deep research [DEEP RESEARCH] The registry did not see the breach. The runner did. A practical operating model for package admission, runtime detection, and proving downstream impact before the trail goes cold.