Hardened state ingestion and rollout proofing

State ingestion now refuses to commit partial scrapes that would silently lower launched-state coverage. Rollout proofing emits explicit diagnostics so the human reviewer can decide whether to re-run or accept.