feat(projects): complete internal active and frozen guide context

.ci/auth-boundaries/TEST_STRUCTURE_DEBT.json

@@ -134,11 +134,11 @@
     },
     {
       "capability": "unassigned_legacy_auth",
-      "content_sha256": "4c55b5f9067f5cd54860370d8f37543e519d4afd782ee637fa5e4d4120e3c1ce",
-      "end_line": 3058,
+      "content_sha256": "3043402c35ebc6881418f55da007441ea1ebd8f5c22202d44b0db58a4889be12",
+      "end_line": 2951,
       "hard_limit": 1200,
       "kind": "test_file",
-      "observed_lines": 3058,
+      "observed_lines": 2951,
       "path": "backend/tests/test_artifact_admission.py",
       "qualified_symbol": null,
       "removal_chunk": "WS-AUTH-003-CLOSE",
@@ -170,11 +170,11 @@
     },
     {
       "capability": "unassigned_legacy_auth",
-      "content_sha256": "a9fba3af25d8712261eea1b0f2de783b190c0c82f4e5ed8844e023c15c32371f",
-      "end_line": 1625,
+      "content_sha256": "28ff3e8f72805284a444f4b52dfdf5c19f09266b7a2565586f8c6539886e7e34",
+      "end_line": 1610,
       "hard_limit": 1200,
       "kind": "test_file",
-      "observed_lines": 1625,
+      "observed_lines": 1610,
       "path": "backend/tests/test_default_pre_submit_execution.py",
       "qualified_symbol": null,
       "removal_chunk": "WS-AUTH-003-CLOSE",
@@ -194,39 +194,39 @@
     },
     {
       "capability": "unassigned_legacy_auth",
-      "content_sha256": "2148d2efe5122aa384163692940a3ac558031374168fcb2230536dc5d2288351",
-      "end_line": 2706,
+      "content_sha256": "81194689462162ba65ef8d41049e29c887d305bd9adf4bac60b7860f70ea1df0",
+      "end_line": 2599,
       "hard_limit": 120,
       "kind": "test_function",
-      "observed_lines": 134,
+      "observed_lines": 121,
       "path": "backend/tests/test_artifact_admission.py",
       "qualified_symbol": "test_checker_output_requires_exact_active_fixed_service_identity",
       "removal_chunk": "WS-AUTH-003-CLOSE",
-      "start_line": 2573
+      "start_line": 2479
     },
     {
       "capability": "unassigned_legacy_auth",
       "content_sha256": "e9f4d7d65b3794e1642401465a6f2c5a4ae179865c1a4113f97b8494ae0e1241",
-      "end_line": 2439,
+      "end_line": 2345,
       "hard_limit": 120,
       "kind": "test_function",
       "observed_lines": 199,
       "path": "backend/tests/test_artifact_admission.py",
       "qualified_symbol": "test_guide_admission_consumes_real_project_manager_prep_atomically",
       "removal_chunk": "WS-AUTH-003-CLOSE",
-      "start_line": 2241
+      "start_line": 2147
     },
     {
       "capability": "unassigned_legacy_auth",
       "content_sha256": "76e5cd8871311fb09405aa4c2fb280ff8722be235764e4eb3c6907f83c31fb2c",
-      "end_line": 2238,
+      "end_line": 2144,
       "hard_limit": 120,
       "kind": "test_function",
       "observed_lines": 157,
       "path": "backend/tests/test_artifact_admission.py",
       "qualified_symbol": "test_guide_admission_derives_three_scopes_without_provider_evidence",
       "removal_chunk": "WS-AUTH-003-CLOSE",
-      "start_line": 2082
+      "start_line": 1988
     },
     {
       "capability": "unassigned_legacy_auth",
@@ -554,11 +554,11 @@
     },
     {
       "capability": "unassigned_legacy_auth",
-      "content_sha256": "82bfaa06687cf11b51fb3018f3e0f0c2dcde7819a86e9ada5177888537d25e9f",
-      "end_line": 995,
+      "content_sha256": "e51894c0b79d58b60d2dd8f17ebe319b794fc2ae92d8ea4e1223202929511753",
+      "end_line": 980,
       "hard_limit": 120,
       "kind": "test_function",
-      "observed_lines": 553,
+      "observed_lines": 538,
       "path": "backend/tests/test_default_pre_submit_execution.py",
       "qualified_symbol": "test_effective_evidence_workflow_persists_once_and_replays_exactly",
       "removal_chunk": "WS-AUTH-003-CLOSE",
@@ -603,26 +603,26 @@
     {
       "capability": "unassigned_legacy_auth",
       "content_sha256": "10292b6ed6f73baae351efbcb13102da0bd21eea2926587cef48e784baa95803",
-      "end_line": 363,
+      "end_line": 368,
       "hard_limit": 100,
       "kind": "test_helper",
       "observed_lines": 104,
       "path": "backend/tests/project_create_fixtures.py",
       "qualified_symbol": "seed_authorized_project",
       "removal_chunk": "WS-AUTH-003-CLOSE",
-      "start_line": 260
+      "start_line": 265
     },
     {
       "capability": "unassigned_legacy_auth",
-      "content_sha256": "8c55ccd6549044a155547e4fa203c7d6e645452f4e45ba72ff7cd80350983117",
-      "end_line": 587,
+      "content_sha256": "583f52665e3c9d74e04dbfee577a53e5f5bf316f97b9211c918ead0b4507284a",
+      "end_line": 491,
       "hard_limit": 100,
       "kind": "test_helper",
-      "observed_lines": 247,
+      "observed_lines": 158,
       "path": "backend/tests/test_artifact_admission.py",
       "qualified_symbol": "_seed_checker_output_relationships",
       "removal_chunk": "WS-AUTH-003-CLOSE",
-      "start_line": 341
+      "start_line": 334
     },
     {
       "capability": "unassigned_legacy_auth",

.ci/behavior-ownership/partition.v1.json

@@ -852,6 +852,10 @@
       "group": "lifecycle",
       "target": "backend/app/modules/projects/api/locked_policy.py"
     },
+    {
+      "group": "lifecycle",
+      "target": "backend/app/modules/projects/api/policy_lineage.py"
+    },
     {
       "group": "lifecycle",
       "target": "backend/app/modules/projects/api/post_policy.py"
@@ -1030,15 +1034,15 @@
     },
     {
       "group": "lifecycle",
-      "target": "backend/app/modules/projects/locked_policy_repository.py"
+      "target": "backend/app/modules/projects/locked_policy_projection.py"
     },
     {
       "group": "lifecycle",
-      "target": "backend/app/modules/projects/models.py"
+      "target": "backend/app/modules/projects/locked_policy_repository.py"
     },
     {
       "group": "lifecycle",
-      "target": "backend/app/modules/projects/policy_lineage.py"
+      "target": "backend/app/modules/projects/models.py"
     },
     {
       "group": "lifecycle",
@@ -1317,7 +1321,7 @@
       "target": "backend/scripts/validate_test_lane_evidence.py"
     }
   ],
-  "authority_digest": "7ffc098471cf45d88cfe75cf5405ef14dec93bec644fcb8ef8abd69e3efa0e14",
+  "authority_digest": "54a2edb9588f599931d277f5243561f912b5c8830f4d3e74d3d692b2786bf281",
   "protected_base_commit": "7676ce4347db0c9694962a9b587a20765e16eac6",
   "schema": "workstream.behavior-ownership-partition.v1"
 }

.commitrail/INDEX.md

@@ -7,12 +7,12 @@ for current product capability.
 | Initiative | Durable disposition | Next usable boundary |
 |---|---|---|
 | [WS-MCP-002](initiatives/WS-MCP-002/OVERVIEW.md) | Planned | Caller-token design and local profile proof recorded; continue WS-MCP-002-01 with selected schema verification and independent one-tool packaging |
-| [WS-ARCH-001](initiatives/WS-ARCH-001/OVERVIEW.md) | Planned | Canonical ARCH-04A delivered; Automatic unified setup delivered; POL-05/06 manager review and separate approvals delivered; POL-07B internal checker phase service delivered; CP06 validation delivered; CP07 hidden activation/binding delivered; AUTH-12H live manager authority delivered; CP08 task-attempt lineage next |
+| [WS-ARCH-001](initiatives/WS-ARCH-001/OVERVIEW.md) | Planned | Canonical ARCH-04A delivered; Automatic unified setup delivered; POL-05/06 manager review and separate approvals delivered; POL-07B internal checker phase service delivered; CP06 validation delivered; CP07 hidden activation/binding delivered; AUTH-12H live manager authority delivered; ARCH-03A complete internal guide context delivered; CP08 lineage and minimal writers next |
 | [WS-ART-001](initiatives/WS-ART-001/OVERVIEW.md) | Planned | Exact post-submit materialization after guide/checker contracts |
-| [WS-AUTH-001](initiatives/WS-AUTH-001/OVERVIEW.md) | Planned | Unavailable shared-dispatcher contracts after delivered CP05; POL-04B consumes completed finalization authority; AUTH-12F4 supplies proposal authority; POL-05B public composition delivered; AUTH-12G post-policy authority delivered; POL-06B public composition delivered; POL-07B internal phase service delivered; CP06 validation delivered; CP07 hidden activation/binding delivered; AUTH-12H live manager authority delivered; CP08 task-attempt lineage next |
-| [WS-CON-001](initiatives/WS-CON-001/OVERVIEW.md) | Planned | CP06 selected-policy validation delivered; CP07 hidden activation/binding delivered; AUTH-12H live manager authority delivered; CP08 task-attempt lineage next |
+| [WS-AUTH-001](initiatives/WS-AUTH-001/OVERVIEW.md) | Planned | Unavailable shared-dispatcher contracts after delivered CP05; POL-04B consumes completed finalization authority; AUTH-12F4 supplies proposal authority; POL-05B public composition delivered; AUTH-12G post-policy authority delivered; POL-06B public composition delivered; POL-07B internal phase service delivered; CP06 validation delivered; CP07 hidden activation/binding delivered; AUTH-12H live manager authority delivered; ARCH-03A complete internal guide context delivered; CP08 lineage and minimal writers next |
+| [WS-CON-001](initiatives/WS-CON-001/OVERVIEW.md) | Planned | CP06 selected-policy validation delivered; CP07 hidden activation/binding delivered; AUTH-12H live manager authority delivered; ARCH-03A complete internal guide context delivered; CP08 lineage and minimal writers next |
 | [WS-AUTH-003](initiatives/WS-AUTH-003/OVERVIEW.md) | Planned | Repair touched capabilities through `authorization.api` |
-| [WS-POL-003](initiatives/WS-POL-003/OVERVIEW.md) | Planned | Unified setup, separate draft proposals and guide document intake delivered; Hidden proposal review/correction/pre-policy approval custody delivered; AUTH-12F4 proposal authority delivered; POL-05B public review/approval/manual correction dispatch delivered; POL-06A hidden post-policy projection/read/approval/correction delivered; AUTH-12G live authority delivered; POL-06B public access and automatic derivation delivered; POL-07A ART pre-submit attempt recovery delivered; POL-07B internal phase service delivered; CP06 validation delivered; CP07 hidden activation/binding delivered; AUTH-12H live manager authority delivered; CP08 task-attempt lineage next |
+| [WS-POL-003](initiatives/WS-POL-003/OVERVIEW.md) | Planned | Unified setup, separate draft proposals and guide document intake delivered; Hidden proposal review/correction/pre-policy approval custody delivered; AUTH-12F4 proposal authority delivered; POL-05B public review/approval/manual correction dispatch delivered; POL-06A hidden post-policy projection/read/approval/correction delivered; AUTH-12G live authority delivered; POL-06B public access and automatic derivation delivered; POL-07A ART pre-submit attempt recovery delivered; POL-07B internal phase service delivered; CP06 validation delivered; CP07 hidden activation/binding delivered; AUTH-12H live manager authority delivered; ARCH-03A complete internal guide context delivered; CP08 lineage and minimal writers next |
 | [WS-REV-001](initiatives/WS-REV-001/OVERVIEW.md) | Planned | Shared acceptance/source and existing fence foundations; human hidden review work remains independently dependency-gated |
 | [WS-QUAL-002](initiatives/WS-QUAL-002/OVERVIEW.md) | Planned | Populate subsystem ownership before changed-line mutation work |
 | [WS-QUAL-003](initiatives/WS-QUAL-003/OVERVIEW.md) | Planned | Audit and prune test proof, add missing safety cases, decompose oversized test modules |

.commitrail/initiatives/WS-ARCH-001/OVERVIEW.md

@@ -8,14 +8,14 @@ Exact pre-cutover work record: [`STATUS.md`](pre-cutover/STATUS.md),
 [`planning/chunk contracts`](pre-cutover/chunks/).
 
 - Disposition: Planned
-- Completed boundary: through 02H, [CP05](WS-ARCH-001-CP05.md), [CP06](WS-ARCH-001-CP06.md), [CP07](WS-ARCH-001-CP07.md), and
+- Completed boundary: through 02H, [CP05](WS-ARCH-001-CP05.md), [CP06](WS-ARCH-001-CP06.md), [CP07](WS-ARCH-001-CP07.md), [ARCH-03A](WS-ARCH-001-03A.md), and
   [ARCH-04A consolidation](WS-ARCH-001-04A.md) canonical post-submit contracts/conformance.
 - Intent: keep product modules behind explicit ports and composition roots.
 - Current boundary: one CHECKERS catalogue, compiler/parser and implementation
   per checker ID serve active policy consumers; production post-submit phase
   execution remains unavailable.
-- Next usable boundary: CP08 task-attempt lineage, then ARCH-03A complete internal
-  guide facts after delivered CP07 activation and AUTH-12H live manager authority. POL-04B unified setup, POL-05/06
+- Next usable boundary: CP08 task-attempt lineage and minimal writers after
+  completed ARCH-03A internal guide context, following delivered CP07 activation and AUTH-12H live manager authority. POL-04B unified setup, POL-05/06
   manager operations and POL-07B internal phase composition are delivered.
   The production post-submit phase remains unavailable until its separately
   sequenced ART/CHECKER/AUTH execution boundaries land.
@@ -40,6 +40,6 @@ Exact pre-cutover work record: [`STATUS.md`](pre-cutover/STATUS.md),
   CP09 physical removal follows zero legacy consumers, including checker/public
   Submission cutover; it is not on the `allow_review` critical path.
 - Consolidated ARCH-04A supplies one current catalogue, immutable phase contracts and
-  registered structural conformance, not durable runs. ARCH-03A-03C then ARCH-04B-04F build project/task readiness,
+  registered structural conformance, not durable runs. CP08, then ARCH-03B/03C and ARCH-04B-04F build task readiness,
   post-submit checker/materialization, remediation, and `allow_review` before
   final public 02I cutover and later REV admission.