Add SourceOS local-first Workspace Operation contracts and sync semantics

[mdheller]

Purpose

Extend SourceOS specification work with local-first Workspace Operation Plane contracts for terminal, browser, agent-machine, sync, device identity, and offline/replay behavior.

Required spec additions

• LocalOperationLog and replay safety.
• DeviceIdentity and DeviceTrustProfile.
• CapabilityProfile for shell, terminal, browser, sandbox, local model, filesystem, and network state.
• Provisional artifact IDs and local-to-remote operation mapping.
• Offline queue and sync checkpoints.
• Conflict records with merge/fork/skip decisions.
• Tombstones for deletes.
• Local encryption profile.
• File availability states.
• Operation durability tiers.
• Redacted diagnostic export requirements.

SourceOS product surfaces to cover

• SourceOS-Linux/TurtleTerm
• SourceOS-Linux/BearBrowser
• SourceOS-Linux/sourceos-devtools
• SourceOS-Linux/agent-machine
• SourceOS-Linux/sourceos-shell
• SociOS-Linux/workstation-contracts

Acceptance criteria

• SourceOS local contracts map to WorkspaceOperation, OperationTask, OperationEvent, Artifact, and PolicyGateRecord from SocioProphet/prophet-core-contracts#1.
• Local-first behavior is compatible with policy, audit, admission, and redaction.
• Spec includes examples for terminal command, browser capture, local agent execution, and offline sync conflict.

References

• SocioProphet/workspace-inventory#3
• SocioProphet/workspace-inventory#4
• SociOS-Linux/workstation-contracts#28
• SocioProphet/prophet-core-contracts#1

[mdheller]

@copilot please implement this as a bounded SourceOS local-first spec slice.

Scope:

• Add spec docs and machine-readable examples for LocalOperationLog, replay safety, DeviceIdentity, DeviceTrustProfile, CapabilityProfile, provisional artifact IDs, local/remote operation mapping, offline queue, sync checkpoints, conflict records, tombstones, local encryption profile, file availability states, operation durability tiers, and redacted diagnostics.
• Cover product surfaces: TurtleTerm, BearBrowser, sourceos-devtools, agent-machine, sourceos-shell, workstation-contracts.
• Map local contracts back to WorkspaceOperation, OperationTask, OperationEvent, Artifact, and PolicyGateRecord.

Use current seams:

• SocioProphet/prophet-core-contracts#1.
• SociOS-Linux/workstation-contracts#28.
• SourceOS-Linux/sourceos-syncd#3.
• SourceOS-Linux/sourceos-shell#10.
• SourceOS-Linux/BearBrowser#20.
• SourceOS-Linux/agent-machine#18.

Validation:

• Add examples for terminal command, browser capture, local agent execution, offline sync conflict, and redacted diagnostic export.
• Add a lightweight validation command if repo conventions support it.
• Do not implement daemon runtime, shell UI, browser runtime, terminal runtime, or policy engine here.

PR evidence required:

• Summary of files changed.
• Validation commands run and output.
• Explanation of how local-first remains policy-aware and audit-compatible.