fix(spec): verifierStatus lockstep with the oracle's /settle verified set

[LamaSu]

What

verifierStatus: "live" in packages/spec/src/evidence/primitives.ts now means the oracle verifies this primitive at /settle today. The set of live ids is exactly the oracle's /settle verified set. This is the lockstep rule, proposed by evidence (bus #3195) and agreed by the oracle (bus #3274).

Today that set is {decl.self_attested}. Three primitives move from live to stub:

Primitive	Why it was live	Why it is now stub
approval.payer	the gateway's payer-approval route works	/settle does not authenticate approvals yet (the oracle's O8d)
receipt.kernel_signed	kernels sign receipts (emit side, 7 producers)	/settle does not verify kernel receipts yet
confirm.execution_mode	the mock/dry-run gate works	/settle does not run the execution-mode gate yet

Why

The oracle-enforcing eligibility path (computeCsdEligibility(..., { requireImplementedVerifier: true })) treats a live primitive as able to carry a tier. #349's committed-program gate uses that path to decide whether a program is fundable at a tier. With these three marked live, it would count a tier as fundable on checks that the settlement path never makes. Now each one caps the tier that needs it, until /settle runs its verifier. The oracle flips a primitive back to live in the same change that makes /settle run it. Per #3274, the next one is ident.registered_key (#416's verifier), once the funded snapshotHash is transported.

Safety

• verifierStatus is outside VOCAB_MANIFEST_HASH, so the vocabulary golden hash does not move.
• On master, the only reader outside tests is eligibility.ts, and only in enforcing mode. The gateway reads verifierStatus only for machine.execution_log, which was already stub and is unchanged.
• I test-merged this branch into each open evidence branch and ran the spec suite. All passed with no conflicts: feat(spec): per-(CSD, tier) evidence ladders compiled from the CSD (N19, for N33) #383 818, feat(spec): committed programs per CSD tier and the pre-funding assurance gate (must-close 6) #349 850, feat(spec): fresh.challenge_bound public PrimitiveVerifier, extracted from ChallengeService (N19) #407 812, feat(spec): kernel signing-key registry snapshot + ident.registered_key PrimitiveVerifier (N19) #416 821, feat(gateway): port the FinalMilestonePackageV2 producer and fix its signature domain (item 8, not yet wired) #358 874, feat(evidence): LO-EV-9 bind device evidence to the accepted job and kernel before settlement #341 862, feat(spec): evidence levels -- submitted / device_reported / inspected_output (must-close 5) #345 825, feat(spec): pin FinalMilestonePackageV2 principal ids (pcc.evidence.principal-id.v1) #399 813.

Tests (DGX Spark)

• packages/spec: 799/799 passed; tsc --noEmit is clean.
• evidence-primitives.test.ts: 43 tests, 2 of them new.
  • The live set is pinned to {decl.self_attested}, and each of the three flipped primitives is asserted stub.
  • Under enforcement, a report-only tier-2 CSD built from those primitives caps at tier 0, with each primitive named as the reason.
  • decl.self_attested still carries tier 0.
• Mutation check: 4 mutants, each killed by 2 tests. They revert each flip to live, and demote decl.self_attested.

Draft. Merging is the operator's call. Needs a coord-watch review (it touches assurance).

🤖 Generated with Claude Code

https://claude.ai/code/session_0117ows6894R3n6YQXBCRahS