search-with-proof group 2: verifier with owned oracles and differential

The verifier, not the artefact, observes the effect: SQL, path, command and SSRF
oracles owned by the verifier (XSS needs a browser executor, else no_oracle);
artefact exit code and output ignored; immutable checkout and dependencies;
3 runs per side; one-sided build or readiness failure is inconclusive. An
isolation failure raises IsolationUnavailable instead of reading as
could_not_build (the NPROC limit now applies inside the user namespace).
35 tests, including gaming attempts and 300 host processes.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

benchmarks/measurements/2026-09-08-module-audit.json

@@ -1,7 +1,7 @@
 {
-  "modules": 159,
+  "modules": 163,
   "counts": {
-    "load_bearing": 154,
+    "load_bearing": 158,
     "standalone_capability": 5
   },
   "orphaned": [],
@@ -1553,7 +1553,9 @@
         "regress.candidate",
         "regress.recipes",
         "regress.safety",
-        "regress.verdict"
+        "regress.verdict",
+        "search._sandbox",
+        "search.verify"
       ]
     },
     {
@@ -1592,6 +1594,36 @@
         "scoring"
       ]
     },
+    {
+      "module": "search",
+      "classification": "load_bearing",
+      "reason": "reachable from gate, map_gate, pair_gate, cli",
+      "importers": [
+        "search.verify"
+      ]
+    },
+    {
+      "module": "search._sandbox",
+      "classification": "load_bearing",
+      "reason": "reachable from gate, map_gate, pair_gate, cli",
+      "importers": [
+        "search.verify"
+      ]
+    },
+    {
+      "module": "search.oracles",
+      "classification": "load_bearing",
+      "reason": "python -m openultrasast.search.oracles",
+      "importers": [
+        "search.verify"
+      ]
+    },
+    {
+      "module": "search.verify",
+      "classification": "load_bearing",
+      "reason": "python -m openultrasast.search.verify",
+      "importers": []
+    },
     {
       "module": "semantic",
       "classification": "load_bearing",