[actools-pl]

CP-003: canonical requirement graph and operation/result contracts

Why

CP-003 establishes the source-owned requirement graph and closed, versioned
operation/result contract boundaries required before later execution handlers
are implemented. It prevents schema presence, task status, presentation data,
or missing evidence from being mistaken for implemented or admitted product
support.

What changes

• Adds the complete 163-node architecture requirement graph and its validation
  boundary.
• Adds a single versioned catalog for nine contract families, accepted actions,
  diagnostic formats, and safe next-action tuples.
• Adds closed schemas and models for plans, command results, operation journals,
  diagnostic evidence, backup sets, release manifests, graph, and catalog.
• Adds deterministic diagnostic prerequisite, coverage, gate, run-state, and
  exit evaluation with serialized-result parity checks.
• Adds structural backup commitment, journal proof, UTC/nanosecond, bounded
  parsing/resource, plan identity, and presentation non-authority checks.
• Adds positive/negative fixtures, CP-003 tests, package-content enforcement,
  ADR/reference/source-CI documentation, and changelog entries.

This is a source-only foundation slice. It introduces no privileged executor,
collector, renderer, scheduler, release signer, backup service, admission
authority, deployment, or server operation.

Traceability

• Task/card: CP-003; coding/tasks/CP-003.md
• Requirements/gates: Architecture v1.5.1 §§7.4, 7.8, 12.1, 18.5;
  G03/G04/G09/G19; UX-R01/R03/R07; UXS-C04/C12
• Base SHA / candidate SHA:
  a1efe3b27f3905d5ccf06aafcf31062e4b02aac3 /
  dddc691ae2102ef3fe5c2d85d97db6c3d245f44e
• Candidate tree: 4bd079679b5a840b6f31dc20553fc5cf7b9f386a
• Operation route / authorization: accepted human-Git candidate; bounded
  maintainer authorization for exact branch push and draft PR
• Activation: CP003-ACT-a1efe3b2-v1; activation commit
  3a2633f8c73bba438a28ddb7385d23f255458321
• Independent review: CP003-CPD12-IR1R2-dddc691a-v1; complete report SHA-256
  9238eb7cd2b441a2d82d076ef238411493c248fb9984e83b25b50902642f0b39;
  no unresolved material source blocker
• Canonical evidence: CP003-E01-SOURCE-dddc691a-v1; evidence ZIP SHA-256
  181f5755db3abbfe1734e7feddae6f9de09787597b664e1ec4236814005b5413
• Change boundary: 8 records/task activation paths plus exactly 43 activated
  implementation paths; 51 base-to-candidate paths total
• Source-edit checkout/build input: clean exact candidate; Ubuntu 26.04.1 LTS,
  x86_64, CPython 3.14.7; lock SHA-256
  1ac29d7c89c7c59afabe414429083786d9170c2b363ca61552dbbc0989a77fae
• Architecture/ADR/contracts: Architecture 1.5.1; ADR-0003; contract readers
  and writers 1.0.0
• Changed dependencies or workflow: none

Validation

Check	Actual status	Source/artifact/environment	Receipt / limitation
Independent source/evidence review	PASS	exact candidate/tree	CP003-CPD12-IR1R2-dddc691a-v1; independent AI review, not a second human approval
CP-003 targeted suites	PASS — 87 tests	Ubuntu 26.04.1, x86_64, CPython 3.14.7	canonical attempt CP003-E01-SOURCE-dddc691a-v1
Compatibility suites	PASS — 314 tests	same exact environment/input	one expected duplicate-wheel-member negative-fixture warning
Full pytest suite	PASS — 401 tests	same exact environment/input	counts overlap and are not additive
Canonical source/package/scanner checker	PASS	exact source and locked closure	complete clean coverage of 41 distributions; zero vulnerabilities/skips
Retained wheel inspection	PASS	30-member wheel	SHA-256 a8c5a083ae88b29f2d3cf469648ba7c426106eccd06c390017c4e172f162a190
Workflow structure validation	PASS	exact candidate	source-structure validation only
PR-triggered Source CI	NOT_RUN	GitHub-hosted PR run	expected to start from this draft PR; no manual dispatch/rerun authorized
Product/server/release qualification	NOT_APPLICABLE	excluded from CP-003	not claimed

Operator documentation and compatibility

The change adds ADR-0003 plus contract, evidence/status, and source-CI reference
documentation. Existing CP-002 configuration, JCS, package, CLI, and scanner
compatibility suites passed on the exact candidate. Unknown contract versions
and unowned values fail closed; no dependency, lock, or workflow file changes.

Risks and recovery

Later consumers still must implement and qualify authoritative policy loading,
evidence authentication, plan admission, durable execution, rendering,
backup/restore behavior, and release/product gates. A checksum proves byte
identity, not authenticity. If the task branch or main drifts from the exact
recorded identities, stop publication/integration and reconcile; do not force,
rewrite history, delete the branch, or reuse stale evidence.

Review and merge conditions

The maintainer accepted the exact reviewed and canonically tested source
candidate and authorized only branch publication plus this draft PR. Merge is
not authorized. Keep the PR draft, observe only its ordinary Source CI trigger,
and preserve the exact head/base identities. Any source change creates a new
candidate requiring affected review and testing. Task merge, if separately
authorized later, would not confer release, deployment, product, or server
qualification.

Opening this PR may trigger ordinary Source CI under the existing reviewed
pull_request trigger. No manual workflow dispatch or rerun is authorized.

[actools-pl]

CP-003 accepted publication and hosted-CI evidence

• Accepted candidate: dddc691ae2102ef3fe5c2d85d97db6c3d245f44e
• Candidate tree: 4bd079679b5a840b6f31dc20553fc5cf7b9f386a
• Integration base: a1efe3b27f3905d5ccf06aafcf31062e4b02aac3
• Independent review: CP003-CPD12-IR1R2-dddc691a-v1 (complete; report SHA-256 9238eb7cd2b441a2d82d076ef238411493c248fb9984e83b25b50902642f0b39)
• Canonical source/package/scanner attempt: CP003-E01-SOURCE-dddc691a-v1 — PASS (evidence ZIP SHA-256 181f5755db3abbfe1734e7feddae6f9de09787597b664e1ec4236814005b5413)
• Publication attempt: CP003-PUB01-PUSH-dddc691a-v1 — PASS (evidence ZIP SHA-256 44b41efdf243aa9c09e7ca1bdd2b0379fc62044bc4aafe3a0300b2c7428cf7f9)
• PR-triggered Source CI: run 34841884042, job 103968536609, attempt 1 — SUCCESS
• Hosted runner/source markers: Ubuntu 26.04, CPython 3.14.7, SOURCE-CI: PASS
• Hosted wheel SHA-256: 20873db8cb8a99b31c7694e96e75e475a688b34f0b43c59e7928bdc55ff26c4a
• PR scope at evidence binding: four commits and exactly 51 accepted paths; no missing or extra path.

This comment supersedes only the PR description's pre-run NOT_RUN Source CI row. It records source/publication evidence, not release, deployment, product, or server qualification.