Conservation AI needs coded safety limits, not free-text assurances

Anonymized review copy of the Biosphere Sentinel project artifact package (Deliverable 5), prepared for double-blind peer review of the companion manuscripts. It contains the rule-based ecological refusal gate (the deriver), its locked test suite, the governed source-mix controlled vocabulary, the v0.1.4 action-form schema, the pre-registration materials, the Plan v2 amendment recording the failure-and-repair history, and the eight reference scenario submissions and records. For blinding, the lead author's surname has been replaced with the role label Judge H in five files; the changes are confined to comments, prose, and sign-off blocks, no code behavior changes, and the test suite still reports 161 passed, 0 failed. Because four redacted files are listed in Table 1 of the manuscript, their SHA-256 values here differ from the published Table 1 values; this copy's fingerprints are given in REVIEW_COPY_HASHES.txt and the redaction is explained in README_REVIEW_COPY.txt. This is not the version of record, which carries the Table 1 fingerprints and is released on acceptance; please keep this deposit under restricted access until the companion papers complete review.