[hoainho]

Changes

• Add risk-guided test generation, isolated base/candidate execution, signed evidence and bounded mutation analysis.
• Integrate QA Factory and bounded Jev repair; add optional confined img2threejs product and visual evaluation.
• Preserve existing grading, reporting and baseline interfaces.

Verification

• Full local compatibility gate: 76 suites passed, including live Vitest and img2threejs browser/visual acceptance.
• Collision pilot: signed local evidence reproduced four reviewed regressions; mutation coverage improved from 31/35 to 33/35 with two contract-relevant survivors killed.
• Live GPT 6.1 QA hook returned three suspected regressions; local signer remains reporting-only.
• Independent GitHub evidence workflow must pass before merge.