[CodesbyFebin]

Stacked on #40 (feature/ore-live-board). Do not merge before #40. Nothing here signs or sends a transaction.

What's in it

• Tile insight: per-square crowding and an EV estimate labelled "estimate, not a promise", with ★ on solo tiles from distribution_mask(round id). Tapping a square opens the normal exact-message review and never deploys on its own. Math is in docs/edge/tile-insight-ev.md.
• Strategy presets (Spread, Solo picks, Skip crowded): they only pre-fill the square mask. The 0.01 SOL mainnet cap, the risk tick, Rounds = 1 and the MWA signature are unchanged.
• Round alerts: opt-in local notifications (POST_NOTIFICATIONS on Android 13+) for round ending, motherlode hit and "your squares won". They come from read-only polls while the app is open. There is no server and no foreground service.
• My history / P&L: built from your own signed deploy receipts plus Round Proofs. There is no leaderboard.
• Explainer: rule-based, and shows "AI model: Not configured" when no model is set up. It never signs.
• Planning calculator: user assumptions, break-even and expected share, labelled "assumptions, not a promise". No dollar figures, no APR, no growth projections.
• Round Proof: reads the Round, Miner and Config accounts once after settlement and appends a Keystore-signed receipt over the proof digest. It exports a .oreproof file (edgeore.roundproof/v0, canonical JSON, integer amounts). tools/receipt-checker reports P1 intent, P2 winner, P3 split/solo, P4 SOL accounting and P5 ORE share as PASS, FAIL or UNVERIFIED.
• Protocol guardrail: compares the ProgramData deploy slot, the upgrade authority and the Config fee rates with this build. On a mismatch it shows the banner "ORE protocol changed — some screens may be out of date".
• Crew Pool (non-custodial): signed per-round tile plans shared by link, QR or file (edgeore://crew). Squares are 0–24. Each member reviews and signs only their own deploy (0.01 SOL mainnet cap). No pool operator, no shared vault, no backend. Stats come from receipts (deployed / not yet). If a member drops out, the app suggests a reassignment the creator re-signs; remaining members still sign their own deploys.
• SKR: user-visible SKR mentions are removed from the app.

Verified vs not verified

See docs/edge/round-proof.md and docs/edge/M1-ORE-GROUND-TRUTH.md.

• regolith-labs/ore master is still 48c203bd, so Deploy (instruction 6, 12 accounts, 13 bytes) is unchanged.
• On 5 live settled rounds, rng, winner and motherlode match a Rust port that copies the round.rs functions verbatim.
• total_vaulted / total_returned_sol equal calculate_fees() exactly, so losing squares pay the 10% fee and are not refunded.
• The split marker matches distribution_mask.
• Not verified: that the RPC returned what the chain held, how slot_hash is produced, buyback/burn use, and fairness beyond these rules.

Tests (separate suites, not summed)

• Android unit tests: 434 run, 425 passed, 9 skipped, 0 failed.
• Receipt checker: 25 run, 25 passed.
• Static lint passes against the baselines. The baselines were rewritten for the new findings (mostly Compose naming and wrapping).