The download is the declaration — the dual-signed spec the
package is built from. Validate and register it with
./structuredinstructions declaration.json -submit; the
sealed binary package is the pipeline's product, never the
surface's. Surface-native, nothing installed, nothing executes here
but this page — the edge as the UI ref.