Function record_audit_run 

pub fn record_audit_run(
    root: &Path,
    summary: &AuditSummary,
    verdict: AuditVerdict,
    gate: bool,
    git_sha: Option<&str>,
    version: &str,
    timestamp: &str,
    attribution: Option<&AttributionInput<'_>>,
)

Record an audit run into the rolling store. No-op when tracking is disabled or the store cannot be read. Best-effort throughout; never returns an error.

gate indicates the run carried the pre-commit gate marker. Containment events are only derived from gate runs: a fail gate run sets a pending containment; a later non-fail gate run clears it into a containment event.

attribution, when present, carries the per-finding state for this run and drives v1.5 resolved/suppressed attribution against the per-file frontier. Pass None to record only the v1 surfacing/trend/containment data.