T7-9..15 + T7-20: full Model Plane daemon set (modelplaned/inferenced/embeddingd/visiond/distilld) + profiles + seam-registry

[mdheller]

Follow-up to #317 (which landed the inferenced receipt emitter shim; epic SourceOS-Linux/sourceos-spec#241). The emitter path is now native and tested; these are the remaining Tranche-7 source-os slices beyond the buildable shim.

Every daemon below serves a tier and MUST emit an InferenceReceipt via the vendored canonical emitter (modules/model-plane/tools/), fail-closed (no receipt ⇒ no served completion, SEAM-011).

T7-9 — docs/model-plane/architecture.md (full)

• AC: documents the T0–T4 tier/residency boundaries, the five daemons, the escalation path, and the receipt spine. (A status stub landed in feat(model-plane): native InferenceReceipt emitter shim for inferenced (T7-12 emitter slice) #317.)

T7-10 — profiles/model-plane/{constrained,standard,workstation,cluster-node}.nix

• AC: each profile selects which daemons/tiers are enabled and their residency posture.

T7-11 — modules/modelplaned/ (catalog + residency)

• AC: catalog authority resolving base-model/adapter/tokenizer digests + ModelResidency; does NOT serve inference (never emits a receipt).

T7-12 — modules/inferenced/ (full serving daemon)

• AC: real completions served; each emits exactly one InferenceReceipt via the vendored emitter; off-device serving carries lease + escalation (SEAM-015).

T7-13 — modules/embeddingd/

• AC: embeddings served; receipts emitted with outputTokenCount: null.

T7-14 — modules/visiond/ (no network namespace)

• AC: runs with no network namespace; receipts emitted; residency on_device_only enforced.

T7-15 — modules/distilld/ (governed distillation)

• AC: distillation gated by AdapterPromotionDecision (signature + consent + eval gates incl. adversarial probe).

T7-20 — docs/seam-registry.md

• AC: SEAM-014..017 registered with source-os-local analogs.

Blockers to resolve first

Persistent HellGraph-backed ledger service (vs per-call file); base-model licensing under MIT/Apache-only (Llama/Gemma/Qwen-large fail OQ3); serving credentials.

cc @mdheller