Description
The executor cannot certify its own tenant custody or infer agent identity from telemetry. The composition root must collect pure declarations, prevent backend-equivalent producer overlap, inject verified collaborators and apply the same persisted admission on boot, live apply and restore.
Acceptance Criteria
- #1 Public loader and set validation observe effective app and legacy child declarations, reject canonical or pattern-bearing collisions, and preserve actual service placement without sibling imports.
- #2 Boot, live apply and restore reject missing, stale, foreign or pending custody and historical synthetic reentry before relevant execution or exports; no Boolean-only admission proxy substitutes for real persisted evidence.
- #3 Small public runner and wire proofs join actual KSM pod identities, generation and trace IDs and collaborators under the accepted stage contract while preserving unrelated SM and legacy behavior.
Definition of Done
- #1 just check (fmt-check, lint, gen-check, env-check, docs-check, test, race, hygiene, ui-check, compose-check, helm-test, lab-check, signal-fidelity)
- #2 just gen (only if a blueprint field, construct/workload config struct, or a skill under plugins/synthkit/skills/ changed)
- #3 just dump — inventory diffed against signals/
Implementation Notes
Dependency refined after engine contract review: runtime admission needs the typed engine whole-configuration/current-inventory projection, not only a structurally valid local receipt or a desired-payload hash. Existing executor and custody dependencies retained; no Boolean admission substitute or live adapter is authorised by their completion.
Owner requested immediate loop closeout; work is parked and no continuation is authorised by background CI events. Preserve delivered source and partial work; resume only under an explicit new instruction, reconciling current Git, board, runtime and the recorded acceptance blockers. Engine hosted AMD64 race/e2e result remains pending at closeout; no full-estate completion or runtime/live activation claim.