[P0][LLM] Pass mapper-selected evidence to runtime drivers and record actual use

[wesleysimplicio]

Objective

Make the actual LLM/runtime invocation consume the Mapper-selected task context instead of calling driver.execute(goal) with only the natural-language goal.

Problem

The distributed context pack contains goal, ACs and source references, but the routed runtime path currently derives a goal string and executes it directly. Exact spans, tests, graph evidence, fidelity and omissions are not delivered to the model, so the model must survey the repository again.

Implementation steps

1. Define a provider-neutral runtime request carrying goal, ACs, exact Mapper spans, source refs, tests, graph evidence, constraints, omissions and remaining budget.
2. Add a deterministic renderer for CLI-style drivers with explicit section boundaries and prompt-injection provenance labels.
3. Keep raw repository instructions/source evidence separated from trusted system/operator constraints.
4. Apply a final token budget after rendering; required evidence may not be silently truncated.
5. Pass the structured request to drivers that support it and the rendered request to legacy string-only drivers.
6. Preserve cwd/tool access while restricting mutation targets to the authorized per-task plan.
7. Add redaction and secret scanning before dispatch.
8. Capture a context-consumption receipt: envelope hash, rendered tokens, selected paths/spans, omitted fields, provider/model, cache status and observable token usage.
9. When providers do not report usage, record null plus reason; never estimate it as measured.
10. Bind runtime-execution receipt to mapper envelope hash and plan/mutation authority.
11. Reject stale/mismatched envelopes before calling a provider.
12. Add compatibility tests for each real driver and malformed/hostile context.

Acceptance criteria

• The real driver receives goal + ACs + at least one exact source span + relevant verification route in the system test.
• A legacy string driver receives the deterministic rendered equivalent.
• Source text cannot override trusted constraints; provenance boundaries are explicit and tested.
• Secret patterns and unauthorized paths are removed or block dispatch according to policy.
• Required evidence overflow returns a typed broader-context/budget error, never silent truncation.
• Runtime receipt binds provider/model/request hash/mapper envelope hash/plan hash.
• Observable input/output/cache/reasoning tokens are recorded when the provider reports them.
• Unobservable usage is null with a machine-readable reason.
• A/B system fixture proves the Mapper path avoids redundant repository survey calls without reducing task correctness.
• Unit, integration, system, regression and security tests pass.
• Touched code meets the repository coverage gate.
• No context or secret is emitted in ordinary logs.

Non-goals

• Training/fine-tuning a model.
• Claiming token savings without observed evidence.
• Allowing the model to expand scope beyond mutation authority.

[wesleysimplicio]

CLAIMED

• worker: codex
• run: wave3-issue-686
• attempt: 1
• lease: wave3-issue-686
• fence: fence-13-833b2e8372c64b64b146b38d8e23a4ab
• goal: pass Mapper-selected structured evidence to runtime drivers and record actual context use
• worktree: C:\Users\Z0059V7A\m\repos\work\simplicio-loop-issue-686

[wesleysimplicio]

Progress receipt: PR #703 merged as 958dd8d. Local evidence: 3 focused context-rendering tests passed plus compile/diff checks. Issue remains open for real-driver receipts, security/system and benchmark criteria.

[wesleysimplicio]

MEASURED|PR #715 merged into main at 6e46ab3.

Implemented and tested:

• routed runtime dispatch now constructs RuntimeContextRequest from an authorized Mapper context;
• selected driver receives the context through execute_context;
• runtime execution receipt records runtime-context, mapper-envelope and plan hashes;
• focused validation with Windows signal shim: 8 passed; py_compile and git diff --check passed.

UNVERIFIED|The issue remains open because a complete installed credentialed-driver receipt is still required for final acceptance. GitHub Actions were intentionally ignored.

[wesleysimplicio]

CONTINUING

• worker: codex
• run: issue-686-real-driver-proof
• attempt: 2
• lease: wave3-issue-686
• fence: fence-13-833b2e8372c64b64b146b38d8e23a4ab
• goal: prove and complete the real installed-driver Mapper-context path, security, stale-envelope, token-usage, causal-receipt and A/B benchmark ACs
• worktree: C:\Users\Z0059V7A\m\repos\work\simplicio-loop-issue-686

[wesleysimplicio]

UNVERIFIED / BLOCKED (attempt 2 checkpoint)

• Worktree codex/issue-686-context-receipt is clean and aligned to origin/main b3228b2; no safe diff exists to commit or push.
• No PR is open for this branch; no empty PR created.
• Operator attempts made no mutation: first stopped on verification_command_missing; Qwen attempt reached http://127.0.0.1:8090 but stalled because SIMPLICIO_API_KEY was required; codex-cli mutation attempt was interrupted before producing any diff.
• Remaining ACs therefore have no new proof: live installed/credentialed driver receipt, security/stale-envelope coverage, null+reason usage receipt, causal receipt, and A/B benchmark.
• Issue remains OPEN.