fix(kanban): re-port canonical survivor binding onto current main

[Kyzcreig]

Summary

• Re-port fix(kanban): preserve home-clone work via verified canonical live trees #796's SHA-rewriting mirror / canonical-live-tree survivor onto fork/main 034f8d1, rather than replaying its conflicting commits. A local canonical ref is authority only when its independent object store retains the workspace HEAD; patch-id is advisory, never deletion authority.
• Bind explicit landed to a clean workspace's committed history by ancestry or byte-exact diffs AND require the live HEAD to retain every touched path/mode. Reject unrelated, dirty, reverted, incomplete, and disposable claims. Metadata-only canonical/landed sidecars are excluded from patch carry-forward; genuine recovery bytes remain retained.
• Preserve current main's preserve explicit survivor flags and recorded-repository recovery, _record non-shrink writer and cleanup carry-forward, _git(input=) and ref scaling, and the current claim-binding / unbound override from kanban: reclamation consults the RECORDED survivor instead of re-deriving from stale bases #842/fix(kanban): bind an explicit survivor claim to the card that names it #848/fix(kanban): close the 4 P1 FleetReview recorded on #848's head 0757be86 #886. No rollback to the old branch's versions of these functions. kanban_db.complete_task renders landed/canonical receipts.

Verify

• On fork/main 034f8d1, test_home_clone_closes_against_the_live_tree failed (bundle instead of canonical ref), and test_rewritten_mirror_over_cap_uses_live_tree_instead failed with implementation artifact exceeds attachment limit; both pass on this branch. The independent collision refusal (test_diff_collision_over_attachment_limit_holds_workspace) remains green both before and after: its refusal is intentional, not a second failing bug.
• test_kanban_survivor_live_tree.py test_kanban_survivor_landed.py test_kanban_survivor_storage.py: 65 passed before the late fix(kanban): preserve home-clone work via verified canonical live trees #796 live-HEAD addition; its five tests passed separately after port. New cap-specific test passed on branch.
• test_kanban_survivor_stale_bases.py test_kanban_survivor_binding.py tests/tools/test_kanban_tool_survivor.py test_kanban_survivor.py test_kanban_survivor_848_findings.py: 168 passed.
• All runs use the hermes-agent venv with throwaway HOME/HERMES_HOME, PYTHONPATH=$PWD, Python -P and -p no:randomly.

Supersedes #796; requires independent review before integration.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[Kyzcreig]

🤖 merged-by: apollo · lane: t_5e1b2a5a · gate: BYPASS: FleetReview disabled fleet-wide (Ace 2026-09-22); gate = kanban Argus-APPROVED review + CI green + 0 conflicts · why: Argus APPROVED (PASS-WITH-CAVEATS/SHIP) @ e088b4c: re-port canonical survivor binding; bound/unbound cleanup contract 150/150 on branch + merge tree; CI green

[Kyzcreig]

🤖 merged-by: apollo · lane: t_5e1b2a5a · gate: BYPASS: FleetReview disabled fleet-wide (Ace 2026-09-22); gate = kanban Argus-APPROVED review + CI green + 0 conflicts · why: Argus APPROVED (PASS-WITH-CAVEATS/SHIP) @ e088b4c: re-port canonical survivor binding; bound/unbound cleanup contract 150/150; CI green; undrafted by Apollo