Compile basis-bound validated workspace patch requests

[flyingrobots]

Outcome

Edict compiles a typed, capability-bounded validated workspace patch request whose exact Core-to-Target derivation can be independently verified by Echo.

Acceptance

• real Edict source and a complete capability/lawpack closure declare the validated patch request;
• the request binds canonical patch input, exact observation basis, writable-path policy authority, policy and postcondition classes, operation and byte budgets, settlement schema, and reconciliation law;
• compiler-owned Core and Target artifacts preserve the complete non-callable request projection;
• undeclared or floating operation families, incomplete capability closure, empty resource coordinates, and duplicate Target request identities fail closed before artifact identity;
• runtime-valued patch, path aperture, basis, and budget instances survive compilation for Echo admission; Echo #711 owns malformed-patch, escaped-path, forbidden-CI-path, conflict, and incomplete-authority refusal before mutation;
• the supplied Target request remains independently derivable from exact compiler-owned Core, allowing Echo to reject substitution;
• no raw filesystem-write, shell, Git, network, or model authority is introduced;
• fixed-seed property and bounded stress cases cover canonical request identity and non-callable lowering.

Non-goals

• executing or dynamically validating the patch;
• filesystem authority in Edict or the compiler/provider seam;
• Git, GitHub, CI, process, network, or model adapters.

Downstream

Blocks the Echo validated workspace patch adapter and flyingrobots/hello-echo#11. Native dependency edges are maintained through GraphQL.

[coderabbitai]

🔗 Related PRs

#167 - Add Edict executable-operation prerequisites [merged]
#170 - Build verified external applications through provider components [merged]
#174 - Preserve typed result projections for Echo targets [merged]
#175 - Declare typed external action requests [merged]
#177 - Publish canonical external request application artifacts [merged]

---

📝 Issue Planner

_{Check the box below or use the @coderabbitai plan command to generate an implementation plan and prompts that you can use with your favorite coding assistant.}

• Create Plan

---

🧪 Issue enrichment is currently in open beta.

You can configure auto-planning by selecting labels in the issue_enrichment configuration.

To disable automatic issue enrichment, add the following to your .coderabbit.yaml:

issue_enrichment:
  auto_enrich:
    enabled: false

💬 Have feedback or questions? Drop into our discord!