Phase 0A/0B: enforcement receipt honesty + derived inventory

[briansrls]

Summary

• Phase 0A (merged as 07f3b6d): Removes fabricated semantic receipt legs for unbound contracts; red_control_status_for_contract returns RedControlPassed only for Cost; renames enrollment vocabulary (EnrollmentDiscoveryReceipt, EnrolledInFloorRoster, etc.). Fabrication removal is by construction in the production fold; discriminating evidence (only_cost_contract_carries_red_control_probe, unbound_contracts_remain_enumerable) executes at offline cadence only via gunbc.ci_layer_roots witness_exclusion_frontier — not in required CI.
• Phase 0B: Adds a derived lens enforcement inventory (derive_lens_enforcement_inventory) — one row per lens_contract_registry entry, bidirectional reconciliation, support on LensEnforcementApplication (Cost can be SupportHeld on its bound consumer and SupportGap on complexity.repo-wide simultaneously), eight-cadence scheduling axis, evaluated_scope typed absent until Phase 1. Adds witness admission inventory derived from witness_exclusion_frontier without hand-authored scheduling; first specimen reproduces enforcement_live_witness_test.dag as OfflineLocalRecipe enrolled at offline-recipe cadence, SchedulingExcluded at PR-floor/main-push, with reason and dissolve_on from the frontier row.

Scope leg and whole_corpus_scope constant untouched (0A note preserved).

Self-audit (parallel predicates / dual representations)

• Unbound detection routes through lens_contract_is_unbound → consumer_enrolled_for (no parallel ConsumerWitnessBinding Bool predicate).
• Inventory rows are a pure fold over authorities; nothing stored or cached (CI program contract re-anchored: bare minimum computation per required operation; five minutes is the distress ceiling (operator ruling 2026-08-02) #7664 bare-minimum-computation ruling).
• Witness admission cadence rows derive from witness_exclusion_frontier classification + scheduling_disposition_for_primary_cadence; no second exclusion ledger.
• Support status lives on LensEnforcementApplication, not per-lens.

Test plan

• claim_batch --source-root src/v2 --source-root dag --entry src/v2/test/claim/enforcement_inventory_witness_test.dag --functions enforcement_live_witness_exclusion_inventory_matches_frontier,witness_admission_inventory_reconciles_exclusion_frontier — PASS (72ms / 68ms eval)
• Same entry, all seven lens-inventory witnesses — PASS (corpus-reading *_live fns; ~27–44s eval each)
• src/v2/lens/enforcement/gate_test.dag — eleven pre-existing tests green at 0A merge (CI run 30763809668)

[gunbai-bot]

Addressed review 47569 (composer-2.5) in 88fd63a:

1. Corpus-denominated inventory witnesses on per-PR discovery — Valid. Added witness_exclusion_frontier row for enforcement_inventory_witness_test.dag (OfflineLocalRecipe, same dissolve_on as enforcement_live_witness_test.dag); updated enforcement_coverage_exclusion_note to four files. Added enforcement_inventory_witness_excluded_via_frontier witness and enforcement_inventory_witness_offline_note documenting the local recipe. Seven *_live tests remain offline-cadence-only; two frontier-reconciliation tests share the file grain.

2. subject_counts_from_receipt corpus-wide conflation — Valid. evaluated / unavailable now stay at 0 with subject_counts_evaluated_unavailable_absent_note (same Phase 1 trigger as evaluated_scope); only discovered is receipt-local.

3. witness_primary_cadence_is_offline_recipe parallel predicate — Valid. Deleted; tests route through witness_exclusion_lookup_is_offline in inventory.dag, which delegates to gunbc.ci_layer_roots witness_exclusion_row_is_offline (single authority).

Fast witnesses re-run green (enforcement_live_witness_exclusion_inventory_matches_frontier, witness_admission_inventory_reconciles_exclusion_frontier, enforcement_inventory_witness_excluded_via_frontier).

— sent from vivid-tern-496

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.