fix: verify complete offline assets before replacing staged runtime

docs/VALIDATION.md

@@ -7,6 +7,12 @@ and `SEARCHI_FORCE_CPU=1`.
 
 ## Current integration checkpoint (2026-10-12)
 
+Offline staging now verifies the native license and every bundled Google asset
+before modifying resources. Two Python regressions verify missing-model rejection
+and same-size corruption in the second model leaving the existing staged worker
+untouched. Actual CPU worker staging passed. This preflight does not prove atomic
+recovery from interruptions during the subsequent copies; that gate remains open.
+
 Gitea Actions were disabled for **karl/searchi** at Karl's explicit request;
 the API read-back confirmed `has_actions:false`. Fifteen old stuck runs and
 the subsequent repair run were cancelled. Diagnosis found unavailable native