Remove in-memory ratchet stores

Cargo.toml

@@ -159,7 +159,7 @@ ironclaw_resources = { path = "crates/ironclaw_resources", version = "0.1.0", fe
 ironclaw_secrets = { path = "crates/ironclaw_secrets", version = "0.1.0" }
 ironclaw_product_adapters = { path = "crates/ironclaw_product_adapters", version = "0.1.0", features = ["test-support"] }
 ironclaw_product_workflow = { path = "crates/ironclaw_product_workflow", version = "0.1.0", features = ["test-support"] }
-ironclaw_runner = { path = "crates/ironclaw_runner", version = "0.1.0" }
+ironclaw_runner = { path = "crates/ironclaw_runner", version = "0.1.0", features = ["test-support"] }
 # `ironclaw_webui` + `ironclaw_reborn_identity` sit on the int-tier coverage
 # lane (identity_resolution_smoke / webui_v2_router_smoke); they compile into
 # every int-tier build, behaviorally inert for suites that never call them.

crates/AGENTS.md

@@ -147,7 +147,7 @@ Boundary rule: if you need an upstream crate in a low-level crate, stop and chec
 | `ironclaw_channel_delivery` | `ironclaw_channel_delivery/AGENTS.md` | Product-neutral live/triggered channel-delivery engine: observation, bounded admission, actionable prompts, route tracking, honest outcomes, keyed hook fan-out. | Channel-specific protocol/rendering, composition/global registries, WebUI/CLI. |
 | `ironclaw_telegram_extension` | `ironclaw_telegram_extension/AGENTS.md`, `docs/reborn/contracts/telegram-v2.md` | Concrete Telegram host domain and host builder: setup/Bot API, filesystem state, pairing, DM ingress, revision workflows, protocol/targets/trigger hook, facades/routes. | `RebornRuntime`, global mount/registry ownership, other channels. |
 | `ironclaw_telegram_v2_adapter` | `ironclaw_telegram_v2_adapter/AGENTS.md`, `Cargo.toml`, `src/lib.rs` | Telegram WASM v2 ProductAdapter tracer bullet: payload parsing, rendering, adapter implementation. | Shared adapter contracts or registry semantics. |
-| `ironclaw_webui` | `ironclaw_webui/AGENTS.md`, `ironclaw_webui/CLAUDE.md`, `ironclaw_webui/README.md` | The whole WebUI host stack for Reborn WebChat v2: the `webui_v2` route surface + axum handlers + descriptor table + redacted `WebUiV2HttpError` (folded up from the former `ironclaw_webui_v2`), the Vite SPA bundle (`frontend/`), the `webui_v2_app` gateway assembly + middleware stack, the listener/serve loop, and host authentication (Env/Session/OIDC authenticators, `SessionStore`, `/auth/*` OAuth login). | Product/API business logic (consume `RebornServicesApi` only), a direct `ironclaw_product_adapters` edge, transcript storage, v1 channel code. |
+| `ironclaw_webui` | `ironclaw_webui/AGENTS.md`, `ironclaw_webui/CLAUDE.md`, `ironclaw_webui/README.md` | The whole WebUI host stack for Reborn WebChat v2: the `webui_v2` route surface + axum handlers + descriptor table + redacted `WebUiV2HttpError` (folded up from the former `ironclaw_webui_v2`), the Vite SPA bundle (`frontend/`), the `webui_v2_app` gateway assembly + middleware stack, the listener/serve loop, and host authentication (Env/Session/OIDC authenticators, signed sessions, `/auth/*` OAuth login). | Product/API business logic (consume `RebornServicesApi` only), a direct `ironclaw_product_adapters` edge, transcript storage, v1 channel code. |
 | `ironclaw_slack_v2_adapter` | `ironclaw_slack_v2_adapter/AGENTS.md` | Slack v2 ProductAdapter: protocol parsing/rendering only (payloads, mrkdwn, delivery DTOs). Host-side Slack (signature verify, delivery fan-out, setup/secrets) currently lives in `ironclaw_reborn_composition`. | Signing secrets, bot tokens, network, workflow admission — the boundary test bans host concerns here. |
 | `ironclaw_product_context` | `ironclaw_product_context/AGENTS.md` | Single owner of turn-origin/surface trust classification at ingress; only its `TrustedTrigger` arm mints `ScheduledTrigger`. Deliberately tiny and dependency-light (host_api + turns only). | Adding anything — its value is staying small enough for every ingress layer to call without cycles. |
 | `ironclaw_reborn_identity` | `Cargo.toml`, `src/lib.rs` | Canonical identity mapping: every external identity (OAuth login, channel actor) → stable `UserId` before runtime state; filesystem-backed resolver fronted through composition. | Auth flows, session storage, provider HTTP. |

crates/ironclaw_architecture/tests/ratchet_support/mod.rs

@@ -1,5 +1,4 @@
-//! Shared scanner machinery for the §10 anti-slippage ratchets
-//! (`reborn_inmemory_store_ratchet.rs`, `reborn_localdev_typename_ratchet.rs`).
+//! Shared scanner machinery for the §10 anti-slippage ratchets.
 //!
 //! One hardened implementation of the walk/strip/match pipeline, so every
 //! ratchet gets the same guarantees: comment/string stripping, restricted

crates/ironclaw_architecture/tests/reborn_composition_boundaries.rs

@@ -301,7 +301,6 @@ const EXTENSION_HOST_INTERNAL_MODULES: &[&str] = &[
     "bundled_skills",
     "extension_activation_credentials",
     "extension_credential_requirements",
-    "extension_installation_store",
     "extension_lifecycle",
     "extension_lifecycle_capabilities",
     "extension_lifecycle_capabilities_auth_tests",

crates/ironclaw_architecture/tests/reborn_deployment_mode_typename_ratchet.rs

@@ -133,7 +133,6 @@ fn reborn_other_mode_typename_allowlist_is_frozen() {
         KEYWORDS,
         &is_other_mode_name,
         &[
-            "reborn_inmemory_store_ratchet.rs",
             "reborn_localdev_typename_ratchet.rs",
             "reborn_deployment_mode_typename_ratchet.rs",
         ],