feat(wake): W5 — synthetic-canary FN-oracle + source-parity reconciler (#909)

Co-authored-by: jason.woltje <jason@diversecanvas.com>
Co-committed-by: jason.woltje <jason@diversecanvas.com>

packages/mosaic/framework/tools/wake/manifest.txt

@@ -14,8 +14,9 @@
 #   0.1.0  W2 — store+drain lib + ack-wrapper.
 #   0.2.0  W3 — cumulative-state digest renderer + non-circular HMAC signer.
 #   0.3.0  W4 — per-host single-instance delta-gated detector daemon.
+#   0.4.0  W5 — synthetic-canary FN-oracle + source-parity reconciler.
 component=wake
-version=0.3.0
+version=0.4.0
 
 # Watch-list schema this component consumes, and the INCLUSIVE range of
 # schema_version values it supports. A wake-watch-list.json whose schema_version
@@ -35,5 +36,13 @@ schema_max=1
 #   detector.sh A1 — per-host single-instance delta-gated detector daemon
 #                    (flock, anchor-scoped hashing, detector-local observed_seq,
 #                    fail-loud source semantics; enqueues deltas to store.sh). (W4)
-# Out of scope (later waves): FN-oracle/reconciler (W5), beacon (W6),
-# installer (W7).
+#   fn-oracle.sh A6 — synthetic-canary FN-oracle: injects a KNOWN delta at the
+#                    source boundary, drives the pipeline through the detector's
+#                    public poll-once, asserts CONSUMED within the per-class SLO
+#                    (off-domain verdict from the terminal store cursor). §4
+#                    requires FN-rate=0; a dropping/disabled detector FAILS.  (W5)
+#   reconcile.sh A7 — source-parity reconciler: (i) source-coverage parity
+#                    inventory (an omitted source cannot pass the vector
+#                    vacuously) + (ii) periodic full reconcile to 0-unaccounted,
+#                    enumerating pre-existing/startup state into the store.   (W5)
+# Out of scope (later waves): off-host beacon (W6), installer (W7).