Freeze the Export Surface Before a Messy Refactor: A Manifest Gate in Python

The smallest safe change is a measurable claim. Most refactors fail because nobody defined...