Model weight protection

OPAQUE ships a spec that keeps model weights sealed until the host proves what it is running

Weight Custody Manifest binds a model's decryption key to hardware attestation, which gives builders a lever once weights leave their data center. The public 91-case suite exercises protocol logic on synthetic certificate roots.