fix(nlos): tighten evidence gates and stream replay

docs/adr/ADR-328-consumer-nlos-raw-transient-reproduction-pipeline.md

@@ -46,7 +46,8 @@ photon path, relay geometry, ambient-light behavior, or target reflectivity.
 
 ### 1. Reproduce upstream before modifying its inference state
 
-Phase 1 uses a pinned commit of the upstream implementation and a documented,
+Phase 1 uses upstream commit
+`15314de422a765a2d1b72ea7037dfafb2f908d7c` and a documented,
 upstream-compatible ST assembly with verified raw or compact-normalized
 histogram access. The current reference adapter targets VL53L8CH framing, but
 the acceptance record stores the observed board/silicon identity and never

docs/adr/ADR-331-consumer-nlos-evidence-privacy-benchmark-metaharness.md

@@ -132,8 +132,9 @@ does not embed, sensitive captures. Required fields include:
 1. exact schema, `LIVE_HARDWARE` provenance, `MEASURED` claim tag, L2 evidence
    level, and `EXTERNAL` ground truth;
 2. protocol-frozen-before-capture flag;
-3. enrolled external ST VL53L8-series sensor-model label for v1, verified raw/CNH transient kind, full
-   upstream SHA-1, and SHA-256 digests for protocol, firmware/API, combined and
+3. enrolled external ST VL53L8CH sensor-model label for v1, verified raw/CNH
+   transient kind, pinned upstream SHA-1, and SHA-256 digests for protocol,
+   firmware/API, combined and
    CSI capture manifests, scoped enrolled identities, calibration and analysis;
 4. zero synthetic frames and zero replay frames in the scored set;
 5. independently verified CSI, a CSI-only ablation, at least one CSI source and