[PIR][WP30] RVM semantic-authority layer above OpenShell-class runtimes (ADR-333, cross-repo, ADR-only here)

Part of PIR Wave 4 — epic #837.

ADR-only in this repo: position RVM one layer above OpenShell-class secure runtimes (signed agent identity, signed memory, mutation rights, transferable capabilities, provenance chains, revocation, rollback, portable execution receipts) with an OpenShell interop adapter (policy projection down to YAML, downgrade-only; audit-trail ingestion into the ADR-134/ADR-312 witness chain). NVIDIA items verified: developer.nvidia.com security-stack essay (2026-08-21) + github.com/NVIDIA/OpenShell (Apache-2.0, Landlock+seccomp, 8.3k stars). RVM-side implementation requires maintainer review — merge there is USER ACTION.

• Evidence grade & artifact availability: docs/research/perpetual-intelligence-runtime/10-wave4-evidence-review.md (PR #892)
• WP/ADR mapping, phases, and security gates: docs/research/perpetual-intelligence-runtime/11-wave4-program-plan.md (PR #892)
• ADR: docs/adr/ADR-333-rvm-semantic-authority-above-openshell.md

Depends on: none in-repo.

Start with docs/research/perpetual-intelligence-runtime/10-wave4-evidence-review.md and 11-wave4-program-plan.md, then read docs/adr/ADR-333-rvm-semantic-authority-above-openshell.md. Confirm that the ADR records RVM's position above OpenShell-class runtimes, the downgrade-only interop adapter, and witness-chain audit ingestion; completion requires maintainer review.