[verified] fix: enforce canonical native runtime pin

tests/test_native_identity_emission.py

@@ -15,6 +15,7 @@ from meshnet_node.native_backend import (
     shard_identity_from_native_report,
 )
 from meshnet_node.native_protocol import SCHEMA_VERSION, pb
+from meshnet_node.runtime_pin import load_runtime_pin
 from meshnet_node.recipe_manifest import parse_recipe_manifest
 from meshnet_tracker.capability import STATE_UNCERTIFIED, evaluate_report
 
@@ -42,7 +43,6 @@ def _inputs(**changes: object) -> NativeIdentityInputs:
         kv_layout="llama-kv-v1",
         architecture_adapter="dense-llama-v1",
         backend_id="llama-cpp",
-        runtime_version="llama.cpp:e920c523",
         recipe_id="native",
         recipe_version="1",
         catalogue_version="2026.07.1",
@@ -84,6 +84,7 @@ def test_native_identity_uses_loaded_report_not_a_caller_range():
     assert (identity.shard_start, identity.shard_end) == (2, 6)
     assert identity.artifact.architecture == "llama"
     assert identity.artifact.layer_count == 8
+    assert identity.recipe.runtime_version == load_runtime_pin().runtime_version
 
 
 def test_native_identity_requires_an_immutable_pin_and_gguf_range():