Provenance-gated regulatory obligation extraction — every claim verified verbatim against its primary source, fail-closed.