M6: specify progressive source-qualification readiness

[kreneskyp]

Closes #34.

Outcome

Defines the M6 source-qualification-readiness boundary without introducing a
second user-authored language or a repository-local assurance framework. Native
Quire remains the sole editable formal-clause source. The branch adds MRS-004,
TM-004, StR-004, FR-014 through FR-018, NFR-004 and NFR-005, AP/AD/MP-002,
IT-001 and IT-002, Plan-007, and the complete SR-058 through SR-075 review set.

This PR is the specification deliverable. It does not claim that the 17 M6
implementation rows or a human source-release decision are complete.

Independent review changes

• Renumbered Plan-007 to repository-unique Task-009 through Task-016 and mapped
  every task to its GitHub issue (Specify progressive TL source-qualification readiness and integrator boundary #34 and Admit M6 source-readiness external prerequisites #45 through Close M6 implementation assurance and human release gate #51), owner, consumers,
  evidence method and explicit resume conditions.
• Closed pathname ABA/TOCTOU ambiguity: candidate identity binds the exact
  descriptor-backed/capability snapshot whose bytes are consumed, with no
  pathname reopen and a change-then-restore mutation control.
• Closed event-population and time-authority ambiguity: lifecycle decisions use
  one immutable, bounded event snapshot (maximum 4096), detect gaps, duplicates,
  reordering and cross-snapshot mixing, and use verified time authority and
  canonical ordering for expiry.
• Fixed a fail-closed census bypass that allowed executable files beneath
  top-level plan/ to be treated as archival. Only Markdown plan/review records
  are archival now, and a tracked extensionless plan/run fixture is a positive
  control.
• Merged current main at 5b1c134, preserving the landed W/M source and
  canonical-graph corpus work and its exact source-census population.
• Aligned TM-004 with main's landed single Status matrix-column contract.
• Corrected the dependency record: Engineering Assurance Specify progressive TL source-qualification readiness and integrator boundary #34 / PR Classify M6 executable paths and prove Rust/shared parity #46 is
  merged, but no current immutable compatible release yet carries that contract.

Reviewed snapshots

• Author specification snapshot: 767dc92a97f1b3d9ffbb76467bdda9ecf2261e40
• Independent pre-merge candidate: 33678fa
• Exact current-main integration candidate: 9598fea
• Final review-record head: 7a3d15b

SR-066 through SR-075 record the independent base, failure-domain, integrity,
dependency, evidence, risk/complexity, scope-boundary, EARS, Rust and merged-head
reviews.

Verification

No hosted CI run is claimed.

• make ci at 9598fea — pass: formatting, feature matrix, strict Clippy, 75
  Rust tests plus one doctest, corpus/digest/oracle checks, cargo-deny, fuzz-target
  build, unsafe audit, strict spec validation, MSRV tests, rustdoc, shared pin
  checks, mutation probes and the complete assurance chain.
• Final quire validate --scope . 'spec/**/*.md' --strict --summary — 164/164
  grammar-clean and structurally valid.
• Final quire validate --scope . 'plan/**/*.md' --strict --summary — 11/11
  grammar-clean and structurally valid.
• quire coverage --scope . — 99/165 rows backed overall; Rust 76/76; TM-004
  remains truthfully planned at 0/17.
• quoin advise for StR-004, FR-014 through FR-018, NFR-004 and NFR-005 — 48
  obligations; 0 mismatches, 0 uncatalogued methods and 0 inconclusive results.

Status and resume conditions

The specification/review task (#34, Plan-007 Task-009) is complete and ready for
human acceptance. Implementation issues #45 through #51 remain blocked on their
declared external release, retention/lifecycle, authority/event-source,
runner/integrator-package and LR08 owner conditions. No local substitute is
authorized.

[kreneskyp]

Independent exact-head review requested for c230f2b. Please review the specification snapshot 767dc92, composite SR-058..SR-065 artifacts, Plan-007 dependency/blocked-state truth, and the one-line archival census alignment. No hosted CI is requested.

[kreneskyp]

Refreshed independent exact-head review request for f843d55e6db5b60c4c643048974525e2f89c39ae (supersedes the request for c230f2b). No hosted CI is requested.

What changed

f843d55 merges origin/main at 8d3ff98 (#37 future operator profile) into c230f2b. It is a merge, not a rebase; no force push.

Conflicts (2), both resolved as unions:

• spec/spec.md References: kept main's future-profile.md reference and this branch's Specify progressive TL source-qualification readiness and integrator boundary #34 / source-readiness.md references.
• tests/shared_assurance.rs live tracked census: EXPECTED_LIVE_TRACKED now holds main's six future-profile artifacts plus this branch's fifteen source-readiness artifacts (99 / 90 -> 105 entries); spec area count 36 / 27 -> 42.

Taken from main without conflict: Makefile (make spec non-strict coverage, new make spec-release), spec/plans/PLAN-001-v0.1/tasks/Task-007-human-release.md, ADR-001, FR-008..FR-010, future-profile spec/matrix, SR-042..SR-049. No Cargo.toml/Cargo.lock change.

ID collision scan

Scanned origin/main (8d3ff98) and origin/issue/33-past-profile (ef69628) for SR-058..SR-065, Plan-007, MRS-004, TM-004, StR-004, FR-014..FR-018, NFR-004..NFR-005, AP/AD/MP-002, IT-001/IT-002, TC-059..TC-073 and SUITE-009..SUITE-013: no collisions. The highest ids on those refs are SR-057, FR-013, TC-058, MRS-003/TM-003 and SUITE-008 (all on issue/33).

Validation at f843d55 (quire 0.32.0, engine 0.46.0)

• quire validate --scope . 'spec/**/*.md' --strict --summary: 142/142 docs grammar-clean (100%), 3 document(s) failed structural validation, exit 1. All three are TestMatrix Coverage Status vs asserted Status column failures (test-matrix.md, future-profile-test-matrix.md, source-readiness-test-matrix.md). origin/main at 8d3ff98 gives 119/119 docs grammar-clean, 2 document(s) failed structural validation on the same assertion, so the failure is already on main.
• quire validate --scope . 'plan/**/*.md' --strict --summary: 11/11 docs grammar-clean (100%).
• quire coverage --scope .: Coverage: 84/162 rows backed (51%); all unbacked rows are main's future-profile rows or this branch's planned M6 rows. Status classification was skipped for all three matrices (same column mismatch). It also reports [id-column-matches-nothing] for the Integration Test Matrix table in spec/source-readiness-test-matrix.md (Integration ID vs the declared Test ID), which means those rows mint no ids.
• cargo fmt --all -- --check: pass.
• cargo test --locked --test shared_assurance --all-features live_source_enumeration_has_an_exact_fail_closed_partition: pass (1 passed).
• make spec-release was not run; no gate is claimed.

Reviewed revision vs spec content

SR-058..SR-065 record specification commit 767dc92a97f1b3d9ffbb76467bdda9ecf2261e40. git diff 767dc92 f843d55 restricted to this PR's non-review spec files (source-readiness spec and matrix, StR-003/004, FR-014..FR-018, NFR-003..NFR-005, AP/AD/MP-002, IT-001/IT-002, evidence/suites.md, spec.md) shows one change only: the added line - [Post-v0.1 future operator-profile specification](./future-profile.md). in spec/spec.md References, which comes from main. The source-readiness requirement, assurance, integration, matrix and suite content is byte-identical to the reviewed snapshot.

The recorded reviewed revision therefore still matches the reviewed source-readiness content. It does not cover the merged spec population: the specification set now also contains main's future-profile artifacts. The tests/shared_assurance.rs census change is outside spec/ and needs review at this head. Reviewers should confirm whether that counts as re-review. No review outcome is claimed here.

Please review at f843d55: the SR-058..SR-065 artifacts, Plan-007 dependency and blocked-state truth, and the merged census union in tests/shared_assurance.rs.

🤖 Generated with Claude Code

https://claude.ai/code/session_011HFnqWrGMDuUiaULxxE2Tc

[kreneskyp]

Independent merged-head review is complete at 7a3d15b.

• Current main (5b1c134, including the W/M source and canonical-graph corpus)
  is merged and preserved.
• make ci passed at exact implementation/spec candidate 9598fea: 75 Rust
  tests plus one doctest and all documented quality/assurance gates.
• Final Quire validation: 164/164 spec artifacts and 11/11 plan artifacts.
• Quoin M6 classification: 48 obligations, zero mismatches, uncatalogued methods
  or inconclusive recommendations.
• Overall coverage is 99/165 with Rust at 76/76. M6 is correctly 0/17 because
  implementation remains dependency-blocked and is not claimed by this PR.

SR-075 records the exact-main integration review. The specification task is
ready for human acceptance; #45 through #51 remain the tracked implementation
sequence.

[kreneskyp]

Self-review status at 96fed20: comprehensive /spec-review PASS (SR-066..SR-073), /code-review and /rust-review PASS (SR-075), and the serial local make ci rerun passes end-to-end. /gap-analysis is FAIL as expected (SR-076): PLAN-007 is 1/8 complete, 99/165 rows are backed, and all 17 M6 rows remain planned/unbacked. Workflow a96262a7-d665-44c5-955f-73498b4041dc is validated and waiting for human token ack_def9b899-63b1-4e11-a9ba-eeafa08750cc; no acknowledgement was recorded. #45..#51 remain blocked on their declared owner prerequisites.