Proof Boundary

Proof Boundary explains where search and solver automation stop.

Some claims require induction, strengthened invariants, or machine-checkable proof artifacts. Oxpecker should not use proof language unless a proof artifact was actually checked.