docs: converge protected #697 health media authority - #698

Documentation/contract finding

Protected #697 is now source authority for contextual-orchestrator /healthz media-type admission, but the code-current documentation and reusable consumer contract did not publish that authority. CHANGELOG.md and docs/product-technical-gap-baseline.md did not record #697, docs/orchestrator-gateway-consumer-contract.md described the JSON body but not the required response media type, and contracts/orchestrator-gateway.json / orchestratorGatewayConsumerContract() did not expose the new application/json health contract.

This lane converges protected source into Noema-owned documentation and consumer contract only. It does not promote protected source into immutable release/deployment/recovery/p95 evidence or transfer contextual-orchestrator service/provider/model routing, credential, outbound, quarantine/security, release/deployment, or foreign-domain authority into Noema.

Test-first RED

Test-only exact 773eb7cc523dc7a234976eee5caf5fc9ddb8f047 requires:

• protected fix: require JSON media type for orchestrator health #697 exact source to be recorded in CHANGELOG and product-gap authority;
• the reusable consumer contract and published JSON artifact to expose healthz.media_type = application/json;
• the narrative consumer contract to require Content-Type: application/json;
• unrelated protected history to remain byte-for-byte semantically present.

Hosted application CI 34727888635 reached exact checkout/toolchain/live-base/lockfile/install/typecheck and then failed in release tests, while Security Scan 34727888669, reviewer-ci 34727888711, and patch-validator-image 34727888612 succeeded on the test-only exact. This is the intended documentation-authority RED.

Causal repair

Current exact head 0b36053fd9ccea1662c0092706049447c2c5b1f4:

• records protected fix: require JSON media type for orchestrator health #697 exact 1e0ac2eac6d3172468c842cae957079305c33a1d in CHANGELOG and the product/technical gap baseline;
• publishes healthz.media_type = application/json through orchestratorGatewayConsumerContract() and contracts/orchestrator-gateway.json;
• documents the required Content-Type: application/json consumer contract;
• preserves the fix: require JSON media type for orchestrator health #697 source guard and all existing bounded-reader invariants without changing runtime verification semantics;
• preserves the unrelated fix(rate-limit): bound stream retention #650 byte-unit wording and baseline paragraph-boundary history required by the regression.

During diff review, the first contract-source edit also removed the pre-existing final newline from scripts/lib/orchestrator-gateway.mjs. That unrelated drift was repaired in ordinary follow-up commit 0b36053fd9ccea1662c0092706049447c2c5b1f4; the current base→head diff now contains only the intended contract/documentation convergence plus the test-first regression.

Summary by CodeRabbit

• 변경 사항

  • /healthz 성공 응답에 Content-Type: application/json 요구사항이 추가되었습니다.
  • charset=utf-8 같은 매개변수는 허용되며, 미디어 타입이 없거나 JSON이 아니면 요청이 안전하게 거부됩니다.
  • 기존 상태 응답 본문 검증 규칙은 유지됩니다.

• 문서

  • 관련 소비자 계약, 변경 로그 및 보호 기준 문서가 업데이트되었습니다.

• 테스트

  • 계약 설정과 문서 내용이 일치하는지 검증하는 테스트가 추가되었습니다.