Migrate to Portable Harn Kernel v1

Portable Kernel v1 replaces the former harn-wasm source interpreter. The old adapter parsed and evaluated a subset of Harn independently; it is removed. This is an intentional breaking cutover.

Removed surface	Replacement
`run`, `execute`, `executePureComponent`	`compile`, then `start` or `resume`
`check`	`compile(...).diagnosticsJson()`
`tokenize`, `format_code`	Canonical lexer/formatter tooling outside the browser runtime
`harn-nativec`, `harn-codegen`	Removed; future acceleration must consume `ProgramArtifact`

Browser callers

Replace the old synchronous source-to-output call with three explicit steps:

Call compile(source, entry, entryKind) and retain artifactBytes().
Call start(artifact, inputJson, grantsJson) for each fresh execution.
If the outcome is suspended, retain snapshotBytes() and call resume after the host produces the matching typed capability result.

Do not cache source-specific JavaScript objects. Cache artifact bytes together with their digest and invalidate them when the artifact/semantic ABI changes.

Run the adapter in a Web Worker. The interface is synchronous within one transition and returns to JavaScript at every completion, suspension, or failure boundary. Running it on the browser main thread can still block rendering for CPU-heavy pure work.

Parallel browser work uses multiple dedicated workers with independent execution state. The v1 adapter intentionally does not require Wasm threads, shared memory, or cross-origin isolation. Native callers may share a decoded immutable artifact across operating-system threads, but must not share a live execution state or suspension snapshot between invocations.

Native embedders

Use harn_vm::portable::start and harn_vm::portable::resume when consuming portable artifact bytes. These functions decode with the same untrusted-input limits and delegate to harn-kernel; they do not maintain a native copy of the portable evaluator.

The full native VM remains the hostful Harn runtime. Portable v1 is not a drop-in replacement for programs using modules, orchestration, concurrency, generators, streams, or unsupported builtins.

Typed default parameters are also outside v1 and fail at compilation with unsupported_portable_typed_default. Use an untyped default, or initialize and validate the omitted value explicitly in the function body. Supplied typed parameters continue to use the shared native/portable structural type matcher.

Former native-codegen callers

The experimental harn-codegen crate and harn-nativec command are removed. They compiled and evaluated a language subset and were not load-bearing. A future accelerator must consume a validated ProgramArtifact and preserve the kernel's opcode, value, capability, and diagnostic contracts; it must not parse or evaluate Harn independently.

Compatibility policy

Artifact v1 rejects unknown versions, feature bits, semantic ABI fingerprints, and unsupported semantics. Recompile from source when compatibility fails. There is no best-effort decoding and no fallback to the former interpreter.