Epic: Pre-Wave-5 consistency reconciliation pass

[CameronBrooks11]

Holistic consistency-reconciliation pass between the Wave-4 convergence and the Wave-5 SDK extraction (#45). Output of the six-subagent pre-extraction consistency audit (2026-06-24; full note working/provider-sdk-wave5-prereconciliation-audit.md). Gates #45 — the SDK lift starts only after Tier-0 is frozen and Tier-1 lands.

The audit confirmed D1–D3 (design addendum) but found three stated assumptions to be ground-truth-wrong and surfaced gates the addendum doesn't cover:

• ❌ "all three providers on the DeviceAdapter descriptor" — bread has no struct and no adapter_for (triplicated if/else dispatch); descriptor + switch is net-new (→ bread#69).
• ❌ "adopt sim's device_common (richest) as the basis" — basis is the union (sim ∪ bread's 5-type value-makers; sim can't emit INT64/UINT64).
• ❌ "Wave 4 trailing convergence items (non-prerequisite, pre/post-SDK) #44 items are trailing consolidation" — they're net-new migrations (logging onto sim; config away from sim).
• ➕ New gates: G3 DeviceSpec impedance, G4 min_timestamp silent-regression, G5 quality hook.

Tier 0 — design freeze (paper; gates Tier 1 & the lift)

• G1/G2 result types + descriptor — decided in the design addendum (D1–D3); refinement: descriptor must be HandleT-templated (read/call required; caps/info/mock optional).
• G3 / G5 / P5 — Wave-5 design freeze: SDK DeviceSpec shape, quality hook, default_signal_ids contract (G3/G5/P5) #48 (DeviceSpec shape, quality hook, default_signal_ids contract)
• G4 — Gate min_timestamp semantics + add conformance test before SDK extraction (G4) #47 (min_timestamp semantics + conformance test; the only silent-regression guard — do early)

Tier 1 — per-provider pre-extraction reconciliation (code; standalone PRs)

• ezo P1/P2/P3 — Wave-5 pre-extraction prep: enum relocation, 1-stage error mapping, handler delegation (P1/P2/P3) anolis-provider-ezo#70 (enum relocation, 1-stage error mapping, handler delegation)
• bread P4/P1 — Wave-5 pre-extraction prep: DeviceAdapter struct + guarded adapter_for switch, enum relocation (P4/P1) anolis-provider-bread#69 (DeviceAdapter struct + guarded switch, enum relocation)
• sim spine cleanups — Wave-5 pre-extraction prep: namespace/include normalization, strict arg-parser, shutdown-hook seam anolis-provider-sim#79 (namespace/include normalization, strict arg-parser, shutdown-hook seam)

Tier 2 — hygiene (mechanical; do immediately, parallel, no design dependency)

• H1 setup-vcpkg → v2.2 b2d9b16 everywhere: ezo (all wf), bread (all wf), sim (hardening.yml + release.yml; ci.yml already on v2.2). A fresh SDK scaffold would otherwise inherit the old cache-clobber-prone v2 c76784a.
• H1 add permissions: contents: read to sim ci.yml (ezo/bread already have it); remove sim's dead CONTRIBUTING.md path-filter in docs.yml.
• H2 standardize preset names across the three (sim -strict scheme; ezo missing ci-windows-release; sim missing arm64; ezo missing the Windows GNU/triplet guard).
• H2 ezo CHANGELOG.md — add the Keep-a-Changelog/SemVer header block (sim/bread have it).

SDK-repo-time (record now; execute when the repo exists, Phase D)

• SDK stays source/FetchContent-consumed, not prebuilt (TSAN/static/arm64 rebuild protobuf in-tree); SDK owns the protobuf/vcpkg-baseline pin (else silent ABI-staleness).
• SDK owns Warnings.cmake, triplets, *.supp templates. Scaffold the repo from bread (cleanest hygiene template).
• #44 trailing items fold into each provider's migration: logging→sim Logger (ezo 14 / bread 31 sites), sim config retrofit, ezo runtime_state shrink, error-mapping (= ezo P2). DeviceDiscoveryStrategy stays provider-local (discovery is device-specific; SDK owns only the report contract).

Sequence

• Phase A (now, parallel, zero-risk): Tier 2 hygiene (H1/H2) + ezo/bread P1 enum relocation.
• Phase B (design freeze): Gate min_timestamp semantics + add conformance test before SDK extraction (G4) #47 (G4, early), Wave-5 design freeze: SDK DeviceSpec shape, quality hook, default_signal_ids contract (G3/G5/P5) #48 (G3/G5/P5); confirm G1/G2 templated-descriptor.
• Phase C (code, gated by B): ezo#70 (P2/P3), bread#69 (P4), sim#79 (spine cleanups).
• Phase D (Wave 5 proper, Epic: extract anolis-provider-sdk (Wave 5) #45): stand up SDK (from bread) → lift spine (transport first, byte-identical) → lift result types + descriptor (union basis) → migrate sim → ezo (D1 + G5, highest risk) → bread, harness-gated commit-to-commit; fold Wave 4 trailing convergence items (non-prerequisite, pre/post-SDK) #44 items into each migration.

[CameronBrooks11]

Phase A — executing (PRs up, CI green so far).

Tier 2 hygiene (H1) + Tier 1 enum relocation (P1):

• H1 vcpkg v2.2 — ci: pin setup-vcpkg to v2.2 (image-aware cache key) anolis-provider-ezo#71 (5 refs), ci: pin setup-vcpkg to v2.2 (image-aware cache key) anolis-provider-bread#70 (6 refs), ci: align CI hygiene with ezo/bread (vcpkg v2.2, least-priv token) anolis-provider-sim#80 (hardening+release; also adds permissions: contents: read to ci.yml + removes the dead CONTRIBUTING path-filter). v2→v2.2 verified backward-compatible (only adds optional cache-write).
• P1 enum relocation — refactor: move EzoDeviceType into the devices layer (P1) anolis-provider-ezo#72 (EzoDeviceType → devices/common/device_type.hpp; severs devices→config; build + 28/28 + 40-pass conformance) and refactor: move DeviceType into the devices layer (P1) anolis-provider-bread#71 (DeviceType → devices layer; bread_compatibility config-free, inventory keeps config for ProviderConfig; build + 97/97 + 35-pass conformance). Mirrors sim's existing layout.

Scoping decision — H2 preset-name standardization DEFERRED to Phase D (SDK-repo time). Its audit rationale was "before wiring shared CI," but there is no shared CI yet, the anolis-provider-sdk repo will define the canonical preset names, and renaming sim's -strict presets / adding dangling ezo-windows + sim-arm64 lanes now is low-value churn with real CI-integration risk. Not blocking anything. The trivial safe half (ezo CHANGELOG Keep-a-Changelog header) remains a loose hygiene item to fold into the next ezo touch.

Remaining Phase A: none once the 5 PRs merge green. Then Phase B (design freeze: #47 early, #48).

[CameronBrooks11]

Phase A ✅ + Phase B ✅ complete.

Phase A (merged, all repos synced to main): vcpkg→v2.2 everywhere (ezo#71, bread#70, sim#80) + sim least-priv token/dead-filter; P1 enum relocation (ezo#72, bread#71) severing devices→config. Preset standardization (H2) deferred to Phase D as noted. Clang-tidy Stage-3 triage tracked separately at anolishq/.github#79.

Phase B (design freeze, ratified 2026-06-24):

• G4 min_timestamp gate — feat(conformance): gate min_timestamp as a non-fatal freshness hint (§7.3) #50 merged to main (§7.3 clarified + core gate + hermetic self-test; staged, inert until pins bump). Closes Gate min_timestamp semantics + add conformance test before SDK extraction (G4) #47.
• G3 / G5 / P5 — ratified + recorded in the design addendum; closes Wave-5 design freeze: SDK DeviceSpec shape, quality hook, default_signal_ids contract (G3/G5/P5) #48. (G3 DeviceSpec = spine + opaque extra; G5 SDK quality_from(...) lifted from ezo; P5 default_signal_ids on the descriptor.)

The frozen SDK shape = D1–D3 (addendum) + G3/G4/G5/P5. Next: Phase C — per-provider pre-extraction reconciliation, gated by the freeze:

• ezo#70 — P2 (1-stage error mapping) + P3 (handler delegation); D1 + G5 quality-hook + min_timestamp flip + pin-bump.
• bread#69 — P4 (DeviceAdapter struct + guarded adapter_for).
• sim#79 — namespace/include normalization, strict arg-parser, shutdown-hook seam.