Design path overcounting shared uncertainty demo

[InfoSecHack]

Summary

Designs a local-only public demo for IAMScope's path-overcounting story:

• shows naive candidate paths versus IAMScope verdict separation;
• highlights validated, blocked, precondition_only, and inconclusive outputs;
• proposes shared uncertainty grouping so reviewers can identify the first evidence gap to resolve;
• keeps the demo local-only with /tmp outputs and no AWS calls.

Scope

Docs-only design slice. No implementation, benchmark semantic changes, live AWS, new reasoners, new evidence claims, or CI gate changes.

Validation

• ./scripts/check.sh
• ./scripts/test_fast.sh
• git diff --check