docs(traceability): rebaseline shipped persist without a session table

[cursor]

Why

Protected main is already at a7637351 with item-delivery, response/result snapshots, deterministic narrative fallback, dual-proof account linking, data-rights processing-start, scoring-dispatch persist, and inbox claim-expiry. TRACEABILITY on main still evaluates 085ef4b, and #96 still evaluates 62524a3e. Draft #100 mixed that rebaseline with a competing 0022 session table.

A purchaser reading shipped-truth docs should see what is on protected main. Session durability stays on #125 (0014 + 0016 + load + command history).

Scope

• Rebaseline TRACEABILITY, as-built schema, ERD notes, and documentation fitness to exact protected-main a7637351.
• Do not add assessment_session or migrations/0022_assessment_session.sql.
• Contract tests reject a stale Active PR feat(integration): persist PostgreSQL inbox consumption distinct from receipt #58 inbox-consumption claim, require the shipped persist modules, and forbid binding session persist to this branch.
• Recovery fixture seeds claim_deadline_at so fix(inbox): reject terminal writes after claim expiry #81 restore constraints stay fail-closed.

Out of scope

• Session persist, load, or command history (land feat(session): persist command history so Activate survives restart #125)
• HTTP session transport / OpenAPI
• Identity-link history, response-event persist, research-release, data-rights completion, operator-health HTTP

Test plan

• cargo test --test documentation_architecture_contract --test traceability_active_pr_contract
• cargo fmt --all -- --check
• cargo clippy --all-targets -- -D warnings

Close or retarget #96 and draft #100 after this lands. Do not merge until exact-head checks and independent last-push approval are satisfied. Never self-approve.

  

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.

[cursor]

Review

Head 40a7dad is a docs/test-only delta on exact protected-main a7637351. src/ and migrations/ are unchanged. Shipped-truth claims match the tree: no assessment_session / 0022, stale Active PR #58 is gone, and cited persist modules exist on main.

This is the right vehicle versus #96 (62524a3e) and draft #100 (0022). Session persist/load/command history stays on the #125/#129 lineage.

No blocking over-claim. Do not merge until exact-head checks and an independent last-push approval exist. This review is not that approval.

Non-blocking follow-ups (do not block this head)

1. Physical inventory still omits two tables that exist on a7637351: item_delivery_ledger (0004) and data_rights_propagation_state (0003). Under-claim, not an invented table.
2. ERD §2 heading still says entities are “not yet physical tables” after the bullets now cite shipped migrations.
3. ADR-0015 / 0017 / 0018 as-built banners still say protected main has no physical persistence / no narrative runtime. AS_BUILT’s own reconciliation rule names ADR-0015; this PR did not touch those headers.
4. Contract tests assert substring presence, not that named modules/migrations exist on disk or that TRACEABILITY / AS_BUILT / DOCUMENTATION_ASSESSMENT share one SHA.

A purchaser reading TRACEABILITY + AS_BUILT + ERD would correctly conclude created-session durability is not shipped, and would not be told assessment_session is a physical table.

Queue

Prefer this head for shipped-truth docs. Next buyer-facing gap after this lands is session durability on #129, then HTTP session creation after #87.

  

_{Sent by Cursor Automation: Fix Issues}

[cursor]

The heading still says these are “logical entities that are not yet physical tables,” but the updated bullets now cite shipped migrations for instrument release, item delivery, consent, data rights, and integration consumption. Only session, identity-link history, and longitudinal rows remain non-physical. Retitle this as a maturity mix so a purchaser does not treat the whole list as unshipped.

[cursor]

as_built.contains("item_delivery_event") passes if the name appears only as Target prose. This test also never requires item_delivery_ledger or data_rights_propagation_state, and never checks that TRACEABILITY / AS_BUILT / DOCUMENTATION_ASSESSMENT name the same SHA. Tighten to Path::exists for named modules/migrations plus a shared-baseline assertion if this remains the shipped-truth gate.

[seonghobae]

Closing as superseded by #246. This head rebaselines shipped truth to protected-main a7637351, while protected main is now aac99d0b523b8f765846fc6edad834e5cf903ca8. #246 is the current, narrower rebaseline against that exact protected head and explicitly excludes the competing session-persistence work. Keeping both open would preserve two incompatible documentation landing vehicles for the same canonical TRACEABILITY scope.