PowerShell: derive bounded foreach values

[Aaronontheweb]

Summary

• derive exact and finite loop-variable domains for quoted scalar and literal-array PowerShell foreach iterables under the explicit isolated initial-state contract
• preserve parser-owned argument provenance and compose case-insensitive nested bindings while keeping object, null, overflow, wrapper, redirect, overwrite, and post-loop cases conservative
• fail closed for documented stateful built-in bindings, with a pinned preference inventory and fresh-host PowerShell oracle
• preserve ordered visits, duplicates, authored counts, and cardinality in the internal analysis plan for the next state-transfer slice
• expand the executable corpus and keep default initial state Unknown

Validation

• dotnet build -c Release: 0 warnings, 0 errors
• dotnet test -c Release --no-build: 1,772 passed
• public API snapshot and PII audit: 38 passed
• dotnet format --verify-no-changes --no-restore
• pwsh ./scripts/Add-FileHeaders.ps1 -Verify
• slopwatch analyze -d . --hook --no-baseline --fail-on warning
• openspec validate v0-3-structured-shell-analysis --strict
• exact staged adversarial review: GO at 8fae3f3d22fb55149d1f0b8b27e5bf3143361960d5770ba67aed15e9cdddc511