[codex] publish direct-relation drift verification and zeroglare lock

[SerhatSoruklu]

What changed

• Added direct-relation exposure drift verification across runtime, docs, examples, and runtime refusal behavior.
• Locked the ZeroGlare continuity-system document with bounded-input and freeze framing.

Why

• Prevent silent widening or drift in the direct relation read surface.
• Keep the ZeroGlare roadmap framing bounded, inspectable, and anti-drift.

Impact

• Direct relation exposure stays aligned with the single authoritative allowlist source.
• ZeroGlare terminology remains standardized around pattern, constraint, inspectability, and bounded reconstruction.

Checks

• node backend/scripts/verify-direct-relation-types.js
• node --test backend/tests/concepts-direct-relation-read.test.js
• node backend/scripts/verify-relation-hardening.js

[sonarqubecloud]

Quality Gate failed

Failed conditions
2 Security Hotspots
4.5% Duplication on New Code (required ≤ 3%)

See analysis details on SonarQube Cloud