PROMETHEUS: define automated SR gate-policy contract

[mdheller]

Purpose

Add the AgentPlane automated gate-policy contract for PROMETHEUS symbolic-regression artifacts.

This is the current governance blocker after the Prophet Platform consolidated runner was confirmed on main.

Core invariant

Discovery is not authority.

The gate policy does not admit equations, mutate Ontogenesis, deploy controllers, write Memory Mesh, or authorize runtime behavior. It evaluates whether an SR candidate bundle is eligible for further governed review.

Required contract surface

Add a machine-readable SR gate-policy schema and validator covering at minimum:

• policyId
• schemaVersion
• applicationMode
• methodFamilies
• minimumDatasetRows
• maximumCandidateComplexity
• maximumNmse
• requiredUnitsStatus: consistent
• requireReplayVerified: true
• allowControlAuthority: false
• forbiddenGovernanceFlags
• promotionEligibility

Recommended applicationMode values:

• equation_discovery
• model_compression
• curriculum
• platform_dynamics
• program_search

Recommended promotionEligibility values:

• ineligible
• review_required
• eligible

Special rule

For applicationMode: platform_dynamics, automated eligibility must not imply controller authority. promotionEligibility should be limited to ineligible or review_required; no direct eligible state should be permitted for controller/platform dynamics.

Acceptance criteria

• Add schemas/symbolic-regression/sr-gate-policy.schema.json.
• Add positive and negative fixtures.
• Add a validator such as tools/validate_sr_gate_policy.py.
• Add a narrow make target or dedicated workflow, not a broad make validate expansion unless the full suite is already green.
• Negative fixtures must reject:
  • inconsistent units;
  • allowControlAuthority: true;
  • missing replay verification;
  • platform-dynamics direct eligible promotion;
  • complexity/NMSE policy shape errors.

Non-goals

• Do not implement PySR, SINDy, KAN, LLM-SR, TPSR engines here.
• Do not mutate Ontogenesis.
• Do not admit SR assertions.
• Do not deploy compressed or discovered models.
• Do not grant runtime control authority.

Relationship to existing AgentPlane work

AgentPlane already carries SRRunArtifact schema and validation for replay hashes, candidate refs, units status, and SINDy controlAuthority: false. This issue adds the missing gate-policy layer above artifact validity and below semantic/governance review.