Endpoint protection that scores host claims through HF1–HF20. No
central signature DB. The per-device agent emits security claims at
1.287 Hz; the server runs them through the same operators that
verify anti-hallucination claims. Trigger gate is composite ∧ protect001
∧ protect002 — math-derived, framework-native, mesh-replicated.