Bone Flow Editor v1.0.36 - Realtime Standalone Distribution Audit

Scope
- Base: BoneFlow_Editor_v1.0.35_Candidate.vsix
- VSIX Package Version: 1.0.36
- Realtime Preview #001: 1.0.7
- Formal #023 renderer files remain unchanged.

Confirmed defect in v1.0.35
- sample/001/boneflow-realtime.js fetched 29 scripts from ../../js/.
- BoneShape.load fetched ../../data/bone-shapes.json.
- Shape / Joint adapter CSS referenced ../../css/bone-shape.css and ../../css/bone-joint.css.
- Therefore downloaded index.html + boneflow-realtime.js + boneflow-realtime.css were not a self-contained distribution.

Fix
- Embedded all 29 required renderer Runtime sources into boneflow-realtime.js as isolated iframe source payloads.
- Embedded bone-shapes.json as a data URL.
- Embedded formal Shape / Joint CSS as data URLs for Shadow DOM adapters.
- Embedded Hover Border / ColorPicker CSS in the runtime frame.
- Embedded public #001 host CSS fallback in boneflow-realtime.js.
- boneflow-realtime.css contains the public #001 host CSS plus all runtime CSS and uses an embedded data-URI FontAwesome webfont.

Distribution contract
- Required distribution files: index.html, boneflow-realtime.js, boneflow-realtime.css.
- No CDN.
- No external JS.
- No external JSON.
- No external CSS.
- No external font.
- No Renderer waiting / registerRenderer dummy / Realtime source update placeholder.

Completion note
- This package is a candidate until user-side VS Code/localhost confirmation.

Executed internal browser validation
- Chromium headless, in-memory page; no network navigation.
- JS-only test (no external CSS file loaded): 3 Realtime instances reached state=ready.
- JS+CSS test: 3 Realtime instances reached state=ready.
- Instance A: 3 Shapes.
- Instance B: 5 Shapes.
- Instance C formal Decision Flow: 7 Shapes / 7 unique Joints.
- Formal BoneJoint runtime observed: 1.1.36.
- Shape Registry observed: 34 entries.
- Realtime source edit added one node: 7 -> 8 Shapes and 7 -> 8 unique Joints without reload.
- Zoom control observed: FIT 68% -> Zoom In 81% -> FIT 68%.
- Console errors: 0.
- Page errors: 0.
- Unexpected external requests: 0.
- Shape and Joint Shadow DOM stylesheets loaded from embedded data URLs.

Static package validation
- JavaScript syntax: 38/38 files parse with node --check.
- JSON parse: all packaged JSON files valid.
- HTML local references: no missing files.
- VS Code command declarations: unique and activation events resolved.
- sample.md: UTF-8 BOM present.
- Formal runtime js/css/data/docs/test/vendor files: byte-identical to v1.0.35 base.
- MANIFEST SHA-256: rebuilt after changes.

User verification gate
- User-side VS Code / localhost confirmation has not yet been performed for v1.0.36.
- Do not mark v1.0.36 Completed / Specification Frozen before that confirmation.
