feat: formal proofs, FFI tests, benchmarks, and onboarding guide

[hyperpolymath]

• Add GrooveTermination.idr: prove handshake terminates in ≤4 steps, no privilege escalation, deterministic outcome
• Add LayoutStability.idr: prove ABI backward compatibility — field prefix preservation, result code stability, handle size stability
• Add ResourceCleanup.idr: prove all resources released on teardown — LIFO cleanup, panel teardown, shell teardown totality
• Add guard_mode_test.ts: unit tests for window guard mode system
• Add result_code_test.ts: unit tests for Result code ABI contract
• Add startup_bench.ts: benchmarks for config creation, IPC, capabilities
• Add GETTING-STARTED.md: concise developer onboarding guide
• Update PROOF-NEEDS.md: 5 of 6 proofs now complete (was 0 of 6)
• Update TEST-NEEDS.md: 10 test files (was 6), targeting CRG grade B

https://claude.ai/code/session_01WfL9NSptNEzdPbcbwWD6gu

Summary

Changes

RSR Quality Checklist

Required

• Tests pass (just test or equivalent)
• Code is formatted (just fmt or equivalent)
• Linter is clean (no new warnings or errors)
• No banned language patterns (no TypeScript, no npm/bun, no Go/Python)
• No unsafe blocks without // SAFETY: comments
• No banned functions (believe_me, unsafeCoerce, Obj.magic, Admitted, sorry)
• SPDX license headers present on all new/modified source files
• No secrets, credentials, or .env files included

As Applicable

• .machine_readable/STATE.a2ml updated (if project state changed)
• .machine_readable/ECOSYSTEM.a2ml updated (if integrations changed)
• .machine_readable/META.a2ml updated (if architectural decisions changed)
• Documentation updated for user-facing changes
• TOPOLOGY.md updated (if architecture changed)
• CHANGELOG or release notes updated
• New dependencies reviewed for license compatibility (PMPL-1.0-or-later / MPL-2.0)
• ABI/FFI changes validated (src/interface/abi/ and src/interface/ffi/ consistent)

Testing

Screenshots