Current producer interoperability and canonical thesis contract

[vaalessi]

Summary

• replace the obsolete global producer lock with per-module schema and exact draft-commit locks
• consume the current HypGen headless response and nested canonical hypothesis, including its complete ROI-request boundary
• consume current clinical snake_case output and validate canonical public snake_case thesis inputs against the vendored platform contract
• consume the current ROI 1.0.0 module envelope, validate its exact AnalysisResult 1.3.0, and preserve outer artifact/hash identity
• accept current simulation replay dossiers by excluding only top-level shared interpretability metadata from the byte-identical native number-provenance validator; all scientific dossier fields remain strict
• allow independent tractability results and direct HypGen-to-ROI lineage without claiming clinical input that was not used
• preserve failed and partial attempts while allowing clinical to bind a canonical hypothesis from a partial HypGen response
• allow output-less unsuccessful clinical attempts to bind their candidate ID without inventing a complete thesis; keep successful, partial, and output-bearing attempts strict
• add a deterministic producer-grounded nextEvidenceAction without changing Pareto membership or creating a winner
• correct legacy UI wording so the demo proxy is not described as the real rNPV engine

Current pins

• platform-contracts: 755499b42ab65d3b01f959b11624dd4e61bdd561
• research-evidence-mapper: 9faa0ffaa158c10495245e084ff2dce72dedf506
• Hypothesis_Generator: 02ea1441412c556fdaf80a1264bbe605d0133ceb
• clinical_simulation: 13783c962d303a04ff63c7dbb59e49b4369038c1
• rnpv-roi-calculator: 29bf59ea5f64e0f68a58a2e35595f471b0c73311
• simulation: a0b3d1f56805d9c9e0550291123064e492a16e5b

The ROI packet lock is urn:reagent-labrador:rnpv_roi_calculator:output:1.0.0 / 1.0.0; the adapter then validates and reads the inner AnalysisResult 1.3.0. The HypGen native schema ID is https://labrador.dev/schemas/headless-output.schema.json; the producer does not declare a semantic schema version, so its lock records unversioned and binds the exact producer commit.

Verification

• python3 -m pytest -q — 194 passed
• focused adapter/consumer/CLI/interop suite — 126 passed
• exact current ROI examples/output.json from pinned commit — emitted one roi observation from $.payload.summary.p50_rnpv
• exact current simulation replay examples/output.json from pinned commit — emitted one tractability_posture observation without quarantine
• malformed ROI envelope identity/status/schema cases — fail closed
• unsupported top-level scientific number in a simulation dossier — quarantined by the unchanged native validator
• vendored tractability validator SHA-256 — fc84771646932cc9d570ea82fda912686d05579da5d576c288b007e5430d7490
• git diff --check — passed
• python3 -m build --wheel --no-isolation — passed; wheel contains producer locks and vendored thesis contract
• canonical thesis SHA-256 — ea580e9a17eb5e25818a8f089a9f0b1fa38ffc7959e2966a2c2328d124ff7b7c
• CLI smoke: python3 -m highlander compare --help — passed

The caller owns the four-minute Highlander timeout. This draft does not deploy, merge, or alter any current demo environment.