Verify review artifacts before training-data access
A reviewed synthetic-data proposal should not become executable merely because release metadata says it is approved. Keep the new arm distinct, freeze prior builders and recipes, and require the training CLI to open and byte-verify an independent review receipt and supporting rep…