` produces text-like output
7. GGUF Q4_K + SafeTensors export round-trip both succeed

Exit 0 = ready to publish. Exit 1 = NO-GO with explicit blocker list.
Bashrs-validated (1 SEC011 false-positive on multi-condition rm -rf
guard; functionally safe).

## What this PR does NOT do

- Does NOT invoke `apr publish` (external action; requires user OK)
- Does NOT touch any APR files (read-only checks)
- Does NOT modify the §85 P2-E ep49 checkpoint (operator runs
  `apr stamp` via the §86.4 salvage recipe separately)

## Operator workflow (post-PR landing)

```bash
# 1. Stamp the pre-P0-K P2-E ep49 checkpoint to bring hf_identity up
apr stamp /mnt/nvme-raid0/runs/model-2-p2e-tuned-hp-20260517/ckpt/epoch-049.apr \
    --architecture qwen2 \
    --hf-architecture Qwen2ForCausalLM \
    --hf-model-type qwen2 \
    --license Apache-2.0 \
    --data-source "huggingface.co/Qwen/Qwen2.5-Coder-0.5B-Instruct + bigcode/the-stack-dedup + codeparrot/codeparrot-clean" \
    --data-license "Apache-2.0 / permissive-aggregate" \
    -o /tmp/albor-370m-v1.apr

# 2. Run the readiness check
bash scripts/publish/albor-370m-publish-readiness.sh /tmp/albor-370m-v1.apr
# Expected output: "VERDICT: GO" (or NO-GO with explicit blocker list)

# 3. Publish (still requires explicit user invocation)
apr publish paiml/albor-370m-v1 --formats apr,safetensors,gguf \
    --model-card docs/model-cards/albor-370m-v1.md
```

## Refs

- PR #1742 (PMAT-690 P0-K — upstream stamping)
- PR #1750 (P3-A `apr inspect --quality` — gate 2)
- PR #1754 (SPEC §84+§85+§86+§87+§88 stack — context)
- PR #1757 (apr stamp HF identity extension — §86 salvage)
- PR #1760 (INV-INIT-ARCH-MATCH-001 — validation chain)
- docs/specifications/aprender-train/ship-model-2-spec.md §88
- docs/specifications/aprender-train/albor-370m-roadmap.md §4 P3-C

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>