docs(noema): converge #668 cancellation-liveness authority

CHANGELOG.md

@@ -3,6 +3,7 @@
 - Add a Noema-owned exact-claim evidence receipt contract whose execution and research producers serialize one canonical artifact that binds every receipt semantic field, including command/result/isolation/network or source revision/excerpt/retrieval policy. Admission accepts only a receipt ID from untrusted model output. The owner API first verifies the exact authenticated OpenCode-handoff manifest digest, canonical envelope bytes, reviewed producer-to-kind policy, and repository/head/workflow/run/attempt identity before it can construct an immutable typed index; admission then reconstructs each canonical artifact and verifies time/claim/artifact identity. The version-2 manifest now binds a separate producer-authenticated `ClaimEvidenceRequirement` containing the exact claim, independently required evidence kind, and `context` or `finding` publication authority. Raw current-head source lines are context only: they are withheld from finding-reference prompts and cannot publish a finding or `request_changes`; an explicitly producer-authorized source finding remains usable and retains exact path/line checks. Finding-free model `request_changes` and `blocked` verdicts cannot bypass receipt admission to publish a vacuous blocking review. Requirement/receipt kind mismatch, fixed-artifact semantic substitution, caller-supplied receipt dictionaries, model self-classification, stale identities, cross-kind receipts, marker-only sandbox output, noncanonical artifact bytes, and expired receipts fail closed before the GitHub publisher. This remains the owner prerequisite for ContextualWisdomLab/.github#1641 and issue #555. The reviewed `sandboxed_verify` adapter exists in owner source, but its actual central stdout/stderr/marker-to-manifest wiring and the trusted research producer are not yet integrated; exact-head hosted GREEN, immutable release, and the verified central consumer bump remain required.
 
 ## Unreleased
+- Protected #668의 external OIDC discovery/JWKS·GitHub API bounded JSON response reader는 65,536-byte ceiling을 넘는 chunk를 확인한 뒤 `reader.cancel()` completion을 기다리지 않고 안정적인 실패를 반환한다. Stalled/rejected cancellation cleanup은 거부 classification을 지연·대체하지 않으며 terminal reader-lock 해제와 분리된다. 기존 fixed retained buffer, 10-second absolute deadline, fatal UTF-8·duplicate-key·JSON admission과 OIDC/GitHub identity·credential authority는 유지한다. 이 protected source는 immutable release나 deployed heap/p95 evidence를 대신하지 않는다. PR #668.
 - Protected #665의 Cloudflare production control-plane deploy/status/recovery bounded response reader는 기존 1 MiB byte ceiling과 fixed retained buffer, oversize-before-copy 실패-폐쇄 및 terminal reader-lock 해제를 유지하면서 byte-ceiling decision 이후 `reader.cancel()` completion을 기다리지 않고 best-effort cleanup으로 분리한다. Cancellation completion은 best-effort cleanup이므로 stalled/rejected cleanup은 안정적인 oversized-response 거부를 지연·대체하지 않는다. Cloudflare/provider authority, destination/outbound policy, credential authority, quarantine/security authority 또는 foreign domain truth를 Noema로 이전하지 않으며 immutable release, controlled production recovery rehearsal 또는 deployed p95/heap evidence를 대신하지 않는다. PR #665.
 - Protected #663의 Agent Runtime private Workflow / Task Execution current-state ACL은 기존 1 MiB retained-byte ceiling과 copy-before-reject fail-closed semantics를 유지하면서, oversize 응답의 cancellation completion을 decision authority가 아닌 best-effort cleanup으로 분리한다. Cancellation은 over-limit chunk를 복사하기 전에 요청하지만 stalled/rejected cleanup은 안정적인 `invalid_workflow_state_response`를 지연·대체하지 않고 reader lock은 cancellation success와 독립적으로 terminal path에서 해제된다. Workflow / Task lifecycle truth, procedural graph publication/activation, provider routing, destination/outbound authority, credential authority, quarantine/security verdicts 또는 foreign domain truth를 Agent Runtime으로 이전하지 않으며 immutable release, deployed Durable Object recovery, production p95 evidence를 대신하지 않는다. PR #663.
 - Protected #661의 public `/exchange` JSON request body bounded reader는 기존 8 KiB byte ceiling과 10-second absolute deadline을 유지하면서 reader acquisition 이후 성공·oversize·read failure·timeout/cancellation cleanup 등 terminal path에서 reader lock을 반환한다. 이 request-edge resource-lifecycle repair는 provider routing, destination/outbound authority, credential authority, quarantine/security verdict 또는 foreign domain truth를 Noema로 이전하지 않으며 immutable release나 deployed p95/heap evidence를 대신하지 않는다. PR #661.