maintenance-mode

How we hardened ZeroLabs visual runtime provenance gates

We hardened ZeroContentPipeline so fresh visual runs stop ingesting template placeholders, register runtime provenance explicitly, and block invalid creative-runtime states before publish.