DESIGN.md recut: rules kept, rulings typed, half the words

[gunbai-bot]

Recuts DESIGN.md and the repository docs. Targets main (#13641 has merged; the branch was replayed onto main).

What changed

• DESIGN.md: 14,434 → 7,496 words (96,434 → 53,352 bytes), measured both times with the same instrument, gunbc run --entry dag/gunbc/design_document.dag --function expected_design_md. The section structure (§1 to §7, Building & checks) is unchanged and every rule is still there. Restatements are cut, stale citations are repaired, and "Building & checks" is now a short operator page for the one-job gate.
• Dated rulings moved to a typed home: dag/gunbc/design_ruling.dag holds 12 DesignRuling rows (when decided, section, rule, provenance). DESIGN.md cites each one by symbol through gunbc.documentary_refs, and expected_design_rulings_md gives an on-demand view of them.
• Conformance narratives: the seven narratives in gunbc.design_argument are cut down to their rules and scope boundaries.
• The key-sharing ban is gone, at the operator's request. The relay-refusal line no longer appears anywhere in the document.
• Dead docs deleted after listing their consumers:
  • docs/notes/allocation-ui-handoff.md
  • docs/notes/tracker-bundle-handoff.md
  • docs/plans/s2-v2-self-emit-brief.md, along with its doc_graph_roots bind and the link to it
  • docs/plans/v1-closeout-pr-accounting.md
• Links: the links in replacement-migration-doctrine.md are now relative.

Review follow-ups

• Rulings: one authority, one population. DesignRuling no longer copies the rule; a ruling holds only its reference, date, section and provenance. design_rulings() is the single roster: documentary refs, DESIGN.md citations (by import) and the witness fixture all derive from it. A new live-lookup claim (decl_facts_at) fails if a ruling's reference doesn't name its real declaration (mutant-checked).
• §3b roster restructured for readers. ConformanceDomain now has owns, boundaries and grouped homes (label + purpose) instead of one narrative string. Each domain renders as its own subsection with one declaration per line. Review identity still hashes only key/question/tells/algebra/homes; the flat home order changed for the grouped domains, so prior conformance review observations for fabric/compute and keys/hashing will re-plan once.
• §5 collapses the fallback / escape hatch / workaround / scaffold family under one rule; externalization stays separate.
• §6b is a numbered method plus one example; the PR specimens moved into the ruling's provenance.
• Building & checks keeps only the CI contract; CLIs, local checks, hooks and regeneration moved to docs/onboarding.md (new onboarding_reference rows).
• Witnesses: review role 13/13, documentary refs 5/5, onboarding 18/18.

Evidence

• Before the change, the render instrument reproduced the committed DESIGN.md byte for byte.
• These witnesses pass:
  • documentary_refs_witness_test, 4/4. It now requires every ruling ref to be rendered. As a mutant control, removing one citation turns it red.
  • roadmap_review_role_witness_test, 13/13
  • realization_selection_witness_test, 1/1
  • rung_drop_standing_partition_witness_test, 4/4
• These fail, and fail the same way on the base authorities, so this change did not cause them:
  • required_lane_claim_agreement w_no_projected_ledger_denies_a_lane_the_roster_requires
  • ledger_row_coherence, which fails to resolve on unrelated host and auth modules

Not yet done

• tools.generated_artifact_gate main_wet / main have not been run; DESIGN.md and onboarding.md were rendered from their authorities with the seed (gunbc run --function).
• The 17 missing-plan links in ROADMAP.md are left for Land the v2 cutover program as designed roadmap entries #13664.

🤖 Generated with Claude Code