v3.5.1: POMDP belief-state + value-of-information planner + grounded anti-hallucination

Partial observability is now first-class:

- belief.rs — property-graph world model; nodes (host/service/vuln/exploit/cred)
  carry a probability, not a boolean. Bayesian observation updates; per-node
  Shannon entropy; mean-uncertainty + recon-frontier. Black-box = diffuse priors
  that sharpen with observation; white-box collapses toward deterministic (MDP).
- pomdp.rs — value_of_information(), decide() (recon vs exploit falls out of
  belief entropy), and may_assert() — the mathematical anti-hallucination gate:
  no exploitability claim while the belief is diffuse (high entropy) → observe first.
- grounding.rs — verification engine, hard rule "no claim without a tool receipt":
  empirical grounding for black-box (raw HTTP/OOB/error markers), symbolic for
  white-box (file:line into reviewed source). Ungrounded claims demoted + flagged
  receipt_missing (feeds future reward shaping).
- pipeline.finish(): grounding gate before reporting + belief-uncertainty readout.
- bump 3.5.0 → 3.5.1; README documents the v3.5.1 belief/grounding architecture
  and the infra/bandit/reward roadmap.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

README.md

@@ -1,4 +1,4 @@
-<h1 align="center">🧠 NeuroSploit v3.5.0</h1>
+<h1 align="center">🧠 NeuroSploit v3.5.1</h1>
 
 <p align="center">
   <a href="https://github.com/JoasASantos/NeuroSploit/stargazers"><img src="https://img.shields.io/github/stars/JoasASantos/NeuroSploit?style=for-the-badge&logo=github&color=8b5cf6" alt="Stars"></a>
@@ -8,7 +8,7 @@
 </p>
 
 <p align="center">
-  <img src="https://img.shields.io/badge/Version-3.5.0-blue?style=flat-square">
+  <img src="https://img.shields.io/badge/Version-3.5.1-blue?style=flat-square">
   <img src="https://img.shields.io/badge/Harness-Rust%20%7C%20tokio-e6b673?style=flat-square">
   <img src="https://img.shields.io/badge/License-MIT-green?style=flat-square">
   <img src="https://img.shields.io/badge/MD%20Agents-303-red?style=flat-square">
@@ -23,6 +23,36 @@
 
 ---
 
+## 🆕 v3.5.1 — POMDP belief & grounded anti-hallucination
+
+The target is only **partially observable**, so v3.5.1 stops treating findings as
+booleans and tracks a **belief**:
+
+- **Belief world model** (`belief.rs`) — a property graph whose nodes
+  (host / service / vuln / exploit / credential) each carry a *probability*, not a
+  boolean. Observations update them with a Bayesian step; per-node **Shannon
+  entropy** measures how diffuse the belief still is.
+- **Value-of-information planner** (`pomdp.rs`) — "scan more vs exploit now" is
+  not a heuristic: when a node's belief is diffuse, the expected value of an
+  observation (recon) exceeds the risk-adjusted value of an exploit. The
+  `may_assert` gate is the **mathematical anti-hallucination rule** — the agent
+  may not claim exploitability while the belief is diffuse; it must observe first.
+- **Grounding / verification engine** (`grounding.rs`) — a hard rule: **no claim
+  enters the world model without a tool receipt** (raw tool output, not the LLM's
+  paraphrase). Black-box grounding is *empirical* (a real HTTP response / OOB
+  callback / error oracle); white-box is *symbolic* (a `file:line` into the
+  reviewed source). Ungrounded claims are demoted and flagged `receipt_missing`.
+- **Regimes** — black-box runs a true POMDP (diffuse priors that sharpen with
+  observation); white-box collapses toward a near-deterministic MDP (the world
+  model is built from SAST/dataflow, so uncertainty migrates to *path
+  reachability*, not state).
+
+> Roadmap (in progress on this branch): infra targets (IP + SSH/Windows/AD) with
+> Linux/Windows/AD host agents, a contextual-bandit tool router, and
+> value-of-information reward shaping.
+
+---
+
 **Autonomous, multi-model penetration-testing harness — Rust, CLI-only.**
 
 This branch is the **slim, Rust-only** distribution: the `neurosploit-rs/` workspace