Description
The provisioner needs a separately verifiable HTTP boundary before any ownership, state or CLI lifecycle can be trusted. This already-started foundation covers the pinned evaluator and hook wire contracts only; it grants no lifecycle admission or live permission.
Acceptance Criteria
- #1 Typed plugin HTTPS methods preserve explicit fields, validate identity and complete bounded version-aware inventories, and refuse redirects, lossy observations and unsafe replay.
- #2 Independent real-TLS red/green proofs cover valid effects, all evaluator versions, contradictory create version and sanitised failures; the composed pushed tree passes its required gate.
Definition of Done
- #1 just check (fmt-check, lint, gen-check, env-check, docs-check, test, race, hygiene, ui-check, compose-check, helm-test, lab-check, signal-fidelity)
- #2 just gen (only if a blueprint field, construct/workload config struct, or a skill under plugins/synthkit/skills/ changed)
- #3 just dump — inventory diffed against signals/
Implementation Plan
Retain the accepted three-file transport and source-backed version-row fixture repairs, compose without dependency changes, independently review and gate the exact committed tree before delivery.
Final Summary
Delivered bounded typed evaluator-hook management boundary in 1e5ff86fce2ff836f7b19fa6c50e78cadfa72448. Pinned handler and storage fixtures distinguish version-row list identity from latest GET, validate trimmed create version and use valid effect-bearing hooks. Independent TLS repair review and actual unoverlaid composed build, vet, tests and full gate passed at pushed tip 8305a909400b7243a587c03f0591f60a26b16c5d. No lifecycle, ownership, admission or generic write-scope claim; unsupported structural observations fail closed.