RFC 008 slice 0a: core types, normalized manifest, and fixtures

[zkwentz]

Types and NormalizedManifest for RFC 008. Parsers will produce this, graders will consume it. No runner or CLI yet.

Graders emit CheckStatus. Only the severity policy assigns Severity. Missing oracle is a valid parse (semantic.oracle_max fails it later). Unpinned LLM judge fails the pydantic model. Tags need at least one nonempty string. GPU fields are just resources.

Six fixtures: served_min_pass, no_oracle, harbor_task_min, posttrain_task_min, broken_manifest, unpinned_judge. Deleted four that were just served_min_pass with a different name.

JSON Schema is generated from the model (scripts/sync_validation_schemas.py). Some rules only exist as pydantic validators, so unpinned_judge can pass jsonschema and still fail NormalizedManifest.

Follows #1041 (merged). Next is #1045.

PYTHONPATH=src:envs uv run pytest tests/test_validation/ -q # 23 passed
uv run python scripts/sync_validation_schemas.py --check

Refs #778, #898.

---

Note

Low Risk
Additive schema/types and tests with a dependency pin; no changes to runtime auth, execution, or existing CLI behavior.

Overview
Introduces openenv.validation as the RFC 008 contract layer: shared enums (Level, CheckStatus, Severity, etc.) and a strict Pydantic NormalizedManifest that parsers will emit and graders will read (reward/oracle/verifier, resources, network, capabilities, type tags).

Cross-format fixtures cover openenv.yaml, Harbor task.toml, and task.md, plus negative cases (invalid reward range, unpinned LLM judge). Tests lock in invariants such as missing oracle parsing cleanly, llm_judged requiring judge pin + variance_tolerance, and injected_state requiring set_state.

Committed manifest.schema.json is exported from the model via new scripts/sync_validation_schemas.py (--check / --fix); packaging ships schemas/*.json. fastmcp is capped at <4.0.0. No validation runner or CLI in this slice.

^{Reviewed by Cursor Bugbot for commit 4e52afa. Bugbot is set up for automated code reviews on this repo. Configure here.}

[bot-ci-comment]

The docs for this PR live here. All of your documentation changes will be reflected on that endpoint. The docs are available until 30 days after the last update.

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

There are 2 total unresolved issues (including 1 from previous review).

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit e2e84a8. Configure here.}

[burtenshaw]

Dependency blocker follow-up: fresh CI began resolving FastMCP 4.0.0, which breaks the existing HTTP and WebSocket MCP session-persistence tests on Python 3.11/3.12. This base branch now bounds FastMCP to <4.0.0; an isolated fresh resolve selected 3.4.7, and both blocking tests pass. The bound is propagated through #1045 and #1091.