VATFIX: add VERSION_LOCK.json + immutability check

Author: midiakiasat

.github/workflows/core-ci.yml

@@ -16,6 +16,14 @@ jobs:
       - run: bash scripts/validate_core.sh
       - run: test -f SEMANTICS_LOCK.json
       - run: test -f FAILURE_CODES_LOCK.json
+      - run: test -f VERSION_LOCK.json
+      - name: Verify version immutability
+        run: |
+          set -euo pipefail
+          VERSION=$(cat VERSION)
+          LOCK_VERSION=$(cat VERSION_LOCK.json | python3 -c "import json,sys; print(json.load(sys.stdin)['version'])")
+          test "$VERSION" = "$LOCK_VERSION" || { echo "FAIL: Version mismatch"; exit 1; }
+          echo "PASS: Version locked"
   identity:
     uses: vatfix/REGISTRY/.github/workflows/identity-check.yml@main
     with:

VERSION_LOCK.json

@@ -0,0 +1,6 @@
+{
+  "version": "1.0.0",
+  "locked": true,
+  "immutable": true,
+  "note": "Version 1.0.0 is final. Changes require new major version."
+}