sync from GitHub source-of-truth: 0-CDN restraint surfaces + FedRAMP not-held scoping

sync from GitHub source-of-truth: 0-CDN restraint surfaces + FedRAMP not-held scoping

Reconcile the live Space to szl-holdings/a11oy main (GitHub authoritative, ahead by date):
- web/restraint.html, web/restraint-bench.html: drop Google Fonts CDN links, use local system font stacks (0 runtime CDN doctrine).
- pages/knowledge.json: scope defense regulations "FedRAMP High" -> "FedRAMP High (target regime reference, not held)" + carry current wave content. Clears GitHub<->HF module-drift.

web/restraint-bench.html

@@ -5,15 +5,13 @@
 <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
 <title>a11oy Restraint — MEASURED benchmark · SZL Holdings</title>
 <meta name="description" content="a11oy Restraint: governed + measured code-frugality. Two-arm benchmark (no-skill baseline vs a11oy-restraint) reproduced on OUR stack — % less code, % cheaper, x faster — labelled MEASURED only when actually run, else SAMPLE with the methodology and reproduce command shown."/>
-<link rel="preconnect" href="https://fonts.googleapis.com"/>
-<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin/>
-<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600&family=JetBrains+Mono:wght@400;500&display=swap" rel="stylesheet"/>
+<!-- 0 runtime CDN (doctrine): no external font/style/script links. Local system font stack only. -->
 <style>
 :root{
   --ground:#0a0a0a; --panel:#0e0e0e; --panel2:#080808;
   --gold:#c8a24a; --gold-line:rgba(200,162,74,.28); --cream:#e8e2d4; --muted:#8a8576; --dim:#5f5b50;
   --green:#5fbf7f; --blue:#5f93d6; --teal:#54b6b0; --warn:#d6a25f; --red:#d66f6f; --yellow:#d6c25f;
-  --font:'Inter',system-ui,sans-serif; --mono:'JetBrains Mono',ui-monospace,monospace;
+  --font:system-ui,-apple-system,'Segoe UI',Roboto,Helvetica,Arial,sans-serif; --mono:ui-monospace,SFMono-Regular,Menlo,Consolas,'Liberation Mono',monospace;
 }
 *{box-sizing:border-box;}
 body{margin:0;background:var(--ground);color:var(--cream);font-family:var(--font);line-height:1.5;font-size:14px;}
@@ -135,7 +133,7 @@ pre.cmd{background:var(--panel2);border:1px solid var(--gold-line);border-radius
   </div>
 
   <div class="foot" id="foot">
-    <b>Honest by design.</b> Numbers above are <b>OURS</b>, labelled MEASURED only when a real run on our stack produced them (committed results.json), else SAMPLE/ROADMAP from our deterministic ladder model. Joules-saved uses the <b>live MEASURED on-box J/token</b> only when the sovereign GPU probe is live, else an honest SAMPLE constant — decided by the same single source of truth as the rest of the energy story. Ponytail's published numbers are CITED as Ponytail's (MIT). Λ = Conjecture 1 (machine-checked OPEN; advisory floor &lt;1.0; trust &lt;100%). locked = EXACTLY 8 @ c7c0ba17. 0 runtime CDN (fonts only) · 0 visible codenames · signed receipts.
+    <b>Honest by design.</b> Numbers above are <b>OURS</b>, labelled MEASURED only when a real run on our stack produced them (committed results.json), else SAMPLE/ROADMAP from our deterministic ladder model. Joules-saved uses the <b>live MEASURED on-box J/token</b> only when the sovereign GPU probe is live, else an honest SAMPLE constant — decided by the same single source of truth as the rest of the energy story. Ponytail's published numbers are CITED as Ponytail's (MIT). Λ = Conjecture 1 (machine-checked OPEN; advisory floor &lt;1.0; trust &lt;100%). locked = EXACTLY 8 @ c7c0ba17. 0 runtime CDN · 0 visible codenames · signed receipts.
   </div>
 </div>
 

web/restraint.html

@@ -5,8 +5,7 @@
 <meta name="viewport" content="width=device-width, initial-scale=1.0"/>
 <title>a11oy Restraint — Governed + Measured Frugality Gate · SZL Holdings</title>
 <meta name="description" content="a11oy Restraint: a governed, measured frugality gate for the a11oy Code agent. Before emitting a diff the agent descends a 6-rung ladder (YAGNI, stdlib, native, installed dep, one line, then minimal code) and stops at the first rung that holds, marking deliberate simplifications with restraint: ceiling comments. Every decision becomes a signed DSSE receipt and an advisory Lambda score; benchmark numbers are labelled MEASURED only when actually run, else SAMPLE/ROADMAP. The ladder + intensity levels are adopted from the open-source Ponytail skill (MIT); governance and measurement are ours."/>
-<link rel="preconnect" href="https://fonts.googleapis.com"/><link rel="preconnect" href="https://fonts.gstatic.com" crossorigin/>
-<link href="https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500&display=swap" rel="stylesheet"/>
+<!-- 0 runtime CDN (doctrine): no external font/style/script links. Local system font stack only. -->
 <style>
 :root{
   --ground:#0a0a0a; --panel:#0e0e0e; --panel2:#080808;
@@ -17,8 +16,8 @@
   --teal-line:rgba(95,179,163,0.22);
   --live:#5a8a6e; --err:#b06a5a;
   --green:#39d98a; --yellow:#f5c451; --red:#ff6a5a; --blue:#5bc8ff;
-  --mono:'JetBrains Mono',ui-monospace,SFMono-Regular,monospace;
-  --display:'Space Grotesk',Georgia,serif;
+  --mono:ui-monospace,SFMono-Regular,Menlo,Consolas,'Liberation Mono',monospace;
+  --display:ui-sans-serif,system-ui,-apple-system,'Segoe UI',Roboto,Helvetica,Arial,sans-serif;
 }
 *{box-sizing:border-box;}
 html,body{margin:0;padding:0;background:var(--ground);color:var(--cream);font-family:var(--display);-webkit-font-smoothing:antialiased;}