## W3: resolve persisted boundary adapter manifests

Closes BigscreenVR/spt-bs-releases#254. Refs BigscreenVR/spt-bs-releases#318.

Root cause: cmd_bind and cmd_boundary called resurface_notifs(id), whose wrapper always supplied None. The existing IO-compliance gate therefore never suppressed the deprecated spt-shells row on either path.

The wrapper now resolves the endpoint's persisted adapter/profile through the existing registry resolver and passes that manifest to the existing resurface path. Compliant profiles suppress legacy shell context; noncompliant, missing, or unresolvable manifests retain best-effort legacy behavior. The listen path and its explicit manifest override are unchanged. Notification policy receives the same resolved manifest; no new public API or command flags.

Also carries the agreed W2 documentation-only rider: attachments guide records Doyle's completed seven-cell field acceptance, exact Hertz DELIVERY.json custody, isolated teardown, and dirty-source candidate attribution without claiming a later commit/release runtime attestation.

## Verification

Base is landed main1143a6dccf177cee46ca387f2be0637ee4bd324a; this tree was already stacked on that exact commit, so no source replay was required.

Receipts: .spt/preserved/318/todlando-w3/
- red.json/log: both new actual bind/boundary regressions failed on the pre-fix wrapper (native100;787 outside-filter skips).
- green.json/log: reporting/startup88/88 passed;701 outside-filter skips.
- clippy.json and workspace-clippy.json: spt all-targets and workspace all-targets clippy with -D warnings exited0.
- build.json: own-pool spt+xtask build0; gen.json/docs-check.json: own fresh xtask gen/check0.
- final-trace.json/log:939/939 complete, zero findings; REQ-BOUNDARY-MANIFEST-COMPLIANCE registered and tagged at doc/impl/unit evidence.
- smoke.json + smoke command receipts: actual private-home CLI compliant/noncompliant bind, clear, compact (six poll observations); missing held manifest boundary generated the legacy deferred row (real private spool inspection). The native API tests also cover unresolved fallback.

Smoke binary SHA256 ca2bf89df31fb436cb84cd41423b09477510259f726ed546d0d49245b9150fda was built from final production source before this commit, not from a commit-stamped rebuild. Initial missing-manifest smoke removed the source rather than the registry copy and was rejected as fixture evidence. Corrected held-copy removal queued the legacy row; the private daemon had meanwhile reconciled the synthetic endpoint to suspended, so hook poll correctly held deferred delivery. Receipt names both corrections rather than claiming that empty poll proved delivery.

CLI anchor auto-started a private broker/brain. Private node stop exited0; candidate process census empty. Private home and throwaway smoke script removed; logs/receipts retained. No firewall changes, resident daemon mutation, or target deletion performed. Own pool released0. No cargo fmt.

Scope: local Windows API/CLI proof, not a live production harness clear or whole-milestone field acceptance. Doyle owns independent gate, CI and ff-only landing.