e4c4cb59e4
Phases A-C static diagnosis of the wl_proxy_add_listener null+8 crash. Evidence-backed root cause, candidate patch verdict, ruled-out hypothesis cross-check, and a copy-pasteable instrumented-rebuild runbook for the orchestrator. Verdict: candidate patch qtwaylandscanner-null-guard-listeners.patch guards the CORRECT site (every generated init_listener). Necessary but not sufficient alone — complementary to libwayland redox.patch hunk 1. v5.5 'verified FIXED' claim overstated: never tested in isolation, kded6 workaround masked it, stale-sysroot risk documented.