v1.36.277

Add a bounded read-only loopback HTTP response probe for the approved TEST-01 work. It checks a declared status and optional body marker, separates mismatches from connection/timeout errors, and never promotes a matching response to test, service-identity or final-CI evidence.

Keep project runner selection, service-specific protocol checks, revision-bound receipts, cross-process sharing and final gates as separate follow-ups.