ci/woodpecker/pr/ci Pipeline was successful
Addresses sol re-review 13 (NEW-18/NEW-19 residuals, NEW-20, NEW-21): - NEW-18: seed-progress query response is a closed discriminated union (next index | typed complete variant); normative query/originate loop — stop on complete, re-query on canonical refusal, continue only on a strictly-later result, surface a fault on an unchanged index. New witnesses: same-designation race (with unchanged-index fault variant) and completed-world stop run of the actual fresh client; cross-surface refusal-shape control added to the two-world query witness. - NEW-19: RBAC §1 expressly named among amended surfaces — narrow ratified exception making the designation a fourth authority source inside the mechanical origination scope only (§1.2, §4.3, §7 item 12). New active-window boundary witness: canonical tuple succeeds while non-canonical and non-seed-workspace commands refuse in the SAME incomplete state; predecessor- and successor-created content reads refused post-origination. - NEW-20: state-derived disclosure split from mandatory envelope metadata everywhere — origination and query responses remain ordinary contract 5 §4 result DTOs carrying the correlation envelope; contract 5 not amended. §6.1 closed-schema assertion covers both halves. - NEW-21: result-disclosure paragraph restates the operative order — fresh-mutation authorization first (owning family's refusal), then seed-boundary gate before fence presence and canonical-reference resolution, constant shape scoped to callers that reached the gate; child-race control asserts the refusal class, pinning the order.