DeltaWire supervisory generation control

[bigboateng]

Outcome

Adds a product-level closed-loop supervisor around the unchanged DeltaWire JSON execution IR, plus a strict YAML direct specification for safer and smaller authoring.

ZCA slices

1. Supervisory safety: synthesizes the maximally permissive nonblocking event policy, owns stage/verify/promote authority, and preserves the previous artifact on every denied or failed path.
2. Deterministic framework evaluation: compares strict YAML with hand-authored JSON against independent evaluators and existing semantic contracts, without AI or Harbor calls.

Implementation

• Pure Go finite-state plant and fixed-point supervisory-policy synthesis.
• Hash-linked, replay-resistant transition and decision receipts.
• Strict deltawire.direct.v1 YAML parser with typed structured conditions and no executable expressions.
• Deterministic lowering to unchanged deltawire.plan.v1.
• Independent direct-spec evaluator plus existing semantic-oracle checks.
• New deltawire supervise --repo <root> [--dry-run] [--receipt <path>] <spec.dw.yaml> command.
• Private staging, exact byte comparison, supervisor-authorized atomic promotion, rollback, and content-addressed/idempotent execution.
• Versioned hazard/control record and no-live-call CI.

Deterministic result

All five applicable cases matched exact expected output and were byte-deterministic; the irregular case safely abstained. On the two high-fit cases, direct YAML was smaller than pretty JSON:

Case	YAML bytes	JSON bytes	YAML syntax tokens	JSON syntax tokens
range-piecewise	466	706	141	171
matrix-conditional	503	825	155	200

The report sets ai_evaluation_candidate=true. It does not claim model usability or token savings; model calls were zero.

Validation

• go test ./...
• go test -race ./...
• go test -count=20 ./...
• go vet ./...
• exhaustive supervisor state/event safety, nonblockingness, and maximal-permissiveness tests
• strict YAML, compiler/reference differential, lifecycle fault, receipt, replay, and output-preservation tests
• 12 canonical contract passes and 96 mutation failures
• all historical evidence locks and production-cleanliness checks
• full scripts/validate.sh
• git diff --check

Residual boundary

The supervisor can prove declared safety and verification properties, but cannot infer incorrectly approved human intent. External approval or oracle evidence remains required for that hazard. Historical V1-V9 evidence remains unchanged.

[bigboateng]

Exact-head validation is complete at 2bf060ebb722010c0d8085be262737c4df5a3a71.

All six checks pass: complete lab validation, runtime boundary, V7 historical validation, V8 zero-call validation, and both supervisor workflow runs. During CI, the historical V7/V8 jobs exposed that they rebuilt a frozen binary from evolving source. This PR now builds those bytes from the immutable deltawire-v7-terminal-evidence tag, and the V8 manifest verifier checks frozen inputs from its recorded Git object while retaining live byte checks for evidence artifacts. No historical evidence or manifest bytes were changed.