[fraware]

Purpose

Isolate 13 previously validated code and test changes from draft PR #11 so that the base CLI, wheel smoke, audit self-check and coordination-risk validation are repaired independently of the unresolved PCS release-evidence gate.

Changes

• Make optional PCS implementation imports lazy at CLI startup with a subprocess regression test.
• Correct installed-wheel reward policy schema path resolution and add path tests.
• Install pytest-timeout in the isolated wheel environment, preserving strict pytest configuration and exposing audit diagnostics.
• Extend the risk-register evidence schema for the already-emitted coord_risk_run type, with a test rejecting unknown types.
• Reconcile the security-suite policy fingerprint in the committed UI fixture with the tracked policy, while retaining its integrity contract.
• Refine the placeholder checker to distinguish legal exception handlers/schema metadata from unfinished production stubs, with explicit negative tests. Keep the production-stub checks enforced.

Verified history and acceptance

The exact code is lifted unchanged from draft PR #11's head e1c332e0697f, where Wheel smoke, Audit self-check, Risk coverage (PR) and Release fixture verify all passed on the same commit. Re-run those on this new PR and post-merge default branch before calling them green. PCS QC-release remains a separate existing red release-integrity obligation (stale certified-bundle and handoff hashes) and is explicitly excluded from this PR; no PCS workflow or release fixture hash is altered to suppress it.