[OrgGov v0] Bind local-first state integrity events to governed work evidence

[mdheller]

Parent

SocioProphet/prophet-platform#406

Purpose

Make SourceOS state integrity part of the Organization Governance Control Plane.

The product must prove not only that an agent or human acted, but also what local-first state, index lane, repair posture, policy decision, and event narrative surrounded that action.

Scope

Define or document bindings from SourceOS state integrity to OrgGov v0 for:

• workroom references;
• work order references;
• actor/session references;
• local state integrity report references;
• index lane health;
• policy-native indexing decisions;
• repair plan previews;
• canonical/coalesced event envelopes;
• expected policy blocks vs true failures;
• evidence references preserved for Lampstand/Sherlock/AgentPlane consumers.

Acceptance criteria

• Add a golden example linking a SourceOS state integrity event to an OrgGov work order.
• Include one blocked_expected event and one degraded/repair-plan event.
• Do not require destructive repair apply for v0.
• Preserve local-first trust posture and privacy-tiered event access.
• Document integration with Prophet Workspace, AgentPlane, Policy Fabric, Sherlock, and Delivery Excellence.

Non-goals

• Do not turn SourceOS into the product UX.
• Do not expose raw noisy logs as the default operator surface.
• Do not allow remote repair or state mutation without explicit policy and approval semantics.