hiyenwong/ai_collection/arxiv-2607-28699-witcert-sound-runtime-risk-observability-and-gatinskill versions