Freeze first-consumer GO NARROW KILL gate

[mark-e-deyoung]

Purpose

Implements #33 by freezing the first-consumer GO / NARROW / KILL evidence gate before real KV-Ground qualification results are observed.

The deterministic checker reports evidence readiness and GO mechanical eligibility; it cannot make the final authority decision.

Frozen evidence requirements

1. first real qualification receipt;
2. equivalent-subject repeat;
3. one-material-change falsification;
4. explicit consumer responsibility/value delta;
5. holdout/validator/R4/privacy evidence;
6. lifecycle-cost assessment.

Failed experiments remain valid evidence for NARROW/KILL. Missing or contaminated evidence produces NOT_READY.

GO mechanical requirements

Among other things:

• first subject qualified;
• equivalent repeat reproduces the same stable subject key and resolves through retained deterministic lookup;
• no generator/provider research on equivalent repeat;
• changed request/context cannot reuse old qualification;
• generator escalation only from deterministic unknown;
• exact identity, verified local handle, provider-native byte ownership, and no implicit provider download/credentials in normal serving;
• repeat/idempotence and rollback evidence.

The corrected upstream stack now distinguishes stable artifact/selection identity from provider-observation event evidence and binds retained lookup to exact runtime ID/toolchain/config. These corrections require no change to this frozen decision gate.

Decision authority

• GO: only BHADA becomes the next stronger falsification consumer;
• NARROW: identify which shared mechanisms survive and what thesis is removed/deferred;
• KILL: identify rollback point and retained useful evidence/specification.

No broad migration, plugin ecosystem, scheduler, catalog UI, release, or deployment is authorized by this PR.

2026-09-04 ancestry reconciliation

Provider-identity red-team corrected the upstream stack:

• PR Add first-consumer model request and result contract #36 stable plan selection head 0ac14c7e477f830cc23554a674517f0170020ecb;
• PR Add deterministic qualification receipt binding #32 stable qualification subject head edb562f4ef9bd657149662dd9f52f70dcbbc7f29;
• PR Add deterministic retained qualification resolution #38 stable retained-resolution head 7a36acb6fda204089060457f52fa66e3a03e068f.

This PR was rebuilt directly on corrected #38 without changing any of its six frozen gate artifacts. Current head:

b94ca9f864833c76582b04524fc74a803897a26e

Frozen blob identities remain unchanged:

• workflow 3cee0f269a1706c399d2593d1599fa408cc97caf
• docs ebc143359efd04641ae893c6a7d37e0d5519bb56
• fixture 24e89983804b4c47a3341a537a3c6bddb5e72eac
• schema 17db6b4166a4fdaa83fada51a3d8d43c0db5ae6e
• tests ea393f30bca9a1bd2c1395498c79e5c653ff09ff
• checker ec44b8c4bbb8f49a5f3462b08e2632d31ac707b9

Exactly six gate-specific files now differ from the corrected #38 base. Public gate workflow run 33845581957 was automatically triggered for this exact head.

R4 / boundaries

The gate is deterministic, offline, reversible, and does not alter providers, models, runtimes, private evidence, or decision authority. Fixture values are placeholders only and are not real qualification evidence.

Do not merge/release/deploy as part of this reconciliation.

Related: #18, #31, #33, #35, #37; draft PRs #30/#36/#32/#38; SemperSupra/desktop-ui-cv#29/#35/#40; SemperSupra/WineBot#121.

[mark-e-deyoung]

Exact public verification

Public workflow run 33565509551: PASS at gate head 9fe64884b3bff2c4c143b1c6ed0c0b319dbca938.

The deterministic gate job passed both:

• the frozen readiness/authority-boundary test suite;
• the CLI fixture proof that returns decision_readiness=READY and go_mechanical_eligible=true while emitting no final decision field.

This verifies the intended control separation: machinery can establish evidence readiness/mechanical blockers, but GO/NARROW/KILL remains a separate authority record.

The unrelated legacy Faster-Whisper PoC workflow also ran again on this schema/docs PR (33565509539), further confirming the value of independent cleanup PR #26.

[mark-e-deyoung]

Ancestry reconciliation checkpoint — 2026-09-02

This draft PR's frozen decision-gate semantics are being preserved while moving it onto the corrected runtime-safe retained-resolution stack.

Rollback / provenance before branch repoint:

• prior PR Freeze first-consumer GO NARROW KILL gate #34 head: 594d73cc3cd941c82fe074e35e20a753390d06a1
• verified retained-resolution PR Add deterministic retained qualification resolution #38 head/base for reconciliation: 82f463bbe9197aab5520b0b68b551905be8db27d
• clean reconciliation branch/head: reconcile/issue-33-on-runtime-resolution @ b0a3c37fe5bc2be2996f29e25a16d3ce9b8932f0

The reconciliation branch is six commits ahead of PR #38 and preserves the six frozen PR #34 artifacts byte-for-byte. Verified blob identities:

• workflow 3cee0f269a1706c399d2593d1599fa408cc97caf
• docs ebc143359efd04641ae893c6a7d37e0d5519bb56
• fixture 24e89983804b4c47a3341a537a3c6bddb5e72eac
• schema 17db6b4166a4fdaa83fada51a3d8d43c0db5ae6e
• tests ea393f30bca9a1bd2c1395498c79e5c653ff09ff
• checker ec44b8c4bbb8f49a5f3462b08e2632d31ac707b9

No decision-gate criteria are being changed by this ancestry operation. Keep the PR draft and do not merge as part of this reconciliation.