Prove clean native release artifacts (#106)

RUSTREWRITE.md

@@ -412,6 +412,7 @@ MSRV, features, and licenses at adoption time.
 | ZLogger / Microsoft logging | [`tracing` 0.1.44](https://crates.io/crates/tracing/0.1.44), [`tracing-subscriber` 0.3.23](https://crates.io/crates/tracing-subscriber/0.3.23) | Libraries emit spans/events; binaries choose formatting and filters. Never log credentials or capability tokens. |
 | rate limiting | [`governor` 0.10.4](https://crates.io/crates/governor/0.10.4) | Candidate for caps categories. First reproduce burst/refill/cancellation behavior with deterministic clock tests. |
 | compression and tar archives | [`flate2` 1.1.9](https://crates.io/crates/flate2/1.1.9), [`tar` 0.4.46](https://crates.io/crates/tar/0.4.46) | Enforce decompressed-size, path traversal, and entry-count limits on untrusted OAR data. |
+| release artifact inspection | [`goblin` 0.10.5](https://crates.io/crates/goblin/0.10.5) | Parse ELF, PE, and Mach-O imports, symbols, and linked libraries without executing an artifact or relying on platform-only inspection tools. |
 | XML and URL | [`quick-xml` 0.41.0](https://crates.io/crates/quick-xml/0.41.0), [`url` 2.5.8](https://crates.io/crates/url/2.5.8), [`base64` 0.23.1](https://crates.io/crates/base64/0.23.1) | Streaming XML for LLSD/login; retain exact URL escaping behavior with fixtures. |
 | CoreJ2K 2.3.3.91 | system [OpenJPEG](https://www.openjpeg.org/) 2.5.4+ through the private `libremetaverse-openjpeg` adapter | Opt-in `jpeg2000` feature; checked-in minimal bindings avoid a libclang build dependency. Bounded memory streams and header validation isolate native code. Golden tests cover channel order, alpha, 16-bit precision, dimensions, discard levels, lossless/lossy modes, and malformed input. |
 | SkiaSharp 4.150.1 | [`skia-safe` 0.99.0](https://crates.io/crates/skia-safe/0.99.0) | Adopted behind the opt-in `skia` feature. Target-specific official binary-cache feature sets provide BMP/GIF/ICO/JPEG/PNG/WBMP/WebP decoding on macOS, Linux, and Windows; checked owned buffers keep Skia types out of the core image API. |
@@ -443,7 +444,7 @@ The current adopted set is:
 | Wire data and parsing | `base64`, `serde`, `serde_json`, `roxmltree`, `regex`, `unicode-general-category` |
 | Identity, hashing, and platform facts | `uuid`, `getrandom`, `md-5`, `sha1`, `sha2`, `mac_address2`, `os_info` |
 | Archives, images, and audio | `flate2`, `tar`, `bcdec_rs`, `skia-safe`, `hound`, `vorbis_rs`, `str0m`, `cpal` |
-| Code generation and program CLI | `syn`, `prettyplease`, `clap` |
+| Code generation, program CLI, and artifact inspection | `syn`, `prettyplease`, `clap`, `goblin` |
 | Build and compatibility-test support | `pkg-config`, `vcpkg`, `stats_alloc` |
 
 System libopus is accessed only through the private `libremetaverse-opus`
@@ -867,6 +868,13 @@ not part of the default smoke test.
     artifact/dependency audit proving there is no CLR, .NET assembly, subprocess,
     RPC, or LibreMetaverse foreign-interface dependency.
 
+The native release artifact gate packages all 16 release/source crates as one
+versioned set, rebuilds those extracted packages offline without the reference
+checkout, parses every shipped ELF/PE/Mach-O program and its native imports, and
+runs credential-free helper-trapped smoke modes for all ten executables. The
+policy, clean-machine prerequisites, and reproducible commands are documented
+in [`docs/release-artifacts.md`](docs/release-artifacts.md).
+
 Each milestone ends with zero unreviewed generated shims in its owned modules,
 no weakened parity assertions, formatted/clippy-clean code, public Rust docs
 that cite the corresponding C# concept, and a refreshed completeness report