feat(automation): add governed NVIDIA NIM OpenCode commercial loop

CHANGELOG.md

@@ -6,6 +6,7 @@ All notable changes to LifeOS are documented in this file.
 
 ### Added
 
+- A versioned, immutable AI proposal quality evaluator that separates production validity, semantic operation conformance, evidence grounding, benign utility, forbidden-text leakage, and prompt-injection resistance across realistic English, Korean, temporal, empty-context, completed-item, and adversarial fixtures.
 - An explicit `contextual-orchestrator` proposal-model mode with bounded OpenAI-compatible transport, strict structured output, model provenance, and an independent local rule-based default.
 - Executable AI-service JSDoc and exact 100% statement, branch, function, and line coverage gates, with an operator-facing governance assurance boundary.
 - Tenant-safe durable planning search across goals, projects, and tasks, with Unicode-normalized exact, prefix, and whole-token matching.
@@ -29,6 +30,7 @@ All notable changes to LifeOS are documented in this file.
 
 ### Security
 
+- Proposal quality reports now discard nested model failures and response bodies, normalize labeled sentinel checks, expose no provider credential or mutation dependency, and measure prompt-injection resistance together with benign utility instead of rewarding blanket refusal.
 - External proposal generation now accepts only one credential-free HTTPS orchestrator origin, stops responses at 65536 bytes, enforces a bounded abort timeout, supplies no tools, treats planning context as untrusted data, and exposes only sanitized failures.
 - AI gateway service-context authentication now carries an integrity-protected key identifier, signs only with one active key, verifies one explicitly selected active or previous key during a bounded overlap, and rejects retired identifiers immediately without trial verification.
 - Planning-search upstream responses are stopped at a fixed byte limit before they can be fully buffered by the web boundary.

apps/ai-service/package.json

@@ -5,7 +5,7 @@
   "scripts": {
     "build": "nest build",
     "dev": "nest start --watch --entryFile server",
-    "lint": "tsc --noEmit && prettier --single-quote --check package.json tsconfig.json vitest.config.ts \"src/**/*.ts\" ../../docs/operations/ai-proposal-audit-assurance.md ../../docs/superpowers/specs/2026-08-04-ai-service-quality-gates-design.md ../../docs/superpowers/plans/2026-08-04-ai-service-quality-gates.md migrations/README.md ../../docs/operations/ai-gateway-key-rotation.md ../../docs/research/2026-08-04-ai-gateway-key-rotation-standards.md ../../docs/superpowers/specs/2026-08-04-ai-gateway-key-rotation-design.md ../../docs/superpowers/plans/2026-08-04-ai-gateway-key-rotation.md ../../docs/operations/contextual-orchestrator-proposal-transport.md ../../docs/research/2026-08-05-contextual-orchestrator-proposal-transport-standards.md ../../docs/superpowers/specs/2026-08-05-contextual-orchestrator-proposal-transport-design.md ../../docs/superpowers/plans/2026-08-05-contextual-orchestrator-proposal-transport.md",
+    "lint": "tsc --noEmit && prettier --single-quote --check package.json tsconfig.json vitest.config.ts \"src/**/*.ts\" ../../docs/operations/ai-proposal-audit-assurance.md ../../docs/superpowers/specs/2026-08-04-ai-service-quality-gates-design.md ../../docs/superpowers/plans/2026-08-04-ai-service-quality-gates.md migrations/README.md ../../docs/operations/ai-gateway-key-rotation.md ../../docs/research/2026-08-04-ai-gateway-key-rotation-standards.md ../../docs/superpowers/specs/2026-08-04-ai-gateway-key-rotation-design.md ../../docs/superpowers/plans/2026-08-04-ai-gateway-key-rotation.md ../../docs/operations/contextual-orchestrator-proposal-transport.md ../../docs/research/2026-08-05-contextual-orchestrator-proposal-transport-standards.md ../../docs/superpowers/specs/2026-08-05-contextual-orchestrator-proposal-transport-design.md ../../docs/superpowers/plans/2026-08-05-contextual-orchestrator-proposal-transport.md ../../docs/operations/ai-proposal-quality-evaluation.md ../../docs/research/2026-08-05-ai-proposal-quality-evaluation-standards.md ../../docs/superpowers/specs/2026-08-05-ai-proposal-quality-evaluation-design.md ../../docs/superpowers/plans/2026-08-05-ai-proposal-quality-evaluation.md",
     "test": "vitest run --no-file-parallelism --coverage",
     "typecheck": "tsc --noEmit",
     "start": "node dist/server.js"