[aruintelligence]

Adds minimal working host adapters for email send, HTTP request, database write and UI text render. Each requires a valid pre-dispatch SHA-256 receipt and host HMAC, rechecks the exact frozen proposal, destination, current policy and one-use nonce, and consumes the grant before invoking its provider callback. Email binds all To/CC/BCC recipients; HTTP forces manual redirects; database binds table/key; UI uses text rather than raw HTML.

The deterministic local report publishes all four proposals, policies, full authorization receipts, SHA-256 and 32 observed paths. Callback count is 0 before authorization and 4 after four valid dispatches; 28 blocked variants invoke no callback. Tests cover a recomputed hash with forged content, replay and callback throw (UNKNOWN). The test signing key is public and no external provider was called.

Appends four receipt records to the Git registry without rewriting its first 121 rows. New registry SHA-256 8aeae680448027e31e43ba2b2917966611f14ca59d6dfa312c7f9362c620f487, root a9a3ddcfbd1e3f6b5500d9952bc102bedc9d4e6038c5897d130c44fe6709823e. Adapter report SHA-256 1cbae8522048e94f55266e64b9e9d2808bdc011cbad155e74800e1c4385a68e8.

Run node scripts/verify-action-receipt-registry.mjs --check and node --test test/action-receipt-adapters.test.js.