[cloudQuant]

Scope

Adds the reviewed base SDK deployment-evidence contract and actor policy on a topic branch. The eight-file allowlist excludes local configuration, binaries, and unrelated submodule changes.

Verification

• Independent source-only QA: GO after adversarial permission, evidence-time, metadata, and malformed-input probes.
• 54 offline tests passed with the optional spdlog import blocked.
• Ruff passed.
• A clean source-overlay wheel build produced version 0.15.5, included deployment_evidence.py, retained spdlog as an optional extra, and passed ZIP integrity checks.
• Independent incremental secret review: GO; test canaries are synthetic.

Acceptance state

This draft is source review only. It does not establish the receipt issuer's external authority, a provider session, CTP native lifecycle safety, account-wide writer fencing, or live-trading approval. No real order or cancel was exercised.