Resolve M9-A0 pinned OpenClaw hook and bootstrap contract blockers

[shenjiecode]

Context

M9-A0 issue #110 stopped at the first serial layer. PR #111 contains the sanitized plan, result, and direct source evidence.

Blocking pinned-contract findings

Against OpenClaw 2026.4.14:

• before_prompt_build failures are caught and the model path continues;
• missing bootstrap files become prompt text and oversized files may be truncated;
• the inspected bootstrap path has no digest/checksum validation;
• tool_result_persist is synchronous-only and defaults to fail-open handling;
• the current Tiangong capture is a local synchronous append, not proven control-domain spool closure;
• the inspected before_tool_call runner has no hook-level timeout enforcement.

Required decision

Revise the M9-A0 integration contract, or prove a Tiangong-owned trusted wrapper/control boundary that satisfies the design without relying on fail-open prompt hooks or synchronous observation hooks. Preserve the distinction between model/provider claims, hook outcomes, persistent records, and Matrix observations.

Exit criteria

• design revision is reviewed before rerunning the spike;
• no OpenClaw version upgrade is introduced silently;
• the rerun again follows source/type/contract → container fake-provider → deterministic integration → Basic Matrix strictly in order;
• M9-A implementation remains blocked until all four layers pass.

Refs #110

[shenjiecode]

Canonical design revision is ready in PR #113. It reclassifies pinned native before_prompt_build and tool_result_persist as observation/transform only, and adds explicit TrustedModelCallBoundary, TrustedToolExecutionBoundary, and handler-owned pre-tool deadlines. The revised spike remains fail-closed if those seams cannot be proven; no runtime implementation was started.

[shenjiecode]

已由 M9-A0 结果闭环：PR #117 已合并至 develop（merge commit 25a1fb4），Layer 1–3 与修正后的 Layer 4 Basic Matrix canary 均有直接机器证据；历史 Layer 4 结论已由 stale dist/runtime graph 证据撤销。required mode 下 compaction 继续禁用。后续 session rollover 与 upstream compaction seam 分别转入新 issue，本 issue 关闭。